🟢 Low ⏱ 5–15 min Last verified: 20 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: serendipity — multiple cross site scripting vulnerabilities Related CVEs: CVE-2008-1385 CVE-2008-1386 Upstream summary: Hanno Boeck reports: The installer of serendipity 1.3 has various Cross Site Scripting issues. This is considered […]
🟢 Low ⏱ 5–15 min Last verified: 20 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gnupg — attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output Related CVEs: CVE-2016-6313 Upstream summary: Werner Koch reports: There was a […]
🟢 Low ⏱ 5–15 min Last verified: 20 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: abiword, koffice — stack based buffer overflow vulnerabilities Related CVEs: CAN-2005-2972 Upstream summary: Chris Evans reports that AbiWord is vulnerable to multiple stack-based buffer overflow vulnerabilities. This is caused by […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openslp — denial of service vulnerability Related CVEs: CVE-2015-5155 Upstream summary: Qinghao Tang reports: The function ParseExtension() in openslp 1.2.1 contains vulnerability: an attacker can cause a denial of service […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: LibYAML input sanitization errors Related CVEs: CVE-2013-6393 CVE-2014-2525 Upstream summary: oCERT reports: The LibYAML project is an open source YAML 1.1 parser and emitter written in C. The library is […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-bleach — regular expression denial-of-service Related CVEs: CVE-2020-6817 Upstream summary: Bleach developers reports: bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nettle 3.7.2 — fix serious ECDSA signature verify bug Upstream summary: Niels Möller reports: I've prepared a new bug-fix release of Nettle, a low-level cryptographics library, to fix a serious […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: razor-agents — denial of service vulnerability Upstream summary: A Secunia security advisory reports: Two vulnerabilities have been reported in Razor-agents, which can be exploited by malicious people to cause a […]
🟠 High ⏱ 15–60 min Last verified: 18 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL vulnerabilities Related CVEs: CVE-2014-8161 CVE-2015-0241 CVE-2015-0242 CVE-2015-0243 CVE-2015-0244 CVE-2015-3165 CVE-2015-3166 CVE-2015-3167 +11 more Upstream summary: The PostgreSQL project reports: CVE-2017-15098: Memory disclosure in JSON functions CVE-2017-15099: INSERT … ON […]
🟡 Medium ⏱ 10–30 min Last verified: 18 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: trac — potential DOS vulnerability Related CVEs: CVE-2005-3980 CVE-2005-4065 CVE-2005-4305 Upstream summary: Trac development team reports: 0.11.2 is a new stable maintenance release. It contains several security fixes and everyone […]
