🟢 Low ⏱ 5–15 min Last verified: 21 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: shtool — insecure temporary file creation Upstream summary: A Zataz advisory reports that shtool contains a security flaw which could allow a malicious local user to create or overwrite the […]
🟢 Low ⏱ 5–15 min Last verified: 20 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Slixmpp — Lack of SSL Certificate hostname validation in XMLStream Related CVEs: CVE-2022-45197 Upstream summary: NIST reports: Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker […]
🟢 Low ⏱ 5–15 min Last verified: 20 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — users of single-sign-on are vulnerable to phishing Related CVEs: CVE-2019-5885 Upstream summary: Matrix developers report: [The 1.11.1] release includes a security fix impacting installations using Single Sign-On (i.e. […]
🟠 High ⏱ 15–60 min Last verified: 20 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wget — security flaw in caching credentials passed as a part of the URL Related CVEs: CVE-2004-1487 CVE-2004-1488 CVE-2010-2252 CVE-2014-4877 CVE-2016-4971 CVE-2016-7098 CVE-2017-13089 CVE-2017-13090 +2 more Upstream summary: Gynvael Coldwind […]
🟢 Low ⏱ 5–15 min Last verified: 20 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: comms/hylafax — Malformed fax sender remote code execution in JPEG support Related CVEs: CVE-2004-1182 CVE-2018-17141 Upstream summary: A malicious sender that sets both JPEG and MH,MR,MMR or JBIG in the […]
🟢 Low ⏱ 5–15 min Last verified: 20 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libmusicbrainz — multiple buffer overflow vulnerabilities Related CVEs: CVE-2006-4197 Upstream summary: SecurityFocus reports about libmusicbrainz: The libmusicbrainz library is prone to multiple buffer-overflow vulnerabilities because the application fails to check […]
🟢 Low ⏱ 5–15 min Last verified: 19 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mDNSResponder — corrupted stack crash when parsing bad resolv.conf Upstream summary: Juli Mallett reports: mdnsd will crash on some systems with a corrupt stack and once that's fixed it will […]
🟠 High ⏱ 15–60 min Last verified: 19 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xwayland — Multiple vulnerabilities Related CVEs: CVE-2017-12176 CVE-2017-12177 CVE-2017-12178 CVE-2017-12179 CVE-2017-12180 CVE-2017-12181 CVE-2017-12182 CVE-2017-12183 +12 more Upstream summary: X.Org project reports: Multiple issues have been found in the X server […]
🟢 Low ⏱ 5–15 min Last verified: 18 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-httpx — input validation vulnerability Related CVEs: CVE-2021-41945 Upstream summary: lebr0nli reports: Encode OSS httpx <=1.0.0.beta0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`. […]
🟢 Low ⏱ 5–15 min Last verified: 18 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Carrierwave — Multiple vulnerabilities Related CVEs: CVE-2021-21288 CVE-2021-21305 Upstream summary: Community reports: Fix Code Injection vulnerability in CarrierWave::RMagick Fix SSRF vulnerability in the remote file download feature Table of contents […]
