🟢 Low ⏱ 5–15 min Last verified: 22 April 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mkvtoolnix — code execution via specially crafted files Upstream summary: Moritz Bunkus reports: most of the bugs fixed on 2016-09-06 and 2016-09-07 for issue #1780 are potentially exploitable. The scenario […]
🟠 High ⏱ 15–60 min Last verified: 22 April 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rack — possible denial of service vulnerability in header parsing Related CVEs: CVE-2011-4815 CVE-2011-4838 CVE-2011-5036 CVE-2011-5037 CVE-2015-1840 CVE-2015-3224 CVE-2015-3225 CVE-2015-3226 +7 more Upstream summary: ooooooo_q reports: Carefully crafted input can […]
🟡 Medium ⏱ 10–30 min Last verified: 22 April 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: postfixadmin — SQL injection vulnerability Related CVEs: CVE-2012-0811 CVE-2012-0812 CVE-2014-2655 Upstream summary: Thijs Kinkhorst reports: Postfixadmin has an SQL injection vulnerability. This vulnerability is only exploitable by authenticated users able […]
🟢 Low ⏱ 5–15 min Last verified: 21 April 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ruby — XML round-trip vulnerability in REXML Related CVEs: CVE-2021-28965 Upstream summary: Juho Nurminen reports: When parsing and serializing a crafted XML document, REXML gem (including the one bundled with […]
🟢 Low ⏱ 5–15 min Last verified: 21 April 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tmux — stack overflow in CSI parsing Upstream summary: Nicholas Marriott reports: tmux has a stack overflow in CSI parsing. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟠 High ⏱ 15–60 min Last verified: 21 April 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Mozilla — multiple vulnerabilities Related CVEs: CVE-2006-3113 CVE-2006-3677 CVE-2006-3801 CVE-2006-3802 CVE-2006-3803 CVE-2006-3804 CVE-2006-3805 CVE-2006-3806 +12 more Upstream summary: The Mozilla Project reports: MFSA 2011-12 Miscellaneous memory safety hazards MFSA 2011-13 […]
🟡 Medium ⏱ 10–30 min Last verified: 20 April 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p7zip — usage of uninitialized memory Related CVEs: CVE-2015-1038 CVE-2016-2334 CVE-2016-2335 CVE-2016-9296 CVE-2017-17969 CVE-2018-10115 Upstream summary: NVD reports: Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before […]
🟢 Low ⏱ 5–15 min Last verified: 20 April 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: stunnel — Remote Code Execution Related CVEs: CVE-2011-2940 CVE-2013-1762 Upstream summary: Michal Trojnara reports: 64-bit versions of stunnel with the following conditions: * NTLM authentication enabled * CONNECT protocol negotiation […]
🟡 Medium ⏱ 10–30 min Last verified: 20 April 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nwclient — multiple vulnerabilities Related CVEs: CVE-2001-0910 CVE-2002-0113 CVE-2002-0114 Upstream summary: Insecure file permissions, network access control and DNS usage put systems that use Legato NetWorker at risk. When the […]
🟢 Low ⏱ 5–15 min Last verified: 19 April 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: remind — buffer overflow with malicious reminder file input Related CVEs: CVE-2015-5957 Upstream summary: Dianne Skoll reports: BUG FIX: Fix a buffer overflow found by Alexander Keller. The bug can […]
