🟢 Low ⏱ 5–15 min Last verified: 9 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pecl-phar — format string vulnerability Related CVEs: CVE-2010-2094 Upstream summary: Entry for CVE-2010-2094 says: Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers […]
🟢 Low ⏱ 5–15 min Last verified: 8 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: eb — Potential buffer overrun vulnerability Upstream summary: Kazuhiro Ito reports: Potential buffer overrun vulnerability is found in eb/multiplex.c. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟠 High ⏱ 15–60 min Last verified: 8 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libsndfile — out-of-bounds reads Related CVEs: CVE-2017-12562 CVE-2017-14245 CVE-2017-14246 CVE-2017-14634 CVE-2017-17456 CVE-2017-17457 CVE-2017-6892 CVE-2017-7585 +7 more Upstream summary: Xin-Jiang on Github reports: CVE-2017-14245 (Medium): An out of bounds read in […]
🟢 Low ⏱ 5–15 min Last verified: 7 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-nicotine-plus — Denial of service vulnerability Related CVEs: CVE-2021-45848 Upstream summary: ztauras reports: Denial of service (DoS) vulnerability in Nicotine+ starting with version 3.0.3 and prior to version 3.2.1 allows […]
🟡 Medium ⏱ 10–30 min Last verified: 7 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: zope — cross-site scripting vulnerability Related CVEs: CVE-2005-3323 CVE-2006-3458 CVE-2006-4684 CVE-2007-0240 Upstream summary: The Zope Team reports: A vulnerability has been discovered in Zope, where by certain types of misuse […]
🟢 Low ⏱ 5–15 min Last verified: 7 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: grub2-bhyve — multiple privilege escalations Upstream summary: Reno Robert reports: FreeBSD uses a two-process model for running a VM. For booting non-FreeBSD guests, a modified grub-emu is used (grub-bhyve). Grub-bhyve […]
🟢 Low ⏱ 5–15 min Last verified: 7 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bogofilter — RFC 2047 decoder denial-of-service vulnerability Related CVEs: CVE-2004-1007 Upstream summary: The bogofilter team has been provided with a test case of a malformatted (non-conformant) RFC-2047 encoded word that […]
🟢 Low ⏱ 5–15 min Last verified: 7 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bogofilter — RFC 2047 decoder denial-of-service vulnerability Related CVEs: CVE-2004-1007 Upstream summary: The bogofilter team has been provided with a test case of a malformatted (non-conformant) RFC-2047 encoded word that […]
🟠 High ⏱ 15–60 min Last verified: 7 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Apache Tomcat — Multiple Vulnerabilities Related CVEs: CVE-2005-2090 CVE-2007-0450 CVE-2007-1355 CVE-2007-1358 CVE-2010-1157 CVE-2011-0013 CVE-2012-0022 CVE-2012-2733 +12 more Upstream summary: [email protected] reports: A race condition on connection close could trigger a […]
🟡 Medium ⏱ 10–30 min Last verified: 6 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wesnoth — Code Injection vulnerability Related CVEs: CVE-2015-0844 CVE-2015-5069 CVE-2015-5070 CVE-2018-1999023 Upstream summary: shadowm reports: A severe bug was found in the game client which could allow a malicious user […]
