🟢 Low ⏱ 5–15 min Last verified: 11 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rclone — Multiple vulnerabilities Related CVEs: CVE-2023-45286 CVE-2023-48795 Upstream summary: Multiple vulnerabilities in ssh and golang CVE-2023-45286: HTTP request body disclosure in go-resty disclosure across requests. CVE-2023-48795: The SSH transport […]
🟢 Low ⏱ 5–15 min Last verified: 11 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Jinja2 — Sandbox breakout through attr filter selecting format method Related CVEs: CVE-2024-34064 CVE-2025-27516 Upstream summary: [email protected] reports: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in […]
🟠 High ⏱ 15–60 min Last verified: 11 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: jenkins — multiple vulnerabilities Related CVEs: CVE-2011-4969 CVE-2013-2186 CVE-2013-5573 CVE-2013-7285 CVE-2014-1869 CVE-2014-3577 CVE-2014-3661 CVE-2014-3662 +12 more Upstream summary: Jenkins Security Advisory 2026-03-18: SECURITY-3657 / CVE-2026-33001: Arbitrary file write vulnerability through […]
🟠 High ⏱ 15–60 min Last verified: 11 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Flash Player — arbitrary code execution Related CVEs: CVE-2017-11213 CVE-2017-11215 CVE-2017-11225 CVE-2017-11281 CVE-2017-11282 CVE-2017-11292 CVE-2017-2925 CVE-2017-2926 +12 more Upstream summary: Adobe reports: This update resolves a NULL pointer dereference vulnerability […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-18408 CVE-2025-9157 CVE-2025-9385 CVE-2025-9386 CVE-2017-6429 CVE-2017-14266 CVE-2018-18407 CVE-2018-20552 +12 more Upstream summary: pkgsrc audit-packages flagged tcpreplay<4.3.0 for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-18408 Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wordpress — XSS Upstream summary: The WordPress team reports: A cross-site scripting (XSS) vulnerability affecting the Avatar block type Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]
🟡 Medium ⏱ 10–30 min Last verified: 10 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: librsvg2 — multiple vulnerabilities Related CVEs: CVE-2015-7557 CVE-2015-7558 CVE-2019-20446 Upstream summary: Librsvg2 developers reports: Backport the following fixes from 2.46.x: Librsvg now has limits on the number of loaded XML […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sudoscript — signal delivery vulnerability Upstream summary: If non-root access is enabled in sudoscript, any member of the ssers group can send a SIGHUP signal to any process. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: plasma[56]-plasma-workspace — Unauthorized users can access session manager Related CVEs: CVE-2024-36041 Upstream summary: David Edmundson reports: KSmserver, KDE's XSMP manager, incorrectly allows connections via ICE based purely on the host, […]
