🟢 Low ⏱ 5–15 min Last verified: 3 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ziproxy — security vulnerability in PNG decoder Related CVEs: CVE-2009-0804 CVE-2010-1513 Upstream summary: Daniel Mealha Cabrita reports: Fixed security vulnerability (heap-related) in PNG decoder. (new bug from 3.1.0) Table of […]
🟢 Low ⏱ 5–15 min Last verified: 3 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Pubcookie Login Server — XSS vulnerability Upstream summary: Nathan Dors, Pubcookie Project reports: A new non-persistent XSS vulnerability was found in the Pubcookie login server's compiled binary "index.cgi" CGI program. […]
🟠 High ⏱ 15–60 min Last verified: 3 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: irssi — Use after free when sending SASL login to the server Related CVEs: CVE-2010-1155 CVE-2010-1156 CVE-2016-7044 CVE-2016-7045 CVE-2017-10965 CVE-2017-10966 CVE-2017-15227 CVE-2017-15228 +12 more Upstream summary: Irssi reports: Use after […]
🟠 High ⏱ 15–60 min Last verified: 3 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: opera — moderately severe issue Related CVEs: CVE-2004-0411 CVE-2004-0717 CVE-2004-0718 CVE-2004-0721 CVE-2004-1156 CVE-2004-1157 CVE-2004-1158 CVE-2004-1160 +12 more Upstream summary: Opera reports: Fixed a moderately severe issue, as reported by Attila […]
🟢 Low ⏱ 5–15 min Last verified: 2 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: evince and atril — command injection vulnerability in CBT handler Related CVEs: CVE-2006-5864 CVE-2017-1000083 Upstream summary: GNOME reports: The comic book backend in evince 3.24.0 (and earlier) is vulnerable to […]
🟢 Low ⏱ 5–15 min Last verified: 2 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: torrentflux — User-Agent XSS Vulnerability Related CVEs: CVE-2006-5227 Upstream summary: Steven Roddis reports that User-Agent string is not properly escaped when handled by torrentflux. This allows for arbitrary code insertion. […]
🟡 Medium ⏱ 10–30 min Last verified: 2 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: turnserver — multiple vulnerabilities Related CVEs: CVE-2018-4056 CVE-2018-4058 CVE-2018-4059 Upstream summary: Mihály Mészáros reports: We made 4.5.1.0 release public today that fixes many vulnerabilities. It fix the following vulnerabilities: CVE-2018-4056 […]
🟠 High ⏱ 15–60 min Last verified: 2 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MariaDB — Nullpointer dereference Related CVEs: CVE-2016-9843 CVE-2018-0739 CVE-2018-25032 CVE-2018-2767 CVE-2018-3054 CVE-2018-3056 CVE-2018-3058 CVE-2018-3060 +12 more Upstream summary: The MariaDB project reports: MariaDB Server is vulnerable to Denial of Service. […]
🟢 Low ⏱ 5–15 min Last verified: 1 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: osip — Improper Restriction of Operations within the Bounds of a Memory Buffer Related CVEs: CVE-2017-7853 Upstream summary: osip developers reports: In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a […]
🟢 Low ⏱ 5–15 min Last verified: 1 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pitivi — code execution Related CVEs: CVE-2015-0855 Upstream summary: Luke Farone reports: Double-clicking a file in the user's media library with a specially-crafted path or filename allows for arbitrary code […]
