🟢 Low ⏱ 5–15 min Last verified: 15 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: google-earth — heap overflow in the KML engine Upstream summary: JAAScois reports: While processing KML/KMZ data Google Earth fails to verify its size prior to copying it into a fixed-sized […]
🟢 Low ⏱ 5–15 min Last verified: 15 February 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py39-celery — command injection vulnerability Related CVEs: CVE-2021-23727 Upstream summary: Snyk reports: This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends […]
🟢 Low ⏱ 5–15 min Last verified: 15 February 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rainloop — cross-site-scripting (XSS) vulnerability Related CVEs: CVE-2022-29360 Upstream summary: Simon Scannell reports: The code vulnerability can be easily exploited by an attacker by sending a malicious email to a […]
🟢 Low ⏱ 5–15 min Last verified: 14 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Ansible — Ansible user credentials disclosure in ansible-connection module Related CVEs: CVE-2021-3583 CVE-2021-3620 Upstream summary: Red Hat reports: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information […]
🟠 High ⏱ 15–60 min Last verified: 14 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: salt — multiple vulnerabilities in salt-master process Related CVEs: CVE-2016-1866 CVE-2016-3176 CVE-2017-12791 CVE-2017-14695 CVE-2017-14696 CVE-2018-15750 CVE-2018-15751 CVE-2019-17361 +2 more Upstream summary: F-Secure reports: CVE-2020-11651 – Authentication bypass vulnerabilities The ClearFuncs […]
🟢 Low ⏱ 5–15 min Last verified: 14 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]
🟢 Low ⏱ 5–15 min Last verified: 13 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mcpp — Heap-based buffer overflow Related CVEs: CVE-2019-14274 Upstream summary: [email protected] reports: MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 13 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libcdaudio — remote buffer overflow and code execution Related CVEs: CVE-2005-0706 CVE-2008-5030 Upstream summary: securityfocus reports: The 'libcdaudio' library is prone to a remote heap code in the context of […]
🟢 Low ⏱ 5–15 min Last verified: 13 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: uudeview buffer overflows Upstream summary: The authors of UUDeview report repairing two buffer overflows in their software. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟠 High ⏱ 15–60 min Last verified: 13 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MariaDB — Multiple vulnerabilities Related CVEs: CVE-2018-25032 CVE-2021-46669 CVE-2022-27376 CVE-2022-27377 CVE-2022-27378 CVE-2022-27379 CVE-2022-27380 CVE-2022-27381 +12 more Upstream summary: The MariaDB project reports: See linked CVE's for details. Table of contents […]
