🟢 Low ⏱ 5–15 min Last verified: 5 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Supervisord — An authenticated client can run arbitrary shell commands via malicious XML-RPC requests Related CVEs: CVE-2017-11610 Upstream summary: mnaberez reports: supervisord can be configured to run an HTTP server […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-15095 Upstream summary: pkgsrc audit-packages flagged py{27,39,310,311,312,313,314}-httpbin-[0-9]* for vulnerability class 'cross-site-scripting'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-15095 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟢 Low ⏱ 5–15 min Last verified: 4 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Postfix — memory corruption vulnerability Related CVEs: CVE-2011-0411 CVE-2011-1720 Upstream summary: The Postfix SMTP server has a memory corruption error, when the Cyrus SASL library is used with authentication mechanisms […]
🟢 Low ⏱ 5–15 min Last verified: 4 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ircd-ratbox and charybdis — remote DoS vulnerability Related CVEs: CVE-2009-4016 CVE-2010-0300 Upstream summary: atheme.org reports: All versions of Charybdis are vulnerable to a remotely-triggered crash bug caused by code originating […]
🟢 Low ⏱ 5–15 min Last verified: 4 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bogofilter — heap corruption by invalid base64 input Related CVEs: CVE-2010-2494 CVE-2012-5468 Upstream summary: David Relson reports: Fix a heap corruption in base64 decoder on invalid input. Analysis and patch […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2017-6430 CVE-2017-8366 CVE-2010-3844 CVE-2010-3843 CVE-2026-3606 Upstream summary: pkgsrc audit-packages flagged ettercap-0.7.2 for vulnerability class 'remote-code-execution'. Reference: http://secunia.com/advisories/15535/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟠 High ⏱ 15–60 min Last verified: 4 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Pillow — Regular Expression Denial of Service (ReDoS) Related CVEs: CVE-2019-19911 CVE-2020-5310 CVE-2020-5311 CVE-2020-5312 CVE-2020-5313 CVE-2021-23437 CVE-2021-25288 CVE-2021-28675 +3 more Upstream summary: GitHub Advisory Database reports: Uncontrolled Resource Consumption in […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-23490 CVE-2026-30922 Upstream summary: pkgsrc audit-packages flagged py{27,310,311,312,313,314}-asn1<0.6.2 for vulnerability class 'denial-of-service'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-23490 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟢 Low ⏱ 5–15 min Last verified: 4 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: monotone — remote denial of service in default setup Upstream summary: The monotone developers report: Running "mtn ''" or "mtn ls ''" doesn't cause an internal error anymore. In monotone […]
🟢 Low ⏱ 5–15 min Last verified: 4 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: SquirrelMail — Plug-ins compromise Upstream summary: Problem Description: The SquirrelMail Web Server has been compromised, and three plugins are affected. The port of squirrelmail-sasql-plugin is safe (right MD5), and change_pass […]
