🟢 Low ⏱ 5–15 min Last verified: 21 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gstreamer1-plugins-jpeg — NULL-pointer dereferences in JPEG decoder Related CVEs: CVE-2024-47599 Upstream summary: The GStreamer Security Center reports: Insufficient error handling in the JPEG decoder that can lead to NULL-pointer dereferences, […]
🟢 Low ⏱ 5–15 min Last verified: 17 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dendrite — Server-side request forgery vulnerability Related CVEs: CVE-2022-36009 CVE-2024-52594 Upstream summary: Dendrite team reports: This is a security release, gomatrixserverlib was vulnerable to server-side request forgery, serving content from […]
🟢 Low ⏱ 5–15 min Last verified: 15 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Mozilla — Sandbox escape Related CVEs: CVE-2025-14321 CVE-2025-14322 Upstream summary: https://bugzilla.mozilla.org/show_bug.cgi?id=1996473 reports: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 14 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Hidden/Protected custom variables are prone to filter enumeration Related CVEs: CVE-2025-61789 Upstream summary: Icinga reports: An authorized user with access to Icinga DB Web, can use a custom variable in […]
🟢 Low ⏱ 5–15 min Last verified: 14 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2024-32879 CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not […]
🟢 Low ⏱ 5–15 min Last verified: 7 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sqlite — Integer Truncation on SQLite Related CVEs: CVE-2024-0232 CVE-2025-6965 Upstream summary: [email protected] reports: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could […]
🟡 Medium ⏱ 10–30 min Last verified: 6 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — federation denial of service via malformed events Related CVEs: CVE-2022-31052 CVE-2024-31208 CVE-2024-37302 CVE-2024-37303 CVE-2024-52805 CVE-2024-52815 CVE-2024-53863 CVE-2024-53867 +1 more Upstream summary: element-hq/synapse developers report: A malicious server can […]
🟡 Medium ⏱ 10–30 min Last verified: 5 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vscode — security feature bypass vulnerability Related CVEs: CVE-2023-29338 CVE-2023-33144 CVE-2023-36742 CVE-2024-43601 CVE-2025-21264 CVE-2025-24039 CVE-2025-24042 Upstream summary: VSCode developers report: A security feature bypass vulnerability exists in VS Code 1.100.0 […]
🟢 Low ⏱ 5–15 min Last verified: 3 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not included. […]
🟠 High ⏱ 15–60 min Last verified: 1 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Django — multiple vulnerabilities Related CVEs: CVE-2021-31542 CVE-2021-45115 CVE-2021-45116 CVE-2021-45452 CVE-2022-28346 CVE-2022-28347 CVE-2022-34265 CVE-2022-36359 +12 more Upstream summary: Django reports: CVE-2025-59681: Potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() […]
