🟡 Medium ⏱ 10–30 min Last verified: 15 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: cabextract — directory traversal with UTF-8 symbols in filenames Related CVEs: CVE-2004-0916 CVE-2014-9556 CVE-2015-2060 Upstream summary: Cabextract ChangeLog reports: It was possible for cabinet files to extract to absolute file […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2023-4822 CVE-2024-9476 CVE-2026-21721 CVE-2018-12099 CVE-2018-15727 CVE-2018-19039 CVE-2018-1000816 CVE-2019-13068 +12 more Upstream summary: pkgsrc audit-packages flagged grafana<10.1.3 for vulnerability class 'privilege-escalation'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-4822 Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 15 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-DBI — insecure temporary file creation vulnerability Related CVEs: CAN-2005-0077 Upstream summary: Javier Fernández-Sanguino Peña reports: The DBI library, the Perl5 database interface, creates a temporary PID file in an […]
🟠 High ⏱ 15–60 min Last verified: 15 March 2026 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gstreamer1 — multiple vulnerabilities Related CVEs: CVE-2024-47541 CVE-2024-47542 CVE-2024-47600 CVE-2026-1940 CVE-2026-2920 CVE-2026-2921 CVE-2026-2922 CVE-2026-2923 +12 more Upstream summary: The GStreamer project reports multiple security vulnerabilities fixed in the 1.28.3 release: […]
🟢 Low ⏱ 5–15 min Last verified: 15 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-66506 CVE-2026-22772 Upstream summary: Fulcio is a free-to-use certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity. Prior to 1.8.3, function identity.extractIssuerURL splits (via […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read • Source: Microsoft KB5071505 • MSRC update-guide entry Related CVEs: CVE-2025-62466 CVE-2025-62470 CVE-2025-62472 CVE-2025-62473 CVE-2025-62549 CVE-2025-62571 CVE-2025-62474 CVE-2025-54100 Affected components: Windows Server 2025 Microsoft summary: Null pointer dereference in Windows Client-Side Caching (CSC) Service allows […]
🟠 High ⏱ 15–60 min Last verified: 15 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2098 CVE-2018-11771 CVE-2018-1324 CVE-2019-12402 CVE-2021-35515 CVE-2021-35516 CVE-2021-35517 CVE-2021-36090 +3 more Upstream summary: Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress […]
🟡 Medium ⏱ 10–30 min Last verified: 15 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Related CVEs: CVE-2005-1992 CVE-2005-2337 CVE-2006-3694 CVE-2006-5467 CVE-2006-6303 CVE-2008-2726 Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. […]
🟢 Low ⏱ 5–15 min Last verified: 15 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: graphite2 — out-of-bounds write with malicious font Related CVEs: CVE-2017-5436 Upstream summary: Mozilla Foundation reports: An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. […]
🟡 Medium ⏱ 10–30 min Last verified: 15 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-36377 CVE-2025-70888 CVE-2026-39853 CVE-2026-39855 CVE-2026-39856 Upstream summary: Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe.sys, […]
