🟢 Low ⏱ 5–15 min Last verified: 4 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: doas — Prevent passing of environment variables Upstream summary: Jesse Smith (upstream author of the doas program) reported: Previous versions of "doas" transferred most environment variables, such as USER, HOME, […]
🟢 Low ⏱ 5–15 min Last verified: 4 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kdepimlibs — directory traversal on KTNEF Upstream summary: Albert Aastals Cid reports: A directory traversal issue was found in KTNEF which can be exploited by tricking a user into opening […]
🟠 High ⏱ 15–60 min Last verified: 4 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8879 CVE-2016-5385 CVE-2016-5399 CVE-2016-6288 CVE-2016-6289 CVE-2016-6290 CVE-2016-6291 CVE-2016-6292 +4 more Upstream summary: PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) […]
🟡 Medium ⏱ 10–30 min Last verified: 3 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ffmpeg — multiple vulnerabilities Related CVEs: CVE-2022-3109 CVE-2022-3341 CVE-2022-3964 Upstream summary: NVD reports: An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return […]
🟢 Low ⏱ 5–15 min Last verified: 3 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-Spreadsheet-ParseExcel — Remote Code Execution Vulnerability Related CVEs: CVE-2023-7101 Upstream summary: Spreadsheet-ParseExcel reports: Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an […]
🟢 Low ⏱ 5–15 min Last verified: 3 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: XFCE tumbler — Vulnerability in the GStreamer plugin Upstream summary: The XFCE project reports: Added mime type check to the gst-thumbnailer plugin to fix an undisclosed vulnerability. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 3 May 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xorg server — Multiple vulnerabilities Related CVEs: CVE-2023-6816 CVE-2024-0229 CVE-2024-21885 CVE-2024-21886 CVE-2024-31080 CVE-2024-31081 CVE-2024-31083 CVE-2025-26594 +12 more Upstream summary: The X.Org project reports: CVE-2025-49176: Integer overflow in Big Requests Extension […]
🟢 Low ⏱ 5–15 min Last verified: 2 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openssh — multiple vulnerabilities Related CVEs: CVE-2006-4924 CVE-2006-5051 Upstream summary: Problem Description The CRC compensation attack detector in the sshd(8) daemon, upon receipt of duplicate blocks, uses CPU time cubic […]
🟢 Low ⏱ 5–15 min Last verified: 2 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fsp buffer overflow and directory traversal vulnerabilities Related CVEs: CVE-2003-1022 CVE-2004-0011 Upstream summary: The Debian security team reported a pair of vulnerabilities in fsp: A vulnerability was discovered in fsp, […]
🟢 Low ⏱ 5–15 min Last verified: 2 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: seatd-launch — remove files with escalated privileges with SUID Related CVEs: CVE-2021-41387 CVE-2022-25643 Upstream summary: Kenny Levinsen reports: seatd-launch could use a user-specified socket path instead of the internally generated […]
