🟢 Low ⏱ 5–15 min Last verified: 27 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: grip — CDDB response multiple matches buffer overflow vulnerability Related CVEs: CVE-2005-0706 Upstream summary: Joseph VanAndel reports that grip is vulnerability to a buffer overflow vulnerability when receiving more than […]
🟢 Low ⏱ 5–15 min Last verified: 26 January 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: SOGo — SAML user authentication impersonation Related CVEs: CVE-2021-33054 Upstream summary: sogo.nu reports: SOGo was not validating the signatures of any SAML assertions it received. This means any actor with […]
🟢 Low ⏱ 5–15 min Last verified: 26 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-bleach — regular expression denial-of-service Related CVEs: CVE-2020-6817 Upstream summary: Bleach developers reports: bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to […]
🟠 High ⏱ 15–60 min Last verified: 26 January 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MariaDB — Multiple vulnerabilities Related CVEs: CVE-2020-15180 CVE-2020-2574 CVE-2021-46659 CVE-2021-46661 CVE-2021-46663 CVE-2021-46664 CVE-2021-46665 CVE-2021-46668 +12 more Upstream summary: The MariaDB project reports: MariaDB fixed 23 vulnerabilities across all supported versions […]
🟡 Medium ⏱ 10–30 min Last verified: 25 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: X11 server — pixmap allocation vulnerability Related CVEs: CVE-2004-0083 CVE-2004-0084 CVE-2004-0106 CVE-2005-2495 Upstream summary: Allocating large pixmaps by a client can trigger an integer overflow in the X server, potentially […]
🟢 Low ⏱ 5–15 min Last verified: 25 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: amarok — multiple vulnerabilities Related CVEs: CVE-2009-0135 CVE-2009-0136 Upstream summary: Secunia reports: Tobias Klein has reported some vulnerabilities in Amarok, which potentially can be exploited by malicious people to compromise […]
🟢 Low ⏱ 5–15 min Last verified: 25 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ircd-ratbox and charybdis — remote DoS vulnerability Upstream summary: atheme.org reports: All versions of Charybdis are vulnerable to a remotely-triggered crash bug caused by code originating from ircd-ratbox 2.0. (Incidentally, […]
🟢 Low ⏱ 5–15 min Last verified: 25 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sircd — remote reverse DNS buffer overflow Upstream summary: Secunia reports: A vulnerability in sircd can be exploited by a malicious person to compromise a vulnerable system. The vulnerability is […]
🟡 Medium ⏱ 10–30 min Last verified: 25 January 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-ansible — multiple vulnerabilities Related CVEs: CVE-2020-25635 CVE-2020-25636 CVE-2021-3532 CVE-2021-3620 Upstream summary: abeluck reports: A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector […]
🟢 Low ⏱ 5–15 min Last verified: 25 January 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mitmproxy — Insufficient Protection against HTTP Request Smuggling Related CVEs: CVE-2022-24766 Upstream summary: Zeyu Zhang reports: In mitmproxy 7.0.4 and below, a malicious client or server is able to perform […]
