FreeBSD

🟢 Low   ⏱ 5–15 min  Last verified: 20 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PEAR — Net_Ping and Net_Traceroute remote arbitrary command injection Related CVEs: CVE-2009-4024 CVE-2009-4025 Upstream summary: PEAR Security Advisory reports: Multiple remote arbitrary command injections have been found in the Net_Ping […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PyYAML — arbitrary code execution Related CVEs: CVE-2020-14343 CVE-2020-1747 Upstream summary: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kf5-kauth — Insecure handling of arguments in helpers Related CVEs: CVE-2017-8422 CVE-2019-7443 Upstream summary: Albert Astals Cid reports: KAuth allows to pass parameters with arbitrary types to helpers running as […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mcollective — cert valication issue Related CVEs: CVE-2014-3251 Upstream summary: Melissa Stone reports: The MCollective aes_security public key plugin does not correctly validate certs against the CA. By exploiting this […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rar — password prompt buffer overflow vulnerability Related CVEs: CVE-2007-0855 Upstream summary: iDefense reports: Remote exploitation of a stack based buffer overflow vulnerability in RARLabs Unrar may allow an attacker […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mod_pubcookie — Empty Authentication Security Advisory Upstream summary: Nathan Dors, Pubcookie Project reports: An Abuse of Functionality vulnerability in the Pubcookie authentication process was found. This vulnerability allows an attacker […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rkhunter — insecure temporary file creation Related CVEs: CVE-2005-1270 Upstream summary: Gentoo reports: Sune Kloppenborg Jeppesen and Tavis Ormandy of the Gentoo Linux Security Team have reported that the check_update.sh […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 January 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dnsdist — Denial of service via crafted DoH exchange Related CVEs: CVE-2024-1622 CVE-2025-30194 Upstream summary: [email protected] reports: When DNSdist is configured to provide DoH via the nghttp2provider, an attacker can […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 January 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-strawberry-graphql — Multiple vulnerabilities Related CVEs: CVE-2026-35523 CVE-2026-35526 Upstream summary: The Strawberry GraphQL project reports: Strawberry up until version 0.312.3 is vulnerable to an authentication bypass on WebSocket subscription endpoints. […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kibana4 — XSS vulnerability Related CVEs: CVE-2015-8131 Upstream summary: Elastic reports: Fixes XSS vulnerability (CVE pending) – Thanks to Vladimir Ivanov for responsibly reporting. Table of contents Symptom & Impact […]