🟠 High ⏱ 15–60 min Last verified: 26 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: security/tor — SOCKS4(a) inversion bug Related CVEs: CVE-2005-2643 CVE-2006-0414 CVE-2009-0414 CVE-2009-0936 CVE-2009-0937 CVE-2009-0938 CVE-2010-1676 CVE-2011-0427 +3 more Upstream summary: The Tor Project reports: TROVE-2022-002: The SafeSocks option for SOCKS4(a) is […]
🟢 Low ⏱ 5–15 min Last verified: 26 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dia — XFig Import Plugin Buffer Overflow Related CVEs: CVE-2006-1550 Upstream summary: Secunia reports: Some vulnerabilities have been reported in Dia, which potentially can be exploited by malicious people to […]
🟠 High ⏱ 15–60 min Last verified: 26 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Django — multiple vulnerabilities Related CVEs: CVE-2016-2048 CVE-2016-2512 CVE-2016-2513 CVE-2016-9013 CVE-2016-9014 CVE-2017-12794 CVE-2017-7233 CVE-2017-7234 +12 more Upstream summary: Django Release notes: CVE-2020-24583: Incorrect permissions on intermediate-level directories on Python 3.7+ […]
🟡 Medium ⏱ 10–30 min Last verified: 25 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tnef — An attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message Related CVEs: CVE-2017-6307 CVE-2017-6308 CVE-2017-6309 CVE-2017-6310 CVE-2019-18849 Upstream summary: [email protected] reports: In […]
🟢 Low ⏱ 5–15 min Last verified: 25 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ricochet — information disclosure Upstream summary: special reports: By sending a nickname with some HTML tags in a contact request, an attacker could cause Ricochet to make network requests without […]
🟢 Low ⏱ 5–15 min Last verified: 24 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-markdown2 — regular expression denial of service vulnerability Related CVEs: CVE-2020-11888 CVE-2021-26813 Upstream summary: Ben Caller reports: markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of […]
🟢 Low ⏱ 5–15 min Last verified: 23 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: uwsgi — a stack-based buffer overflow Related CVEs: CVE-2018-6758 Upstream summary: Uwsgi developers report: It was discovered that the uwsgi_expand_path function in utils.c in Unbit uWSGI, an application container server, […]
🟢 Low ⏱ 5–15 min Last verified: 23 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: smart_proxy_dynflow — authentication bypass vulnerability Related CVEs: CVE-2018-14643 Upstream summary: MITRE reports: An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman. A malicious attacker can use […]
🟢 Low ⏱ 5–15 min Last verified: 23 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-graphite-web — Multiple vulnerabilities Related CVEs: CVE-2013-5093 Upstream summary: Graphite developers report: This release contains several security fixes for cross-site scripting (XSS) as well as a fix for a remote-execution […]
🟢 Low ⏱ 5–15 min Last verified: 23 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pear-XML_RPC — remote PHP code injection vulnerability Related CVEs: CVE-2005-2498 Upstream summary: A Hardened-PHP Project Security Advisory reports: When the library parses XMLRPC requests/responses, it constructs a string of PHP […]
