🟢 Low ⏱ 5–15 min Last verified: 12 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PyYAML — arbitrary code execution Related CVEs: CVE-2020-14343 Upstream summary: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution […]
🟠 High ⏱ 15–60 min Last verified: 12 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ffmpeg — multiple vulnerabilities Related CVEs: CVE-2014-9316 CVE-2014-9317 CVE-2014-9603 CVE-2014-9604 CVE-2015-1872 CVE-2015-3395 CVE-2015-3417 CVE-2015-6761 +12 more Upstream summary: NVD reports: An issue was discovered in the FFmpeg package, where vp3_decode_frame […]
🟢 Low ⏱ 5–15 min Last verified: 11 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: cfengine — arbitrary file overwriting vulnerability Related CVEs: CVE-2005-2960 Upstream summary: A Debian Security Advisory reports: Javier Fernández-Sanguino Peña discovered several insecure temporary file uses in cfengine, a tool for […]
🟡 Medium ⏱ 10–30 min Last verified: 11 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: enscript — arbitrary code execution vulnerability Related CVEs: CVE-2004-1184 CVE-2004-1185 CVE-2004-1186 CVE-2008-3863 CVE-2008-4306 Upstream summary: Ulf Harnhammar of Secunia Research reports: Stack-based buffer overflow in the read_special_escape function in src/psgen.c […]
🟢 Low ⏱ 5–15 min Last verified: 11 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: verlihub — insecure temporary file usage and arbitrary command execution Related CVEs: CVE-2008-5705 CVE-2008-5706 Upstream summary: securityfocus reports: An attacker with local access could potentially exploit this issue to perform […]
🟠 High ⏱ 15–60 min Last verified: 11 July 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Rails — multiple vulnerabilities Related CVEs: CVE-2013-0155 CVE-2013-0156 CVE-2013-1854 CVE-2013-1856 CVE-2013-1857 CVE-2013-4491 CVE-2013-6414 CVE-2013-6415 +11 more Upstream summary: Ruby on Rails blog: Rails version 5.2.4.5, 6.0.3.5 and 6.1.2.1 have been […]
🟢 Low ⏱ 5–15 min Last verified: 11 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: silc-toolkit — Format string vulnerabilities Related CVEs: CVE-2009-3051 Upstream summary: SILC Changlog reports: An unspecified format string vulnerability exists in silc-toolkit. Table of contents Symptom & Impact Environment & Reproduction […]
🟢 Low ⏱ 5–15 min Last verified: 11 July 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-impacket — multiple path traversal vulnerabilities Related CVEs: CVE-2021-31800 Upstream summary: asolino reports: Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a […]
🟢 Low ⏱ 5–15 min Last verified: 10 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tauthon — Regular Expression Denial of Service Related CVEs: CVE-2020-8492 Upstream summary: The :class:`~urllib.request.AbstractBasicAuthHandler` class of the :mod:`urllib.request` module uses an inefficient regular expression which can be exploited by an […]
🟢 Low ⏱ 5–15 min Last verified: 10 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libutp — remote denial of service or arbitrary code execution Related CVEs: CVE-2012-6129 Upstream summary: NVD reports: Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 […]
