🟢 Low ⏱ 5–15 min Last verified: 26 July 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Security Vulnerability found in ExifTool leading to RCE Related CVEs: CVE-2021-22204 CVE-2022-23935 Upstream summary: Debian Security tracker reports: ExifTool.pm in ExifTool before 12.38 mishandles a file special characters check, leading […]
🟢 Low ⏱ 5–15 min Last verified: 22 July 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-tflite — buffer overflow vulnerability Related CVEs: CVE-2021-37689 CVE-2022-41894 Upstream summary: Thibaut Goetghebuer-Planchon reports: The reference kernel of the CONV_3D_TRANSPOSE TensorFlow Lite operator wrongly increments the data_ptr when adding the […]
🟢 Low ⏱ 5–15 min Last verified: 19 July 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bastillion — log4j vulnerability Related CVEs: CVE-2021-44228 Upstream summary: FreeBSD port maintainer reports: Bastillion uses log4j. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🟢 Low ⏱ 5–15 min Last verified: 18 July 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-markdown2 — regular expression denial of service vulnerability Related CVEs: CVE-2020-11888 CVE-2021-26813 Upstream summary: Ben Caller reports: markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of […]
🟢 Low ⏱ 5–15 min Last verified: 17 July 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rxvt-unicode is vulnerable to a remote code execution Related CVEs: CVE-2022-4170 Upstream summary: Marc Lehmann reports: The biggest issue is resolving CVE-2022-4170, which allows command execution inside urxvt from within […]
🟢 Low ⏱ 5–15 min Last verified: 15 July 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-flask-security — user redirect to arbitrary URL vulnerability Related CVEs: CVE-2021-23385 Upstream summary: Snyk reports: This affects all versions of package Flask-Security. When using the `get_post_logout_redirect` and `get_post_login_redirect` functions, it […]
🟠 High ⏱ 15–60 min Last verified: 11 July 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Rails — multiple vulnerabilities Related CVEs: CVE-2013-0155 CVE-2013-0156 CVE-2013-1854 CVE-2013-1856 CVE-2013-1857 CVE-2013-4491 CVE-2013-6414 CVE-2013-6415 +11 more Upstream summary: Ruby on Rails blog: Rails version 5.2.4.5, 6.0.3.5 and 6.1.2.1 have been […]
🟢 Low ⏱ 5–15 min Last verified: 11 July 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-impacket — multiple path traversal vulnerabilities Related CVEs: CVE-2021-31800 Upstream summary: asolino reports: Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a […]
🟢 Low ⏱ 5–15 min Last verified: 8 July 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-flask-caching — remote code execution or local privilege escalation vulnerabilities Related CVEs: CVE-2021-33026 Upstream summary: subnix reports: The Flask-Caching extension through 2.0.2 for Flask relies on Pickle for serialization, which […]
🟠 High ⏱ 15–60 min Last verified: 5 July 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Matrix clients — mxc uri validation in js sdk Related CVEs: CVE-2021-40823 CVE-2021-40824 CVE-2022-36059 CVE-2022-36060 CVE-2022-39236 CVE-2022-39249 CVE-2022-39250 CVE-2022-39251 +3 more Upstream summary: matrix-js-sdk upstream reports: matrix-js-sdk before 34.11.0 is […]
