🟠 High ⏱ 15–60 min Last verified: 30 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: www/awstats — Partial absolute pathname Related CVEs: CVE-2005-0116 CVE-2005-0362 CVE-2005-0363 CVE-2005-0435 CVE-2005-0436 CVE-2005-0437 CVE-2005-0438 CVE-2005-1527 +5 more Upstream summary: MITRE reports: It seems #90 is not completely fixed in 7.8. […]
🟢 Low ⏱ 5–15 min Last verified: 30 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xv — filename handling format string vulnerability Related CVEs: CVE-2005-0665 Upstream summary: A Gentoo Linux Security Advisory reports: Tavis Ormandy of the Gentoo Linux Security Audit Team identified a flaw […]
🟡 Medium ⏱ 10–30 min Last verified: 29 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-6834 CVE-2015-6835 CVE-2015-6836 CVE-2015-6837 CVE-2015-6838 Upstream summary: PHP reports: Core: Fixed bug #70172 (Use After Free Vulnerability in unserialize()). Fixed bug #70219 (Use after […]
🟢 Low ⏱ 5–15 min Last verified: 29 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sinatra — XSS vulnerability Related CVEs: CVE-2018-11627 Upstream summary: Sinatra blog: Sinatra had a critical vulnerability since v2.0.0. The purpose of this release is to fix CVE-2018-11627. The vulnerability is […]
🟢 Low ⏱ 5–15 min Last verified: 29 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lynx — SSL certificate validation error Upstream summary: Axel Beckert reports: […] I was able to capture the password given on the commandline in traffic of an TLS handshake using […]
🟠 High ⏱ 15–60 min Last verified: 29 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: postgresql — multiple vulnerabilities Related CVEs: CAN-2005-1409 CAN-2005-1410 CVE-2005-0227 CVE-2005-0244 CVE-2005-0245 CVE-2005-0246 CVE-2005-0247 CVE-2006-2313 +6 more Upstream summary: The PostgreSQL developers report: PostgreSQL allows users to create indexes on the […]
🟠 High ⏱ 15–60 min Last verified: 29 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: moodle — Login CSRF vulnerability Related CVEs: CVE-2015-3272 CVE-2015-3273 CVE-2015-3274 CVE-2015-3275 CVE-2015-5264 CVE-2015-5265 CVE-2015-5266 CVE-2015-5267 +12 more Upstream summary: moodle reports: The login form is not protected by a token […]
🟢 Low ⏱ 5–15 min Last verified: 28 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: net/eternalterminal — Multiple vulnerabilities Related CVEs: CVE-2022-48257 CVE-2022-48258 Upstream summary: Mitre reports: etserver and etclient have predictable logfile names in /tmp and they are world-readable logfiles Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 28 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: node, iojs, and v8 — denial of service Related CVEs: CVE-2011-4815 CVE-2011-4838 CVE-2011-5036 CVE-2011-5037 CVE-2015-5380 Upstream summary: node reports: This release of Node.js fixes a bug that triggers an out-of-band […]
🟠 High ⏱ 15–60 min Last verified: 28 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tiff — multiple vulnerabilities Related CVEs: CVE-2017-5225 CVE-2017-7592 CVE-2017-7593 CVE-2017-7594 CVE-2017-7595 CVE-2017-7596 CVE-2017-7597 CVE-2017-7598 +4 more Upstream summary: NVD reports: Please reference CVE/URL list for details Table of contents Symptom […]
