🟢 Low ⏱ 5–15 min Last verified: 28 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading a […]
🟠 High ⏱ 15–60 min Last verified: 28 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL — multiple vulnerabilities Related CVEs: CVE-2015-3194 CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 +12 more Upstream summary: Oracle reports: Please reference CVE/URL list for details Not all listed CVE's […]
🟢 Low ⏱ 5–15 min Last verified: 27 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Upstream summary: Oracle reports: 36 new security patches for Oracle MySQL. 11 of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over […]
🟢 Low ⏱ 5–15 min Last verified: 27 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: duo — Two-factor authentication bypass Upstream summary: The duo security team reports: An untrusted user may be able to set the http_proxy variable to an invalid address. If this happens, […]
🟠 High ⏱ 15–60 min Last verified: 27 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Related CVEs: CVE-2020-2752 CVE-2020-2875 CVE-2020-2922 CVE-2020-2933 CVE-2020-2934 CVE-2021-22926 CVE-2021-22931 CVE-2021-22946 +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 34 new security patches, plus […]
🟢 Low ⏱ 5–15 min Last verified: 26 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ez-ipupdate — format string vulnerability Related CVEs: CVE-2004-0980 Upstream summary: Data supplied by a remote server is used as the format string instead of as parameters in a syslog() call. […]
🟢 Low ⏱ 5–15 min Last verified: 26 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-tflite — buffer overflow vulnerability Related CVEs: CVE-2021-37689 CVE-2022-41894 Upstream summary: Thibaut Goetghebuer-Planchon reports: The reference kernel of the CONV_3D_TRANSPOSE TensorFlow Lite operator wrongly increments the data_ptr when adding the […]
🟢 Low ⏱ 5–15 min Last verified: 26 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ruby-saml — XML signature wrapping attack Related CVEs: CVE-2016-5697 Upstream summary: RubySec reports: ruby-saml prior to version 1.3.0 is vulnerable to an XML signature wrapping attack in the specific scenario […]
🟢 Low ⏱ 5–15 min Last verified: 26 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xscreensaver – lock bypass Related CVEs: CVE-2015-8025 Upstream summary: RedHat bugzilla reports: In dual screen configurations, unplugging one screen will cause xscreensaver to crash, leaving the screen unlocked. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 26 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: www/py-requests — Information disclosure vulnerability Upstream summary: The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which […]
