FreeBSD

🟡 Medium   ⏱ 10–30 min  Last verified: 25 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache — Prevent chunk-size integer overflow on platforms where sizeof(int) < sizeof(long) Related CVEs: CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 Upstream summary: Apache ChangeLog reports: Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rubygem-rails — multiple vulnerabilities Related CVEs: CVE-2015-1840 CVE-2015-3224 CVE-2015-3225 CVE-2015-3226 CVE-2015-3227 Upstream summary: Ruby on Rails blog: Rails 3.2.22, 4.1.11 and 4.2.2 have been released, along with web console and […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mpv — arbitrary code execution via crafted website Related CVEs: CVE-2018-6360 Upstream summary: mpv developers report: mpv through 0.28.0 allows remote attackers to execute arbitrary code via a crafted web […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: TeamSpeak Server 3 — Multiple vulnerabilities including Remote Code Execution Upstream summary: Hanz Jenson audit report: I found 10 vulnerabilities. Some of these are critical and allow remote code execution. […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: avahi — denial of service Related CVEs: CVE-2010-2244 CVE-2011-1002 Upstream summary: Avahi developers reports: A vulnerability has been reported in Avahi, which can be exploited by malicious people to cause […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ldapscripts — Command Line User Credentials Disclosure Related CVEs: CVE-2007-5373 Upstream summary: Ganael Laplanche reports: Up to now, each ldap* command was called with the -w parameter, which allows to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: urllib3 — multiple vulnerabilities Related CVEs: CVE-2018-20060 CVE-2019-11236 CVE-2019-11324 Upstream summary: NIST reports: (by search in the range 2018/01/01 – 2019/11/10): urllib3 before version 1.23 does not remove the Authorization […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kdewebdev — kommander untrusted code execution vulnerability Related CVEs: CVE-2005-0754 Upstream summary: A KDE Security Advisory reports: Kommander executes without user confirmation data files from possibly untrusted locations. As they […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: subversion — WebDAV fails to protect metadata Related CVEs: CVE-2004-0749 Upstream summary: In some situations, subversion metadata may be unexpectedly disclosed via WebDAV. A subversion advisory states: mod_authz_svn, the Apache […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8874 CVE-2016-5766 CVE-2016-5767 CVE-2016-5768 CVE-2016-5769 CVE-2016-5770 CVE-2016-5771 CVE-2016-5772  +1 more Upstream summary: The PHP Group reports: Please reference CVE/URL list for details Table of […]