FreeBSD 13

🟠 High   ⏱ 15–60 min  Last verified: 18 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8879 CVE-2016-5385 CVE-2016-5399 CVE-2016-6288 CVE-2016-6289 CVE-2016-6290 CVE-2016-6291 CVE-2016-6292  +4 more Upstream summary: PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) […]

🟠 High   ⏱ 15–60 min  Last verified: 18 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: imlib2 — denial of service vulnerabilities Related CVEs: CVE-2004-0802 CVE-2004-0817 CVE-2004-1025 CVE-2004-1026 CVE-2006-4806 CVE-2006-4807 CVE-2006-4808 CVE-2006-4809  +4 more Upstream summary: Enlightenment reports: GIF loader: Fix segv on images without colormap […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]

🟠 High   ⏱ 15–60 min  Last verified: 18 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Gitlab — Remote Code Execution Vulnerability in GitLab Projects Import Related CVEs: CVE-2016-4340 CVE-2016-4738 CVE-2016-9086 CVE-2017-0882 CVE-2017-0915 CVE-2017-11438 CVE-2017-12426 CVE-2017-5029  +8 more Upstream summary: Gitlab reports: Remote Code Execution Vulnerability […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libevent — multiple vulnerabilities Related CVEs: CVE-2016-10195 CVE-2016-10196 CVE-2016-10197 Upstream summary: Debian Security reports: CVE-2016-10195: The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: buildbot — OAuth Authentication Vulnerability Related CVEs: CVE-2019-12300 CVE-2019-7313 Upstream summary: Buildbot accepted user-submitted authorization token from OAuth and used it to authenticate user. The vulnerability can lead to malicious […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache — Prevent chunk-size integer overflow on platforms where sizeof(int) < sizeof(long) Related CVEs: CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 Upstream summary: Apache ChangeLog reports: Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-bleach — regular expression denial-of-service Related CVEs: CVE-2020-6817 Upstream summary: Bleach developers reports: bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to […]

🟠 High   ⏱ 15–60 min  Last verified: 16 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: h2o — HTTP/2 Rapid Reset attack vulnerability Related CVEs: CVE-2015-5638 CVE-2016-1133 CVE-2016-4864 CVE-2017-10868 CVE-2017-10869 CVE-2018-0608 CVE-2019-9512 CVE-2019-9514  +3 more Upstream summary: Kazuo Okuhu reports: H2O is vulnerable to the HTTP/2 […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: django-cms — XSS Vulnerability Upstream summary: Cross-site scripting (XSS) vulnerability Jonas Obrist reports: The security issue allows users with limited admin access to elevate their privileges through XSS injection using […]