🟢 Low ⏱ 5–15 min Last verified: 20 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]
🟢 Low ⏱ 5–15 min Last verified: 20 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tcl/tk — buffer overflow in ReadImage function Related CVEs: CVE-2007-5137 Upstream summary: A Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl/Tk, allows remote attackers to execute arbitrary code […]
🟠 High ⏱ 15–60 min Last verified: 20 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]
🟡 Medium ⏱ 10–30 min Last verified: 19 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-ansible — multiple vulnerabilities Related CVEs: CVE-2020-10744 CVE-2020-25635 CVE-2020-25636 CVE-2021-3532 CVE-2021-3583 CVE-2021-3620 Upstream summary: abeluck reports: A flaw was found in Ansible Base when using the aws_ssm connection plugin as […]
🟢 Low ⏱ 5–15 min Last verified: 19 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: telepathy-gabble — TLS verification bypass Related CVEs: CVE-2013-1431 Upstream summary: Simon McVittie reports: This release fixes a man-in-the-middle attack. If you use an unencrypted connection to a "legacy Jabber" (pre-XMPP) […]
🟠 High ⏱ 15–60 min Last verified: 19 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: drupal9 — multiple vulnerabilities Related CVEs: CVE-2005-1921 CVE-2005-2106 CVE-2005-2498 CVE-2006-2742 CVE-2006-2743 CVE-2006-2833 CVE-2007-0136 CVE-2007-5593 +12 more Upstream summary: Drupal reports: CVE-2022-31175: Cross-site scripting (XSS) caused by the editor instance destroying […]
🟡 Medium ⏱ 10–30 min Last verified: 18 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tiff — buffer overflow vulnerability Related CVEs: CVE-2004-0803 CVE-2004-0804 CVE-2004-0886 CVE-2004-1308 CVE-2005-1544 Upstream summary: A Gentoo Linux Security Advisory reports: Tavis Ormandy of the Gentoo Linux Security Audit Team discovered […]
🟢 Low ⏱ 5–15 min Last verified: 18 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php5 — multiple vulnerabilities Related CVEs: CVE-2015-4643 CVE-2015-4644 Upstream summary: The PHP project reports: DOM and GD: Fixed bug #69719 (Incorrect handling of paths with NULs). FTP: Improved fix for […]
🟡 Medium ⏱ 10–30 min Last verified: 18 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Unbound/NSD — Denial of service vulnerability Related CVEs: CVE-2009-1755 CVE-2012-2978 CVE-2012-2979 CVE-2016-6170 CVE-2016-6171 CVE-2016-6172 CVE-2016-6173 CVE-2019-13207 +1 more Upstream summary: NLNetLabs reports: Unbound and NSD when writing the PID file […]
🟢 Low ⏱ 5–15 min Last verified: 18 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: www/py-requests — Information disclosure vulnerability Upstream summary: The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which […]
