🟢 Low ⏱ 5–15 min Last verified: 30 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ppxp — local root exploit Related CVEs: CVE-2005-0392 Upstream summary: A Debian Advisory reports: Jens Steube discovered that ppxp, yet another PPP program, does not release root privileges when opening […]
🟢 Low ⏱ 5–15 min Last verified: 30 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: expat2 — Parser crash with specially formatted UTF-8 sequences Related CVEs: CVE-2009-3720 Upstream summary: CVE reports: The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, […]
🟢 Low ⏱ 5–15 min Last verified: 30 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xine — multiple remote string vulnerabilities Related CVEs: CVE-2006-1905 Upstream summary: c0ntexb reports: There are 2 format string bugs in the latest version of Xine that could be exploited by […]
🟢 Low ⏱ 5–15 min Last verified: 30 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ghostscript — exploitable buffer overflow in (T)BCP in PS interpreter Related CVEs: CVE-2023-28879 Upstream summary: [email protected] reports: In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential […]
🟡 Medium ⏱ 10–30 min Last verified: 30 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nss — Use-after-free in TLS 1.2 generating handshake hashes Related CVEs: CVE-2016-2834 CVE-2017-5461 CVE-2017-5462 CVE-2017-7805 Upstream summary: Mozilla reports: During TLS 1.2 exchanges, handshake hashes are generated which point to […]
🟠 High ⏱ 15–60 min Last verified: 30 April 2026 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — Multiple vulnerabilities Related CVEs: CVE-2024-10976 CVE-2024-10978 CVE-2025-4207 CVE-2025-8713 CVE-2025-8714 CVE-2025-8715 CVE-2026-2003 CVE-2026-2004 +12 more Upstream summary: The PostgreSQL project reports: Missing authorization in PostgreSQL CREATE TYPE allows an […]
🟢 Low ⏱ 5–15 min Last verified: 30 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: borgbackup — remote users can override repository restrictions Related CVEs: CVE-2017-15914 Upstream summary: BorgBackup reports: Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers. […]
🟢 Low ⏱ 5–15 min Last verified: 30 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: prometheus2 — basic authentication bypass Related CVEs: CVE-2021-29622 CVE-2022-46146 Upstream summary: Prometheus team reports: Prometheus and its exporters can be secured by a web.yml file that specifies usernames and hashed […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-22204 CVE-2022-23935 CVE-2026-3102 Upstream summary: pkgsrc audit-packages flagged p5-Image-ExifTool<12.24 for vulnerability class 'arbitrary-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-22204 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-68119 CVE-2025-47912 CVE-2025-58189 CVE-2025-61727 CVE-2025-61731 CVE-2025-61732 CVE-2025-68121 CVE-2026-25679 +12 more Upstream summary: pkgsrc audit-packages flagged go125<1.25.6 for vulnerability class 'code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-68119 Table of contents Symptom & Impact Environment […]
