🟢 Low ⏱ 5–15 min Last verified: 27 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nbd-server — buffer overflow vulnerability Related CVEs: CVE-2005-3534 Upstream summary: Kurt Fitzner reports a buffer overflow vulnerability within nbd. This could potentially allow the execution of arbitrary code on the […]
🟡 Medium ⏱ 10–30 min Last verified: 27 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xmltooling — remote resource access Related CVEs: CVE-2015-2684 CVE-2018-0486 CVE-2018-0489 Upstream summary: Shibboleth consortium reports: An updated version of the XMLTooling library that is part of the OpenSAML and Shibboleth […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-5477 CVE-2012-6685 CVE-2020-26247 CVE-2021-41098 CVE-2022-24836 CVE-2022-29181 CVE-2022-23476 CVE-2025-6490 +3 more Upstream summary: pkgsrc audit-packages flagged ruby{22,23,24,25,26}-nokogiri<1.10.4 for vulnerability class 'command-injection'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-5477 Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2026:11388 Related CVEs: CVE-2026-33999 CVE-2026-34001 CVE-2026-34003 CVE-2025-49175 CVE-2025-49176 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 +12 more Upstream summary: X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that […]
🟠 High ⏱ 15–60 min Last verified: 27 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dnsmasq — multiple vulnerabilities Related CVEs: CVE-2015-3294 CVE-2015-8899 CVE-2017-13704 CVE-2017-14491 CVE-2017-14492 CVE-2017-14493 CVE-2017-14494 CVE-2017-14495 +12 more Upstream summary: Simon Kelley reports: Today, 11th May 2026 CERT is releasing a set […]
🟢 Low ⏱ 5–15 min Last verified: 27 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gnomevfs — unsafe URI handling Related CVEs: CVE-2004-0494 Upstream summary: Alexander Larsson reports that some versions of gnome-vfs and MidnightCommander contain a number of `extfs' scripts that do not properly […]
🟢 Low ⏱ 5–15 min Last verified: 27 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-treq — sensitive information leak vulnerability Related CVEs: CVE-2022-23607 Upstream summary: Treq's request methods (`treq.get`, `treq.post`, `HTTPClient.request`, `HTTPClient.get`, etc.) accept cookies as a dictionary. Such cookies are not bound to […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.17.0-r0 📖 ~4 min read • Source: Alpine secdb entry — geth 1.17.0-r0 Related CVEs: CVE-2026-26313 CVE-2026-26314 CVE-2026-26315 CVE-2022-37450 Upstream summary: Alpine community repository for vedge ships geth 1.17.0-r0 which addresses CVE-2026-26313. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 27 January 2026 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Jinja2 — Sandbox breakout through attr filter selecting format method Related CVEs: CVE-2024-34064 CVE-2025-27516 Upstream summary: [email protected] reports: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in […]
🟢 Low ⏱ 5–15 min Last verified: 27 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: RabbitMQ-C — integer overflow leads to heap corruption Related CVEs: CVE-2019-18609 Upstream summary: alanxz reports: When parsing a frame header, validate that the frame_size is less than or equal to […]
