🟢 Low ⏱ 5–15 min Last verified: 18 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php-imap — imap_open allows to run arbitrary shell commands via mailbox parameter Upstream summary: The PHP team reports: imap_open allows to run arbitrary shell commands via mailbox parameter. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 18 July 2026 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: munge — CWE-787: Out-of-bounds Write Related CVEs: CVE-2026-25506 Upstream summary: https://github.com/dun/munge/security/advisories/GHSA-r9cr-jf4v-75gh reports: MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can […]
🟢 Low ⏱ 5–15 min Last verified: 18 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]
🟠 High ⏱ 15–60 min Last verified: 18 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bind — denial of service vulnerability Related CVEs: CVE-2012-5166 CVE-2012-5688 CVE-2013-2266 CVE-2013-3919 CVE-2013-4854 CVE-2014-0591 CVE-2014-8500 CVE-2014-8680 +5 more Upstream summary: ISC reports: An incorrect boundary check in openpgpkey_61.c can cause […]
🟢 Low ⏱ 5–15 min Last verified: 18 July 2026 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-strawberry-graphql — Multiple vulnerabilities Related CVEs: CVE-2026-35523 CVE-2026-35526 Upstream summary: The Strawberry GraphQL project reports: Strawberry up until version 0.312.3 is vulnerable to an authentication bypass on WebSocket subscription endpoints. […]
🟢 Low ⏱ 5–15 min Last verified: 18 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: virtualenv — CWE-59: Improper Link Resolution Before File Access ('Link Following') Related CVEs: CVE-2026-22702 Upstream summary: https://github.com/pypa/virtualenv/security/advisories/GHSA-597g-3phw-6986 reports: virtualenv is a tool for creating isolated virtual python environments. Prior to […]
🟡 Medium ⏱ 10–30 min Last verified: 18 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-ansible — multiple vulnerabilities Related CVEs: CVE-2020-25635 CVE-2020-25636 CVE-2021-3532 Upstream summary: abeluck reports: A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is […]
🟢 Low ⏱ 5–15 min Last verified: 18 July 2026 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-strawberry-graphql — Multiple vulnerabilities Related CVEs: CVE-2026-35523 CVE-2026-35526 Upstream summary: The Strawberry GraphQL project reports: Strawberry up until version 0.312.3 is vulnerable to an authentication bypass on WebSocket subscription endpoints. […]
🟠 High ⏱ 15–60 min Last verified: 18 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Mbed TLS — vulnerabilities Related CVEs: CVE-2015-5291 CVE-2018-0487 CVE-2018-0488 CVE-2018-0497 CVE-2018-0498 CVE-2018-19608 CVE-2019-18222 CVE-2020-10932 +12 more Upstream summary: https://mbed-tls.readthedocs.io/en/latest/security-advisories/ reports: Client impersonation while resuming a TLS 1.3 session (CVE-2026-34873) Entropy […]
🟡 Medium ⏱ 10–30 min Last verified: 18 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: activemq — Unsafe deserialization Related CVEs: CVE-2015-5254 CVE-2016-0734 CVE-2016-0782 Upstream summary: Alvaro Muatoz, Matthias Kaiser and Christian Schneider reports: JMS Object messages depends on Java Serialization for marshaling/unmashaling of the […]
