🟡 Medium ⏱ 10–30 min Last verified: 17 April 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libxslt — multiple vulnerabilities Related CVEs: CVE-2016-1683 CVE-2016-1684 CVE-2024-55549 CVE-2025-11731 CVE-2025-24855 CVE-2025-7424 CVE-2025-7425 CVE-2025-9714 Upstream summary: Alan Coopersmith reports: On 6/16/25 15:12, Alan Coopersmith wrote: BTW, users of libxml2 may […]
🟢 Low ⏱ 5–15 min Last verified: 17 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2012-4520 Upstream summary: The Django Project reports: Host header poisoning Several earlier Django security releases focused on the issue of poisoning the HTTP Host […]
🟡 Medium ⏱ 10–30 min Last verified: 17 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rails — multiple vulnerabilities Related CVEs: CVE-2013-4491 CVE-2013-6414 CVE-2013-6415 CVE-2013-6416 CVE-2013-6417 Upstream summary: Rails weblog: Rails 3.2.16 and 4.0.2 have been released! These two releases contain important security fixes, so […]
🟢 Low ⏱ 5–15 min Last verified: 17 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mysql — SSL Downgrade Related CVEs: CVE-2015-3152 Upstream summary: Duo Security reports: Researchers have identified a serious vulnerability in some versions of Oracle’s MySQL database product that allows an attacker […]
🟡 Medium ⏱ 10–30 min Last verified: 17 April 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: c-ares — Use After Free Related CVEs: CVE-2007-3152 CVE-2007-3153 CVE-2024-25629 CVE-2025-62408 Upstream summary: https://github.com/c-ares/c-ares/security/advisories/GHSA-jq53-42q6-pqr5 reports: c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum […]
🟢 Low ⏱ 5–15 min Last verified: 17 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: isc-dhcpd — format string vulnerabilities Related CVEs: CVE-2004-0460 CVE-2004-1006 Upstream summary: The ISC DHCP programs are vulnerable to several format string vulnerabilities which may allow a remote attacker to execute […]
🟢 Low ⏱ 5–15 min Last verified: 17 April 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: R — arbitrary code execution vulnerability Related CVEs: CVE-2024-27322 Upstream summary: HiddenLayer Research reports: Deserialization of untrusted data can occur in the R statistical programming language, enabling a maliciously crafted […]
🟡 Medium ⏱ 10–30 min Last verified: 16 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py39-lmdb — multiple vulnerabilities Related CVEs: CVE-2019-16224 CVE-2019-16225 CVE-2019-16226 CVE-2019-16227 CVE-2019-16228 Upstream summary: TeamSeri0us reports: An issue was discovered in py-lmdb 0.97. For certain values of md_flags, mdb_node_add does not […]
🟢 Low ⏱ 5–15 min Last verified: 16 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pyrad — multiple vulnerabilities Related CVEs: CVE-2013-0294 CVE-2013-0342 Upstream summary: Nathaniel McCallum reports: packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which […]
🟡 Medium ⏱ 10–30 min Last verified: 16 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: SoftEtherVPN — multiple vulnerabilities Related CVEs: CVE-2023-22325 CVE-2023-27395 CVE-2023-27516 CVE-2023-31192 CVE-2023-32275 CVE-2023-32634 Upstream summary: Daiyuu Nobori reports: The SoftEther VPN project received a high level code review and technical assistance […]
