🟢 Low ⏱ 5–15 min Last verified: 26 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: amarok — multiple vulnerabilities Related CVEs: CVE-2009-0135 CVE-2009-0136 Upstream summary: Secunia reports: Tobias Klein has reported some vulnerabilities in Amarok, which potentially can be exploited by malicious people to compromise […]
🟢 Low ⏱ 5–15 min Last verified: 26 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openoffice — arbitrary code execution vulnerabilities Related CVEs: CVE-2008-2237 CVE-2008-2238 Upstream summary: The OpenOffice Team reports: A security vulnerability with the way OpenOffice 2.x process WMF files may allow a […]
🟢 Low ⏱ 5–15 min Last verified: 26 June 2026 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wheel — CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Related CVEs: CVE-2026-24049 Upstream summary: https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx reports: wheel is a command line tool for manipulating Python […]
🟢 Low ⏱ 5–15 min Last verified: 26 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xpm — image decoding vulnerabilities Related CVEs: CVE-2004-0687 CVE-2004-0688 Upstream summary: Chris Evans discovered several vulnerabilities in the libXpm image decoder: A stack-based buffer overflow in xpmParseColors An integer overflow […]
🟢 Low ⏱ 5–15 min Last verified: 26 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pygments — shell injection vulnerability Related CVEs: CVE-2015-8557 Upstream summary: NVD reports: The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via […]
🟢 Low ⏱ 5–15 min Last verified: 26 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-pygments — multiple DoS vulnerabilities Related CVEs: CVE-2021-20270 CVE-2021-27291 Upstream summary: Red Hat reports: An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-2920 CVE-2026-2922 CVE-2017-5847 CVE-2017-5846 Upstream summary: pkgsrc audit-packages flagged gst-plugins1-ugly<1.22.5 for vulnerability class 'integer-overflow'. Reference: https://gstreamer.freedesktop.org/security/sa-2023-0004.html Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟢 Low ⏱ 5–15 min Last verified: 25 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: corkscrew — buffer overflow vulnerability Upstream summary: The affected corkscrew versions use sscanf calls without proper bounds checking. In the authentication file parsing routine this can cause an exploitable buffer […]
🟢 Low ⏱ 5–15 min Last verified: 25 June 2026 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Jinja2 — Sandbox breakout through attr filter selecting format method Related CVEs: CVE-2024-34064 CVE-2025-27516 Upstream summary: [email protected] reports: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-54389 CVE-2025-54409 Upstream summary: pkgsrc audit-packages flagged aide<0.19.2 for vulnerability class 'improper-output-neutralization'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-54389 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
