🟢 Low ⏱ 5–15 min Last verified: 27 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-kerberos — DoS and MitM vulnerabilities Related CVEs: CVE-2015-3206 Upstream summary: macosforgebot reports: The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows […]
🟠 High ⏱ 15–60 min Last verified: 27 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CVE-2006-3113 CVE-2006-3677 CVE-2006-3801 CVE-2006-3802 CVE-2006-3803 CVE-2006-3804 CVE-2006-3805 CVE-2006-3806 +12 more Upstream summary: Mozilla Foundation reports: CVE-2019-11751: Malicious code execution through command line parameters CVE-2019-11746: […]
🟢 Low ⏱ 5–15 min Last verified: 26 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vim — vulnerabilities in modeline handling: glob, expand Related CVEs: CVE-2004-1138 CVE-2005-2368 Upstream summary: Georgi Guninski discovered a way to construct Vim modelines that execute arbitrary shell commands. The vulnerability […]
🟢 Low ⏱ 5–15 min Last verified: 26 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libotr — integer overflow Related CVEs: CVE-2012-3461 CVE-2016-2851 Upstream summary: X41 D-Sec reports: A remote attacker may crash or execute arbitrary code in libotr by sending large OTR messages. Table […]
🟢 Low ⏱ 5–15 min Last verified: 26 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-HTML-Parser — denial of service Related CVEs: CVE-2009-3627 Upstream summary: CVE reports: The decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service […]
🟢 Low ⏱ 5–15 min Last verified: 26 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: findutils — GNU locate heap buffer overrun Related CVEs: CVE-2007-2452 Upstream summary: James Youngman reports: When GNU locate reads filenames from an old-format locate database, they are read into a […]
🟢 Low ⏱ 5–15 min Last verified: 26 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: codeigniter — input validation bypass Upstream summary: The CodeIgniter changelog reports: Security: Fixed a potential object injection in Cache Library 'apc' driver when save() is used with $raw = TRUE. […]
🟢 Low ⏱ 5–15 min Last verified: 25 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2016-3074 Upstream summary: The PHP Group reports: BCMath: Fixed bug #72093 (bcpowmod accepts negative scale and corrupts _one_ definition). Exif: Fixed bug #72094 (Out […]
🟢 Low ⏱ 5–15 min Last verified: 25 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vim — multiple vulnerabilities in the netrw module Related CVEs: CVE-2008-3076 Upstream summary: Jan Minar reports: Applying the “D'' to a file with a crafted file name, or inside a […]
🟢 Low ⏱ 5–15 min Last verified: 25 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: emacs — movemail format string vulnerability Related CVEs: CVE-2005-0100 Upstream summary: Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. They can be exploited when connecting […]
