🟢 Low ⏱ 5–15 min Last verified: 10 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: emacs — movemail format string vulnerability Related CVEs: CVE-2005-0100 Upstream summary: Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. They can be exploited when connecting […]
🟢 Low ⏱ 5–15 min Last verified: 9 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tdiary — injection vulnerability Related CVEs: CVE-2006-6174 Upstream summary: An undisclosed eRuby injection vulnerability had been discovered in tDiary. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟡 Medium ⏱ 10–30 min Last verified: 9 July 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-ansible — multiple vulnerabilities Related CVEs: CVE-2020-10744 CVE-2020-25635 CVE-2020-25636 CVE-2021-3532 CVE-2021-3583 CVE-2021-3620 Upstream summary: abeluck reports: A flaw was found in Ansible Base when using the aws_ssm connection plugin as […]
🟢 Low ⏱ 5–15 min Last verified: 9 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygems — request hijacking vulnerability Related CVEs: CVE-2015-3900 Upstream summary: Jonathan Claudius reports: RubyGems provides the ability of a domain to direct clients to a separate host that is used […]
🟢 Low ⏱ 5–15 min Last verified: 9 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kio: Information Leak when accessing https when using a malicious PAC file Upstream summary: Albert Astals Cid reports: Using a malicious PAC file, and then using exfiltration methods in the […]
🟢 Low ⏱ 5–15 min Last verified: 9 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: drupal6-cck — cross-site scripting Related CVEs: CVE-2009-1069 Upstream summary: Drupal CCK plugin developer reports: The Node reference and User reference sub-modules, which are part of the Content Construction Kit (CCK) […]
🟢 Low ⏱ 5–15 min Last verified: 9 July 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py39-pycares — domain hijacking vulnerability Related CVEs: CVE-2021-3672 Upstream summary: Philipp Jeitner and Haya Shulman report: A flaw was found in c-ares library, where a missing input validation check of […]
🟠 High ⏱ 15–60 min Last verified: 9 July 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: redis — Bug in XACKDEL may lead to stack overflow and potential RCE Related CVEs: CVE-2011-4815 CVE-2011-4838 CVE-2011-5036 CVE-2011-5037 CVE-2013-7458 CVE-2015-4335 CVE-2021-21309 CVE-2021-29477 +12 more Upstream summary: Google Big Sleep […]
🟠 High ⏱ 15–60 min Last verified: 9 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: freetype2 — heap buffer overlfow Related CVEs: CVE-2006-0747 CVE-2006-1861 CVE-2006-3467 CVE-2007-2754 CVE-2008-1806 CVE-2008-1807 CVE-2008-1808 CVE-2009-0946 +12 more Upstream summary: The freetype project reports: A heap buffer overflow has been found […]
🟡 Medium ⏱ 10–30 min Last verified: 8 July 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-twisted — multiple vulnerabilities Related CVEs: CVE-2019-12387 CVE-2019-9512 CVE-2019-9514 CVE-2019-9515 CVE-2020-10108 CVE-2020-10109 Upstream summary: Twisted developers reports: All HTTP clients in twisted.web.client now raise a ValueError when called with a […]
