Fix Prevention

🟢 Low   ⏱ 5–15 min  Last verified: 22 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: buildbot — OAuth Authentication Vulnerability Related CVEs: CVE-2019-12300 CVE-2019-7313 Upstream summary: Buildbot accepted user-submitted authorization token from OAuth and used it to authenticate user. The vulnerability can lead to malicious […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-djblets — Self-XSS vulnerability Upstream summary: Djblets Release Notes reports: A recently-discovered vulnerability in the datagrid templates allows an attacker to generate a URL to any datagrid page containing malicious […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: jdk — jar directory traversal vulnerability Related CVEs: CVE-2004-1029 CVE-2005-1080 Upstream summary: Pluf has discovered a vulnerability in Sun Java JDK/SDK, which potentially can be exploited by malicious people to […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Erlang – Absolute Path in Zip Module Related CVEs: CVE-2025-32433 CVE-2025-4748 Upstream summary: https://github.com/erlang/otp/security/advisories/GHSA-9g37-pgj9-wrhc reports: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP […]

🟠 High   ⏱ 15–60 min  Last verified: 22 December 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: git — multiple vulnerabilities Related CVEs: CVE-2009-2108 CVE-2010-2542 CVE-2014-9390 CVE-2015-7545 CVE-2016-2315 CVE-2016-2324 CVE-2018-11233 CVE-2018-11235  +12 more Upstream summary: Git development team reports: CVE-2025-27613: Gitk: When a user clones an untrusted […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libmad — multiple vulnerabilities Related CVEs: CVE-2017-8372 CVE-2017-8373 CVE-2017-8374 Upstream summary: National Vulnerability Database: CVE-2017-8372: The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted, allows […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bmon — unsafe set-user-ID application Upstream summary: Jon Nistor reported that the FreeBSD port of bmon was installed set-user-ID root, and executes commands using relative paths. This could allow local […]

🟠 High   ⏱ 15–60 min  Last verified: 22 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: element-web — several vulnerabilities Related CVEs: CVE-2021-40823 CVE-2021-40824 CVE-2022-36059 CVE-2022-36060 CVE-2022-39236 CVE-2022-39249 CVE-2022-39250 CVE-2022-39251  +8 more Upstream summary: Element team reports: Versions of Element Web and Desktop earlier than 1.11.85 […]