🟢 Low ⏱ 5–15 min Last verified: 4 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Borg (Backup) — flaw in cryptographic authentication scheme in Borg allowed an attacker to fake archives and indirectly cause backup data loss. Related CVEs: CVE-2023-36811 Upstream summary: Thomas Waldmann reports: […]
🟡 Medium ⏱ 10–30 min Last verified: 4 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tiff — buffer overflow vulnerability Related CVEs: CVE-2004-0803 CVE-2004-0804 CVE-2004-0886 CVE-2004-1308 CVE-2005-1544 Upstream summary: A Gentoo Linux Security Advisory reports: Tavis Ormandy of the Gentoo Linux Security Audit Team discovered […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2013-0263 CVE-2013-0262 CVE-2018-16471 CVE-2019-16782 CVE-2020-8184 CVE-2020-8161 CVE-2022-30123 CVE-2026-22860 +12 more Upstream summary: pkgsrc audit-packages flagged ruby{18,193}-rack<1.2.8 for vulnerability class 'remote-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0263 Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 4 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenVPN — server DOS and data leak in TLS handshake vulnerabilities Related CVEs: CVE-2005-2531 CVE-2005-2532 CVE-2005-2533 CVE-2005-2534 CVE-2005-3393 CVE-2005-3409 CVE-2006-1629 CVE-2013-2061 +12 more Upstream summary: Gert Doering reports: [Security fixes […]
🟢 Low ⏱ 5–15 min Last verified: 3 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dcraw — integer overflow condition Related CVEs: CVE-2015-3885 Upstream summary: ocert reports: The dcraw tool, as well as several other projects re-using its code, suffers from an integer overflow condition […]
🟢 Low ⏱ 5–15 min Last verified: 3 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: security/shibboleth-idp — CAS service SSRF Upstream summary: Shibboleth Developers report: The Identity Provider's CAS support relies on a function in the Spring Framework to parse CAS service URLs and append […]
🟢 Low ⏱ 5–15 min Last verified: 3 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-cryptography — tag forgery vulnerability Related CVEs: CVE-2016-9243 CVE-2018-10903 Upstream summary: The Python Cryptographic Authority (PyCA) project reports: finalize_with_tag() allowed tag truncation by default which can allow tag forgery in […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2026 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MariaDB — Multiple vulnerabilities Related CVEs: CVE-2026-44168 CVE-2026-44169 CVE-2026-44170 CVE-2026-44171 CVE-2026-44172 CVE-2026-44173 Upstream summary: The MariaDB project reports: See linked CVE's for details. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 3 April 2026 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wheel — CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Related CVEs: CVE-2026-24049 Upstream summary: https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx reports: wheel is a command line tool for manipulating Python […]
🟢 Low ⏱ 5–15 min Last verified: 3 April 2026 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: postorius — XSS Related CVEs: CVE-2026-44742 Upstream summary: NIST reports: Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as […]
