🟢 Low ⏱ 5–15 min Last verified: 29 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: The Update Framwork — path traversal vulnerability Related CVEs: CVE-2021-41131 Upstream summary: NVD reports: python-tuf is a Python reference implementation of The Update Framework (TUF). In both clients (`tuf/client` and […]
🟢 Low ⏱ 5–15 min Last verified: 29 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: horde — Phishing and Cross-Site Scripting Vulnerabilities Upstream summary: Secunia reports: Some vulnerabilities have been reported in Horde, which can be exploited by malicious people to conduct phishing and cross-site […]
🟢 Low ⏱ 5–15 min Last verified: 29 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openssl — potential SSL 2.0 rollback Related CVEs: CVE-2005-2969 Upstream summary: Vulnerability: Such applications are affected if they use the option SSL_OP_MSIE_SSLV2_RSA_PADDING. This option is implied by use of SSL_OP_ALL, […]
🟡 Medium ⏱ 10–30 min Last verified: 28 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL Client — Multiple vulerabilities Related CVEs: CVE-2020-2752 CVE-2020-2875 CVE-2020-2922 CVE-2020-2933 CVE-2020-2934 Upstream summary: Oracle reports: This Critical Patch Update contains 45 new security patches for Oracle MySQL. 9 of […]
🟢 Low ⏱ 5–15 min Last verified: 28 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: liveMedia — potential remote code execution Related CVEs: CVE-2007-6036 CVE-2018-4013 Upstream summary: Talos reports: An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server […]
🟢 Low ⏱ 5–15 min Last verified: 28 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: phpsysinfo — url Cross-Site Scripting Related CVEs: CVE-2005-0869 CVE-2005-0870 Upstream summary: Doz reports: A Input passed in the URL to index.php is not properly sanitised before being returned to the […]
🟠 High ⏱ 15–60 min Last verified: 28 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MariaDB — Multiple vulnerabilities Related CVEs: CVE-2020-15180 CVE-2021-46659 CVE-2021-46661 CVE-2021-46663 CVE-2021-46664 CVE-2021-46665 CVE-2021-46668 CVE-2021-46669 +12 more Upstream summary: The MariaDB project reports: MariaDB fixed 23 vulnerabilities across all supported versions […]
🟢 Low ⏱ 5–15 min Last verified: 27 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: AccountsService — Insufficient path check in user_change_icon_file_authorized_cb() Related CVEs: CVE-2018-14036 Upstream summary: NVD reports: Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check […]
🟢 Low ⏱ 5–15 min Last verified: 27 October 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Ansible — Ansible user credentials disclosure in ansible-connection module Related CVEs: CVE-2021-3583 CVE-2021-3620 Upstream summary: Red Hat reports: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information […]
🟢 Low ⏱ 5–15 min Last verified: 27 October 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Rundeck3 — Log4J RCE vulnerability Related CVEs: CVE-2021-44832 Upstream summary: The Rundeck project reports: This release updates both Community and Enterprise with the latest Log4J to address CVE-2021-44832 by updating […]
