FreeBSD

🟠 High   ⏱ 15–60 min  Last verified: 23 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MariaDB — Vulnerability in C API Related CVEs: CVE-2015-3152 CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836  +12 more Upstream summary: MariaDB reports: Difficult to exploit vulnerability allows unauthenticated attacker with […]

🟠 High   ⏱ 15–60 min  Last verified: 23 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: OTRS — Multiple vulnerabilities Related CVEs: CVE-2010-0438 CVE-2010-2080 CVE-2010-4071 CVE-2011-1518 CVE-2011-2746 CVE-2012-2582 CVE-2012-4600 CVE-2012-4751  +12 more Upstream summary: OTRS reports: An attacker who is logged into OTRS as an agent […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rails-html-sanitizer — possible XSS vulnerability Related CVEs: CVE-2015-7576 CVE-2015-7577 CVE-2015-7581 CVE-2016-0751 CVE-2016-0752 CVE-2016-0753 CVE-2018-3741 Upstream summary: OSS-Security list: There is a possible XSS vulnerability in rails-html-sanitizer. The gem allows non-whitelisted […]

🟠 High   ⏱ 15–60 min  Last verified: 22 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ffmpeg — remote denial of service in JPEG2000 decoder Related CVEs: CVE-2014-4610 CVE-2015-3395 CVE-2015-6761 CVE-2015-6818 CVE-2015-6819 CVE-2015-6820 CVE-2015-6821 CVE-2015-6822  +12 more Upstream summary: FFmpeg security reports: FFmpeg 2.8.6 fixes the […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: radicale — multiple vulnerabilities Related CVEs: CVE-2015-8747 CVE-2015-8748 Upstream summary: Radicale reports: The multifilesystem backend allows access to arbitrary files on all platforms. Prevent regex injection in rights management. Table […]

🟠 High   ⏱ 15–60 min  Last verified: 21 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libxine — multiple vulnerabilities Related CVEs: CVE-2004-0433 CVE-2004-1187 CVE-2004-1188 CVE-2004-1300 CVE-2004-1379 CVE-2005-1195 CVE-2005-2967 CVE-2006-1664  +12 more Upstream summary: xine developers report: Fix another possible int overflow in the 4XM demuxer. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kde-runtime — kdesu: displayed command truncated by unicode string terminator Related CVEs: CVE-2013-7252 CVE-2014-8600 CVE-2016-7787 Upstream summary: Albert Aastals Cid reports: A maliciously crafted command line for kdesu can result […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: squid — Vulnerable to Denial of Service attack Related CVEs: CVE-2016-10002 CVE-2016-10003 CVE-2016-4553 CVE-2016-4554 CVE-2016-4555 CVE-2016-4556 CVE-2018-1000024 CVE-2018-1000027 Upstream summary: Louis Dion-Marcil reports: Due to incorrect pointer handling Squid is […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: LZO — potential buffer overrun when processing malicious input data Related CVEs: CVE-2014-4608 Upstream summary: Markus Franz Xaver Johannes Oberhumer reports, in the package's NEWS file: Fixed a potential integer […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-foolscap — local file inclusion Upstream summary: Brian Warner reports: The "flappserver" feature was found to have a vulnerability in the service-lookup code which, when combined with an attacker who […]