🟢 Low ⏱ 5–15 min Last verified: 21 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libtool — Library Search Path Privilege Escalation Issue Related CVEs: CVE-2009-3736 Upstream summary: Secunia.com Do not attempt to load an unqualified module.la file from the current directory (by default) since […]
🟢 Low ⏱ 5–15 min Last verified: 21 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-dparse — REDoS vulnerability Related CVEs: CVE-2022-39280 Upstream summary: yeisonvargasf reports: dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is […]
🟡 Medium ⏱ 10–30 min Last verified: 21 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: cyrus-sasl — Fix off by one error Related CVEs: CVE-2004-0884 CVE-2006-1721 CVE-2009-0688 CVE-2019-19906 Upstream summary: Cyrus SASL 2.1.x Release Notes New in 2.1.28 reports: Fix off by one error Table […]
🟢 Low ⏱ 5–15 min Last verified: 21 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sdl_image — buffer overflow vulnerabilities Related CVEs: CVE-2007-6697 CVE-2008-0544 Upstream summary: Secunia reports: Two vulnerabilities have been reported in SDL_image, which can be exploited by malicious people to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 21 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: id Tech 3 — remote code execution vulnerability Related CVEs: CVE-2017-6903 Upstream summary: The content auto-download of id Tech 3 can be used to deliver maliciously crafted content, that triggers […]
🟢 Low ⏱ 5–15 min Last verified: 21 January 2026 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-strawberry-graphql — Multiple vulnerabilities Related CVEs: CVE-2026-35523 CVE-2026-35526 Upstream summary: The Strawberry GraphQL project reports: Strawberry up until version 0.312.3 is vulnerable to an authentication bypass on WebSocket subscription endpoints. […]
🟡 Medium ⏱ 10–30 min Last verified: 21 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_http2 — Multiple vulnerabilities Related CVEs: CVE-2020-11984 CVE-2020-11993 CVE-2020-9490 CVE-2024-24795 CVE-2024-27316 CVE-2024-38709 CVE-2025-49630 CVE-2025-53020 Upstream summary: The mod_http2 project reports: a client can increase memory consumption for a HTTP/2 connection […]
🟡 Medium ⏱ 10–30 min Last verified: 21 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenVPN — avoid buffer overread parsing routes or endpoints Related CVEs: CVE-2008-3459 CVE-2020-11810 CVE-2023-46849 CVE-2023-46850 CVE-2025-10680 CVE-2025-12106 CVE-2025-13086 CVE-2025-2704 Upstream summary: Mikhail Khachaiants reports: socket: reject mismatched address family in […]
🟠 High ⏱ 15–60 min Last verified: 21 January 2026 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dnsmasq — multiple vulnerabilities Related CVEs: CVE-2015-3294 CVE-2015-8899 CVE-2017-13704 CVE-2017-14491 CVE-2017-14492 CVE-2017-14493 CVE-2017-14494 CVE-2017-14495 +12 more Upstream summary: Simon Kelley reports: Today, 11th May 2026 CERT is releasing a set […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-21548 CVE-2025-30714 CVE-2016-5598 Upstream summary: pkgsrc audit-packages flagged py{39,310,311,312,313}-mysql-connector<9.2.0 for vulnerability class 'remote-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-21548 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
