FreeBSD 15

🟡 Medium   ⏱ 10–30 min  Last verified: 21 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: OpenVPN — avoid buffer overread parsing routes or endpoints Related CVEs: CVE-2008-3459 CVE-2020-11810 CVE-2023-46849 CVE-2023-46850 CVE-2025-10680 CVE-2025-12106 CVE-2025-13086 CVE-2025-2704 Upstream summary: Mikhail Khachaiants reports: socket: reject mismatched address family in […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: groff — pic2graph and eqn2graph are vulnerable to symlink attack through temporary files Related CVEs: CVE-2004-0969 CVE-2004-1296 Upstream summary: The eqn2graph and pic2graph scripts in groff 1.18.1 allow local users […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: inn — plaintext command injection into encrypted channel Related CVEs: CVE-2011-0411 CVE-2012-3523 Upstream summary: INN developers report: Fixed a possible plaintext command injection during the negotiation of a TLS layer. […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: phpmyfaq — multiple vulnerabilities Related CVEs: CVE-2023-5863 CVE-2023-5865 Upstream summary: phpMyFAQ team reports: Stored cross-site scripting (XSS) and unauthenticated config backup download vulnerability Table of contents Symptom & Impact Environment […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Shibboleth Service Provider — SQL injection vulnerability in ODBC plugin Related CVEs: CVE-2015-2684 Upstream summary: Internet2 reports: The Shibboleth Service Provider includes a storage API usable for a number of […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: opera — moderately severe issue Upstream summary: Opera reports: Fixed a moderately severe issue, as reported by Attila Suszte. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: open-vm-tools — Multiple vulnerabilities Related CVEs: CVE-2023-34058 CVE-2023-34059 Upstream summary: VMware reports: This update includes 2 security fixes: High CVE-2023-34058: SAML token signature bypass vulnerability High CVE-2023-34059: File descriptor hijack […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rubygem-json — Unsafe Objection Creation Vulnerability in JSON (Additional fix) Related CVEs: CVE-2020-10663 Upstream summary: When parsing certain JSON documents, the json gem (including the one bundled with Ruby) can […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PEAR — Net_Ping and Net_Traceroute remote arbitrary command injection Related CVEs: CVE-2009-4024 CVE-2009-4025 Upstream summary: PEAR Security Advisory reports: Multiple remote arbitrary command injections have been found in the Net_Ping […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PyYAML — arbitrary code execution Related CVEs: CVE-2020-14343 CVE-2020-1747 Upstream summary: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code […]