🟢 Low ⏱ 5–15 min Last verified: 22 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bmon — unsafe set-user-ID application Upstream summary: Jon Nistor reported that the FreeBSD port of bmon was installed set-user-ID root, and executes commands using relative paths. This could allow local […]
🟠 High ⏱ 15–60 min Last verified: 22 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: element-web — several vulnerabilities Related CVEs: CVE-2021-40823 CVE-2021-40824 CVE-2022-36059 CVE-2022-36060 CVE-2022-39236 CVE-2022-39249 CVE-2022-39250 CVE-2022-39251 +8 more Upstream summary: Element team reports: Versions of Element Web and Desktop earlier than 1.11.85 […]
🟡 Medium ⏱ 10–30 min Last verified: 22 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libpng stack-based buffer overflow and other code concerns Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 Upstream summary: Chris Evans has discovered multiple vulnerabilities in libpng, which can be exploited by malicious people […]
🟢 Low ⏱ 5–15 min Last verified: 22 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pam_ldap — authentication bypass vulnerability Related CVEs: CVE-2005-2641 Upstream summary: Luke Howard reports: If a pam_ldap client authenticates against an LDAP server that returns a passwordPolicyResponse control, but omits the […]
🟠 High ⏱ 15–60 min Last verified: 22 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2004-0594 CVE-2004-0595 CVE-2004-1019 CVE-2004-1065 CVE-2005-0596 CVE-2006-4481 CVE-2006-4482 CVE-2006-4483 +12 more Upstream summary: The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.2 […]
🟢 Low ⏱ 5–15 min Last verified: 22 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-Authen-SASL — Insecure source of randomness Related CVEs: CVE-2025-40918 Upstream summary: p5-Authen-SASL project reports: Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. The cnonce (client nonce) is […]
🟡 Medium ⏱ 10–30 min Last verified: 22 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — libpq retains an error message from man-in-the-middle Related CVEs: CVE-2022-41862 CVE-2024-10977 CVE-2024-7348 Upstream summary: PostgreSQL project reports: Client use of server error message in PostgreSQL allows a server […]
🟢 Low ⏱ 5–15 min Last verified: 22 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ipython — Execution with Unnecessary Privileges Related CVEs: CVE-2022-21699 Upstream summary: IPython project reports: IPython 8.0.1, 7.31.1 and 5.11 are security releases that change some default values in order to […]
🟠 High ⏱ 15–60 min Last verified: 22 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wordpress — XSS Related CVEs: CVE-2005-1810 CVE-2005-2107 CVE-2005-2108 CVE-2005-2109 CVE-2005-2110 CVE-2005-4463 CVE-2007-4894 CVE-2007-5710 +12 more Upstream summary: The WordPress team reports: A cross-site scripting (XSS) vulnerability affecting the Avatar block […]
🟢 Low ⏱ 5–15 min Last verified: 21 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-Mojolicious — cookie-handling vulnerability Upstream summary: Upstream commit: Vulnerabilities existed in cookie handling. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution […]
