FreeBSD 13

🟡 Medium   ⏱ 10–30 min  Last verified: 26 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rt and dependent modules — multiple security vulnerabilities Related CVEs: CVE-2012-2770 CVE-2015-7686 CVE-2016-6127 CVE-2017-5361 CVE-2017-5943 CVE-2017-5944 Upstream summary: BestPractical reports: Please reference CVE/URL list for details Table of contents Symptom […]

🟠 High   ⏱ 15–60 min  Last verified: 26 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2014-0480 CVE-2014-0481 CVE-2014-0482 CVE-2014-0483 CVE-2015-0219 CVE-2015-0220 CVE-2015-0221 CVE-2015-0222  +12 more Upstream summary: Tim Graham reports: Malicious redirect and possible XSS attack via user-supplied redirect […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: icecast — Cross-Site Scripting Vulnerability Related CVEs: CVE-2001-0784 CVE-2001-1083 CVE-2001-1229 CVE-2001-1230 CVE-2002-0177 CVE-2004-0781 Upstream summary: Caused by improper filtering of HTML code in the status display, it is possible for […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: id Tech 3 — remote code execution vulnerability Related CVEs: CVE-2017-6903 Upstream summary: The content auto-download of id Tech 3 can be used to deliver maliciously crafted content, that triggers […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xpm — image decoding vulnerabilities Related CVEs: CVE-2004-0687 CVE-2004-0688 Upstream summary: Chris Evans discovered several vulnerabilities in the libXpm image decoder: A stack-based buffer overflow in xpmParseColors An integer overflow […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libpgf — use-after-free Related CVEs: CVE-2015-6673 Upstream summary: Pengsu Cheng reports: An use-after-free issue in Decoder.cpp was reported to upstream. The problem is due to lack of validation of ColorTableSize. […]

🟠 High   ⏱ 15–60 min  Last verified: 25 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: postnuke — admin section SQL injection Related CVEs: CVE-2005-0615 CVE-2005-0616 CVE-2005-0617 CVE-2005-1621 CVE-2005-1695 CVE-2005-1696 CVE-2005-1698 CVE-2005-1777  +3 more Upstream summary: ISS X-Force reports: PostNuke is vulnerable to SQL injection. A […]

🟠 High   ⏱ 15–60 min  Last verified: 25 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: joomla3 — vulnerabilitiesw Related CVEs: CVE-2006-6832 CVE-2006-6833 CVE-2006-6834 CVE-2007-4188 CVE-2007-4189 CVE-2007-4190 CVE-2007-5577 CVE-2008-3681  +12 more Upstream summary: JSST reports: Inadequate escaping in mod_banners leads to a stored XSS vulnerability. Inadequate […]