🟢 Low ⏱ 5–15 min Last verified: 24 June 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not included. […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-41146 Upstream summary: pkgsrc audit-packages flagged qutebrowser<2.4.0 for vulnerability class 'arbitrary-command-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-41146 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-15188 CVE-2020-15183 CVE-2020-15189 Upstream summary: pkgsrc audit-packages flagged php{56,72,73,74}-soycms<3.0.2.328 for vulnerability class 'remote-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-15188 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-16278 CVE-2019-16279 CVE-2022-48253 Upstream summary: pkgsrc audit-packages flagged nostromo<1.9.6nb2 for vulnerability class 'remote-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-16278 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🟢 Low ⏱ 5–15 min Last verified: 24 June 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-pdfminer.six — Arbitrary Code Execution in pdfminer.six via Crafted PDF Input Related CVEs: CVE-2025-64512 Upstream summary: Pieter Marsman reports: pdfminer.six will execute arbitrary code from a malicious pickle file if […]
🟡 Medium ⏱ 10–30 min Last verified: 24 June 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libreoffice — Macro URL arbitrary script execution Related CVEs: CVE-2015-1774 CVE-2016-4324 CVE-2018-6871 CVE-2020-12802 CVE-2020-12803 CVE-2025-1080 Upstream summary: [email protected] reports: LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2011-1935 CVE-2019-15161 CVE-2019-15162 CVE-2019-15164 CVE-2019-15165 CVE-2025-11961 CVE-2019-15163 Upstream summary: pkgsrc audit-packages flagged libpcap<1.2.1 for vulnerability class 'validation-bypass'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2011-1935 Table of contents Symptom & Impact Environment & Reproduction Root […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-32052 Upstream summary: pkgsrc audit-packages flagged py39-django>=2.2<2.2.22 for vulnerability class 'http-header-injection'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-32052 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged koffice<1.3.5 for vulnerability class 'integer-overflow'. Reference: http://kde.org/areas/koffice/releases/1.3.4-release.php Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟠 High ⏱ 15–60 min Last verified: 23 June 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: git — multiple vulnerabilities Related CVEs: CVE-2015-7545 CVE-2016-2324 CVE-2020-11008 CVE-2020-5260 CVE-2024-50349 CVE-2024-52006 CVE-2025-27613 CVE-2025-27614 +4 more Upstream summary: Git development team reports: CVE-2025-27613: Gitk: When a user clones an untrusted […]
