🟢 Low ⏱ 5–15 min Last verified: 16 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-suds — vulnerable to symlink attacks Related CVEs: CVE-2013-2217 Upstream summary: SUSE reports: cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries […]
🟢 Low ⏱ 5–15 min Last verified: 16 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-flask-security — user redirect to arbitrary URL vulnerability Related CVEs: CVE-2021-23385 Upstream summary: Snyk reports: This affects all versions of package Flask-Security. When using the `get_post_logout_redirect` and `get_post_login_redirect` functions, it […]
🟡 Medium ⏱ 10–30 min Last verified: 16 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: RDoc — command injection vulnerability Related CVEs: CVE-2012-6708 CVE-2015-9251 CVE-2021-31799 Upstream summary: Alexandr Savca reports: RDoc used to call Kernel#open to open a local file. If a Ruby project has […]
🟠 High ⏱ 15–60 min Last verified: 16 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: redis,valkey — Denial-of-service valnerability due to malformed ACL selectors Related CVEs: CVE-2013-7458 CVE-2015-4335 CVE-2021-21309 CVE-2021-29477 CVE-2021-29478 CVE-2021-32625 CVE-2021-32626 CVE-2021-32627 +12 more Upstream summary: Redis core team reports: An authenticated with […]
🟠 High ⏱ 15–60 min Last verified: 16 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CVE-2007-4879 CVE-2007-5959 CVE-2008-0016 CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0417 +12 more Upstream summary: The Mozilla Foundation reports: MFSA 2008-37 UTF-8 URL stack buffer overflow MFSA […]
🟢 Low ⏱ 5–15 min Last verified: 15 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: librsvg2 — multiple vulnerabilities Related CVEs: CVE-2019-20446 Upstream summary: Librsvg2 developers reports: Backport the following fixes from 2.46.x: Librsvg now has limits on the number of loaded XML elements, and […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-httpie — exposure of sensitive information vulnerabilities Related CVEs: CVE-2022-0430 CVE-2022-24737 Upstream summary: Glyph reports: HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: coturn — information leakage Related CVEs: CVE-2020-4067 Upstream summary: Felix Dörre reports: The issue is that STUN/TURN response buffer is not initialized properly. (CWE 665) This is a leak of […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: krfb — Multiple security issues in bundled libvncserver Related CVEs: CVE-2014-4607 CVE-2014-6055 Upstream summary: Martin Sandsmark reports: krfb 4.14 [and earlier] embeds libvncserver which has had several security issues. Several […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gdm — lock screen bypass when holding escape key Related CVEs: CVE-2011-0727 CVE-2015-7496 Upstream summary: Ray Strode reports: CVE-2015-7496 – lock screen bypass when holding escape key. Table of contents […]
