🟡 Medium ⏱ 10–30 min Last verified: 2 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: quassel — multiple vulnerabilities Related CVEs: CVE-2013-4422 CVE-2015-3427 CVE-2015-8547 CVE-2016-4414 Upstream summary: Gentoo reports: quasselcore: corruption of heap metadata caused by qdatastream leading to preauth remote code execution. Severity: high, […]
🟡 Medium ⏱ 10–30 min Last verified: 2 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pspp — multiple vulnerabilities Related CVEs: CVE-2017-10791 CVE-2017-10792 CVE-2017-12958 CVE-2017-12959 CVE-2017-12960 CVE-2017-12961 Upstream summary: CVE Details reports: There is an Integer overflow in the hash_int function of the libpspp library […]
🟢 Low ⏱ 5–15 min Last verified: 2 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PyYAML — arbitrary code execution Related CVEs: CVE-2020-14343 CVE-2020-1747 Upstream summary: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code […]
🟢 Low ⏱ 5–15 min Last verified: 2 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: drupal-pubcookie — authentication may be bypassed Related CVEs: CVE-2006-4717 Upstream summary: The Drupal Project reports: It is possible for a malicious user to spoof a user's identity by bypassing the […]
🟡 Medium ⏱ 10–30 min Last verified: 2 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gftp — multiple vulnerabilities Related CVEs: CVE-2005-0372 CVE-2007-3961 CVE-2007-3962 Upstream summary: Gentoo reports: Kalle Olavi Niemitalo discovered two boundary errors in fsplib code included in gFTP when processing overly long […]
🟡 Medium ⏱ 10–30 min Last verified: 2 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: neon — NULL pointer dereference in Digest domain support Related CVEs: CVE-2004-0179 CVE-2004-0398 CVE-2008-3746 Upstream summary: Joe Orton reports: A NULL pointer deference in the Digest authentication support in neon […]
🟡 Medium ⏱ 10–30 min Last verified: 1 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pivotx — Multiple unrestricted file upload vulnerabilities Related CVEs: CVE-2011-1035 CVE-2012-2274 CVE-2014-0341 Upstream summary: Pivotx reports: Multiple unrestricted file upload vulnerabilities in fileupload.php in PivotX before 2.3.9 allow remote authenticated […]
🟡 Medium ⏱ 10–30 min Last verified: 1 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: SDL2_image — multiple vulnerabilities Related CVEs: CVE-2019-5051 CVE-2019-5052 CVE-2019-5057 CVE-2019-5058 CVE-2019-5059 CVE-2019-5060 Upstream summary: SDL_image developers report: Fixed a number of security issues: TALOS-2019-0820 TALOS-2019-0821 TALOS-2019-0841 TALOS-2019-0842 TALOS-2019-0843 TALOS-2019-0844 Table […]
🟡 Medium ⏱ 10–30 min Last verified: 1 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ncurses — multiple issues Related CVEs: CVE-2017-13728 CVE-2017-13729 CVE-2017-13730 CVE-2017-13731 CVE-2017-13732 CVE-2017-13733 CVE-2017-13734 Upstream summary: ncurses developers reports: There are multiple illegal address access issues and an infinite loop issue. […]
🟢 Low ⏱ 5–15 min Last verified: 1 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ghostscript — denial of service (crash) via crafted Postscript files Related CVEs: CVE-2015-3228 Upstream summary: MITRE reports: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier […]
