🟠 High ⏱ 15–60 min Last verified: 30 November 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Mozilla — memory corruption Related CVEs: CVE-2024-9936 CVE-2025-0237 CVE-2025-0238 CVE-2025-0239 CVE-2025-0240 CVE-2025-0241 CVE-2025-0242 CVE-2025-0243 +12 more Upstream summary: [email protected] reports: Memory safety bugs present in Firefox 136 and Thunderbird 136. […]
🟢 Low ⏱ 5–15 min Last verified: 30 November 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Emacs — Arbitrary code execution vulnerability Related CVEs: CVE-2024-53920 CVE-2025-1244 Upstream summary: Problem Description A shell injection vulnerability exists in GNU Emacs due to improper handling of custom man URI […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-49091 Upstream summary: pkgsrc audit-packages flagged konsole<23.08.4nb10 for vulnerability class 'remote-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-49091 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-59842 Upstream summary: pkgsrc audit-packages flagged py{27,39,310,311,312,313}-jupyterlab<4.4.8 for vulnerability class 'input-validation'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-59842 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟢 Low ⏱ 5–15 min Last verified: 28 November 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2024-32879 CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-46242 CVE-2025-6856 CVE-2025-2913 CVE-2017-17509 CVE-2017-17506 CVE-2017-17507 CVE-2017-17505 CVE-2018-11203 +12 more Upstream summary: pkgsrc audit-packages flagged hdf5-[0-9]* for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-46242 Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 27 November 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: qt6-base — DoS in QColorTransferGenericFunction Related CVEs: CVE-2023-51714 CVE-2024-33861 CVE-2025-5992 Upstream summary: Andy Shaw reports: When passing values outside of the expected range to QColorTransferGenericFunction it can cause a denial […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-34297 Upstream summary: pkgsrc audit-packages flagged kissfft-[0-9]* for vulnerability class 'heap-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-34297 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-40927 Upstream summary: pkgsrc audit-packages flagged p5-CGI-Simple<1.113 for vulnerability class 'http-header-injection'. Reference: http://secunia.com/advisories/42460/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-45512 CVE-2018-1000205 CVE-2017-3225 CVE-2019-11690 CVE-2019-11059 CVE-2019-13103 CVE-2019-13104 CVE-2019-13105 +12 more Upstream summary: pkgsrc audit-packages flagged u-boot-[0-9]* for vulnerability class 'arbitrary-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-45512 Table of contents Symptom & Impact Environment […]
