🟢 Low ⏱ 5–15 min Last verified: 5 April 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: viewvc — Arbitrary server filesystem content Related CVEs: CVE-2025-54141 Upstream summary: cmpilato reports: The ViewVC standalone web server (standalone.py) is a script provided in the ViewVC distribution for the purposes […]
🟡 Medium ⏱ 10–30 min Last verified: 2 April 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: FreeBSD — Multiple vulnerabilities in OpenSSH Related CVEs: CVE-2021-28041 CVE-2021-41617 CVE-2023-38408 CVE-2025-26465 CVE-2025-26466 Upstream summary: Problem Description: OpenSSH client host verification error (CVE-2025-26465) ssh(1) contains a logic error that allows […]
🟢 Low ⏱ 5–15 min Last verified: 31 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: podman — TLS connection used to pull VM images was not validated Related CVEs: CVE-2025-6032 Upstream summary: RedHat, Inc. reports: A flaw was found in Podman. The podman machine init […]
🟡 Medium ⏱ 10–30 min Last verified: 30 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: cups — security vulnerabilities Related CVEs: CVE-2019-8675 CVE-2019-8696 CVE-2019-8842 CVE-2020-3898 CVE-2024-47076 CVE-2024-47175 CVE-2024-47176 CVE-2025-58060 +1 more Upstream summary: OpenPrinting reports: When the AuthType is set to anything but Basic, if […]
🟢 Low ⏱ 5–15 min Last verified: 30 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libxml2 — Out-of-bounds memory access Related CVEs: CVE-2025-32414 Upstream summary: [email protected] reports: In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python […]
🟢 Low ⏱ 5–15 min Last verified: 30 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: plasma[56]-plasma-workspace — Unauthorized users can access session manager Related CVEs: CVE-2024-36041 Upstream summary: David Edmundson reports: KSmserver, KDE's XSMP manager, incorrectly allows connections via ICE based purely on the host, […]
🟢 Low ⏱ 5–15 min Last verified: 28 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fcgi — Heap-based buffer overflow via crafted nameLen/valueLen in ReadParams Related CVEs: CVE-2025-23016 Upstream summary: [email protected] reports: FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant […]
🟠 High ⏱ 15–60 min Last verified: 27 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wolfssl — multiple issues Related CVEs: CVE-2015-6925 CVE-2015-7744 CVE-2020-12966 CVE-2021-46744 CVE-2022-34293 CVE-2025-11931 CVE-2025-11932 CVE-2025-11933 +5 more Upstream summary: wolfSSL blog reports: This release includes multiple fixes across TLS 1.2, TLS […]
🟢 Low ⏱ 5–15 min Last verified: 26 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Jinja2 — Sandbox breakout through attr filter selecting format method Related CVEs: CVE-2024-34064 CVE-2025-27516 Upstream summary: [email protected] reports: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in […]
🟡 Medium ⏱ 10–30 min Last verified: 24 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ModSecurity — empty XML tag causes segmentation fault Related CVEs: CVE-2025-47947 CVE-2025-48866 CVE-2025-52891 Upstream summary: [email protected] reports: ModSecurity is an open source, cross platform web application firewall (WAF) engine for […]
