🟢 Low ⏱ 5–15 min Last verified: 18 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vim — Improper Input Validation in Vim Related CVEs: CVE-2025-27423 Upstream summary: [email protected] reports: Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or […]
🟢 Low ⏱ 5–15 min Last verified: 18 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-nicotine-plus — Denial of service vulnerability Related CVEs: CVE-2021-45848 Upstream summary: ztauras reports: Denial of service (DoS) vulnerability in Nicotine+ starting with version 3.0.3 and prior to version 3.2.1 allows […]
🟡 Medium ⏱ 10–30 min Last verified: 18 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: expat — multiple vulnerabilities Related CVEs: CVE-2005-3183 CVE-2009-3560 CVE-2009-3720 CVE-2016-9063 CVE-2017-9233 Upstream summary: Mitre reports: An integer overflow during the parsing of XML using the Expat library. XML External Entity […]
🟢 Low ⏱ 5–15 min Last verified: 18 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PyYAML — arbitrary code execution Related CVEs: CVE-2020-14343 Upstream summary: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution […]
🟡 Medium ⏱ 10–30 min Last verified: 18 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: minio — Privilege Escalation via Session Policy Bypass in Service Accounts and STS Related CVEs: CVE-2021-41137 CVE-2021-43858 CVE-2022-24842 CVE-2024-24747 CVE-2024-36107 CVE-2025-62506 Upstream summary: mino reports: A privilege escalation vulnerability allows […]
🟢 Low ⏱ 5–15 min Last verified: 17 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: qutebrowser — Reloading page with certificate errors shows a green URL Related CVEs: CVE-2018-10895 CVE-2020-11054 Upstream summary: Qutebrowser developers report: After a certificate error was overridden by the user, qutebrowser […]
🟢 Low ⏱ 5–15 min Last verified: 17 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pkg — vulnerability in libfetch Related CVEs: CVE-2013-6393 CVE-2020-7450 Upstream summary: A programming error allows an attacker who can specify a URL with a username and/or password components to overflow […]
🟢 Low ⏱ 5–15 min Last verified: 17 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php7 — multiple vulnerabilities Upstream summary: The PHP Group reports: Core: Fixed bug #71637 (Multiple Heap Overflow due to integer overflows in xml/filter_url/addcslashes). SOAP: Fixed bug #71610 (Type Confusion Vulnerability […]
🟢 Low ⏱ 5–15 min Last verified: 17 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: unarj — long filename buffer overflow Related CVEs: CVE-2004-0947 CVE-2004-1027 Upstream summary: Ludwig Nussel has discovered a buffer overflow vulnerability in unarj's handling of long filenames which could potentially lead […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-49642 CVE-2023-32726 CVE-2023-32728 CVE-2023-29453 Upstream summary: pkgsrc audit-packages flagged zabbix-agent<6.0.40 for vulnerability class 'arbitrary-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-49642 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
