🟢 Low ⏱ 5–15 min Last verified: 11 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gitolite — path traversal vulnerability Related CVEs: CVE-2012-4506 Upstream summary: Sitaram Chamarty reports: I'm sorry to say there is a potential path traversal vulnerability in v3. Thanks to Stephane Chazelas […]
🟠 High ⏱ 15–60 min Last verified: 11 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fetchmail — potential crash when authenticating to SMTP server Related CVEs: CVE-2003-0792 CVE-2005-2335 CVE-2005-3088 CVE-2005-4348 CVE-2006-0321 CVE-2006-5867 CVE-2006-5974 CVE-2007-1558 +11 more Upstream summary: Matthias Andree reports: fetchmail's SMTP client, when […]
🟢 Low ⏱ 5–15 min Last verified: 10 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-graphite-web — Multiple vulnerabilities Related CVEs: CVE-2013-5093 Upstream summary: Graphite developers report: This release contains several security fixes for cross-site scripting (XSS) as well as a fix for a remote-execution […]
🟠 High ⏱ 15–60 min Last verified: 10 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — SQL injection in pg_upgrade and pg_dump Related CVEs: CVE-2014-8161 CVE-2015-0241 CVE-2015-0242 CVE-2015-0243 CVE-2015-0244 CVE-2015-3165 CVE-2015-3166 CVE-2015-3167 +12 more Upstream summary: The PostgreSQL project reports: CVE-2018-16850: SQL injection in […]
🟠 High ⏱ 15–60 min Last verified: 10 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mediawiki — multiple vulnerabilities Related CVEs: CAN-2005-4501 CVE-2006-1498 CVE-2007-4828 CVE-2008-5249 CVE-2008-5250 CVE-2008-5252 CVE-2010-1150 CVE-2011-0047 +12 more Upstream summary: Mediawiki reports: (T355538, CVE-2024-PENDING) SECURITY: XSS in edit summary parser. (T357760, CVE-2024-PENDING) […]
🟡 Medium ⏱ 10–30 min Last verified: 9 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: poppler — multiple denial of service issues Related CVEs: CVE-2007-3387 CVE-2007-4352 CVE-2007-5392 CVE-2007-5393 CVE-2008-2950 CVE-2017-9775 CVE-2017-9865 Upstream summary: Poppler developers report: Poppler is prone to a stack-based buffer-overflow vulnerability. Successful […]
🟡 Medium ⏱ 10–30 min Last verified: 9 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2007-0905 CVE-2007-0906 CVE-2007-0907 CVE-2007-0908 CVE-2007-0909 CVE-2007-0910 CVE-2007-0988 CVE-2007-1001 Upstream summary: The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.2 and PHP […]
🟢 Low ⏱ 5–15 min Last verified: 9 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: asterisk and pjsip — multiple vulnerabilities Upstream summary: The Asterisk project reports: AST-2018-002 – By crafting an SDP message with an invalid media format description Asterisk crashes when using the […]
🟢 Low ⏱ 5–15 min Last verified: 9 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-suds — vulnerable to symlink attacks Related CVEs: CVE-2013-2217 Upstream summary: SUSE reports: cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries […]
🟡 Medium ⏱ 10–30 min Last verified: 9 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Pillow — multiple vulnerabilities Related CVEs: CVE-2016-0740 CVE-2016-0775 CVE-2016-9189 CVE-2016-9190 Upstream summary: Pillow reports: Pillow prior to 3.3.2 may experience integer overflow errors in map.c when reading specially crafted image […]
