🟢 Low ⏱ 5–15 min Last verified: 27 August 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-nicotine-plus — Denial of service vulnerability Related CVEs: CVE-2021-45848 Upstream summary: ztauras reports: Denial of service (DoS) vulnerability in Nicotine+ starting with version 3.0.3 and prior to version 3.2.1 allows […]
🟠 High ⏱ 15–60 min Last verified: 27 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libsndfile_project — Integer overflow in dataend calculation Related CVEs: CVE-2009-0186 CVE-2009-1788 CVE-2009-1791 CVE-2011-2696 CVE-2017-12562 CVE-2017-14245 CVE-2017-14246 CVE-2017-14634 +12 more Upstream summary: [email protected] reports: Multiple signed integers overflow in function au_read_header […]
🟢 Low ⏱ 5–15 min Last verified: 27 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: emacs — movemail format string vulnerability Related CVEs: CVE-2005-0100 Upstream summary: Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. They can be exploited when connecting […]
🟡 Medium ⏱ 10–30 min Last verified: 26 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rt and dependent modules — multiple security vulnerabilities Related CVEs: CVE-2012-2770 CVE-2015-7686 CVE-2016-6127 CVE-2017-5361 CVE-2017-5943 CVE-2017-5944 Upstream summary: BestPractical reports: Please reference CVE/URL list for details Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 26 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2014-0480 CVE-2014-0481 CVE-2014-0482 CVE-2014-0483 CVE-2015-0219 CVE-2015-0220 CVE-2015-0221 CVE-2015-0222 +12 more Upstream summary: Tim Graham reports: Malicious redirect and possible XSS attack via user-supplied redirect […]
🟢 Low ⏱ 5–15 min Last verified: 26 August 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-flask-caching — remote code execution or local privilege escalation vulnerabilities Related CVEs: CVE-2021-33026 Upstream summary: subnix reports: The Flask-Caching extension through 2.0.2 for Flask relies on Pickle for serialization, which […]
🟡 Medium ⏱ 10–30 min Last verified: 25 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: icecast — Cross-Site Scripting Vulnerability Related CVEs: CVE-2001-0784 CVE-2001-1083 CVE-2001-1229 CVE-2001-1230 CVE-2002-0177 CVE-2004-0781 Upstream summary: Caused by improper filtering of HTML code in the status display, it is possible for […]
🟢 Low ⏱ 5–15 min Last verified: 25 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: id Tech 3 — remote code execution vulnerability Related CVEs: CVE-2017-6903 Upstream summary: The content auto-download of id Tech 3 can be used to deliver maliciously crafted content, that triggers […]
🟢 Low ⏱ 5–15 min Last verified: 25 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xpm — image decoding vulnerabilities Related CVEs: CVE-2004-0687 CVE-2004-0688 Upstream summary: Chris Evans discovered several vulnerabilities in the libXpm image decoder: A stack-based buffer overflow in xpmParseColors An integer overflow […]
🟢 Low ⏱ 5–15 min Last verified: 25 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libpgf — use-after-free Related CVEs: CVE-2015-6673 Upstream summary: Pengsu Cheng reports: An use-after-free issue in Decoder.cpp was reported to upstream. The problem is due to lack of validation of ColorTableSize. […]
