🟢 Low ⏱ 5–15 min Last verified: 21 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Subversion — Multiple vulnerabilities in server code Related CVEs: CVE-2021-28544 CVE-2022-24070 Upstream summary: Subversion project reports: Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-54314 Upstream summary: pkgsrc audit-packages flagged ruby{31,32,33,34}-thor<1.4.0 for vulnerability class 'command-injection'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-54314 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟢 Low ⏱ 5–15 min Last verified: 21 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fail2ban — possible RCE vulnerability in mailing action using mailutils Related CVEs: CVE-2021-32749 Upstream summary: Jakub Żoczek reports: Command mail from mailutils package used in mail actions like mail-whois can […]
🟡 Medium ⏱ 10–30 min Last verified: 21 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-twisted — cookie and authorization headers are leaked when following cross-origin redirects Related CVEs: CVE-2019-12387 CVE-2019-9512 CVE-2019-9514 CVE-2019-9515 CVE-2020-10108 CVE-2020-10109 Upstream summary: Twisted developers report: Cookie and Authorization headers are […]
🟢 Low ⏱ 5–15 min Last verified: 21 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openoffice — arbitrary code execution vulnerabilities Related CVEs: CVE-2008-2237 CVE-2008-2238 Upstream summary: The OpenOffice Team reports: A security vulnerability with the way OpenOffice 2.x process WMF files may allow a […]
🟡 Medium ⏱ 10–30 min Last verified: 21 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pcre — arbitrary code execution Related CVEs: CVE-2005-2491 CVE-2007-1659 CVE-2007-1660 CVE-2007-1661 CVE-2007-1662 CVE-2007-4766 CVE-2007-4767 CVE-2007-4768 Upstream summary: Debian project reports: Tavis Ormandy of the Google Security Team has discovered several […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-16632 CVE-2020-19002 CVE-2025-6050 CVE-2025-50481 Upstream summary: pkgsrc audit-packages flagged py{27,34,35,36,37,38}-mezzanine-[0-9]* for vulnerability class 'cross-site-scripting'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-16632 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2022-4639 CVE-2025-52936 CVE-2025-46806 CVE-2025-46807 Upstream summary: pkgsrc audit-packages flagged sslh-[0-9]* for vulnerability class 'remote-code-injection'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-4639 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2023-4822 CVE-2024-9476 CVE-2026-21721 CVE-2018-12099 CVE-2018-15727 CVE-2018-19039 CVE-2018-1000816 CVE-2019-13068 +12 more Upstream summary: pkgsrc audit-packages flagged grafana<10.1.3 for vulnerability class 'privilege-escalation'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-4822 Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 21 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ImageMagick6 — multiple vulnerabilities Related CVEs: CVE-2004-0827 CVE-2004-0981 CVE-2005-0005 CVE-2005-0397 CVE-2006-5868 CVE-2007-4985 CVE-2007-4986 CVE-2007-4987 +12 more Upstream summary: CVE reports: Several vulnerabilities have been discovered in ImageMagick: CVE-2021-20309: A flaw […]
