🟢 Low ⏱ 5–15 min Last verified: 6 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-kerberos — DoS and MitM vulnerabilities Related CVEs: CVE-2015-3206 Upstream summary: macosforgebot reports: The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows […]
🟡 Medium ⏱ 10–30 min Last verified: 6 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-6834 CVE-2015-6835 CVE-2015-6836 CVE-2015-6837 CVE-2015-6838 Upstream summary: PHP reports: Core: Fixed bug #70172 (Use After Free Vulnerability in unserialize()). Fixed bug #70219 (Use after […]
🟡 Medium ⏱ 10–30 min Last verified: 5 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tiff — buffer overflow vulnerability Related CVEs: CVE-2004-0803 CVE-2004-0804 CVE-2004-0886 CVE-2004-1308 CVE-2005-1544 Upstream summary: A Gentoo Linux Security Advisory reports: Tavis Ormandy of the Gentoo Linux Security Audit Team discovered […]
🟡 Medium ⏱ 10–30 min Last verified: 5 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: linux-realplayer — multiple vulnerabilities Related CVEs: CVE-2005-0611 CVE-2005-1277 CVE-2005-2922 CVE-2006-0323 CVE-2007-2263 CVE-2007-2264 CVE-2007-3410 CVE-2007-5081 Upstream summary: Secunia reports: Multiple vulnerabilities have been reported in RealPlayer/RealOne/HelixPlayer, which can be exploited by […]
🟢 Low ⏱ 5–15 min Last verified: 5 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libsoup — stack based buffer overflow Related CVEs: CVE-2011-2054 CVE-2017-2885 Upstream summary: Tobias Mueller reports: libsoup is susceptible to a stack based buffer overflow attack when using chunked encoding. Regardless […]
🟢 Low ⏱ 5–15 min Last verified: 5 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: subversion — Arbitrary code execution vulnerability Upstream summary: subversion team reports: A Subversion client sometimes connects to URLs provided by the repository. This happens in two primary cases: during 'checkout', […]
🟢 Low ⏱ 5–15 min Last verified: 5 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_perl — cross-site scripting Related CVEs: CVE-2007-1349 CVE-2009-0796 Upstream summary: Secunia reports: Certain input passed to the "Apache::Status" and "Apache2::Status" modules is not properly sanitised before being returned to the […]
🟢 Low ⏱ 5–15 min Last verified: 4 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pear-XML_RPC — remote PHP code injection vulnerability Related CVEs: CVE-2005-2498 Upstream summary: A Hardened-PHP Project Security Advisory reports: When the library parses XMLRPC requests/responses, it constructs a string of PHP […]
🟢 Low ⏱ 5–15 min Last verified: 3 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mutt — Remote Buffer Overflow Vulnerability Upstream summary: SecurityFocus reports: Mutt is prone to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied […]
🟡 Medium ⏱ 10–30 min Last verified: 3 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vorbis-tools, opus-tools — multiple vulnerabilities Related CVEs: CVE-2014-9638 CVE-2014-9639 CVE-2015-6749 Upstream summary: Paris Zoumpouloglou reports: I discovered an integer overflow issue in oggenc, related to the number of channels in […]
