🟢 Low ⏱ 5–15 min Last verified: 13 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kdeutils4 — Directory traversal vulnerability Related CVEs: CVE-2011-2725 Upstream summary: Tim Brown from Nth Dimention reports: I recently discovered that the Ark archiving tool is vulnerable to directory traversal via […]
🟢 Low ⏱ 5–15 min Last verified: 13 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: habari — Cross-Site Scripting Vulnerability Related CVEs: CVE-2008-4601 Upstream summary: Secunia reports: Input passed via the "habari_username" parameter when logging in is not properly sanitised before being returned to the […]
FreeBSD is a powerful operating system capable functioning in a variety of roles. Part of what makes FreeBSD an ideal choice in many scenarios is its flexibility. A large contribution to this reputation comes from FreeBSD’s supported method for installing software from source, known as the ports system. In this guide, we will discuss some of the benefits of the ports system and demonstrate how to use it to acquire and manage additional software.
🟢 Low ⏱ 5–15 min Last verified: 12 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: qt4-xml — XML Entity Expansion Denial of Service Related CVEs: CVE-2013-4549 Upstream summary: Richard J. Moore reports: QXmlSimpleReader in Qt versions prior to 5.2 supports expansion of internal entities in […]
🟢 Low ⏱ 5–15 min Last verified: 12 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: subversion — Arbitrary code execution vulnerability Upstream summary: subversion team reports: A Subversion client sometimes connects to URLs provided by the repository. This happens in two primary cases: during 'checkout', […]
🟠 High ⏱ 15–60 min Last verified: 12 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: NSS — Memory corruption Related CVEs: CVE-2009-3555 CVE-2010-0173 CVE-2010-0174 CVE-2010-0175 CVE-2010-0176 CVE-2010-0177 CVE-2010-0178 CVE-2010-0179 +12 more Upstream summary: The Mozilla project reports: Memory corruption in NSS via DER-encoded DSA and […]
🟢 Low ⏱ 5–15 min Last verified: 11 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: icu — multiple vulnerabilities Related CVEs: CVE-2017-7867 CVE-2017-7868 Upstream summary: NVD reports: International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer […]
🟢 Low ⏱ 5–15 min Last verified: 11 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Kubectl — Potential directory traversal Related CVEs: CVE-2019-1002101 Upstream summary: Kubernetes.io reports: A security issue was discovered with the Kubernetes kubectl cp command that could enable a directory traversal replacing […]
🟡 Medium ⏱ 10–30 min Last verified: 11 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2007-0905 CVE-2007-0906 CVE-2007-0907 CVE-2007-0908 CVE-2007-0909 CVE-2007-0910 CVE-2007-0988 CVE-2007-1001 Upstream summary: The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.2 and PHP […]
🟡 Medium ⏱ 10–30 min Last verified: 11 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bind — denial of service vulnerability Related CVEs: CVE-2012-5166 CVE-2012-5688 CVE-2013-2266 CVE-2013-3919 CVE-2013-4854 CVE-2014-0591 CVE-2014-8500 CVE-2014-8680 Upstream summary: ISC reports: We have today posted updated versions of 9.9.6 and 9.10.1 […]
