🟠 High ⏱ 15–60 min Last verified: 11 July 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sudo — privilege escalation vulnerability through host and chroot options Related CVEs: CVE-2005-1993 CVE-2005-2959 CVE-2009-0034 CVE-2010-0426 CVE-2010-1163 CVE-2010-1646 CVE-2010-2956 CVE-2011-0010 +12 more Upstream summary: Todd C. Miller reports, crediting Rich […]
🟢 Low ⏱ 5–15 min Last verified: 1 July 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: soft-serve — Remote code execution vulnerability Related CVEs: CVE-2024-41956 Upstream summary: soft-serve team reports: Arbitrary code execution by crafting git ssh requests It is possible for a user who can […]
🟡 Medium ⏱ 10–30 min Last verified: 1 July 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: git — multiple vulnerabilities Related CVEs: CVE-2024-50349 CVE-2024-52006 CVE-2025-27613 CVE-2025-27614 CVE-2025-46835 CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 Upstream summary: Git development team reports: CVE-2025-27613: Gitk: When a user clones an untrusted repository and […]
🟢 Low ⏱ 5–15 min Last verified: 29 June 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: podman — TLS connection used to pull VM images was not validated Related CVEs: CVE-2025-6032 Upstream summary: RedHat, Inc. reports: A flaw was found in Podman. The podman machine init […]
🟢 Low ⏱ 5–15 min Last verified: 24 June 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not included. […]
🟢 Low ⏱ 5–15 min Last verified: 24 June 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-pdfminer.six — Arbitrary Code Execution in pdfminer.six via Crafted PDF Input Related CVEs: CVE-2025-64512 Upstream summary: Pieter Marsman reports: pdfminer.six will execute arbitrary code from a malicious pickle file if […]
🟡 Medium ⏱ 10–30 min Last verified: 24 June 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libreoffice — Macro URL arbitrary script execution Related CVEs: CVE-2015-1774 CVE-2016-4324 CVE-2018-6871 CVE-2020-12802 CVE-2020-12803 CVE-2025-1080 Upstream summary: [email protected] reports: LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice […]
🟠 High ⏱ 15–60 min Last verified: 18 June 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Gitlab — vulnerabilities Related CVEs: CVE-2023-6195 CVE-2023-6502 CVE-2023-6682 CVE-2023-6688 CVE-2023-7045 CVE-2024-0231 CVE-2024-10043 CVE-2024-10219 +12 more Upstream summary: Gitlab reports: Cross-site Scripting issue in Analytics dashboard chart rendering impacts GitLab EE […]
🟢 Low ⏱ 5–15 min Last verified: 17 June 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-mysql-connector-python — Vulnerability in the MySQL Connectors product of Oracle MySQL Related CVEs: CVE-2025-21548 Upstream summary: Oracle reports: Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported […]
🟠 High ⏱ 15–60 min Last verified: 11 June 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wolfssl — multiple issues Related CVEs: CVE-2015-6925 CVE-2015-7744 CVE-2020-12966 CVE-2021-46744 CVE-2022-34293 CVE-2025-11931 CVE-2025-11932 CVE-2025-11933 +5 more Upstream summary: wolfSSL blog reports: This release includes multiple fixes across TLS 1.2, TLS […]
