🟠 High ⏱ 15–60 min Last verified: 25 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: postnuke — admin section SQL injection Related CVEs: CVE-2005-0615 CVE-2005-0616 CVE-2005-0617 CVE-2005-1621 CVE-2005-1695 CVE-2005-1696 CVE-2005-1698 CVE-2005-1777 +3 more Upstream summary: ISS X-Force reports: PostNuke is vulnerable to SQL injection. A […]
🟠 High ⏱ 15–60 min Last verified: 25 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: joomla3 — vulnerabilitiesw Related CVEs: CVE-2006-6832 CVE-2006-6833 CVE-2006-6834 CVE-2007-4188 CVE-2007-4189 CVE-2007-4190 CVE-2007-5577 CVE-2008-3681 +12 more Upstream summary: JSST reports: Inadequate escaping in mod_banners leads to a stored XSS vulnerability. Inadequate […]
🟢 Low ⏱ 5–15 min Last verified: 24 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fail2ban — possible RCE vulnerability in mailing action using mailutils Related CVEs: CVE-2021-32749 Upstream summary: Jakub Żoczek reports: Command mail from mailutils package used in mail actions like mail-whois can […]
🟢 Low ⏱ 5–15 min Last verified: 24 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-cryptography — vulnerable HKDF key generation Related CVEs: CVE-2016-9243 Upstream summary: Alex Gaynor reports: Fixed a bug where “HKDF“ would return an empty byte-string if used with a “length“ less […]
🟢 Low ⏱ 5–15 min Last verified: 24 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: www/py-requests — Information disclosure vulnerability Upstream summary: The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which […]
🟢 Low ⏱ 5–15 min Last verified: 24 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]
🟠 High ⏱ 15–60 min Last verified: 24 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xorg — protocol handling issues in X Window System client libraries Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988 +12 more Upstream summary: freedesktop.org reports: Ilja van Sprundel, […]
🟢 Low ⏱ 5–15 min Last verified: 23 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php5 — multiple vulnerabilities Related CVEs: CVE-2015-4643 CVE-2015-4644 Upstream summary: The PHP project reports: DOM and GD: Fixed bug #69719 (Incorrect handling of paths with NULs). FTP: Improved fix for […]
🟠 High ⏱ 15–60 min Last verified: 23 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lighttpd – use-after-free vulnerabilities Related CVEs: CVE-2005-0453 CVE-2007-1869 CVE-2007-1870 CVE-2007-3947 CVE-2007-3948 CVE-2007-3949 CVE-2007-3950 CVE-2007-4727 +11 more Upstream summary: Lighttpd Project reports: Security fixes for Lighttpd: security: process headers after combining […]
🟡 Medium ⏱ 10–30 min Last verified: 22 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: websvn — reflected cross-site scripting Related CVEs: CVE-2008-5918 CVE-2008-5919 CVE-2009-0240 CVE-2013-6892 CVE-2016-2511 Upstream summary: Sebastien Delafond reports: Jakub Palaczynski discovered that websvn, a web viewer for Subversion repositories, does not […]
