🟡 Medium ⏱ 10–30 min Last verified: 9 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: qmail — 64 bit integer overflows with possible remote code execution on large SMTP requests Related CVEs: CVE-2005-1513 CVE-2005-1514 CVE-2005-1515 Upstream summary: Georgi Guninski writes: There are several issues with […]
🟡 Medium ⏱ 10–30 min Last verified: 8 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bind — denial of service vulnerability Related CVEs: CVE-2015-1349 CVE-2015-4620 CVE-2015-5477 CVE-2015-5722 CVE-2015-5986 Upstream summary: ISC reports: An incorrect boundary check in openpgpkey_61.c can cause named to terminate due to […]
🟡 Medium ⏱ 10–30 min Last verified: 8 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openldap — denial of service vulnerability Related CVEs: CVE-2006-4600 CVE-2007-5707 CVE-2007-5708 CVE-2008-0658 CVE-2015-6908 Upstream summary: Denis Andzakovic reports: By sending a crafted packet, an attacker may cause the OpenLDAP server […]
🟢 Low ⏱ 5–15 min Last verified: 8 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mksh — TTY attachment privilege escalation Related CVEs: CVE-2008-1845 Upstream summary: Secunia reports: The vulnerability is caused due to an error when attaching to a TTY via the -T command […]
🟢 Low ⏱ 5–15 min Last verified: 8 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: InspIRCd websocket module double free vulnerability Related CVEs: CVE-2012-1836 CVE-2015-8702 Upstream summary: The InspIRCd development team reports: The websocket module before v3.8.1 contains a double free vulnerability. When combined with […]
🟡 Medium ⏱ 10–30 min Last verified: 7 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sympa — Inappropriate use of the cookie parameter can be a security threat. This parameter may also not provide sufficient security. Related CVEs: CVE-2005-0073 CVE-2012-2352 CVE-2015-1306 CVE-2020-29668 CVE-2020-9369 Upstream summary: […]
🟢 Low ⏱ 5–15 min Last verified: 7 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pkg — vulnerability in libfetch Related CVEs: CVE-2013-6393 CVE-2020-7450 Upstream summary: A programming error allows an attacker who can specify a URL with a username and/or password components to overflow […]
🟢 Low ⏱ 5–15 min Last verified: 7 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Drupal Views plugin — cross-site scripting Related CVEs: CVE-2010-4521 Upstream summary: Drupal security team reports: The Views module provides a flexible method for Drupal site designers to control how lists […]
🟡 Medium ⏱ 10–30 min Last verified: 7 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mailman < 2.1.38 — CSRF vulnerability of list mod or member against list admin page Related CVEs: CVE-2021-43331 CVE-2021-43332 CVE-2021-44227 Upstream summary: Mark Sapiro reports: A list moderator or list […]
🟢 Low ⏱ 5–15 min Last verified: 6 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-WsgiDAV — XSS vulnerability Related CVEs: CVE-2022-41905 Upstream summary: Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting (XSS) attacks. Table of contents Symptom […]
