FreeBSD

🟢 Low   ⏱ 5–15 min  Last verified: 10 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: shibboleth2-sp — "Dynamic" metadata provider plugin issue Upstream summary: The Internet2 community reports: The Shibboleth Service Provider software includes a MetadataProvider plugin with the plugin type "Dynamic" to obtain metadata […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: silc — pkcs_decode buffer overflow Upstream summary: Core Security Technologies reports: A remote buffer overflow vulnerability found in a library used by both the SILC server and client to process […]

🟠 High   ⏱ 15–60 min  Last verified: 10 July 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mail/mailpit — multiple vulnerabilities Related CVEs: CVE-2023-42821 CVE-2026-21859 CVE-2026-22689 CVE-2026-23829 CVE-2026-23845 CVE-2026-27808 CVE-2026-45709 CVE-2026-45711  +2 more Upstream summary: Mailpit author reports: Set a default 50MB per message limit to prevent […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: asterisk and pjsip — multiple vulnerabilities Upstream summary: The Asterisk project reports: AST-2018-002 – By crafting an SDP message with an invalid media format description Asterisk crashes when using the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ecartis — unauthorised access to admin interface Related CVEs: CVE-2003-0781 CVE-2003-0782 CVE-2004-0913 Upstream summary: A Debian security advisory reports: A problem has been discovered in ecartis, a mailing-list manager, which […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: flyspray — multiple vulnerabilities Related CVEs: CVE-2007-1788 CVE-2007-6461 CVE-2008-1165 CVE-2008-1166 Upstream summary: The Flyspray Project reports: Flyspray is affected by a Cross Site scripting Vulnerability due to an error escaping […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 July 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: virtualenv — CWE-59: Improper Link Resolution Before File Access ('Link Following') Related CVEs: CVE-2026-22702 Upstream summary: https://github.com/pypa/virtualenv/security/advisories/GHSA-597g-3phw-6986 reports: virtualenv is a tool for creating isolated virtual python environments. Prior to […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 July 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wheel — CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Related CVEs: CVE-2026-24049 Upstream summary: https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx reports: wheel is a command line tool for manipulating Python […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 July 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: devel/ocaml-opam — CWE-24 Path Traversal: '../filedir' Related CVEs: CVE-2026-41082 Upstream summary: https://github.com/ocaml/opam/releases/tag/2.5.1 reports: In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach […]