🟢 Low ⏱ 5–15 min Last verified: 9 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-gunicorn — CWE-113 vulnerability Related CVEs: CVE-2018-1000164 Upstream summary: Everardo reports: gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers vulnerability in process_headers function in […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-14329 CVE-2018-13843 CVE-2018-13844 CVE-2018-13845 CVE-2020-36403 CVE-2026-31962 CVE-2026-31963 CVE-2026-31964 +7 more Upstream summary: pkgsrc audit-packages flagged htslib-[0-9]* for vulnerability class 'symlink-attack'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-14329 Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-25033 CVE-2026-2653 Upstream summary: pkgsrc audit-packages flagged admesh<0.98.5 for vulnerability class 'out-of-bounds-read'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-25033 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟠 High ⏱ 15–60 min Last verified: 9 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: X.org libraries — multiple vulnerabilities Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988 +12 more Upstream summary: Matthieu Herrb reports: Tobias Stoeckmann from the OpenBSD project has discovered […]
🟢 Low ⏱ 5–15 min Last verified: 8 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libzip — denial of service Related CVEs: CVE-2015-2331 CVE-2017-14107 Upstream summary: libzip developers report: The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers […]
🟠 High ⏱ 15–60 min Last verified: 8 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mc — multiple vulnerabilities Related CVEs: CVE-2003-1023 CVE-2004-0226 CVE-2004-0231 CVE-2004-0232 CVE-2004-0494 CVE-2004-1004 CVE-2004-1005 CVE-2004-1009 +4 more Upstream summary: Andrew V. Samoilov reported several vulnerabilities that were corrected in MidnightCommand 4.6.0: […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2007-6353 CVE-2025-26623 CVE-2017-12955 CVE-2017-12957 CVE-2017-14858 CVE-2017-14863 CVE-2017-14865 CVE-2017-1000126 +12 more Upstream summary: pkgsrc audit-packages flagged exiv2<0.16 for vulnerability class 'arbitrary-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6353 Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 8 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mailman < 2.1.38 — CSRF vulnerability of list mod or member against list admin page Related CVEs: CVE-2021-43331 CVE-2021-43332 CVE-2021-44227 Upstream summary: Mark Sapiro reports: A list moderator or list […]
🟠 High ⏱ 15–60 min Last verified: 8 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2014-0472 CVE-2014-0473 CVE-2014-0474 CVE-2014-0480 CVE-2014-0481 CVE-2014-0482 CVE-2014-0483 CVE-2015-0219 +12 more Upstream summary: Tim Graham reports: Malicious redirect and possible XSS attack via user-supplied redirect […]
🟢 Low ⏱ 5–15 min Last verified: 8 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mitmproxy — Insufficient Protection against HTTP Request Smuggling Related CVEs: CVE-2022-24766 Upstream summary: Zeyu Zhang reports: In mitmproxy 7.0.4 and below, a malicious client or server is able to perform […]
