🟢 Low ⏱ 5–15 min Last verified: 6 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fswiki — XSS vulnerability Related CVEs: CVE-2005-1799 Upstream summary: JVN reports: FreeStyleWiki has XSS vulnerability. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟢 Low ⏱ 5–15 min Last verified: 6 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-gunicorn — CWE-113 vulnerability Related CVEs: CVE-2018-1000164 Upstream summary: Everardo reports: gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers vulnerability in process_headers function in […]
🟢 Low ⏱ 5–15 min Last verified: 6 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]
🟠 High ⏱ 15–60 min Last verified: 6 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Rails — multiple vulnerabilities Related CVEs: CVE-2013-0155 CVE-2013-0156 CVE-2013-1854 CVE-2013-1856 CVE-2013-1857 CVE-2013-4491 CVE-2013-6414 CVE-2013-6415 +11 more Upstream summary: Ruby on Rails blog: Rails version 5.2.4.5, 6.0.3.5 and 6.1.2.1 have been […]
🟢 Low ⏱ 5–15 min Last verified: 5 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Ansible — Ansible user credentials disclosure in ansible-connection module Related CVEs: CVE-2021-3583 CVE-2021-3620 Upstream summary: Red Hat reports: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information […]
🟢 Low ⏱ 5–15 min Last verified: 5 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Vieb — Remote Code Execution via Visiting Untrusted URLs Upstream summary: Zhengyu Liu, Jianjia Yu, Jelmer van Arnhem report: We discovered a remote code execution (RCE) vulnerability in the latest […]
🟢 Low ⏱ 5–15 min Last verified: 5 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wordpress — XSS Upstream summary: The WordPress team reports: A cross-site scripting (XSS) vulnerability affecting the Avatar block type Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 5 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: portupgrade-devel — lack of distfile checksums Upstream summary: Ports security team reports: The portupgrade-devel port fetched directly from a git respository without checking against a known good SHA hash. This […]
Introduction Deploying install perl on freebsd 13 on a FreeBSD 13 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the standard base + […]
🟠 High ⏱ 15–60 min Last verified: 5 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libgadu — multiple vulnerabilities Related CVEs: CVE-2004-0005 CVE-2004-0006 CVE-2004-0007 CVE-2004-0008 CVE-2004-0500 CVE-2004-0754 CVE-2004-0784 CVE-2004-0785 +12 more Upstream summary: Wojtek Kaniewski reports: Multiple vulnerabilities have been found in libgadu, a library […]
