🟢 Low ⏱ 5–15 min Last verified: 27 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vnc — authentication bypass vulnerability Upstream summary: RealVNC is susceptible to an authentication-bypass vulnerability. A malicious VNC client can cause a VNC server to allow it to connect without any […]
🟡 Medium ⏱ 10–30 min Last verified: 27 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: yamt — buffer overflow and directory traversal issues Related CVEs: CVE-2004-1302 CVE-2005-1846 CVE-2005-1847 Upstream summary: Stanislav Brabec discovered errors in yamt's path name handling that lead to buffer overflows and […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-3826 CVE-2021-29622 CVE-2021-3538 Upstream summary: pkgsrc audit-packages flagged prometheus<2.7.1 for vulnerability class 'cross-site-scripting'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-3826 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
![NetBSD 10.0 — php-7.2.[0-9]* — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0](https://www.progressiverobot.com/wp-content/uploads/2026/05/netbsd-10-0-php-7-2-0-9-vulnerability-patch-remediation.jpg "NetBSD 10.0 — php — vulnerability — patch and remediation guide 4")
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged php for vulnerability class 'eol'. Reference: https://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2017-2888 CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575 CVE-2019-7576 CVE-2019-7577 CVE-2019-7578 +10 more Upstream summary: pkgsrc audit-packages flagged SDL2<2.0.7 for vulnerability class 'integer-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-2888 Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2008-0162 Upstream summary: pkgsrc audit-packages flagged splitvt<1.6.6 for vulnerability class 'privilege-escalation'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0162 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2011-1058 CVE-2008-1937 CVE-2009-2265 CVE-2010-0668 CVE-2010-0669 CVE-2010-0828 CVE-2020-15275 CVE-2020-25074 Upstream summary: pkgsrc audit-packages flagged py{24,25,26,27,31}-moin<1.9.3nb1 for vulnerability class 'arbitrary-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1058 Table of contents Symptom & Impact Environment & Reproduction […]
🟠 High ⏱ 15–60 min Last verified: 26 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vlc heap-based buffer overflow Related CVEs: CVE-2007-3316 CVE-2007-3467 CVE-2007-3468 CVE-2008-5032 CVE-2008-5036 CVE-2010-2937 CVE-2012-1775 CVE-2012-1776 +12 more Upstream summary: Thomas Guillem reports: A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in […]
🟢 Low ⏱ 5–15 min Last verified: 26 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: devel/viewvc-devel is vulnerable to cross-site scripting Related CVEs: CVE-2023-22456 CVE-2023-22464 Upstream summary: C. Michael Pilato reports: security fix: escape revision view copy paths (#311) [CVE-2023-22464] security fix: escape revision view […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-12689 CVE-2006-2016 CVE-2012-0834 CVE-2012-1114 CVE-2012-1115 CVE-2017-11107 CVE-2020-35132 CVE-2011-4082 Upstream summary: pkgsrc audit-packages flagged phpldapadmin-[0-9]* for vulnerability class 'remote-code-injection'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-12689 Table of contents Symptom & Impact Environment & Reproduction […]
