🟢 Low ⏱ 5–15 min Last verified: 19 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: postgresql — privilege escalation vulnerability Related CVEs: CVE-2005-0227 Upstream summary: John Heasman and others disovered that non-privileged users could use the LOAD extension to load arbitrary libraries into the postgres […]
🟢 Low ⏱ 5–15 min Last verified: 18 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-doorkeeper — token revocation vulnerability Related CVEs: CVE-2018-1000211 Upstream summary: NVD reports: Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation API's authorized method that […]
🟢 Low ⏱ 5–15 min Last verified: 18 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gtetrinet — remote code execution Related CVEs: CVE-2006-3125 Upstream summary: The Debian Security Team reports: Michael Gehring discovered several potential out-of-bounds index accesses in gtetrinet, a multiplayer Tetris-like game, which […]
🟢 Low ⏱ 5–15 min Last verified: 18 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: atutor — multiple vulnerabilities Upstream summary: ATutor reports: Security Fixes: Added a new layer of security over all php superglobals, fixed several XSS, CSRF, and SQL injection vulnerabilities. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 17 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: emacs — movemail format string vulnerability Related CVEs: CVE-2005-0100 Upstream summary: Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. They can be exploited when connecting […]
🟠 High ⏱ 15–60 min Last verified: 17 December 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: exiv2 — Denial-of-service Related CVEs: CVE-2021-29457 CVE-2021-29458 CVE-2021-29463 CVE-2021-29464 CVE-2021-29470 CVE-2021-29473 CVE-2021-29623 CVE-2021-32617 +5 more Upstream summary: Kevin Backhouse reports: A denial-of-service was found in Exiv2 version v0.28.5: a quadratic […]
🟡 Medium ⏱ 10–30 min Last verified: 17 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: TiMidity++ — Multiple vulnerabilities Related CVEs: CVE-2017-11546 CVE-2017-11547 CVE-2017-11549 Upstream summary: qflb.wu of DBAPPSecurity reports: Ihe insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 can cause a denial of service(divide-by-zero error […]
🟠 High ⏱ 15–60 min Last verified: 17 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — SQL injection in pg_upgrade and pg_dump Related CVEs: CVE-2014-8161 CVE-2015-0241 CVE-2015-0242 CVE-2015-0243 CVE-2015-0244 CVE-2015-3165 CVE-2015-3166 CVE-2015-3167 +12 more Upstream summary: The PostgreSQL project reports: CVE-2018-16850: SQL injection in […]
🟠 High ⏱ 15–60 min Last verified: 16 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Dokuwiki — cross site scripting vulnerability Related CVEs: CVE-2006-4674 CVE-2006-4675 CVE-2006-4679 CVE-2006-5098 CVE-2006-5099 CVE-2007-3930 CVE-2009-1960 CVE-2010-0287 +5 more Upstream summary: Secunia Research reports: Secunia Research has discovered a vulnerability in […]
🟡 Medium ⏱ 10–30 min Last verified: 16 December 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: RabbitMQ — Denial of Service via improper input validation Related CVEs: CVE-2015-0862 CVE-2016-9877 CVE-2021-22116 Upstream summary: Jonathon Knudsen of Synopsys Cybersecurity Research Center reports: All versions prior to 3.8.16 are […]
