🟢 Low ⏱ 5–15 min Last verified: 11 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not included. […]
🟢 Low ⏱ 5–15 min Last verified: 11 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bogofilter — RFC 2047 decoder denial-of-service vulnerability Related CVEs: CVE-2004-1007 Upstream summary: The bogofilter team has been provided with a test case of a malformatted (non-conformant) RFC-2047 encoded word that […]
🟢 Low ⏱ 5–15 min Last verified: 11 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL vulnerabilities Related CVEs: CVE-2016-5423 CVE-2016-5424 Upstream summary: The PostgreSQL project reports: Security Fixes nested CASE expressions + database and role names with embedded special characters CVE-2017-7484: selectivity estimators bypass […]
🟡 Medium ⏱ 10–30 min Last verified: 11 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openldap — denial of service vulnerability Related CVEs: CVE-2006-4600 CVE-2007-5707 CVE-2007-5708 CVE-2008-0658 CVE-2015-6908 Upstream summary: Denis Andzakovic reports: By sending a crafted packet, an attacker may cause the OpenLDAP server […]
🟢 Low ⏱ 5–15 min Last verified: 11 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lldpd — Buffer overflow/Denial of service Related CVEs: CVE-2015-8011 CVE-2015-8012 Upstream summary: The lldpd developer Vincent Bernat reports: A buffer overflow may allow arbitrary code execution only if hardening was […]
🟢 Low ⏱ 5–15 min Last verified: 10 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: CairoSVG — Regular Expression Denial of Service vulnerability Upstream summary: CairoSVG security advisories: When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular […]
🟢 Low ⏱ 5–15 min Last verified: 10 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: LibYAML input sanitization errors Related CVEs: CVE-2014-2525 Upstream summary: oCERT reports: The LibYAML project is an open source YAML 1.1 parser and emitter written in C. The library is affected […]
🟢 Low ⏱ 5–15 min Last verified: 10 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dendrite — Server-side request forgery vulnerability Related CVEs: CVE-2022-36009 CVE-2024-52594 Upstream summary: Dendrite team reports: This is a security release, gomatrixserverlib was vulnerable to server-side request forgery, serving content from […]
🟡 Medium ⏱ 10–30 min Last verified: 10 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: apache — Prevent chunk-size integer overflow on platforms where sizeof(int) < sizeof(long) Related CVEs: CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 Upstream summary: Apache ChangeLog reports: Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c […]
🟢 Low ⏱ 5–15 min Last verified: 10 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Slixmpp — Lack of SSL Certificate hostname validation in XMLStream Related CVEs: CVE-2022-45197 Upstream summary: NIST reports: Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker […]
