🟢 Low ⏱ 5–15 min Last verified: 18 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: drupal-pubcookie — authentication may be bypassed Related CVEs: CVE-2006-4717 Upstream summary: The Drupal Project reports: It is possible for a malicious user to spoof a user's identity by bypassing the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2009-4565 CVE-2014-3956 CVE-2023-51765 CVE-2006-1173 Upstream summary: pkgsrc audit-packages flagged sendmail<8.11.6 for vulnerability class 'local-root-shell'. Reference: https://ftp.sendmail.org/RELEASE_NOTES Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟢 Low ⏱ 5–15 min Last verified: 18 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-Flask-Cors — directory traversal vulnerability Related CVEs: CVE-2020-25032 Upstream summary: praetorian-colby-morgan reports: An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged gld<1.5 for vulnerability class 'remote-code-execution'. Reference: http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0005.html Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2009-2957 CVE-2022-0934 CVE-2008-1447 CVE-2017-14492 CVE-2017-14493 CVE-2017-15107 CVE-2019-14513 CVE-2020-25681 +12 more Upstream summary: pkgsrc audit-packages flagged dnsmasq<2.50 for vulnerability class 'arbitrary-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2957 Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 18 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: HAproxy — serious vulnerability affecting the HPACK decoder used for HTTP/2 Related CVEs: CVE-2012-2391 CVE-2015-3281 CVE-2016-5360 CVE-2020-11100 Upstream summary: The HAproxy Project reports: The main driver for this release is […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2006-3747 CVE-2009-1191 CVE-2010-0010 CVE-2011-3368 CVE-2011-3639 CVE-2011-4317 CVE-2012-0031 CVE-2012-0883 +12 more Upstream summary: pkgsrc audit-packages flagged apache<1.3.14 for vulnerability class 'remote-user-access'. Reference: http://httpd.apache.org/dist/httpd/CHANGES_1.3 Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023NVIDIA-2025-213 Related CVEs: CVE-2025-23272 CVE-2025-23247 Upstream summary: NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A […]
🟡 Medium ⏱ 10–30 min Last verified: 18 May 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: cups-filters — remote code execution Related CVEs: CVE-2015-3258 CVE-2015-3279 CVE-2015-8327 CVE-2015-8560 CVE-2024-47076 CVE-2024-47175 CVE-2024-47176 Upstream summary: OpenPrinting reports: Due to the service binding to *:631 ( INADDR_ANY ), multiple bugs […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14582-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-54661 CVE-2013-3571 CVE-2014-0019 Upstream summary: readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
