🟢 Low ⏱ 5–15 min Last verified: 9 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: krb5 — heap buffer overflow vulnerability in libkadm5srv Related CVEs: CVE-2004-1189 Upstream summary: A MIT krb5 Security Advisory reports: The MIT Kerberos 5 administration library (libkadm5srv) contains a heap buffer […]
🟢 Low ⏱ 5–15 min Last verified: 9 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libXdmcp — insufficient entropy generating session keys Related CVEs: CVE-2017-2625 Upstream summary: The freedesktop and x.org project reports: It was discovered that libXdmcp before 1.1.3 used weak entropy to generate […]
🟡 Medium ⏱ 10–30 min Last verified: 9 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8874 CVE-2016-5766 CVE-2016-5767 CVE-2016-5768 CVE-2016-5769 CVE-2016-5770 CVE-2016-5771 CVE-2016-5772 +1 more Upstream summary: The PHP Group reports: Please reference CVE/URL list for details Table of […]
🟢 Low ⏱ 5–15 min Last verified: 9 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nokogiri — Security vulnerability Related CVEs: CVE-2019-5477 CVE-2020-26247 Upstream summary: Nokogiri reports: In Nokogiri versions <= 1.11.0.rc3, XML Schemas parsed by Nokogiri::XML::Schema were trusted by default, allowing external resources to […]
🟢 Low ⏱ 5–15 min Last verified: 9 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: emacs — movemail format string vulnerability Related CVEs: CVE-2005-0100 Upstream summary: Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. They can be exploited when connecting […]
🟢 Low ⏱ 5–15 min Last verified: 9 October 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-httpie — exposure of sensitive information vulnerabilities Related CVEs: CVE-2022-0430 CVE-2022-24737 Upstream summary: Glyph reports: HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help […]
🟠 High ⏱ 15–60 min Last verified: 9 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CVE-2005-0399 CVE-2005-0402 CVE-2005-0752 CVE-2005-0989 CVE-2005-1476 CVE-2005-1477 CVE-2005-1937 CVE-2005-2260 +12 more Upstream summary: Mozilla Foundation reports: CVE-2019-11751: Malicious code execution through command line parameters CVE-2019-11746: […]
🟡 Medium ⏱ 10–30 min Last verified: 8 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: palemoon — multiple vulnerabilities Related CVEs: CVE-2017-7832 CVE-2017-7835 CVE-2017-7840 CVE-2018-5102 CVE-2018-5122 Upstream summary: Pale Moon reports: CVE-2018-5102: Use-after-free in HTML media elements CVE-2018-5122: Potential integer overflow in DoCrypt Table of […]
🟠 High ⏱ 15–60 min Last verified: 8 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CVE-2006-0749 CVE-2006-1045 CVE-2006-1529 CVE-2006-1530 CVE-2006-1531 CVE-2006-1723 CVE-2006-1724 CVE-2006-1725 +12 more Upstream summary: Mozilla Foundation reports: CVE-2019-11751: Malicious code execution through command line parameters CVE-2019-11746: […]
🟢 Low ⏱ 5–15 min Last verified: 7 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libmysoft — Heap-based buffer overflow vulnerability Related CVEs: CVE-2021-3756 Upstream summary: Zhengjie Du reports: There are some heap-buffer-overflows in mysofa2json of libmysofa. They are in function loudness, mysofa_check and readOHDRHeaderMessageDataLayout. […]
