🟠 High ⏱ 15–60 min Last verified: 20 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: clamav — multiple vulnerabilities Related CVEs: CVE-2005-0133 CVE-2005-1922 CVE-2005-1923 CVE-2005-2919 CVE-2005-2920 CVE-2006-0162 CVE-2006-1614 CVE-2006-1615 +12 more Upstream summary: ClamAV project reports: ClamAV 0.98.7 is here! This release contains new scanning […]
🟠 High ⏱ 15–60 min Last verified: 20 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wireshark — multiple security issues Related CVEs: CVE-2010-3445 CVE-2012-0041 CVE-2012-0066 CVE-2012-0067 CVE-2012-0068 CVE-2012-3548 CVE-2012-4048 CVE-2012-4049 +12 more Upstream summary: wireshark developers reports: wnpa-sec-2018-05. IEEE 802.11 dissector crash. (CVE-2018-7335) wnpa-sec-2018-06. Large […]
🟡 Medium ⏱ 10–30 min Last verified: 19 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: cassandra3 — multiple vulnerabilities Related CVEs: CVE-2015-0225 CVE-2015-0886 CVE-2019-2684 CVE-2020-7238 CVE-2021-44521 CVE-2022-24823 CVE-2022-25857 CVE-2022-42003 +1 more Upstream summary: Cassandra tema reports: This release contains 6 security fixes including CVE-2022-24823: When […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vim — multiple vulnerabilities in the netrw module Related CVEs: CVE-2008-3076 Upstream summary: Jan Minar reports: Applying the “D'' to a file with a crafted file name, or inside a […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: findutils — GNU locate heap buffer overrun Related CVEs: CVE-2007-2452 Upstream summary: James Youngman reports: When GNU locate reads filenames from an old-format locate database, they are read into a […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-treq — sensitive information leak vulnerability Related CVEs: CVE-2022-23607 Upstream summary: Treq's request methods (`treq.get`, `treq.post`, `HTTPClient.request`, `HTTPClient.get`, etc.) accept cookies as a dictionary. Such cookies are not bound to […]
🟡 Medium ⏱ 10–30 min Last verified: 18 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libidn2 — roundtrip check vulnerability Related CVEs: CVE-2015-2059 CVE-2015-8948 CVE-2016-6261 CVE-2016-6262 CVE-2016-6263 CVE-2019-12290 Upstream summary: CVE list: GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 […]
🟡 Medium ⏱ 10–30 min Last verified: 18 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openoffice.org — Multiple vulnerabilities Related CVEs: CVE-2006-4339 CVE-2008-2237 CVE-2008-2238 CVE-2009-0217 CVE-2009-2493 CVE-2009-2949 CVE-2009-2950 CVE-2009-3301 +1 more Upstream summary: OpenOffice.org Security Team reports: Fixed in OpenOffice.org 3.3 CVE-2010-2935 / CVE-2010-2936 : […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mysql — SSL Downgrade Related CVEs: CVE-2015-3152 Upstream summary: Duo Security reports: Researchers have identified a serious vulnerability in some versions of Oracle’s MySQL database product that allows an attacker […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ksh93 — certain environment variables interpreted as arithmetic expressions on startup, leading to code injection Upstream summary: Upstream ksh93 maintainer Siteshwar Vashisht reports: A flaw was found in the way […]
