🟢 Low ⏱ 5–15 min Last verified: 30 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lynx — SSL certificate validation error Upstream summary: Axel Beckert reports: […] I was able to capture the password given on the commandline in traffic of an TLS handshake using […]
🟢 Low ⏱ 5–15 min Last verified: 30 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pango — integer overflow Related CVEs: CVE-2009-1194 Upstream summary: oCERT reports: Pango suffers from a multiplicative integer overflow which may lead to a potentially exploitable, heap overflow depending on the […]
🟡 Medium ⏱ 10–30 min Last verified: 30 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: NPM — Multiple vulnerabilities Related CVEs: CVE-2019-16775 CVE-2019-16776 CVE-2019-16777 Upstream summary: NPM reports: Global node_modules Binary Overwrite Symlink reference outside of node_modules Arbitrary File Write Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 29 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kde-workspace — privilege escalation Related CVEs: CVE-2014-8651 Upstream summary: David Edmundson reports: KDE workspace configuration module for setting the date and time has a helper program which runs as root […]
🟢 Low ⏱ 5–15 min Last verified: 29 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: heartbeat — insecure temporary file creation vulnerability Related CVEs: CAN-2005-2231 Upstream summary: Eric Romang reports a temporary file creation vulnerability within heartbeat. The vulnerability is caused by hardcoded temporary file […]
🟠 High ⏱ 15–60 min Last verified: 29 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Apache OpenOffice — master password vulnerabilities Related CVEs: CVE-2014-3575 CVE-2015-1774 CVE-2015-4551 CVE-2015-5212 CVE-2015-5213 CVE-2015-5214 CVE-2016-1513 CVE-2017-12607 +11 more Upstream summary: The Apache Openoffice project reports: Apache OpenOffice supports the storage […]
🟡 Medium ⏱ 10–30 min Last verified: 29 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenSSL — multiple vulnerabilities Related CVEs: CVE-2016-7055 CVE-2016-8610 CVE-2017-3730 CVE-2017-3731 CVE-2017-3732 Upstream summary: The OpenSSL project reports: Truncated packet could crash via OOB read (CVE-2017-3731) Bad (EC)DHE parameters cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 28 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Apache 1.3 — mod_proxy reverse proxy exposure Related CVEs: CVE-2003-0993 CVE-2004-0940 CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 CVE-2011-3368 Upstream summary: Apache HTTP server project reports: An exposure was found when using mod_proxy in […]
🟢 Low ⏱ 5–15 min Last verified: 28 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: horde-base — XSS: VCARD attachments vulnerability Related CVEs: CVE-2008-3823 CVE-2008-3824 Upstream summary: The Horde team reports: The major changes compared to Horde version 3.3.10 are: * Fixed XSS vulnerability when […]
🟢 Low ⏱ 5–15 min Last verified: 28 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fidogate — write files as `news' user Upstream summary: Neils Heinen reports that the setuid `news' binaries installed as part of fidogate may be used to create files or append […]
