🟢 Low ⏱ 5–15 min Last verified: 18 March 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: spotipy — CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Related CVEs: CVE-2025-66040 Upstream summary: https://github.com/spotipy-dev/spotipy/security/advisories/GHSA-r77h-rpp9-w2xm reports: Spotipy is a Python library for the Spotify Web API. […]
🟢 Low ⏱ 5–15 min Last verified: 14 March 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: SQLite — Integer Overflow vulnerability Related CVEs: CVE-2025-29088 CVE-2025-52099 Upstream summary: http://sqlite3.com reports: Integer Overflow vulnerability in SQLite SQLite3 v.3.50.0 allows a remote attacker to cause a denial of service […]
🟡 Medium ⏱ 10–30 min Last verified: 13 March 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: typo3-{11,12} — multiple vulnerabilities Related CVEs: CVE-2023-30451 CVE-2023-47125 CVE-2023-47126 CVE-2023-47127 CVE-2024-22188 CVE-2024-25118 CVE-2024-25119 CVE-2024-25120 +1 more Upstream summary: Typo3 developers reports: All versions are security releases and contain important security […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libxml2 — Out-of-bounds memory access Related CVEs: CVE-2025-32414 Upstream summary: [email protected] reports: In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python […]
🟢 Low ⏱ 5–15 min Last verified: 12 March 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vim — Improper Input Validation in Vim Related CVEs: CVE-2025-27423 Upstream summary: [email protected] reports: Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or […]
🟢 Low ⏱ 5–15 min Last verified: 3 March 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sudo-rs — Authenticating user not recorded properly in timestamp Related CVEs: CVE-2025-64170 CVE-2025-64517 Upstream summary: Trifecta Tech Foundation reports: With Defaults targetpw (or Defaults rootpw) enabled, the password of the […]
🟢 Low ⏱ 5–15 min Last verified: 1 March 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: h11 accepts some malformed Chunked-Encoding bodies Related CVEs: CVE-2025-43859 Upstream summary: h11 reports: h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a leniency in h11's parsing of […]
🟡 Medium ⏱ 10–30 min Last verified: 27 February 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libxml2 — multiple vulnerabilities Related CVEs: CVE-2025-49794 CVE-2025-49795 CVE-2025-6021 CVE-2025-6170 Upstream summary: Alan Coopersmith reports: As discussed in https://gitlab.gnome.org/GNOME/libxml2/-/issues/913 the security policy of libxml2 has been changed to disclose vulnerabilities […]
🟡 Medium ⏱ 10–30 min Last verified: 25 February 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libtasn1 — Stack-based buffer overflow Related CVEs: CVE-2012-1569 CVE-2015-2806 CVE-2016-4008 CVE-2025-13151 Upstream summary: oss-security@ list reports: Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size […]
🟢 Low ⏱ 5–15 min Last verified: 21 February 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-pdfminer.six — Arbitrary Code Execution in pdfminer.six via Crafted PDF Input Related CVEs: CVE-2025-64512 Upstream summary: Pieter Marsman reports: pdfminer.six will execute arbitrary code from a malicious pickle file if […]
