🟢 Low ⏱ 5–15 min Last verified: 21 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: postfix-policyd-weight — working directory symlink vulnerability Upstream summary: postfix-policyd-weight does not check for symlink for its working directory. If the working directory is not already setup by the super root, […]
🟢 Low ⏱ 5–15 min Last verified: 21 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ppxp — local root exploit Related CVEs: CVE-2005-0392 Upstream summary: A Debian Advisory reports: Jens Steube discovered that ppxp, yet another PPP program, does not release root privileges when opening […]
🟢 Low ⏱ 5–15 min Last verified: 21 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: SSH.COM SFTP server — format string vulnerability Related CVEs: CVE-2006-0705 Upstream summary: SSH Communications Security Corp reports a format string vulnerability in their SFTP server. This vulnerability could cause a […]
🟢 Low ⏱ 5–15 min Last verified: 21 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rockdodger — buffer overflows Upstream summary: The environment variable HOME is copied without regard to buffer size, which can be used to gain elevated privilege if the binary is installed […]
🟢 Low ⏱ 5–15 min Last verified: 21 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: postorius — XSS Related CVEs: CVE-2026-44742 Upstream summary: NIST reports: Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as […]
🟡 Medium ⏱ 10–30 min Last verified: 21 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-passenger — arbitrary file read vulnerability Related CVEs: CVE-2013-2119 CVE-2015-7519 CVE-2017-16355 Upstream summary: Phusion reports: The cPanel Security Team discovered a vulnerability in Passenger that allows users to list the […]
🟢 Low ⏱ 5–15 min Last verified: 21 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: proxytunnel — format string vulnerability Related CVEs: CVE-2004-0992 Upstream summary: A Gentoo Linux Security Advisory reports: Florian Schilhabel of the Gentoo Linux Security Audit project found a format string vulnerability […]
🟢 Low ⏱ 5–15 min Last verified: 21 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Icinga Web 2 — directory traversal vulnerability Related CVEs: CVE-2020-24368 Upstream summary: Icinga development team reports: CVE-2020-24368 Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal […]
🟢 Low ⏱ 5–15 min Last verified: 21 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-flask-security — user redirect to arbitrary URL vulnerability Related CVEs: CVE-2021-23385 Upstream summary: Snyk reports: This affects all versions of package Flask-Security. When using the `get_post_logout_redirect` and `get_post_login_redirect` functions, it […]
🟢 Low ⏱ 5–15 min Last verified: 21 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Template::Toolkit — Directory traversal on write Related CVEs: CVE-2019-19781 Upstream summary: Art Manion and Will Dormann report: By using an older and less-secure form of open(), it is possible for […]
