FreeBSD

🟠 High   ⏱ 15–60 min  Last verified: 17 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox ESR — Other issue in the WebRTC component Related CVEs: CVE-2011-3079 CVE-2012-2808 CVE-2014-1492 CVE-2014-1493 CVE-2014-1494 CVE-2014-1496 CVE-2014-1497 CVE-2014-1498  +12 more Upstream summary: https://bugzilla.mozilla.org/show_bug.cgi?id=2035939 reports: Other issue in the WebRTC […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tidy — heap-buffer-overflow Related CVEs: CVE-2015-5522 CVE-2015-5523 Upstream summary: Geoff McLane reports: tidy is affected by a write out of bounds when processing malformed html files. This issue could be […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kdelibs4, rekonq — input validation failure Related CVEs: CVE-2011-3365 CVE-2011-3366 Upstream summary: KDE Security Advisory reports: The default rendering type for a QLabel is QLabel::AutoText, which uses heuristics to determine […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tiff — buffer overflow vulnerability Related CVEs: CVE-2004-0803 CVE-2004-0804 CVE-2004-0886 CVE-2004-1308 CVE-2005-1544 Upstream summary: A Gentoo Linux Security Advisory reports: Tavis Ormandy of the Gentoo Linux Security Audit Team discovered […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openoffice — arbitrary code execution vulnerabilities Related CVEs: CVE-2008-2237 CVE-2008-2238 Upstream summary: The OpenOffice Team reports: A security vulnerability with the way OpenOffice 2.x process WMF files may allow a […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pivot-weblog — file deletion vulnerability Upstream summary: Secunia reports: A vulnerability has been discovered in Pivot, which can be exploited by malicious people to delete certain files. Input passed to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: qpopper — multiple privilege escalation vulnerabilities Related CVEs: CVE-2000-0442 CVE-2005-1151 CVE-2005-1152 Upstream summary: Jens Steube reports that qpopper is vulnerable to a privilege escalation vulnerability. qpopper does not properly drop […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pygments — shell injection vulnerability Related CVEs: CVE-2015-8557 Upstream summary: NVD reports: The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libarchive — multiple vulnerabilities Related CVEs: CVE-2006-5680 CVE-2013-0211 CVE-2015-2304 CVE-2015-8934 CVE-2016-1541 CVE-2016-4300 CVE-2016-4301 CVE-2016-4302 Upstream summary: Hanno Bock and Cisco Talos report: Out of bounds heap read in RAR parser […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: x11/cde — Local privilege escalation via CDE dtsession Related CVEs: CVE-2020-2696 Upstream summary: Marco Ivaldi (marco.ivaldi () mediaservice net) reports: A buffer overflow in the CheckMonitor() function in the Common […]