🟢 Low ⏱ 5–15 min Last verified: 15 September 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: smb4k — Critical vulnerabilities in Mount Helper Related CVEs: CVE-2025-66002 CVE-2025-66003 Upstream summary: vulndb reports: A vulnerability, which was classified as critical, was found in smb4k up to 4.0.4. Affected […]
🟢 Low ⏱ 5–15 min Last verified: 13 September 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: step-certificates — Authorization Bypass in ACME and SCEP Provisioners Related CVEs: CVE-2025-44005 Upstream summary: smallstep reports: An attacker can bypass authorization checks and force a Step CA ACME or SCEP […]
🟢 Low ⏱ 5–15 min Last verified: 9 September 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Jinja2 — Sandbox breakout through attr filter selecting format method Related CVEs: CVE-2024-34064 CVE-2025-27516 Upstream summary: [email protected] reports: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in […]
🟡 Medium ⏱ 10–30 min Last verified: 9 September 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Vinyl/Varnish — HTTP/2 parsing deficiency Related CVEs: CVE-2013-4484 CVE-2017-8807 CVE-2022-23959 CVE-2023-43622 CVE-2023-44487 CVE-2025-30346 CVE-2025-8671 Upstream summary: Vinyl Development Team reports: A deficiency in HTTP/2 request parsing can be exploited to […]
🟢 Low ⏱ 5–15 min Last verified: 6 September 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Mozilla — Sandbox escape Related CVEs: CVE-2025-14321 CVE-2025-14322 Upstream summary: https://bugzilla.mozilla.org/show_bug.cgi?id=1996473 reports: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 4 September 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: redis,valkey — Out of bound read due to a bug in LUA Related CVEs: CVE-2024-31227 CVE-2024-31228 CVE-2024-31449 CVE-2024-46981 CVE-2024-51741 CVE-2025-21605 CVE-2025-27151 CVE-2025-32023 +5 more Upstream summary: redis reports: An authenticated […]
🟢 Low ⏱ 5–15 min Last verified: 3 September 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sudo-rs — Authenticating user not recorded properly in timestamp Related CVEs: CVE-2025-64170 CVE-2025-64517 Upstream summary: Trifecta Tech Foundation reports: With Defaults targetpw (or Defaults rootpw) enabled, the password of the […]
🟢 Low ⏱ 5–15 min Last verified: 2 September 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-pdfminer.six — Arbitrary Code Execution in pdfminer.six via Crafted PDF Input Related CVEs: CVE-2025-64512 Upstream summary: Pieter Marsman reports: pdfminer.six will execute arbitrary code from a malicious pickle file if […]
🟢 Low ⏱ 5–15 min Last verified: 2 September 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-setuptools — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Related CVEs: CVE-2025-47273 Upstream summary: https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf reports: setuptools is a package that allows users to download, build, […]
🟢 Low ⏱ 5–15 min Last verified: 1 September 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fcgi — Heap-based buffer overflow via crafted nameLen/valueLen in ReadParams Related CVEs: CVE-2025-23016 Upstream summary: [email protected] reports: FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant […]
