🟢 Low ⏱ 5–15 min Last verified: 22 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: smart_proxy_dynflow — authentication bypass vulnerability Related CVEs: CVE-2018-14643 Upstream summary: MITRE reports: An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman. A malicious attacker can use […]
🟢 Low ⏱ 5–15 min Last verified: 22 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Remote Denial of Service of HTTP server and client Upstream summary: giFT-FastTrack is susceptible to a remote Denial of Service attack which could allow a remote attacker to render HTTP […]
🟢 Low ⏱ 5–15 min Last verified: 22 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ghostscript — insecure temporary file creation vulnerability Related CVEs: CVE-2004-0967 Upstream summary: Ghostscript is affected by an insecure temporary file creation vulnerability. This issue is likely due to a design […]
🟢 Low ⏱ 5–15 min Last verified: 22 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-Flask-Cors — directory traversal vulnerability Related CVEs: CVE-2020-25032 Upstream summary: praetorian-colby-morgan reports: An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal […]
🟠 High ⏱ 15–60 min Last verified: 22 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xwayland — Multiple vulnerabilities Related CVEs: CVE-2017-12176 CVE-2017-12177 CVE-2017-12178 CVE-2017-12179 CVE-2017-12180 CVE-2017-12181 CVE-2017-12182 CVE-2017-12183 +12 more Upstream summary: X.Org project reports: Multiple issues have been found in the X server […]
🟢 Low ⏱ 5–15 min Last verified: 21 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: junkbuster — heap corruption vulnerability and configuration modification vulnerability Related CVEs: CVE-2005-1108 CVE-2005-1109 Upstream summary: A Debian advisory reports: James Ranson discovered that an attacker can modify the referrer setting […]
🟡 Medium ⏱ 10–30 min Last verified: 21 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Apache 1.3 — mod_proxy reverse proxy exposure Related CVEs: CVE-2004-0700 CVE-2004-0885 CVE-2004-0940 CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 CVE-2011-3368 Upstream summary: Apache HTTP server project reports: An exposure was found when using mod_proxy […]
🟢 Low ⏱ 5–15 min Last verified: 21 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libjpeg-turbo — Issue in the PPM reader causing a buffer overrun in cjpeg, TJBench, or the tjLoadImage() function. Related CVEs: CVE-2012-2806 CVE-2020-13790 Upstream summary: libjpeg-turbo releases reports: This release fixes […]
🟢 Low ⏱ 5–15 min Last verified: 21 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: django — CSRF protection bypass on a site with Google Analytics Related CVEs: CVE-2016-7401 Upstream summary: Django Software Foundation reports: An interaction between Google Analytics and Django's cookie parsing could […]
🟠 High ⏱ 15–60 min Last verified: 21 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: go — excessive resource consumption Related CVEs: CVE-2015-5739 CVE-2015-5740 CVE-2015-5741 CVE-2015-8618 CVE-2016-3959 CVE-2019-16276 CVE-2020-16845 CVE-2020-24553 +12 more Upstream summary: The Go project reports: Within HostnameError.Error(), when constructing an error string, […]
