🟢 Low ⏱ 5–15 min Last verified: 26 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gnats — format string vulnerability Related CVEs: CVE-2004-0623 Upstream summary: Gnats suffers from a format string bug, which may enable an attacker to execute arbitary code. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 25 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2016-3074 Upstream summary: The PHP Group reports: BCMath: Fixed bug #72093 (bcpowmod accepts negative scale and corrupts _one_ definition). Exif: Fixed bug #72094 (Out […]
🟢 Low ⏱ 5–15 min Last verified: 25 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Ruby Activemodel Gem — Circumvention of attr_protected Related CVEs: CVE-2013-0276 Upstream summary: Aaron Patterson reports: The attr_protected method allows developers to specify a blacklist of model attributes which users should […]
🟠 High ⏱ 15–60 min Last verified: 25 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: opera — moderately severe issue Related CVEs: CVE-2004-0411 CVE-2004-0717 CVE-2004-0718 CVE-2004-0721 CVE-2004-1156 CVE-2004-1157 CVE-2004-1158 CVE-2004-1160 +12 more Upstream summary: Opera reports: Fixed a moderately severe issue, as reported by Attila […]
🟢 Low ⏱ 5–15 min Last verified: 24 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: CairoSVG — Regular Expression Denial of Service vulnerability Upstream summary: CairoSVG security advisories: When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular […]
🟢 Low ⏱ 5–15 min Last verified: 24 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pear-twig — remote code execution Related CVEs: CVE-2015-7809 Upstream summary: Fabien Potencier reports: End users can craft valid Twig code that allows them to execute arbitrary code (RCEs) via the […]
🟢 Low ⏱ 5–15 min Last verified: 23 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_dosevasive — insecure temporary file creation Upstream summary: An LSS Security Advisory reports: When a denial of service attack is detected, mod_dosevasive will, among other things, create a temporary file […]
🟢 Low ⏱ 5–15 min Last verified: 23 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mnemo — Cross site scripting vulnerabilities in several of the notepad name and note data fields Upstream summary: Announce of Mnemo H3 (2.0.3) (final): This [2.0.3] is a security release […]
🟠 High ⏱ 15–60 min Last verified: 23 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: FreeBSD — EAP-pwd message reassembly issue with unexpected fragment Related CVEs: CVE-2015-1863 CVE-2015-4141 CVE-2015-4142 CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 CVE-2015-4146 CVE-2015-5310 +12 more Upstream summary: Problem Description: EAP-pwd implementation in hostapd (EAP […]
🟠 High ⏱ 15–60 min Last verified: 23 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 CVE-2004-0909 CVE-2004-1156 CVE-2004-1157 +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]
