🟢 Low ⏱ 5–15 min Last verified: 7 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pango — integer overflow Related CVEs: CVE-2009-1194 Upstream summary: oCERT reports: Pango suffers from a multiplicative integer overflow which may lead to a potentially exploitable, heap overflow depending on the […]
🟠 High ⏱ 15–60 min Last verified: 7 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wordpress — XSS Related CVEs: CVE-2010-4257 CVE-2013-0235 CVE-2013-0236 CVE-2013-0237 CVE-2013-2199 CVE-2013-2200 CVE-2013-2201 CVE-2013-2202 +12 more Upstream summary: The WordPress team reports: A cross-site scripting (XSS) vulnerability affecting the Avatar block […]
🟢 Low ⏱ 5–15 min Last verified: 6 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kvirc — multiple vulnerabilities Related CVEs: CVE-2010-2451 CVE-2010-2452 Upstream summary: Two security vulnerabilities have been discovered: Multiple format string vulnerabilities in the DCC functionality in KVIrc 3.4 and 4.0 have […]
🟢 Low ⏱ 5–15 min Last verified: 6 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openoffice — arbitrary code execution vulnerabilities Related CVEs: CVE-2008-2237 CVE-2008-2238 Upstream summary: The OpenOffice Team reports: A security vulnerability with the way OpenOffice 2.x process WMF files may allow a […]
🟢 Low ⏱ 5–15 min Last verified: 6 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dcraw — integer overflow condition Related CVEs: CVE-2015-3885 Upstream summary: ocert reports: The dcraw tool, as well as several other projects re-using its code, suffers from an integer overflow condition […]
🟢 Low ⏱ 5–15 min Last verified: 6 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pyblosxom — atom flavor multiple XML injection vulnerabilities Upstream summary: Security Focus reports: PyBlosxom is prone to multiple XML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before […]
🟢 Low ⏱ 5–15 min Last verified: 6 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: f2c — insecure temporary files Related CVEs: CAN-2005-0017 Upstream summary: Javier Fernández-Sanguino Peña reports two temporary file vulnerability within f2c. The vulnerabilities are caused due to weak temporary file handling. […]
🟡 Medium ⏱ 10–30 min Last verified: 6 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: activemq — Unsafe deserialization Related CVEs: CVE-2015-5254 CVE-2016-0734 CVE-2016-0782 Upstream summary: Alvaro Muatoz, Matthias Kaiser and Christian Schneider reports: JMS Object messages depends on Java Serialization for marshaling/unmashaling of the […]
Introduction How to Set Up a FreeBSD Jail for Web Hosting on FreeBSD 13 is a core administration task for any FreeBSD 13 server operator. FreeBSD 13 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service […]
🟠 High ⏱ 15–60 min Last verified: 6 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: w3m – multiple vulnerabilities Related CVEs: CVE-2006-6772 CVE-2016-9422 CVE-2016-9423 CVE-2016-9424 CVE-2016-9425 CVE-2016-9426 CVE-2016-9428 CVE-2016-9429 +12 more Upstream summary: Tatsuya Kinoshita reports: CVE-2018-6196 * table.c: Prevent negative indent value in feed_table_block_tag(). […]
