🟢 Low ⏱ 5–15 min Last verified: 1 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nap allows arbitrary file access Upstream summary: According to the author: Fixed security loophole which allowed remote clients to access arbitrary files on our system. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 1 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2014-0472 CVE-2014-0473 CVE-2014-0474 CVE-2014-0480 CVE-2014-0481 CVE-2014-0482 CVE-2014-0483 CVE-2015-0219 +12 more Upstream summary: Tim Graham reports: Malicious redirect and possible XSS attack via user-supplied redirect […]
🟢 Low ⏱ 5–15 min Last verified: 30 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tomcat — multiple vulnerabilities Related CVEs: CVE-2014-0230 CVE-2014-7810 Upstream summary: Apache Software Foundation reports: Low: Denial of Service CVE-2014-0230 When a response for a request with a request body is […]
🟢 Low ⏱ 5–15 min Last verified: 30 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ChaSen — buffer overflow Related CVEs: CVE-2011-4000 Upstream summary: JVN iPedia reports: ChaSen provided by Nara Institute of Science and Technology is a software for morphologically analyzing Japanese. ChaSen contains […]
🟢 Low ⏱ 5–15 min Last verified: 30 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: shoutcast — cross-site scripting, information exposure Related CVEs: CVE-2006-3007 Upstream summary: Goober's advisory reports reports that shoutcast is vulnerable to an arbitrary file reading vulnerability: Impact of the vulnerability depends […]
🟢 Low ⏱ 5–15 min Last verified: 30 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: emacs — movemail format string vulnerability Related CVEs: CVE-2005-0100 Upstream summary: Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. They can be exploited when connecting […]
🟢 Low ⏱ 5–15 min Last verified: 29 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-rsa — Bleichenbacher'06 signature forgery vulnerability Related CVEs: CVE-2016-1494 Upstream summary: Filippo Valsorda reports: python-rsa is vulnerable to a straightforward variant of the Bleichenbacher'06 attack against RSA signature verification with […]
🟢 Low ⏱ 5–15 min Last verified: 29 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dbus-glib — privledge escalation Related CVEs: CVE-2013-0292 Upstream summary: Sebastian Krahmer reports: A privilege escalation flaw was found in the way dbus-glib, the D-Bus add-on library to integrate the standard […]
🟢 Low ⏱ 5–15 min Last verified: 29 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: subversion — WebDAV fails to protect metadata Related CVEs: CVE-2004-0749 Upstream summary: In some situations, subversion metadata may be unexpectedly disclosed via WebDAV. A subversion advisory states: mod_authz_svn, the Apache […]
🟢 Low ⏱ 5–15 min Last verified: 28 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: greed — insecure GRX file processing Related CVEs: CVE-2004-1273 CVE-2004-1274 Upstream summary: A buffer overflow vulnerability has been detected in the greed URL handling code. This bug can especially be […]
