🟡 Medium ⏱ 10–30 min Last verified: 20 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libgcrypt — ECDSA timing attack Related CVEs: CVE-2013-4242 CVE-2015-7511 CVE-2016-6313 CVE-2017-0379 CVE-2017-7526 CVE-2018-0495 CVE-2019-13627 Upstream summary: GnuPG reports: Mitigate an ECDSA timing attack. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 20 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mediawiki — multiple vulnerabilities Related CVEs: CAN-2005-4501 CVE-2006-1498 CVE-2007-4828 CVE-2008-5249 CVE-2008-5250 CVE-2008-5252 CVE-2010-1150 CVE-2011-0047 +12 more Upstream summary: Mediawiki reports: (T355538, CVE-2024-PENDING) SECURITY: XSS in edit summary parser. (T357760, CVE-2024-PENDING) […]
🟠 High ⏱ 15–60 min Last verified: 20 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL Server — Multiple vulerabilities Related CVEs: CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858 +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 45 new security patches […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2006-0898 CVE-2025-2814 Upstream summary: pkgsrc audit-packages flagged p5-Crypt-CBC<2.17 for vulnerability class 'weak-encryption'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0898 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟢 Low ⏱ 5–15 min Last verified: 19 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_jk — information disclosure Related CVEs: CVE-2014-8111 Upstream summary: NIST reports: Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers […]
🟢 Low ⏱ 5–15 min Last verified: 19 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: CairoSVG — Regular Expression Denial of Service vulnerability Upstream summary: CairoSVG security advisories: When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-40920 Upstream summary: pkgsrc audit-packages flagged p5-Catalyst-Authentication-Credential-HTTP<1.019 for vulnerability class 'weak-cryptography'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-40920 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟢 Low ⏱ 5–15 min Last verified: 19 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libxslt — DoS vulnerability due to type confusing error Related CVEs: CVE-2015-7995 Upstream summary: libxslt maintainer reports: CVE-2015-7995: http://www.openwall.com/lists/oss-security/2015/10/27/10 We need to check that the parent node is an element […]
🟢 Low ⏱ 5–15 min Last verified: 19 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dbus-glib — privledge escalation Related CVEs: CVE-2013-0292 Upstream summary: Sebastian Krahmer reports: A privilege escalation flaw was found in the way dbus-glib, the D-Bus add-on library to integrate the standard […]
🟢 Low ⏱ 5–15 min Last verified: 19 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wv — Multiple Integer Overflow Vulnerabilities Related CVEs: CVE-2006-2197 CVE-2006-4513 Upstream summary: Secunia reports: Some vulnerabilities have been reported in wvWare, which can be exploited by malicious people to cause […]
