🟢 Low ⏱ 5–15 min Last verified: 26 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kwebkitpart, kde-runtime — insufficient input validation Related CVEs: CVE-2014-8600 Upstream summary: Albert Aastals Cid reports: kwebkitpart and the bookmarks:// io slave were not sanitizing input correctly allowing to some javascript […]
🟢 Low ⏱ 5–15 min Last verified: 26 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vim — Vim Shell Command Injection Vulnerabilities Related CVEs: CVE-2007-2953 CVE-2008-2712 Upstream summary: Rdancer.org reports: Improper quoting in some parts of Vim written in the Vim Script can lead to […]
🟢 Low ⏱ 5–15 min Last verified: 26 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: newsfetch — server response buffer overflow vulnerability Related CVEs: CVE-2005-0132 Upstream summary: The newsfetch program uses the sscanf function to read information from server responses into static memory buffers. Unfortunately […]
🟢 Low ⏱ 5–15 min Last verified: 26 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: apache — heap overflow in mod_proxy Related CVEs: CVE-2004-0492 Upstream summary: A buffer overflow exists in mod_proxy which may allow an attacker to launch local DoS attacks and possibly execute […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libXcursor — integer overflow that can lead to heap buffer overflow Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988 +12 more Upstream summary: The freedesktop.org project reports: It […]
🟢 Low ⏱ 5–15 min Last verified: 24 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenHAB CometVisu addon — Multiple vulnerabilities Upstream summary: OpenHAB reports: This patch release addresses the following security advisories: SSRF/XSS (CometVisu) – GHSA-v7gr-mqpj-wwh3 Sensitive information disclosure (CometVisu) – GHSA-3g4c-hjhr-73rj RCE through […]
🟢 Low ⏱ 5–15 min Last verified: 24 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mkvtoolnix — code execution via specially crafted files Upstream summary: Moritz Bunkus reports: most of the bugs fixed on 2016-09-06 and 2016-09-07 for issue #1780 are potentially exploitable. The scenario […]
🟠 High ⏱ 15–60 min Last verified: 24 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: java — multiple vulnerabilities Related CVEs: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 25 new security fixes for […]
🟢 Low ⏱ 5–15 min Last verified: 24 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-Flask-Cors — directory traversal vulnerability Related CVEs: CVE-2020-25032 Upstream summary: praetorian-colby-morgan reports: An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal […]
🟢 Low ⏱ 5–15 min Last verified: 23 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mysql — SSL Downgrade Related CVEs: CVE-2015-3152 Upstream summary: Duo Security reports: Researchers have identified a serious vulnerability in some versions of Oracle’s MySQL database product that allows an attacker […]
