🟠 High ⏱ 15–60 min Last verified: 14 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xen-kernel — multiple vulnerabilities Related CVEs: CVE-2015-0268 CVE-2015-1563 CVE-2015-2044 CVE-2015-2045 CVE-2015-2151 CVE-2015-2751 CVE-2015-2752 CVE-2015-3340 +12 more Upstream summary: The Xen project reports multiple vulnerabilities. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 13 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xine — multiple remote string vulnerabilities Related CVEs: CVE-2006-1905 Upstream summary: c0ntexb reports: There are 2 format string bugs in the latest version of Xine that could be exploited by […]
🟢 Low ⏱ 5–15 min Last verified: 13 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-paperclip — validation bypass vulnerability Related CVEs: CVE-2015-2963 Upstream summary: Jon Yurek reports: Thanks to MORI Shingo of DeNA Co., Ltd. for reporting this. There is an issue where if […]
🟡 Medium ⏱ 10–30 min Last verified: 12 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: consul — rpc: authorize raft requests Related CVEs: CVE-2017-15133 CVE-2020-25864 CVE-2020-28053 CVE-2021-28156 CVE-2021-37219 Upstream summary: Hashicorp reports: HashiCorp Consul Raft RPC layer allows non-server agents with a valid certificate signed […]
🟢 Low ⏱ 5–15 min Last verified: 12 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_jk — information disclosure Related CVEs: CVE-2014-8111 Upstream summary: NIST reports: Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers […]
🟢 Low ⏱ 5–15 min Last verified: 12 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: groff — pic2graph and eqn2graph are vulnerable to symlink attack through temporary files Related CVEs: CVE-2004-0969 CVE-2004-1296 Upstream summary: The eqn2graph and pic2graph scripts in groff 1.18.1 allow local users […]
🟢 Low ⏱ 5–15 min Last verified: 12 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mysql-scripts — mysqlaccess insecure temporary file creation Related CVEs: CVE-2004-0457 CVE-2005-0004 Upstream summary: The Debian Security Team reports: Javier Fernández-Sanguino Peña from the Debian Security Audit Project discovered a temporary […]
🟢 Low ⏱ 5–15 min Last verified: 12 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-foolscap — local file inclusion Upstream summary: Brian Warner reports: The "flappserver" feature was found to have a vulnerability in the service-lookup code which, when combined with an attacker who […]
🟢 Low ⏱ 5–15 min Last verified: 12 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tnftpd — remotely exploitable vulnerability Related CVEs: CVE-2004-0794 Upstream summary: lukemftpd(8) is an enhanced BSD FTP server produced within the NetBSD project. The sources for lukemftpd are shipped with some […]
🟢 Low ⏱ 5–15 min Last verified: 12 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gnu-radius — SNMP-related denial-of-service Related CVEs: CVE-2004-0849 Upstream summary: An iDEFENSE security advisory reports: Remote exploitation of an input validation error in version 1.2 of GNU radiusd could allow a […]
