🟡 Medium ⏱ 10–30 min Last verified: 22 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: phppgadmin — directory traversal with register_globals enabled Related CVEs: CVE-2005-2256 CVE-2007-5728 CVE-2008-5587 Upstream summary: Secunia reports: Dun has discovered a vulnerability in phpPgAdmin, which can be exploited by malicious people […]
🟡 Medium ⏱ 10–30 min Last verified: 21 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: redmine — information leak vulnerability Related CVEs: CVE-2012-0327 CVE-2014-1985 CVE-2015-8346 CVE-2015-8473 CVE-2015-8474 CVE-2015-8477 CVE-2015-8537 Upstream summary: Redmine reports: Data disclosure in atom feed. Table of contents Symptom & Impact Environment […]
Introduction FreeBSD 13 is a UNIX-derived operating system renowned for its network stack performance, ZFS integration, and Jail isolation primitives. Setting up configure dnsmasq on freebsd 13 on FreeBSD 13 follows the rc.conf/service(8) paradigm rather than systemd, which means enabling a service and configuring its startup options are done differently from any Linux distribution. This […]
🟢 Low ⏱ 5–15 min Last verified: 21 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: quake2 — multiple critical vulnerabilities Upstream summary: An advisory published by Richard Stanway describes numerous critical vulnerabilities in the Quake II engine: Due to unchecked input at various stages in […]
🟢 Low ⏱ 5–15 min Last verified: 21 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gnupg — OpenPGP symmetric encryption vulnerability Related CVEs: CVE-2005-0366 Upstream summary: Serge Mister and Robert Zuccherato reports that the OpenPGP protocol is vulnerable to a cryptographic attack when using symmetric […]
🟢 Low ⏱ 5–15 min Last verified: 20 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tidy — heap-buffer-overflow Related CVEs: CVE-2015-5522 CVE-2015-5523 Upstream summary: Geoff McLane reports: tidy is affected by a write out of bounds when processing malformed html files. This issue could be […]
🟢 Low ⏱ 5–15 min Last verified: 20 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mysql — SSL Downgrade Related CVEs: CVE-2015-3152 Upstream summary: Duo Security reports: Researchers have identified a serious vulnerability in some versions of Oracle’s MySQL database product that allows an attacker […]
🟢 Low ⏱ 5–15 min Last verified: 20 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: www/py-requests — Information disclosure vulnerability Upstream summary: The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which […]
🟠 High ⏱ 15–60 min Last verified: 20 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Payara — path trasversal flaw via either loc/con parameters in Eclipse Mojarra Related CVEs: CVE-2016-1000031 CVE-2016-5528 CVE-2017-12615 CVE-2017-3239 CVE-2017-3247 CVE-2017-3249 CVE-2017-3250 CVE-2018-14371 +7 more Upstream summary: Payara Releases reports: The […]
🟢 Low ⏱ 5–15 min Last verified: 20 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sudosh — buffer overflow Upstream summary: ISS reports: sudosh2 and sudosh3 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the replay() function. By persuading a […]
