🟢 Low ⏱ 5–15 min Last verified: 14 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-flask-security — user redirect to arbitrary URL vulnerability Related CVEs: CVE-2021-23385 Upstream summary: Snyk reports: This affects all versions of package Flask-Security. When using the `get_post_logout_redirect` and `get_post_login_redirect` functions, it […]
🟢 Low ⏱ 5–15 min Last verified: 14 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: jdk — jar directory traversal vulnerability Related CVEs: CVE-2004-1029 CVE-2005-1080 Upstream summary: Pluf has discovered a vulnerability in Sun Java JDK/SDK, which potentially can be exploited by malicious people to […]
🟢 Low ⏱ 5–15 min Last verified: 14 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: horde-gollem — XSS vulnerability Upstream summary: The Horde team reports: The major changes compared to Gollem version H3 (1.1.1) are: * Fixed an XSS vulnerability in the file viewer. Table […]
🟢 Low ⏱ 5–15 min Last verified: 14 October 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-pymatgen — regular expression denial of service Related CVEs: CVE-2022-42964 Upstream summary: An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an […]
🟡 Medium ⏱ 10–30 min Last verified: 13 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: jabberd — authentication bypass vulnerability Related CVEs: CVE-2006-1329 CVE-2012-3525 CVE-2017-10807 Upstream summary: SecurityFocus reports: JabberD is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass the […]
🟡 Medium ⏱ 10–30 min Last verified: 13 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php5 — multiple vulnerabilities Related CVEs: CVE-2008-5498 CVE-2009-3546 CVE-2015-4643 CVE-2015-4644 Upstream summary: The PHP project reports: DOM and GD: Fixed bug #69719 (Incorrect handling of paths with NULs). FTP: Improved […]
🟢 Low ⏱ 5–15 min Last verified: 13 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-Net-DNS — multiple Vulnerabilities Related CVEs: CVE-2007-3377 CVE-2007-3409 Upstream summary: A Secunia Advisory reports: An error exists in the handling of DNS queries where IDs are incremented with a fixed […]
🟢 Low ⏱ 5–15 min Last verified: 13 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dcraw — integer overflow condition Related CVEs: CVE-2015-3885 Upstream summary: ocert reports: The dcraw tool, as well as several other projects re-using its code, suffers from an integer overflow condition […]
🟠 High ⏱ 15–60 min Last verified: 13 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libexif — multiple vulnerabilities Related CVEs: CVE-2005-0664 CVE-2012-2812 CVE-2012-2813 CVE-2012-2814 CVE-2012-2836 CVE-2012-2837 CVE-2012-2840 CVE-2012-2841 +2 more Upstream summary: Release notes: Lots of fixes exposed by fuzzers like AFL, ClusterFuzz, OSSFuzz […]
🟠 High ⏱ 15–60 min Last verified: 13 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Pillow — Multiple vulnerabilities Related CVEs: CVE-2016-0740 CVE-2016-0775 CVE-2016-9189 CVE-2016-9190 CVE-2019-16865 CVE-2019-19911 CVE-2020-5310 CVE-2020-5311 +2 more Upstream summary: Pillow developers report: This release addresses several security problems, as well as […]
