🟡 Medium ⏱ 10–30 min Last verified: 23 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tiff — buffer overflow vulnerability Related CVEs: CVE-2004-0803 CVE-2004-0804 CVE-2004-0886 CVE-2004-1308 CVE-2005-1544 Upstream summary: A Gentoo Linux Security Advisory reports: Tavis Ormandy of the Gentoo Linux Security Audit Team discovered […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-30784 CVE-2026-30790 CVE-2026-30796 Upstream summary: pkgsrc audit-packages flagged rustdesk-server-[0-9]* for vulnerability class 'improper-authorization'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-30784 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🟢 Low ⏱ 5–15 min Last verified: 23 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: e107 — code execution and XSS vulnerabilities Related CVEs: CVE-2010-0996 CVE-2010-0997 Upstream summary: Secunia Research reported two vulnerabilities in e107: The first problem affects installations that have the Content Manager […]
🟢 Low ⏱ 5–15 min Last verified: 23 June 2026 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not included. […]
🟡 Medium ⏱ 10–30 min Last verified: 23 June 2026 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Gimp — GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Related CVEs: CVE-2017-17786 CVE-2025-2760 CVE-2025-2761 Upstream summary: [email protected] reports: GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-49642 CVE-2023-32726 CVE-2023-32728 CVE-2023-29453 Upstream summary: pkgsrc audit-packages flagged zabbix-agent<6.0.40 for vulnerability class 'arbitrary-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-49642 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2008-2798 CVE-2008-2803 CVE-2008-2811 CVE-2008-0016 CVE-2010-3765 CVE-2023-25735 CVE-2023-25739 CVE-2025-1931 +12 more Upstream summary: pkgsrc audit-packages flagged thunderbird{,-gtk1}<2.0.0.16 for vulnerability class 'arbitrary-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2798 Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 22 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenHAB CometVisu addon — Multiple vulnerabilities Upstream summary: OpenHAB reports: This patch release addresses the following security advisories: SSRF/XSS (CometVisu) – GHSA-v7gr-mqpj-wwh3 Sensitive information disclosure (CometVisu) – GHSA-3g4c-hjhr-73rj RCE through […]
🟢 Low ⏱ 5–15 min Last verified: 22 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ChaSen — buffer overflow Related CVEs: CVE-2011-4000 Upstream summary: JVN iPedia reports: ChaSen provided by Nara Institute of Science and Technology is a software for morphologically analyzing Japanese. ChaSen contains […]
🟠 High ⏱ 15–60 min Last verified: 22 June 2026 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — Multiple vulnerabilities Related CVEs: CVE-2024-10976 CVE-2024-10978 CVE-2025-4207 CVE-2025-8713 CVE-2025-8714 CVE-2025-8715 CVE-2026-2003 CVE-2026-2004 +12 more Upstream summary: The PostgreSQL project reports: Missing authorization in PostgreSQL CREATE TYPE allows an […]
