chris

🟢 Low   ⏱ 5–15 min  Last verified: 20 March 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-ormar — vulnerabilities Related CVEs: CVE-2026-26198 CVE-2026-27953 Upstream summary: https://github.com/ormar-orm/ormar/security/advisories reports: SQL Injection in aggregate functions min() and max() Pydantic Validation Bypass via __pk_only__ and __excluded__ Kwargs Injection in Model […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gforge — XSS and email flood vulnerabilities Related CVEs: CVE-2005-0299 CVE-2005-2430 CVE-2005-2431 Upstream summary: Jose Antonio Coret reports that GForge contains multiple Cross Site Scripting vulnerabilities and an e-mail flood […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mod_pagespeed — critical cross-site scripting (XSS) vulnerability Related CVEs: CVE-2012-4001 CVE-2012-4360 CVE-2013-6111 Upstream summary: mod_pagespeed developers report: Various versions of mod_pagespeed are subject to critical cross-site scripting (XSS) vulnerability, CVE-2013-6111. […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-impacket — multiple path traversal vulnerabilities Related CVEs: CVE-2021-31800 Upstream summary: asolino reports: Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xchat remotely exploitable buffer overflow (Socks5) Related CVEs: CVE-2004-0409 Upstream summary: A straightforward stack buffer overflow exists in XChat's Socks5 proxy support. The XChat developers report that `tsifra' discovered this […]

🟠 High   ⏱ 15–60 min  Last verified: 20 March 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Mbed TLS — vulnerabilities Related CVEs: CVE-2015-5291 CVE-2018-0487 CVE-2018-0488 CVE-2018-0497 CVE-2018-0498 CVE-2018-19608 CVE-2019-18222 CVE-2020-10932  +12 more Upstream summary: https://mbed-tls.readthedocs.io/en/latest/security-advisories/ reports: Client impersonation while resuming a TLS 1.3 session (CVE-2026-34873) Entropy […]