🟠 High ⏱ 15–60 min Last verified: 13 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: puppet — Silent Configuration Failure Related CVEs: CVE-2012-1906 CVE-2012-1986 CVE-2012-1987 CVE-2012-1988 CVE-2012-1989 CVE-2012-3864 CVE-2012-3865 CVE-2012-3866 +12 more Upstream summary: Puppet reports: A flaw was discovered in Puppet Agent where the […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tdiary — injection vulnerability Related CVEs: CVE-2006-6174 Upstream summary: An undisclosed eRuby injection vulnerability had been discovered in tDiary. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: shutter — arbitrary code execution Related CVEs: CVE-2015-0854 Upstream summary: Luke Farone reports: In the "Shutter" screenshot application, I discovered that using the "Show in folder" menu option while viewing […]
🟠 High ⏱ 15–60 min Last verified: 12 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mc — multiple vulnerabilities Related CVEs: CVE-2003-1023 CVE-2004-0226 CVE-2004-0231 CVE-2004-0232 CVE-2004-0494 CVE-2004-1004 CVE-2004-1005 CVE-2004-1009 +4 more Upstream summary: Andrew V. Samoilov reported several vulnerabilities that were corrected in MidnightCommand 4.6.0: […]
🟢 Low ⏱ 5–15 min Last verified: 11 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sysutils/openzfs-kmod — critical permissions issues Upstream summary: Andrew Walker reports: Issue 1: Users are always granted permissions to cd into a directory. The check for whether execute is present on […]
🟢 Low ⏱ 5–15 min Last verified: 11 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-Dancer — possible to abuse session cookie values Upstream summary: Russell Jenkins reports: It was possible to abuse session cookie values so that file-based session stores such as Dancer::Session::YAML or […]
🟢 Low ⏱ 5–15 min Last verified: 11 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_pubcookie — cross site scripting vulnerability Upstream summary: Nathan Dors of the Pubcookie Project reports: Non-persistent XSS vulnerabilities were found in the Pubcookie Apache module (mod_pubcookie) and ISAPI filter. These […]
🟢 Low ⏱ 5–15 min Last verified: 11 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xview — multiple buffer overflows in xv_parse_one Related CVEs: CVE-2005-0076 Upstream summary: A Debian Security Advisory reports: Erik Sjölund discovered that programs linked against xview are vulnerable to a number […]
🟠 High ⏱ 15–60 min Last verified: 11 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libXcursor — integer overflow that can lead to heap buffer overflow Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988 +12 more Upstream summary: The freedesktop.org project reports: It […]
🟠 High ⏱ 15–60 min Last verified: 11 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Related CVEs: CVE-2004-0381 CVE-2004-0836 CVE-2018-25032 CVE-2022-1292 CVE-2022-1941 CVE-2022-2097 CVE-2022-21455 CVE-2022-21509 +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 24 new security patches for […]
