FreeBSD Local Security Checks Family for Nessus

IDNameSeverity
138125FreeBSD : Python -- multiple vulnerabilities (33c05d57-bf6e-11ea-ba1e-0800273f78d3)
medium
138124FreeBSD : dbus file descriptor leak (27616957-b084-11ea-937b-b42e99a1b9c3)
medium
138123FreeBSD : Gitlab -- Multiple Vulnerabilities (0a305431-bc98-11ea-a051-001b217b3468)
high
138071FreeBSD : drupal -- Multiple Vulnerabilities (b51d5391-bb76-11ea-9172-4c72b94353b5)
high
137930FreeBSD : xrdp -- Local users can perform a buffer overflow attack against the xrdp-sesman service and then inpersonate it (2675f0db-baa5-11ea-aa12-80ee73419af3)
high
137889FreeBSD : MongoDB -- Ensure RoleGraph can serialize authentication restrictions to BSON (d0be8e1f-b19a-11ea-94aa-b827eb2f57d4)
medium
137870FreeBSD : PuTTY -- Release 0.74 fixes two security vulnerabilities (6190c0cd-b945-11ea-9401-2dcf562daa69)
medium
137869FreeBSD : libvorbis -- two vulnerabilities (4200d5f5-b985-11ea-b08a-f8b156b6dcc8)
high
137793FreeBSD : CUPS -- memory corruption (ce0c8590-b628-11ea-9d28-3c970ee9157c)
high
137792FreeBSD : curl -- multiple vulnerabilities (6bff5ca6-b61a-11ea-aef4-08002728f74c)
high
137791FreeBSD : chromium -- multiple vulnerabilities (6a5d15b6-b661-11ea-8015-e09467587c17)
critical
137790FreeBSD : IMAP fcc/postpone machine-in-the-middle attack (5b397852-b1d0-11ea-a11c-4437e6ad11c4)
medium
137789FreeBSD : Machine-in-the-middle response injection attack when using STARTTLS with IMAP, POP3, and SMTP (29b13a34-b1d2-11ea-a11c-4437e6ad11c4)
medium
137738FreeBSD : Rails -- permission vulnerability (feb8afdc-b3e5-11ea-9df5-08002728f74c)
medium
137693FreeBSD : Several issues in Lynis (f28476f7-b166-11ea-8775-507b9d01076a)
high
137692FreeBSD : BIND -- Remote Denial of Service vulnerability (f00d1873-b138-11ea-8659-901b0ef719ab)
medium
137691FreeBSD : vlc heap-based buffer overflow (77896891-b08a-11ea-937b-b42e99a1b9c3)
high
137690FreeBSD : BIND -- Remote Denial of Service vulnerability (75d72e03-b137-11ea-8659-901b0ef719ab)
medium
137439FreeBSD : several security issues in sqlite3 (c4ac9c79-ab37-11ea-8b5e-b42e99a1b9c3)
high
137438FreeBSD : LibreOffice Security Advisory (96fb446d-ac7b-11ea-8b5e-b42e99a1b9c3)
medium
137382FreeBSD : Node.js -- June 2020 Security Releases (11fcfa8f-ac64-11ea-9dab-000d3ab229d6)
high
137381FreeBSD : tcpreplay -- Multiple vulnerabilities (045e46e8-abe6-11ea-99cb-10bf48e1088e)
high
137344FreeBSD : libadplug -- Various vulnerabilities (329ecd60-aaf7-11ea-8659-10bf48e1088e)
critical
137343FreeBSD : NPM -- Multiple vulnerabilities (2a3588b4-ab12-11ea-a051-001b217b3468)
high
137342FreeBSD : znc -- Authenticated users can trigger an application crash (10a24ce0-ab68-11ea-b9b8-641c67a117d8)
medium
137287FreeBSD : zeek -- Various vulnerabilities (9f7ae7ea-da93-4f86-b257-ba76707f6d5d)
high
137286FreeBSD : FreeBSD -- USB HID descriptor parsing error (32c92a75-aa71-11ea-92ab-00163e433440)
medium
137285FreeBSD : Flash Player -- arbitrary code execution (196b31b8-aa9a-11ea-a59a-6451062f0f7a)
critical
137249FreeBSD : FreeRDP -- multiple vulnerabilities (669f3fe8-a07a-11ea-b83e-f0def1f5c5a2)
medium
137216FreeBSD : chromium -- multiple vulnerabilities (a2caf7bd-a719-11ea-a857-e09467587c17)
critical
137169FreeBSD : GnuTLS -- flaw in TLS session ticket key construction (ef5b4f5f-a658-11ea-80d7-001cc0382b2f)
high
137168FreeBSD : malicious URLs may present credentials to wrong server (ced2d47e-8469-11ea-a283-b42e99a1b9c3)
high
137167FreeBSD : malicious URLs can cause git to send a stored credential to wrong server (67765237-8470-11ea-a283-b42e99a1b9c3)
high
137166FreeBSD : Django -- multiple vulnerabilities (597d02ce-a66c-11ea-af32-080027846a02)
medium
137165FreeBSD : Gitlab -- Multiple Vulnerabilities (40bfab16-a68b-11ea-9ea5-001b217b3468)
high
137127FreeBSD : websocket-extensions -- ReDoS vulnerability (ca8327f7-a5a5-11ea-a860-08002728f74c)
high
137126FreeBSD : nghttp2 -- DoS vulnerability (4bb56d2f-a5b0-11ea-a860-08002728f74c)
high
136990FreeBSD : gitea -- multiple vulnerabilities (1650cee2-a320-11ea-a090-08002734b9ed)
high
136957FreeBSD : Gitlab -- Multiple Vulnerabilities (69cf62a8-a0aa-11ea-9ea5-001b217b3468)
high
136956FreeBSD : kaminari -- potential XSS vulnerability (4e6875a2-a126-11ea-b385-08002728f74c)
medium
136955FreeBSD : Sane -- Multiple Vulnerabilities (28481349-7e20-4f80-ae1e-e6bf48d4f17c)
high
136942FreeBSD : powerdns-recursor -- multiple vulnerabilities (f9c5a410-9b4e-11ea-ac3f-6805ca2fa271)
high
136941FreeBSD : sympa -- Denial of service caused by malformed CSRF token (9908a1cc-35ad-424d-be0b-7e56abd5931a)
high
136940FreeBSD : sympa - Security flaws in setuid wrappers (61bc44ce-9f5a-11ea-aff3-f8b156c2bfe9)
high
136853FreeBSD : drupal -- Multiple Vulnerabilities (c5ec57a9-9c2b-11ea-82b8-4c72b94353b5)
high
136852FreeBSD : unbound -- mutliple vulnerabilities (a2cb7c31-9c79-11ea-a9c2-d05099c0ae8c)
high
136851FreeBSD : Apache Tomcat Remote Code Execution via session persistence (676ca486-9c1e-11ea-8b5e-b42e99a1b9c3)
high
136850FreeBSD : piwigo -- Multible Vulnerabilities (436d7f93-9cf0-11ea-82b8-4c72b94353b5)
medium
136849FreeBSD : chromium -- multiple vulnerabilities (38c676bd-9def-11ea-a94c-3065ec8fd3ec)
critical
136758FreeBSD : Zabbix -- Remote code execution (4d11d37e-9a8d-11ea-b9b8-641c67a117d8)
critical