🟢 Low ⏱ 5–15 min Last verified: 17 December 2018 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-pylons — Path traversal bug Upstream summary: Pylons team reports: The error.py controller uses paste.fileapp to serve the static resources to the browser. The default error.py controller uses os.path.join to […]
🟢 Low ⏱ 5–15 min Last verified: 17 December 2018 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: google-earth — heap overflow in the KML engine Upstream summary: JAAScois reports: While processing KML/KMZ data Google Earth fails to verify its size prior to copying it into a fixed-sized […]
🟢 Low ⏱ 5–15 min Last verified: 17 December 2018 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0 Related CVEs: CVE-2004-0419 Upstream summary: When the IPv6 code was added to xdm a critical test to disable xdmcp […]
🟠 High ⏱ 15–60 min Last verified: 17 December 2018 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]
🟢 Low ⏱ 5–15 min Last verified: 16 December 2018 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]
🟢 Low ⏱ 5–15 min Last verified: 16 December 2018 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Teamspeak Server — Directory Traversal Vulnerability Upstream summary: SecurityFocus reports: TeamSpeak is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may […]
🟢 Low ⏱ 5–15 min Last verified: 16 December 2018 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenX — SQL injection vulnerability Related CVEs: CVE-2013-7149 Upstream summary: Revive reports: An SQL-injection vulnerability was recently discovered and reported to the Revive Adserver team by Florian Sander. The vulnerability […]
🟢 Low ⏱ 5–15 min Last verified: 15 December 2018 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: james — multiple vulnerabilities Related CVEs: CVE-2015-7611 Upstream summary: The Apache James Project reports: This release has many enhancements and bug fixes over the previous release. See the Release Notes […]
🟢 Low ⏱ 5–15 min Last verified: 15 December 2018 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mkbold-mkitalic — format string vulnerability Upstream summary: The version 0.06_1 and prior have a format string vulnerability which can be triggered by using a carefully-crafted BDF font file. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 15 December 2018 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ingo — local arbitrary shell command execution Related CVEs: CVE-2006-5449 Upstream summary: The Horde team reports a vulnerability within Ingo, the filter management suite. The vulnerability is caused due to […]
