🟢 Low ⏱ 5–15 min Last verified: 26 February 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sudo-rs — Authenticating user not recorded properly in timestamp Related CVEs: CVE-2025-64170 CVE-2025-64517 Upstream summary: Trifecta Tech Foundation reports: With Defaults targetpw (or Defaults rootpw) enabled, the password of the […]
🟠 High ⏱ 15–60 min Last verified: 25 February 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: glpi-project — GLPI multiple vulnerabilities Related CVEs: CVE-2011-2720 CVE-2019-13239 CVE-2019-14666 CVE-2020-11031 CVE-2020-11032 CVE-2020-11033 CVE-2020-11034 CVE-2020-11035 +12 more Upstream summary: [email protected] reports: CVE-2024-11955: A vulnerability was found in GLPI up to […]
🟢 Low ⏱ 5–15 min Last verified: 14 February 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: step-certificates — Authorization Bypass in ACME and SCEP Provisioners Related CVEs: CVE-2025-44005 Upstream summary: smallstep reports: An attacker can bypass authorization checks and force a Step CA ACME or SCEP […]
🟡 Medium ⏱ 10–30 min Last verified: 10 February 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: quiche — Infinite loop triggered by connection ID retirement Related CVEs: CVE-2024-1410 CVE-2024-1765 CVE-2025-4820 CVE-2025-4821 CVE-2025-7054 Upstream summary: Quiche Releases reports: This update includes 1 security fix: High CVE-2025-7054: Infinite […]
🟢 Low ⏱ 5–15 min Last verified: 7 February 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-pdfminer.six — Arbitrary Code Execution in pdfminer.six via Crafted PDF Input Related CVEs: CVE-2025-64512 Upstream summary: Pieter Marsman reports: pdfminer.six will execute arbitrary code from a malicious pickle file if […]
🟠 High ⏱ 15–60 min Last verified: 6 February 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — Multiple vulnerabilities Related CVEs: CVE-2021-23214 CVE-2021-23222 CVE-2022-1552 CVE-2024-10976 CVE-2024-10978 CVE-2024-7348 CVE-2025-4207 CVE-2025-8713 +12 more Upstream summary: The PostgreSQL project reports: Missing authorization in PostgreSQL CREATE TYPE allows an […]
🟢 Low ⏱ 5–15 min Last verified: 29 January 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: h11 accepts some malformed Chunked-Encoding bodies Related CVEs: CVE-2025-43859 Upstream summary: h11 reports: h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a leniency in h11's parsing of […]
🟢 Low ⏱ 5–15 min Last verified: 19 January 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Jinja2 — Sandbox breakout through attr filter selecting format method Related CVEs: CVE-2024-34064 CVE-2025-27516 Upstream summary: [email protected] reports: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in […]
🟢 Low ⏱ 5–15 min Last verified: 15 January 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gstreamer1-plugins-opus — Stack buffer-overflow in Opus decoder Related CVEs: CVE-2024-47607 Upstream summary: The GStreamer Security Center reports: Stack buffer-overflow in Opus decoder that can cause crashes for certain input files. […]
🟢 Low ⏱ 5–15 min Last verified: 6 January 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gstreamer1-plugins-ogg — Out-of-bounds write in Ogg demuxer Related CVEs: CVE-2024-47615 Upstream summary: The GStreamer Security Center reports: An out-of-bounds write in the Ogg demuxer that can cause crashes for certain […]
