🟢 Low ⏱ 5–15 min Last verified: 11 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-Dancer — possible to abuse session cookie values Upstream summary: Russell Jenkins reports: It was possible to abuse session cookie values so that file-based session stores such as Dancer::Session::YAML or […]
🟢 Low ⏱ 5–15 min Last verified: 11 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_pubcookie — cross site scripting vulnerability Upstream summary: Nathan Dors of the Pubcookie Project reports: Non-persistent XSS vulnerabilities were found in the Pubcookie Apache module (mod_pubcookie) and ISAPI filter. These […]
🟢 Low ⏱ 5–15 min Last verified: 11 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xview — multiple buffer overflows in xv_parse_one Related CVEs: CVE-2005-0076 Upstream summary: A Debian Security Advisory reports: Erik Sjölund discovered that programs linked against xview are vulnerable to a number […]
🟠 High ⏱ 15–60 min Last verified: 11 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libXcursor — integer overflow that can lead to heap buffer overflow Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988 +12 more Upstream summary: The freedesktop.org project reports: It […]
🟠 High ⏱ 15–60 min Last verified: 11 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Related CVEs: CVE-2004-0381 CVE-2004-0836 CVE-2018-25032 CVE-2022-1292 CVE-2022-1941 CVE-2022-2097 CVE-2022-21455 CVE-2022-21509 +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 24 new security patches for […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py39-setuptools — denial of service vulnerability Related CVEs: CVE-2022-40897 Upstream summary: SCH227 reports: Python Packaging Authority (PyPA)'s setuptools is a library designed to facilitate packaging Python projects. Setuptools version 65.5.0 […]
🟡 Medium ⏱ 10–30 min Last verified: 10 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: leafnode — denial of service vulnerability Related CVEs: CVE-2002-1661 CVE-2003-0744 CVE-2004-2068 CVE-2005-1453 CVE-2005-1911 Upstream summary: Matthias Andree reports: A vulnerability was found in the fetchnews program (the NNTP client) that […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gnome-screensaver — Multiple monitor hotplug issues Related CVEs: CVE-2010-0414 CVE-2010-0422 Upstream summary: Ray Strode reports: Under certain circumstances it is possible to circumvent the security of screen locking functionality of […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-httpie — exposure of sensitive information vulnerabilities Related CVEs: CVE-2022-0430 CVE-2022-24737 Upstream summary: Glyph reports: HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help […]
