🟠 High ⏱ 15–60 min Last verified: 14 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mailman — content spoofing with invalid list names in web UI Related CVEs: CVE-2004-0412 CVE-2004-1143 CVE-2005-0202 CVE-2006-1712 CVE-2006-2191 CVE-2006-2941 CVE-2006-3636 CVE-2006-4624 +5 more Upstream summary: Mark Sapiro reports: A URL […]
🟢 Low ⏱ 5–15 min Last verified: 14 June 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-flask-security — user redirect to arbitrary URL vulnerability Related CVEs: CVE-2021-23385 Upstream summary: Snyk reports: This affects all versions of package Flask-Security. When using the `get_post_logout_redirect` and `get_post_login_redirect` functions, it […]
🟠 High ⏱ 15–60 min Last verified: 14 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mutt — mutt_decode_uuencoded() can read past the of the input line Related CVEs: CVE-2004-0078 CVE-2007-2683 CVE-2014-0467 CVE-2014-9116 CVE-2018-14349 CVE-2018-14350 CVE-2018-14351 CVE-2018-14352 +12 more Upstream summary: Tavis Ormandy reports: mutt_decode_uuencoded(), the […]
🟢 Low ⏱ 5–15 min Last verified: 13 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pgbouncer — failed auth_query lookup leads to connection as auth_user Related CVEs: CVE-2015-4054 CVE-2015-6817 Upstream summary: PgBouncer reports: New auth_user functionality introduced in 1.6 allows login as auth_user when client […]
🟢 Low ⏱ 5–15 min Last verified: 12 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-impacket — multiple path traversal vulnerabilities Related CVEs: CVE-2021-31800 Upstream summary: asolino reports: Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a […]
🟡 Medium ⏱ 10–30 min Last verified: 12 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-ansible — multiple vulnerabilities Related CVEs: CVE-2020-10744 CVE-2020-25635 CVE-2020-25636 CVE-2021-3532 CVE-2021-3583 CVE-2021-3620 Upstream summary: abeluck reports: A flaw was found in Ansible Base when using the aws_ssm connection plugin as […]
🟠 High ⏱ 15–60 min Last verified: 12 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: apache22 — chunk header parsing defect Related CVEs: CVE-2012-0833 CVE-2012-2687 CVE-2012-3499 CVE-2012-4558 CVE-2013-1862 CVE-2013-1896 CVE-2013-5704 CVE-2013-6438 +5 more Upstream summary: Apache Foundation reports: CVE-2015-3183 core: Fix chunk header parsing defect. […]
🟢 Low ⏱ 5–15 min Last verified: 12 June 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-numpy — Missing return-value validation of the function PyArray_DescrNew Related CVEs: CVE-2021-41495 Upstream summary: Numpy reports: At most call-sites for PyArray_DescrNew, there are no validations of its return, but an […]
🟢 Low ⏱ 5–15 min Last verified: 11 June 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tauthon — Regular Expression Denial of Service Related CVEs: CVE-2020-8492 Upstream summary: The :class:`~urllib.request.AbstractBasicAuthHandler` class of the :mod:`urllib.request` module uses an inefficient regular expression which can be exploited by an […]
🟢 Low ⏱ 5–15 min Last verified: 11 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: global — gozilla vulnerability Related CVEs: CVE-2017-17531 Upstream summary: MITRE reports: gozilla.c in GNU GLOBAL 4.8.6 does not validate strings before launching the program specified by the BROWSER environment variable, […]
