🟢 Low ⏱ 5–15 min Last verified: 7 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openldap — slapd acl selfwrite Security Issue Related CVEs: CVE-2006-4600 Upstream summary: Howard Chu reports: An ACL of the form 'access to dn.subtree="ou=groups, dc=example,dc=com" attr=member by * selfwrite' is intended […]
🟠 High ⏱ 15–60 min Last verified: 7 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Roundcube — Multiple vulnerabilities Related CVEs: CVE-2008-5619 CVE-2009-0413 CVE-2011-2937 CVE-2012-3508 CVE-2013-1904 CVE-2015-5381 CVE-2015-5383 CVE-2016-5103 +8 more Upstream summary: The Roundcube project reports: Cross-Site-Scripting vulnerability via SVG’s animate tag Information Disclosure […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-28965 CVE-2025-58767 Upstream summary: pkgsrc audit-packages flagged ruby{25,26,27,30}-rexml<3.2.5 for vulnerability class 'input-validation'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-28965 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟡 Medium ⏱ 10–30 min Last verified: 7 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-tensorflow — denial of service vulnerability Related CVEs: CVE-2022-35935 CVE-2022-35941 CVE-2022-35991 Upstream summary: Kang Hong Jin, Neophytos Christou, 刘力源 and Pattarakrit Rattankul report: Another instance of CVE-2022-35935, where `SobolSample` is […]
🟢 Low ⏱ 5–15 min Last verified: 7 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Yelp — arbitrary file read Related CVEs: CVE-2025-3155 Upstream summary: [email protected] reports: A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023NVIDIA-2026-261 Related CVEs: CVE-2025-33219 CVE-2025-23280 CVE-2025-23282 CVE-2025-23300 CVE-2025-23330 CVE-2025-23332 CVE-2025-23345 Upstream summary: NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause […]
🟡 Medium ⏱ 10–30 min Last verified: 7 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2009-3695 CVE-2010-3082 CVE-2014-0472 CVE-2014-0473 CVE-2014-0474 Upstream summary: The Django project reports: These releases address an unexpected code-execution issue, a caching issue which can expose […]
🟢 Low ⏱ 5–15 min Last verified: 7 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MariaDB — Vulnerability in C API Related CVEs: CVE-2020-2574 Upstream summary: MariaDB reports: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. […]
🟡 Medium ⏱ 10–30 min Last verified: 7 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mbed TLS (PolarSSL) — multiple vulnerabilities Related CVEs: CVE-2013-4623 CVE-2013-5915 CVE-2015-1182 CVE-2015-5291 CVE-2018-0487 CVE-2018-0488 Upstream summary: Simon Butcher reports: Defend against Bellcore glitch attacks by verifying the results of RSA […]
🟠 High ⏱ 15–60 min Last verified: 7 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7437 CVE-2016-8685 CVE-2016-8686 CVE-2016-8694 CVE-2016-8695 CVE-2016-8696 CVE-2016-8697 CVE-2016-8698 +7 more Upstream summary: Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) […]
