🟢 Low ⏱ 5–15 min Last verified: 13 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: The GIMP — Use after Free vulnerability Related CVEs: CVE-2016-4994 Upstream summary: The GIMP team reports: A Use-after-free vulnerability was found in the xcf_load_image function. Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-8358 CVE-2025-57783 CVE-2025-57784 CVE-2025-57785 Upstream summary: pkgsrc audit-packages flagged hiawatha<10.8.4 for vulnerability class 'directory-traversal'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-8358 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟠 High ⏱ 15–60 min Last verified: 13 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Related CVEs: CVE-2021-22946 CVE-2021-3712 CVE-2022-1941 CVE-2022-2097 CVE-2022-21245 CVE-2022-21249 CVE-2022-21253 CVE-2022-21254 +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 37 new security patches, plus […]
🟡 Medium ⏱ 10–30 min Last verified: 12 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: botan2 — Side channel during ECC key generation Related CVEs: CVE-2014-9742 CVE-2015-5726 CVE-2015-5727 CVE-2015-7827 CVE-2016-2194 CVE-2016-2195 CVE-2016-2849 CVE-2018-12435 +1 more Upstream summary: botan2 developers reports: A timing side channel during […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2026 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-strawberry-graphql — Multiple vulnerabilities Related CVEs: CVE-2026-35523 CVE-2026-35526 Upstream summary: The Strawberry GraphQL project reports: Strawberry up until version 0.312.3 is vulnerable to an authentication bypass on WebSocket subscription endpoints. […]
🟡 Medium ⏱ 10–30 min Last verified: 12 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: irc/bitchx — multiple vulnerabilities Related CVEs: CVE-2007-4584 CVE-2007-5839 CVE-2007-5922 Upstream summary: bannedit reports: Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a […]
🟠 High ⏱ 15–60 min Last verified: 12 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bugzilla — multiple vulnerabilities Related CVEs: CVE-2004-1061 CVE-2005-2173 CVE-2005-2174 CVE-2006-0913 CVE-2006-0914 CVE-2006-0915 CVE-2006-0916 CVE-2006-2420 +9 more Upstream summary: A Bugzilla Security Advisory reports: Cross-Site Scripting When viewing a single bug […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: QtNetworkAuth — predictable seeding of PRNG in QAbstractOAuth Related CVEs: CVE-2024-36048 Upstream summary: Andy Shaw reports: The OAuth1 implementation in QtNetworkAuth created nonces using a PRNG that was seeded with […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-16165 CVE-2019-16166 CVE-2025-8735 CVE-2025-8736 CVE-2020-23856 CVE-2023-2789 Upstream summary: pkgsrc audit-packages flagged cflow-[0-9]* for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-16165 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — minor security problems. Related CVEs: CVE-2016-2193 CVE-2016-3065 Upstream summary: PostgreSQL project reports: Security Fixes for RLS, BRIN This release closes security hole CVE-2016-2193 (https://access.redhat.com/security/cve/CVE-2016-2193), where a query plan […]
