🟢 Low ⏱ 5–15 min Last verified: 6 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nfsen — remote command execution Upstream summary: Peter Haag reports: A remote attacker with access to the web interface to execute arbitrary commands on the host operating system. Table of […]
🟡 Medium ⏱ 10–30 min Last verified: 6 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libpng stack-based buffer overflow and other code concerns Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 Upstream summary: Chris Evans has discovered multiple vulnerabilities in libpng, which can be exploited by malicious people […]
🟡 Medium ⏱ 10–30 min Last verified: 6 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gdk-pixbuf — image decoding vulnerabilities Related CVEs: CVE-2004-0782 CVE-2004-0783 CVE-2004-0788 Upstream summary: Chris Evans discovered several flaws in the gdk-pixbuf XPM image decoder: Heap-based overflow in pixbuf_create_from_xpm Stack-based overflow in […]
🟢 Low ⏱ 5–15 min Last verified: 6 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-cryptography — includes a vulnerable copy of OpenSSL Related CVEs: CVE-2023-0286 CVE-2023-23931 Upstream summary: pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography […]
🟠 High ⏱ 15–60 min Last verified: 6 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-resolv — Possible denial of service Related CVEs: CVE-2004-0755 CVE-2004-0983 CVE-2005-1992 CVE-2005-2337 CVE-2006-3694 CVE-2006-5467 CVE-2006-6303 CVE-2008-1447 +12 more Upstream summary: Manu reports: The vulnerability is caused by an insufficient check […]
🟢 Low ⏱ 5–15 min Last verified: 5 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lives — insecure files permissions Upstream summary: Debian reports: smogrify script creates insecure temporary files. lives creates and uses world-writable directory. Table of contents Symptom & Impact Environment & Reproduction […]
🟠 High ⏱ 15–60 min Last verified: 5 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wolfssl — multiple issues Related CVEs: CVE-2015-6925 CVE-2015-7744 CVE-2020-12966 CVE-2021-46744 CVE-2022-34293 CVE-2025-11931 CVE-2025-11932 CVE-2025-11933 +5 more Upstream summary: wolfSSL blog reports: This release includes multiple fixes across TLS 1.2, TLS […]
🟢 Low ⏱ 5–15 min Last verified: 5 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-pdfminer.six — Arbitrary Code Execution in pdfminer.six via Crafted PDF Input Related CVEs: CVE-2025-64512 Upstream summary: Pieter Marsman reports: pdfminer.six will execute arbitrary code from a malicious pickle file if […]
🟢 Low ⏱ 5–15 min Last verified: 5 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: jose — DoS vulnerability Related CVEs: CVE-2023-50967 Upstream summary: [email protected] reports: latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c […]
🟢 Low ⏱ 5–15 min Last verified: 5 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-numpy — Missing return-value validation of the function PyArray_DescrNew Related CVEs: CVE-2021-41495 Upstream summary: Numpy reports: At most call-sites for PyArray_DescrNew, there are no validations of its return, but an […]
