🟢 Low ⏱ 5–15 min Last verified: 22 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: hsftp format string vulnerabilities Upstream summary: Ulf Härnhammar discovered a format string bug in hsftp's file listing code may allow a malicious server to cause arbitrary code execution by the […]
🟢 Low ⏱ 5–15 min Last verified: 22 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: "Content-Type" XSS vulnerability affecting other webmail systems Related CVEs: CVE-2004-0519 Upstream summary: Roman Medina-Heigl Hernandez did a survey which other webmail systems where vulnerable to a bug he discovered in […]
🟢 Low ⏱ 5–15 min Last verified: 22 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: magento — multiple vulnerabilities Related CVEs: CVE-2012-3363 Upstream summary: Magento, Inc. reports: SUPEE-6482 – This patch addresses two issues related to APIs and two cross-site scripting risks. SUPEE-6285 – This […]
🟡 Medium ⏱ 10–30 min Last verified: 22 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libtasn1 — Stack-based buffer overflow Related CVEs: CVE-2012-1569 CVE-2015-2806 CVE-2016-4008 CVE-2025-13151 Upstream summary: oss-security@ list reports: Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size […]
🟢 Low ⏱ 5–15 min Last verified: 22 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-strawberry-graphql — Multiple vulnerabilities Related CVEs: CVE-2026-35523 CVE-2026-35526 Upstream summary: The Strawberry GraphQL project reports: Strawberry up until version 0.312.3 is vulnerable to an authentication bypass on WebSocket subscription endpoints. […]
🟢 Low ⏱ 5–15 min Last verified: 22 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: irc-ratbox — multiple vulnerabilities Related CVEs: CVE-2009-4016 CVE-2010-0300 Upstream summary: SecurityFocus reports: The first affects the /quote HELP module and allows a user to trigger an IRCD crash on some […]
🟢 Low ⏱ 5–15 min Last verified: 22 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: RabbitMQ-C — auth credentials visible in commandline tool options Related CVEs: CVE-2019-18609 CVE-2023-35789 Upstream summary: hadmut reports: This C library includes 2 command-line tools that can take credentials as command-line […]
🟠 High ⏱ 15–60 min Last verified: 22 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CVE-2006-3113 CVE-2006-3677 CVE-2006-3801 CVE-2006-3802 CVE-2006-3803 CVE-2006-3804 CVE-2006-3805 CVE-2006-3806 +12 more Upstream summary: Mozilla Foundation reports: CVE-2019-11751: Malicious code execution through command line parameters CVE-2019-11746: […]
🟢 Low ⏱ 5–15 min Last verified: 21 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pidgin-otr — use after free Related CVEs: CVE-2012-2369 CVE-2015-8833 Upstream summary: Hanno Bock reports: The pidgin-otr plugin version 4.0.2 fixes a heap use after free error. The bug is triggered […]
🟡 Medium ⏱ 10–30 min Last verified: 21 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: typo3 — XSS vulnerability in svg-sanitize Related CVEs: CVE-2020-11063 CVE-2020-11064 CVE-2020-11065 CVE-2020-11066 CVE-2020-11067 CVE-2020-11069 CVE-2020-15098 CVE-2020-15099 +1 more Upstream summary: The TYPO3 project reports: The SVG sanitizer library enshrined/svg-sanitize before […]
