🟢 Low ⏱ 5–15 min Last verified: 3 June 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php-mbstring — php mbstring buffer overflow vulnerability Related CVEs: CVE-2008-5557 Upstream summary: SecurityFocus reports: PHP is prone to a buffer-overflow vulnerability because it fails to perform boundary checks before copying […]
🟠 High ⏱ 15–60 min Last verified: 3 June 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: SquirrelMail — post-authentication access privileges Related CVEs: CVE-2004-1036 CVE-2005-0075 CVE-2005-0103 CVE-2005-0104 CVE-2005-1769 CVE-2005-2095 CVE-2006-0188 CVE-2006-0195 +6 more Upstream summary: Florian Grunow reports: An attacker able to exploit this vulnerability can […]
🟠 High ⏱ 15–60 min Last verified: 3 June 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: NVIDIA UNIX driver — multiple vulnerabilities in the kernel mode layer handler Related CVEs: CVE-2006-5379 CVE-2012-0946 CVE-2012-4225 CVE-2013-0131 CVE-2014-8093 CVE-2014-8098 CVE-2014-8298 CVE-2017-0309 +7 more Upstream summary: NVIDIA Unix security team […]
🟡 Medium ⏱ 10–30 min Last verified: 3 June 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tinc — Buffer overflow Related CVEs: CVE-2018-16737 CVE-2018-16738 CVE-2018-16758 Upstream summary: tinc-vpn.org reports: The authentication protocol allows an oracle attack that could potentially be exploited. If a man-in-the-middle has intercepted […]
🟠 High ⏱ 15–60 min Last verified: 3 June 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Django — potential SQL injection vulnerability Related CVEs: CVE-2012-3442 CVE-2012-3443 CVE-2012-3444 CVE-2013-0305 CVE-2013-0306 CVE-2013-1443 CVE-2013-1664 CVE-2013-1665 +12 more Upstream summary: MITRE CVE reports: Django 1.11 before 1.11.29, 2.2 before 2.2.11, […]
🟢 Low ⏱ 5–15 min Last verified: 2 June 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: icu — multiple vulnerabilities Related CVEs: CVE-2017-7867 CVE-2017-7868 Upstream summary: NVD reports: International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer […]
🟢 Low ⏱ 5–15 min Last verified: 2 June 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ark — extraction outside of extraction directory Related CVEs: CVE-2020-16116 CVE-2020-24654 Upstream summary: Albert Astals Cid reports: Overview A maliciously crafted TAR archive containing symlink entries would install files anywhere […]
🟢 Low ⏱ 5–15 min Last verified: 2 June 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: hashcash — heap overflow vulnerability Related CVEs: CVE-2005-0687 Upstream summary: Andreas Seltenreich reports that hashcash is prone to a heap overflow vulnerability. This vulnerability is caused by improper checking of […]
🟢 Low ⏱ 5–15 min Last verified: 2 June 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PuTTY — Release 0.74 fixes two security vulnerabilities Related CVEs: CVE-2020-14002 Upstream summary: Simon Tatham reports: [Release 0.74] fixes the following security issues: New configuration option to disable PuTTY's default […]
🟠 High ⏱ 15–60 min Last verified: 2 June 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ner/rsync — multiple vulnerabilities Related CVEs: CVE-2003-0962 CVE-2004-0426 CVE-2004-0792 CVE-2007-4091 CVE-2011-1097 CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 +12 more Upstream summary: The rsync project reports: Six CVEs are fixed in this release. All […]
