BSD

🟢 Low   ⏱ 5–15 min  Last verified: 17 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: urban — stack overflow vulnerabilities Related CVEs: CVE-2005-2864 Upstream summary: Several filename-related stack overflow bugs allow a local attacker to elevate its privileges to the games group, since urban is […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0 Related CVEs: CVE-2004-0419 Upstream summary: When the IPv6 code was added to xdm a critical test to disable xdmcp […]

🟠 High   ⏱ 15–60 min  Last verified: 17 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tiff — multiple vulnerabilities Related CVEs: CVE-2015-8665 CVE-2015-8683 CVE-2015-8870 CVE-2016-5314 CVE-2016-5320 CVE-2016-5652 CVE-2016-5875 CVE-2016-9533  +12 more Upstream summary: NVD reports: Please reference CVE/URL list for details Table of contents Symptom […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libevent — multiple vulnerabilities Related CVEs: CVE-2014-6272 CVE-2016-10195 CVE-2016-10196 CVE-2016-10197 Upstream summary: Debian Security reports: CVE-2016-10195: The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-WsgiDAV — XSS vulnerability Related CVEs: CVE-2022-41905 Upstream summary: Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting (XSS) attacks. Table of contents Symptom […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: The Update Framwork — path traversal vulnerability Related CVEs: CVE-2021-41131 Upstream summary: NVD reports: python-tuf is a Python reference implementation of The Update Framework (TUF). In both clients (`tuf/client` and […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 March 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not included. […]

🟠 High   ⏱ 15–60 min  Last verified: 17 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 CVE-2004-0909 CVE-2004-1156 CVE-2004-1157  +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dcraw — integer overflow condition Related CVEs: CVE-2015-3885 Upstream summary: ocert reports: The dcraw tool, as well as several other projects re-using its code, suffers from an integer overflow condition […]