🟠 High ⏱ 15–60 min Last verified: 19 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rdesktop – critical – Remote Code Execution Related CVEs: CVE-2018-20174 CVE-2018-20175 CVE-2018-20176 CVE-2018-20177 CVE-2018-20178 CVE-2018-20179 CVE-2018-20180 CVE-2018-20181 +11 more Upstream summary: Fix memory corruption in process_bitmap_data – CVE-2018-8794 Fix remote […]
🟠 High ⏱ 15–60 min Last verified: 18 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: powerdns — denial of service Related CVEs: CVE-2005-2302 CVE-2012-0206 CVE-2015-1868 CVE-2015-5230 CVE-2015-5311 CVE-2015-5470 CVE-2016-2120 CVE-2016-6170 +12 more Upstream summary: PowerDNS Team reports: PowerDNS Security Advisory 2022-01: incomplete validation of incoming […]
🟡 Medium ⏱ 10–30 min Last verified: 17 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bind — denial of service vulnerability Related CVEs: CVE-2012-5166 CVE-2012-5688 CVE-2013-2266 CVE-2013-3919 CVE-2013-4854 CVE-2014-0591 CVE-2014-8500 CVE-2014-8680 Upstream summary: ISC reports: We have today posted updated versions of 9.9.6 and 9.10.1 […]
🟢 Low ⏱ 5–15 min Last verified: 17 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-graphite-web — Multiple vulnerabilities Related CVEs: CVE-2013-5093 Upstream summary: Graphite developers report: This release contains several security fixes for cross-site scripting (XSS) as well as a fix for a remote-execution […]
🟢 Low ⏱ 5–15 min Last verified: 17 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xtrlock — xtrlock does not block multitouch events Related CVEs: CVE-2005-0079 CVE-2016-10894 Upstream summary: Debian reports: xtrlock did not block multitouch events so an attacker could still input and thus […]
🟠 High ⏱ 15–60 min Last verified: 17 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wordpress — XSS Related CVEs: CVE-2010-4257 CVE-2013-0235 CVE-2013-0236 CVE-2013-0237 CVE-2013-2199 CVE-2013-2200 CVE-2013-2201 CVE-2013-2202 +12 more Upstream summary: The WordPress team reports: A cross-site scripting (XSS) vulnerability affecting the Avatar block […]
🟡 Medium ⏱ 10–30 min Last verified: 16 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: phpmailer — Multiple vulnerability Related CVEs: CVE-2016-10033 CVE-2016-10045 CVE-2017-11503 CVE-2017-5223 CVE-2018-19296 Upstream summary: The PHPMailer Team reports: CVE-2018-19296:Fix potential object injection vulnerability. Table of contents Symptom & Impact Environment & […]
🟢 Low ⏱ 5–15 min Last verified: 16 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: id Tech 3 — remote code execution vulnerability Related CVEs: CVE-2017-6903 Upstream summary: The content auto-download of id Tech 3 can be used to deliver maliciously crafted content, that triggers […]
🟢 Low ⏱ 5–15 min Last verified: 16 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lynx — SSL certificate validation error Upstream summary: Axel Beckert reports: […] I was able to capture the password given on the commandline in traffic of an TLS handshake using […]
🟠 High ⏱ 15–60 min Last verified: 16 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8879 CVE-2016-3074 CVE-2016-5385 CVE-2016-5399 CVE-2016-6288 CVE-2016-6289 CVE-2016-6290 CVE-2016-6291 +5 more Upstream summary: PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) […]
