🟢 Low ⏱ 5–15 min Last verified: 1 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mutt-devel — failure to check SMTP TLS server certificate Related CVEs: CVE-2011-1429 Upstream summary: Dave B reports on Full Disclosure: It seems that mutt fails to check the validity of […]
🟡 Medium ⏱ 10–30 min Last verified: 31 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: zenphoto — multiple vulnerabilities Related CVEs: CVE-2007-6666 CVE-2015-5591 CVE-2015-5592 CVE-2015-5593 CVE-2015-5594 CVE-2015-5595 Upstream summary: zenphoto reports: Fixes several SQL Injection, XSS and path traversal security issues Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 31 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: X.org libraries — multiple vulnerabilities Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988 +12 more Upstream summary: Matthieu Herrb reports: Tobias Stoeckmann from the OpenBSD project has discovered […]
🟡 Medium ⏱ 10–30 min Last verified: 30 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8874 CVE-2016-5766 CVE-2016-5767 CVE-2016-5768 CVE-2016-5769 CVE-2016-5770 CVE-2016-5771 CVE-2016-5772 +1 more Upstream summary: The PHP Group reports: Please reference CVE/URL list for details Table of […]
🟢 Low ⏱ 5–15 min Last verified: 30 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nut — upsd can be remotely crashed Related CVEs: CVE-2012-2944 Upstream summary: Networkupstools project reports: NUT server (upsd), from versions 2.4.0 to 2.6.3, are exposed to crashes when receiving random […]
🟢 Low ⏱ 5–15 min Last verified: 30 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php5-sqlite — open_basedir bypass Related CVEs: CVE-2012-3365 Upstream summary: MITRE CVE team reports: The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via […]
🟡 Medium ⏱ 10–30 min Last verified: 30 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: cups-lpr — lppasswd multiple vulnerabilities Related CVEs: CVE-2004-1268 CVE-2004-1269 CVE-2004-1270 Upstream summary: D. J. Bernstein reports that Bartlomiej Sieka has discovered several security vulnerabilities in lppasswd, which is part of […]
🟡 Medium ⏱ 10–30 min Last verified: 28 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tiff — buffer overflow vulnerability Related CVEs: CVE-2004-0803 CVE-2004-0804 CVE-2004-0886 CVE-2004-1308 CVE-2005-1544 Upstream summary: A Gentoo Linux Security Advisory reports: Tavis Ormandy of the Gentoo Linux Security Audit Team discovered […]
🟢 Low ⏱ 5–15 min Last verified: 28 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libetpan — null dereference vulnerability in MIME parsing component Related CVEs: CVE-2017-8825 Upstream summary: rwhitworth reports: I was using American Fuzzy Lop (afl-fuzz) to fuzz input to the mime-parse test […]
🟢 Low ⏱ 5–15 min Last verified: 28 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php-imap — imap_open allows to run arbitrary shell commands via mailbox parameter Upstream summary: The PHP team reports: imap_open allows to run arbitrary shell commands via mailbox parameter. Table of […]
