🟢 Low ⏱ 5–15 min Last verified: 8 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php-imap — imap_open allows to run arbitrary shell commands via mailbox parameter Upstream summary: The PHP team reports: imap_open allows to run arbitrary shell commands via mailbox parameter. Table of […]
🟡 Medium ⏱ 10–30 min Last verified: 8 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: arj — multiple vulnerabilities Related CVEs: CVE-2015-0556 CVE-2015-0557 CVE-2015-2782 Upstream summary: Several vulnerabilities: symlink directory traversal, absolute path directory traversal and buffer overflow were discovered in the arj archiver. Table […]
🟢 Low ⏱ 5–15 min Last verified: 7 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: streamripper — multiple buffer overflows Related CVEs: CVE-2008-4829 Upstream summary: Secunia reports: A boundary error exists within http_parse_sc_header() in lib/http.c when parsing an overly long HTTP header starting with "Zwitterion […]
🟢 Low ⏱ 5–15 min Last verified: 7 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: geeklog xss vulnerability Related CVEs: CVE-2006-3756 Upstream summary: Geeklog reports: MustLive pointed out a possible XSS in the form to email an article to a friend that we're fixing with […]
🟠 High ⏱ 15–60 min Last verified: 7 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Related CVEs: CVE-2016-3492 CVE-2016-5616 CVE-2016-5617 CVE-2016-5624 CVE-2016-5625 CVE-2016-5626 CVE-2016-5629 CVE-2016-6662 +9 more Upstream summary: Oracle reports: This Critical Patch Update contains 34 new security patches for […]
🟢 Low ⏱ 5–15 min Last verified: 6 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: phpMyAdmin — XSS vulnerability in drag-and-drop upload Related CVEs: CVE-2020-5504 Upstream summary: phpMyAdmin Team reports: PMASA-2023-1 XSS vulnerability in drag-and-drop upload Table of contents Symptom & Impact Environment & Reproduction […]
🟢 Low ⏱ 5–15 min Last verified: 6 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-flask-security — user redirect to arbitrary URL vulnerability Related CVEs: CVE-2021-23385 Upstream summary: Snyk reports: This affects all versions of package Flask-Security. When using the `get_post_logout_redirect` and `get_post_login_redirect` functions, it […]
🟢 Low ⏱ 5–15 min Last verified: 5 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fail2ban — possible RCE vulnerability in mailing action using mailutils Related CVEs: CVE-2021-32749 Upstream summary: Jakub Żoczek reports: Command mail from mailutils package used in mail actions like mail-whois can […]
🟢 Low ⏱ 5–15 min Last verified: 5 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: messagelib — HTML email can open browser window automatically Related CVEs: CVE-2018-19516 Upstream summary: Albert Astals Cid reports: messagelib is the library used by KMail to display emails. messagelib by […]
🟡 Medium ⏱ 10–30 min Last verified: 5 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: win32-codecs — multiple vulnerabilities Related CVEs: CVE-2006-4381 CVE-2006-4382 CVE-2006-4384 CVE-2006-4385 CVE-2006-4386 CVE-2006-4388 CVE-2006-4389 Upstream summary: The Apple Security Team reports that there are multiple vulnerabilities within QuickTime (one of the […]
