🟢 Low ⏱ 5–15 min Last verified: 3 June 2026 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-strawberry-graphql — Multiple vulnerabilities Related CVEs: CVE-2026-35523 CVE-2026-35526 Upstream summary: The Strawberry GraphQL project reports: Strawberry up until version 0.312.3 is vulnerable to an authentication bypass on WebSocket subscription endpoints. […]
🟢 Low ⏱ 5–15 min Last verified: 3 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: uudeview buffer overflows Upstream summary: The authors of UUDeview report repairing two buffer overflows in their software. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟡 Medium ⏱ 10–30 min Last verified: 3 June 2026 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MariaDB — Multiple vulnerabilities Related CVEs: CVE-2026-44168 CVE-2026-44169 CVE-2026-44170 CVE-2026-44171 CVE-2026-44172 CVE-2026-44173 Upstream summary: The MariaDB project reports: See linked CVE's for details. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1398 Related CVEs: CVE-2025-68161 Upstream summary: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, even when the […]
🟢 Low ⏱ 5–15 min Last verified: 3 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pear-XML_RPC — remote PHP code injection vulnerability Related CVEs: CVE-2005-2498 Upstream summary: A Hardened-PHP Project Security Advisory reports: When the library parses XMLRPC requests/responses, it constructs a string of PHP […]
🟠 High ⏱ 15–60 min Last verified: 3 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: acroread9 — Multiple Vulnerabilities Related CVEs: CVE-2004-0630 CVE-2004-1152 CVE-2005-1306 CVE-2005-1625 CVE-2005-1912 CVE-2005-2470 CVE-2011-1353 CVE-2011-2431 +12 more Upstream summary: The Adobe Security Team reports: An unspecified vulnerability in the U3D component […]
Login banners and MOTD (Message of the Day) serve both legal and operational purposes: they warn unauthorised users, satisfy compliance requirements (PCI-DSS, HIPAA, SOC 2), and display important system information to admins. This guide configures SSH banners and MOTD on Ubuntu 26.04 LTS. Tested and valid on: Ubuntu 26.04 LTS Prerequisites Ubuntu 26.04 LTS A […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1665 Related CVEs: CVE-2026-3219 CVE-2026-6357 CVE-2026-21441 CVE-2025-66418 CVE-2025-66471 CVE-2025-8869 CVE-2024-47081 CVE-2025-50181 +6 more Upstream summary: pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether […]
🟢 Low ⏱ 5–15 min Last verified: 3 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — PL/Perl environment variable changes execute arbitrary code Related CVEs: CVE-2024-10979 Upstream summary: PostgreSQL project reports: Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user […]
🟡 Medium ⏱ 10–30 min Last verified: 3 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-Mail-SpamAssassin — local user symlink-attack DoS vulnerability Related CVEs: CVE-2004-0796 CVE-2005-1266 CVE-2007-2873 Upstream summary: SpamAssassin website reports: A local user symlink-attack DoS vulnerability in SpamAssassin has been found, affecting versions […]
