FreeBSD 12

🟢 Low   ⏱ 5–15 min  Last verified: 12 June 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Erlang – Absolute Path in Zip Module Related CVEs: CVE-2025-32433 CVE-2025-4748 Upstream summary: https://github.com/erlang/otp/security/advisories/GHSA-9g37-pgj9-wrhc reports: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP […]

🟠 High   ⏱ 15–60 min  Last verified: 5 June 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — federation denial of service via malformed events Related CVEs: CVE-2020-26257 CVE-2020-26891 CVE-2021-29471 CVE-2021-39163 CVE-2021-39164 CVE-2021-41281 CVE-2022-31052 CVE-2024-31208  +7 more Upstream summary: element-hq/synapse developers report: A malicious server can […]

🟠 High   ⏱ 15–60 min  Last verified: 31 May 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: glpi-project — GLPI multiple vulnerabilities Related CVEs: CVE-2011-2720 CVE-2019-13239 CVE-2019-14666 CVE-2020-11031 CVE-2020-11032 CVE-2020-11033 CVE-2020-11034 CVE-2020-11035  +12 more Upstream summary: [email protected] reports: CVE-2024-11955: A vulnerability was found in GLPI up to […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 May 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2024-32879 CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 May 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Spotipy — Spotipy's cache file, containing spotify auth token, is created with overly broad permissions Related CVEs: CVE-2023-23608 CVE-2025-27154 Upstream summary: [email protected] reports: Spotipy is a lightweight Python library for […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 May 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PuTTY and embedders (f.i., filezilla) — biased RNG with NIST P521/ecdsa-sha2-nistp521 signatures permits recovering private key Related CVEs: CVE-2024-31497 Upstream summary: Simon Tatham reports: ECDSA signatures using 521-bit keys (the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 May 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: vim — potential data loss with zip.vim and specially crafted zip files Related CVEs: CVE-2004-1138 CVE-2005-2368 CVE-2007-2953 CVE-2008-2712 CVE-2008-3076 CVE-2008-3432 CVE-2016-1248 CVE-2025-27423  +1 more Upstream summary: Vim reports: See https://github.com/vim/vim/security/advisories/GHSA-693p-m996-3rmf […]

🟠 High   ⏱ 15–60 min  Last verified: 14 May 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: suricata — Multiple vulnerabilities Related CVEs: CVE-2015-0971 CVE-2019-10053 CVE-2024-23835 CVE-2024-23836 CVE-2024-23837 CVE-2024-23839 CVE-2024-24568 CVE-2025-29915  +3 more Upstream summary: Suricate team reports: Multiple vulnerabilities CVE-2025-29915: Severity HIGH. The AF_PACKET defrag option […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 May 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: vim — Improper Input Validation in Vim Related CVEs: CVE-2008-3076 CVE-2025-27423 Upstream summary: [email protected] reports: Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 May 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: putty — multiple security vulnerabilities Related CVEs: CVE-2020-14002 CVE-2023-48795 CVE-2024-31497 Upstream summary: Simon Tatham reports: These features are new in PuTTY 0.84: Security issue: fixed a remotely triggerable double-free in […]