FreeBSD 12

🟠 High   ⏱ 15–60 min  Last verified: 22 March 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PostgreSQL Server — execute arbitrary SQL code as DBA user Related CVEs: CVE-2019-10129 CVE-2019-10130 CVE-2019-10164 CVE-2019-10208 CVE-2019-10209 CVE-2020-1720 CVE-2021-23214 CVE-2021-23222  +2 more Upstream summary: The PostgreSQL project reports: Confine additional […]

🟠 High   ⏱ 15–60 min  Last verified: 21 March 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ImageMagick6 — multiple vulnerabilities Related CVEs: CVE-2004-0827 CVE-2004-0981 CVE-2005-0005 CVE-2005-0397 CVE-2006-5868 CVE-2007-4985 CVE-2007-4986 CVE-2007-4987  +12 more Upstream summary: CVE reports: Several vulnerabilities have been discovered in ImageMagick: CVE-2021-20309: A flaw […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 March 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-treq — sensitive information leak vulnerability Related CVEs: CVE-2022-23607 Upstream summary: Treq's request methods (`treq.get`, `treq.post`, `HTTPClient.request`, `HTTPClient.get`, etc.) accept cookies as a dictionary. Such cookies are not bound to […]

🟠 High   ⏱ 15–60 min  Last verified: 12 March 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Related CVEs: CVE-2004-0381 CVE-2004-0836 CVE-2018-25032 CVE-2022-1292 CVE-2022-1941 CVE-2022-2097 CVE-2022-21455 CVE-2022-21509  +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 24 new security patches for […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 March 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: aiohttp — open redirect vulnerability Related CVEs: CVE-2021-21330 Upstream summary: Sviatoslav Sydorenko reports: Open redirect vulnerability — a maliciously crafted link to an aiohttp-based web-server could redirect the browser to […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 March 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: vault — unauthenticated license read Related CVEs: CVE-2020-35177 CVE-2021-27668 Upstream summary: vault developers report: Limited Unauthenticated License Read: We addressed a security vulnerability that allowed for the unauthenticated reading of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 March 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: polkit — Local Privilege Escalation Related CVEs: CVE-2015-3218 CVE-2015-3255 CVE-2015-3256 CVE-2015-4625 CVE-2021-3560 CVE-2021-4034 Upstream summary: Qualys reports: We discovered a Local Privilege Escalation (from any user to root) in polkit's […]

🟢 Low   ⏱ 5–15 min  Last verified: 2 March 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: md4c — DoS attack Related CVEs: CVE-2021-30027 Upstream summary: [email protected] reports: md_analyze_line in md4c.c in md4c 0.4.7 allows attackers to trigger use of uninitialized memory, and cause a denial of […]

🟠 High   ⏱ 15–60 min  Last verified: 27 February 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Rails — XSS vulnerabilities Related CVEs: CVE-2015-7576 CVE-2015-7577 CVE-2015-7581 CVE-2016-0751 CVE-2016-0752 CVE-2016-0753 CVE-2016-2097 CVE-2016-2098  +12 more Upstream summary: Ruby on Rails blog: This is an announcement to let you know […]