🟢 Low ⏱ 5–15 min Last verified: 19 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-Mojolicious — cookie-handling vulnerability Upstream summary: Upstream commit: Vulnerabilities existed in cookie handling. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution […]
🟠 High ⏱ 15–60 min Last verified: 19 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: www/awstats — Partial absolute pathname Related CVEs: CVE-2005-0116 CVE-2005-0362 CVE-2005-0363 CVE-2005-0435 CVE-2005-0436 CVE-2005-0437 CVE-2005-0438 CVE-2005-1527 +5 more Upstream summary: MITRE reports: It seems #90 is not completely fixed in 7.8. […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-6486 Upstream summary: pkgsrc audit-packages flagged go110<1.10.8 for vulnerability class 'sensitive-information-disclosure'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-6486 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2023-24021 CVE-2022-48279 Upstream summary: pkgsrc audit-packages flagged ap-modsecurity2<2.9.7 for vulnerability class 'filtering-bypass'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-24021 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged poppassd<4.0.5nb1 for vulnerability class 'local-root-shell'. Reference: http://www.securityfocus.com/archive/1/319811/2003-04-26/2003-05-02/0 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟠 High ⏱ 15–60 min Last verified: 19 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: samba — potential leakage of arbitrary memory contents Related CVEs: CVE-2004-0600 CVE-2004-0686 CVE-2004-0815 CVE-2004-1154 CVE-2006-1059 CVE-2006-3403 CVE-2007-0452 CVE-2007-0454 +7 more Upstream summary: Samba Team reports: Samba 3.0.29 and beyond contain […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged php-pgsql<3.0.17 for vulnerability class 'remote-user-shell'. Reference: http://www.php.net/ChangeLog.php3 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟠 High ⏱ 15–60 min Last verified: 19 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libgadu — multiple vulnerabilities Related CVEs: CVE-2004-0005 CVE-2004-0006 CVE-2004-0007 CVE-2004-0008 CVE-2004-0500 CVE-2004-0754 CVE-2004-0784 CVE-2004-0785 +12 more Upstream summary: Wojtek Kaniewski reports: Multiple vulnerabilities have been found in libgadu, a library […]
🟠 High ⏱ 15–60 min Last verified: 19 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Bugzilla security issues Related CVEs: CVE-2004-1061 CVE-2005-2173 CVE-2005-2174 CVE-2006-0913 CVE-2006-0914 CVE-2006-0915 CVE-2006-0916 CVE-2006-2420 +12 more Upstream summary: Bugzilla Security Advisory A CSRF vulnerability in report.cgi would allow a third-party site […]
