🟢 Low ⏱ 5–15 min Last verified: 1 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ghostscript — zseticcspace() function buffer overflow vulnerability Related CVEs: CVE-2008-0411 Upstream summary: Chris Evans from the Google Security Team reports: Severity: parsing of evil PostScript file will result in arbitrary […]
🟢 Low ⏱ 5–15 min Last verified: 30 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py39-Elixir — weak use of cryptography Related CVEs: CVE-2012-2146 Upstream summary: Red Hat Security Response Team reports: Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector […]
🟢 Low ⏱ 5–15 min Last verified: 30 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-bleach — regular expression denial-of-service Related CVEs: CVE-2020-6817 Upstream summary: Bleach developers reports: bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to […]
🟢 Low ⏱ 5–15 min Last verified: 30 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: aiohttp — open redirect vulnerability Related CVEs: CVE-2021-21330 Upstream summary: Sviatoslav Sydorenko reports: Open redirect vulnerability — a maliciously crafted link to an aiohttp-based web-server could redirect the browser to […]
🟢 Low ⏱ 5–15 min Last verified: 30 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vlc — Use after free vulnerability Related CVEs: CVE-2016-5108 CVE-2018-11529 Upstream summary: Mitre reports: VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker […]
🟠 High ⏱ 15–60 min Last verified: 30 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — Possible man-in-the-middle attacks Related CVEs: CVE-2016-5423 CVE-2016-5424 CVE-2017-15098 CVE-2017-15099 CVE-2017-7546 CVE-2017-7547 CVE-2017-7548 CVE-2018-1052 +11 more Upstream summary: The PostgreSQL Project reports: CVE-2021-23214: A man-in-the-middle with the ability to […]
🟡 Medium ⏱ 10–30 min Last verified: 30 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Loofah — XSS vulnerability Related CVEs: CVE-2018-16468 CVE-2018-8048 CVE-2019-15587 Upstream summary: GitHub issue: This issue has been created for public disclosure of an XSS vulnerability that was responsibly reported by […]
🟢 Low ⏱ 5–15 min Last verified: 30 November 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PG Partition Manager — arbitrary code execution Related CVEs: CVE-2021-33204 Upstream summary: PG Partition Manager reports: In the pg_partman (aka PG Partition Manager) extension before 4.5.1 for PostgreSQL, arbitrary code […]
🟢 Low ⏱ 5–15 min Last verified: 29 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: base — PHP SQL injection vulnerability Upstream summary: A Secunia Advisory reports: Remco Verhoef has discovered a vulnerability in Basic Analysis and Security Engine (BASE), which can be exploited by […]
🟢 Low ⏱ 5–15 min Last verified: 28 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php-filter — Denial of Service Related CVEs: CVE-2010-3710 Upstream summary: The following DoS condition in filter extension was fixed in PHP 5.3.4 and PHP 5.2.15: Stack consumption vulnerability in the […]
