🟡 Medium ⏱ 10–30 min Last verified: 4 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-rails — multiple vulnerabilities Related CVEs: CVE-2015-1840 CVE-2015-3224 CVE-2015-3225 CVE-2015-3226 CVE-2015-3227 Upstream summary: Ruby on Rails blog: Rails 3.2.22, 4.1.11 and 4.2.2 have been released, along with web console and […]
🟠 High ⏱ 15–60 min Last verified: 4 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: FreeBSD — Missing validation in ptrace(PT_SC_REMOTE) Related CVEs: CVE-2004-0230 CVE-2013-3077 CVE-2013-4851 CVE-2013-5209 CVE-2014-1453 CVE-2014-3000 CVE-2014-3711 CVE-2014-3873 +12 more Upstream summary: Problem Description: ptrace(PT_SC_REMOTE) failed to properly validate parameters for the […]
🟢 Low ⏱ 5–15 min Last verified: 3 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: graphite2 — out-of-bounds write with malicious font Related CVEs: CVE-2017-5436 Upstream summary: Mozilla Foundation reports: An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. […]
🟢 Low ⏱ 5–15 min Last verified: 3 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: maradns — denial of service when resolving a long DNS hostname Related CVEs: CVE-2008-0061 CVE-2011-0520 Upstream summary: MaraDNS developer Sam Trenholme reports: … a mistake in allocating an array of […]
🟠 High ⏱ 15–60 min Last verified: 3 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wget — security flaw in caching credentials passed as a part of the URL Related CVEs: CVE-2004-1487 CVE-2004-1488 CVE-2010-2252 CVE-2014-4877 CVE-2016-4971 CVE-2016-7098 CVE-2017-13089 CVE-2017-13090 +2 more Upstream summary: Gynvael Coldwind […]
🟢 Low ⏱ 5–15 min Last verified: 3 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]
🟢 Low ⏱ 5–15 min Last verified: 3 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lxr — multiple XSS vulnerabilities Related CVEs: CVE-2009-4497 Upstream summary: Dan Rosenberg reports: There are several cross-site scripting vulnerabilities in LXR. These vulnerabilities could allow an attacker to execute scripts […]
🟠 High ⏱ 15–60 min Last verified: 3 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: X.org libraries — multiple vulnerabilities Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988 +12 more Upstream summary: Matthieu Herrb reports: Tobias Stoeckmann from the OpenBSD project has discovered […]
🟠 High ⏱ 15–60 min Last verified: 3 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: asterisk – path traversal Related CVEs: CVE-2004-0097 CVE-2006-1827 CVE-2011-1507 CVE-2011-2216 CVE-2011-2529 CVE-2011-2535 CVE-2011-2536 CVE-2011-3389 +12 more Upstream summary: [email protected] reports: An issue in the action_listcategories() function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0-rc2/22.0.0-pre1 […]
🟡 Medium ⏱ 10–30 min Last verified: 2 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: squirrelmail — random variable overwrite vulnerability Related CVEs: CVE-2004-1036 CVE-2005-0075 CVE-2005-0103 CVE-2005-0104 CVE-2005-1769 CVE-2005-2095 CVE-2006-4019 Upstream summary: The SquirrelMail developers report: A logged in user could overwrite random variables in […]
