🟡 Medium ⏱ 10–30 min Last verified: 12 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: horde — XSS vulnerabilities Related CVEs: CVE-2005-0961 CVE-2005-3759 CVE-2006-1491 CVE-2006-2195 CVE-2006-3548 CVE-2015-8807 CVE-2016-2228 Upstream summary: The Horde Team reports: Fixed XSS vulnerabilities in menu bar and form renderer. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 12 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Cyrus IMSPd multiple vulnerabilities Upstream summary: The Cyrus team reported multiple vulnerabilities in older versions of Cyrus IMSPd: These releases correct a recently discovered buffer overflow vulnerability, as well as […]
🟡 Medium ⏱ 10–30 min Last verified: 12 May 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: consul — rpc: authorize raft requests Related CVEs: CVE-2017-15133 CVE-2020-25864 CVE-2020-28053 CVE-2021-28156 CVE-2021-37219 Upstream summary: Hashicorp reports: HashiCorp Consul Raft RPC layer allows non-server agents with a valid certificate signed […]
🟠 High ⏱ 15–60 min Last verified: 12 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Related CVEs: CVE-2016-9843 CVE-2018-0739 CVE-2018-2767 CVE-2018-3054 CVE-2018-3056 CVE-2018-3058 CVE-2018-3060 CVE-2018-3061 +12 more Upstream summary: Oracle reports: See linked CVE's for details. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 11 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mini_httpd — disclose arbitrary files is some circumstances Related CVEs: CVE-2015-1548 Upstream summary: Jef Poskanzer reports: Prior versions allowed remote users to read arbitrary files in some circumstances. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 11 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Subversion — Multiple vulnerabilities in server code Related CVEs: CVE-2021-28544 CVE-2022-24070 Upstream summary: Subversion project reports: Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization […]
🟡 Medium ⏱ 10–30 min Last verified: 11 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: hadoop2 — unauthorized disclosure of data vulnerability Related CVEs: CVE-2014-0230 CVE-2014-7810 CVE-2015-1776 Upstream summary: Arun Suresh reports: RPC traffic from clients, potentially including authentication credentials, may be intercepted by a […]
🟢 Low ⏱ 5–15 min Last verified: 10 May 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: prometheus2 — basic authentication bypass Related CVEs: CVE-2021-29622 CVE-2022-46146 Upstream summary: Prometheus team reports: Prometheus and its exporters can be secured by a web.yml file that specifies usernames and hashed […]
🟢 Low ⏱ 5–15 min Last verified: 10 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: radicale — multiple vulnerabilities Related CVEs: CVE-2015-8747 CVE-2015-8748 Upstream summary: Radicale reports: The multifilesystem backend allows access to arbitrary files on all platforms. Prevent regex injection in rights management. Table […]
🟢 Low ⏱ 5–15 min Last verified: 10 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: irssi — multiple vulnerabilities Related CVEs: CVE-2010-1155 CVE-2010-1156 Upstream summary: Two vulnerabilities have found in irssi. The first issue could allow man-in-the-middle attacks due to a missing comparison of SSL […]
