🟢 Low ⏱ 5–15 min Last verified: 18 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-setuptools — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Related CVEs: CVE-2025-47273 Upstream summary: https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf reports: setuptools is a package that allows users to download, build, […]
🟢 Low ⏱ 5–15 min Last verified: 18 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-kerberos — DoS and MitM vulnerabilities Related CVEs: CVE-2015-3206 Upstream summary: macosforgebot reports: The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows […]
🟢 Low ⏱ 5–15 min Last verified: 18 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-Flask-Cors — directory traversal vulnerability Related CVEs: CVE-2020-25032 Upstream summary: praetorian-colby-morgan reports: An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal […]
🟢 Low ⏱ 5–15 min Last verified: 18 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-flask-security — user redirect to arbitrary URL vulnerability Related CVEs: CVE-2021-23385 Upstream summary: Snyk reports: This affects all versions of package Flask-Security. When using the `get_post_logout_redirect` and `get_post_login_redirect` functions, it […]
🟡 Medium ⏱ 10–30 min Last verified: 18 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: icecast — Cross-Site Scripting Vulnerability Related CVEs: CVE-2001-0784 CVE-2001-1083 CVE-2001-1229 CVE-2001-1230 CVE-2002-0177 CVE-2004-0781 Upstream summary: Caused by improper filtering of HTML code in the status display, it is possible for […]
🟠 High ⏱ 15–60 min Last verified: 18 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: moodle — Login CSRF vulnerability Related CVEs: CVE-2015-3272 CVE-2015-3273 CVE-2015-3274 CVE-2015-3275 CVE-2015-5264 CVE-2015-5265 CVE-2015-5266 CVE-2015-5267 +12 more Upstream summary: moodle reports: The login form is not protected by a token […]
🟠 High ⏱ 15–60 min Last verified: 18 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xorg — protocol handling issues in X Window System client libraries Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988 +12 more Upstream summary: freedesktop.org reports: Ilja van Sprundel, […]
🟢 Low ⏱ 5–15 min Last verified: 17 July 2026 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: virtualenv — CWE-59: Improper Link Resolution Before File Access ('Link Following') Related CVEs: CVE-2026-22702 Upstream summary: https://github.com/pypa/virtualenv/security/advisories/GHSA-597g-3phw-6986 reports: virtualenv is a tool for creating isolated virtual python environments. Prior to […]
🟢 Low ⏱ 5–15 min Last verified: 17 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — ini database truncation inside dba_replace() function Related CVEs: CVE-2008-7068 Upstream summary: securityfocus research reports: A bug that leads to the emptying of the INI file contents if the […]
🟢 Low ⏱ 5–15 min Last verified: 17 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: codeigniter — input validation bypass Upstream summary: The CodeIgniter changelog reports: Security: Fixed a potential object injection in Cache Library 'apc' driver when save() is used with $raw = TRUE. […]
