🟢 Low ⏱ 5–15 min Last verified: 3 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xpm — image decoding vulnerabilities Related CVEs: CVE-2004-0687 CVE-2004-0688 Upstream summary: Chris Evans discovered several vulnerabilities in the libXpm image decoder: A stack-based buffer overflow in xpmParseColors An integer overflow […]
🟢 Low ⏱ 5–15 min Last verified: 3 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openssl — potential SSL 2.0 rollback Related CVEs: CVE-2005-2969 Upstream summary: Vulnerability: Such applications are affected if they use the option SSL_OP_MSIE_SSLV2_RSA_PADDING. This option is implied by use of SSL_OP_ALL, […]
🟡 Medium ⏱ 10–30 min Last verified: 3 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: quassel — multiple vulnerabilities Related CVEs: CVE-2013-4422 CVE-2015-3427 CVE-2015-8547 CVE-2016-4414 Upstream summary: Gentoo reports: quasselcore: corruption of heap metadata caused by qdatastream leading to preauth remote code execution. Severity: high, […]
🟠 High ⏱ 15–60 min Last verified: 3 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL — multiple vulnerabilities Related CVEs: CVE-2012-4414 CVE-2012-5611 CVE-2012-5612 CVE-2012-5615 CVE-2012-5627 CVE-2015-3194 CVE-2016-0639 CVE-2016-0640 +12 more Upstream summary: Oracle reports reports: Critical Patch Update contains 31 new security fixes for […]
🟢 Low ⏱ 5–15 min Last verified: 2 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sinatra — XSS vulnerability Related CVEs: CVE-2018-11627 Upstream summary: Sinatra blog: Sinatra had a critical vulnerability since v2.0.0. The purpose of this release is to fix CVE-2018-11627. The vulnerability is […]
🟠 High ⏱ 15–60 min Last verified: 2 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: phpbb — NULL byte injection vulnerability Related CVEs: CVE-2005-3310 CVE-2005-3415 CVE-2005-3416 CVE-2005-3417 CVE-2005-3418 CVE-2005-3419 CVE-2005-3420 CVE-2005-3536 +2 more Upstream summary: Secunia reports: ShAnKaR has discovered a vulnerability in phpBB, which […]
🟡 Medium ⏱ 10–30 min Last verified: 2 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: postfixadmin — SQL injection vulnerability Related CVEs: CVE-2012-0811 CVE-2012-0812 CVE-2014-2655 Upstream summary: Thijs Kinkhorst reports: Postfixadmin has an SQL injection vulnerability. This vulnerability is only exploitable by authenticated users able […]
🟡 Medium ⏱ 10–30 min Last verified: 2 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: jdk/jre — Applet Caching May Allow Network Access Restrictions to be Circumvented Related CVEs: CVE-2004-1029 CVE-2005-1080 CVE-2007-5232 Upstream summary: SUN reports: A vulnerability in the Java Runtime Environment (JRE) with […]
🟢 Low ⏱ 5–15 min Last verified: 1 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: jupyter notebook — open redirect vulnerability Upstream summary: Jupyter reports: 6.1.5 is a security release, fixing one vulnerability: Fix open redirect vulnerability GHSA-c7vm-f5p4-8fqh (CVE to be assigned) Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 1 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pngcrush — libpng Uninitialised Pointer Arrays Vulnerability Related CVEs: CVE-2009-0040 Upstream summary: Secunia reports: A vulnerability has been reported in Pngcrush, which can be exploited by malicious people to potentially […]
