🟢 Low ⏱ 5–15 min Last verified: 26 September 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-setuptools — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Related CVEs: CVE-2025-47273 Upstream summary: https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf reports: setuptools is a package that allows users to download, build, […]
🟡 Medium ⏱ 10–30 min Last verified: 26 September 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gdk-pixbuf2 — a heap buffer overflow Related CVEs: CVE-2004-0782 CVE-2004-0783 CVE-2004-0788 CVE-2015-4491 CVE-2015-7673 CVE-2015-7674 CVE-2025-7345 Upstream summary: [email protected] reports: A flaw exists in gdk-pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and […]
🟢 Low ⏱ 5–15 min Last verified: 25 September 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not included. […]
🟢 Low ⏱ 5–15 min Last verified: 24 September 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lightdm-kde-greeter — Privilege Escalation from lightdm Service User to root Related CVEs: CVE-2025-62876 Upstream summary: SUSE Security Team reports: A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from […]
🟠 High ⏱ 15–60 min Last verified: 24 September 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MongoDB Server — Multiple vulnerabilities Related CVEs: CVE-2019-2386 CVE-2019-2389 CVE-2019-2390 CVE-2020-7921 CVE-2024-10921 CVE-2024-1351 CVE-2024-8654 CVE-2025-10059 +12 more Upstream summary: https://jira.mongodb.org/browse/SERVER-119981 reports: Computing the MD5 checksum of a malformed BSON object […]
🟢 Low ⏱ 5–15 min Last verified: 23 September 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: unit-java — security vulnerability Related CVEs: CVE-2025-1695 Upstream summary: F5 reports: When NGINX Unit with the Java Language Module is in use, undisclosed requests can lead to an infinite loop […]
🟡 Medium ⏱ 10–30 min Last verified: 23 September 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: git — multiple vulnerabilities Related CVEs: CVE-2024-50349 CVE-2024-52006 CVE-2025-27613 CVE-2025-27614 CVE-2025-46835 CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 Upstream summary: Git development team reports: CVE-2025-27613: Gitk: When a user clones an untrusted repository and […]
🟢 Low ⏱ 5–15 min Last verified: 22 September 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: caldera — Remote Code Execution Related CVEs: CVE-2025-27364 Upstream summary: MITRE Caldera contributor report: In MITRE Caldera through 4.2.0 and 5.0.0 before 35bc06e, a Remote Code Execution (RCE) vulnerability was […]
🟢 Low ⏱ 5–15 min Last verified: 19 September 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Roundcube Webmail — Multiple vulnerabilities Related CVEs: CVE-2025-49113 Upstream summary: The Roundcube Webmail project reports: See link for details. No CVE numbers available at the moment. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 18 September 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: h11 accepts some malformed Chunked-Encoding bodies Related CVEs: CVE-2025-43859 Upstream summary: h11 reports: h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a leniency in h11's parsing of […]
