FreeBSD

🟠 High   ⏱ 15–60 min  Last verified: 30 March 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Django — multiple vulnerabilities Related CVEs: CVE-2022-28346 CVE-2022-28347 CVE-2022-34265 CVE-2022-36359 CVE-2022-41323 CVE-2023-23969 CVE-2023-24580 CVE-2023-31047  +12 more Upstream summary: Django reports: CVE-2025-59681: Potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kde-workspace — privilege escalation Related CVEs: CVE-2014-8651 Upstream summary: David Edmundson reports: KDE workspace configuration module for setting the date and time has a helper program which runs as root […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libxml2 — Out-of-bounds memory access Related CVEs: CVE-2025-32414 Upstream summary: [email protected] reports: In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: plasma[56]-plasma-workspace — Unauthorized users can access session manager Related CVEs: CVE-2024-36041 Upstream summary: David Edmundson reports: KSmserver, KDE's XSMP manager, incorrectly allows connections via ICE based purely on the host, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: awstats — arbitrary commands execution vulnerability Related CVEs: CVE-2008-3714 CVE-2008-5080 CVE-2010-4367 Upstream summary: Awstats change log reports: Security fix (Traverse directory of LoadPlugin) Security fix (Limit config to defined directory […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mono — DoS and code execution Related CVEs: CVE-2006-5072 CVE-2009-0217 CVE-2009-0689 Upstream summary: NCC Group reports: An attacker who can cause a carefully-chosen string to be converted to a floating-point […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 March 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: netatalk3 — multiple WolfSSL vulnerabilities Related CVEs: CVE-2008-5718 CVE-2024-1544 CVE-2024-38439 CVE-2024-38440 CVE-2024-38441 CVE-2024-5288 CVE-2024-5814 CVE-2024-5991 Upstream summary: Netatalk release reports: WolfSSL 5.7.0 (included in netatalk) includes multiple security vulnerabilities. Table […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ISC KEA — Invalid characters cause assert Related CVEs: CVE-2015-8373 CVE-2019-6472 CVE-2019-6473 CVE-2019-6474 CVE-2025-11232 CVE-2025-32801 CVE-2025-32802 CVE-2025-32803  +1 more Upstream summary: Internet Systems Consortium, Inc. reports: To trigger the issue, […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Ruby Activemodel Gem — Circumvention of attr_protected Related CVEs: CVE-2013-0276 Upstream summary: Aaron Patterson reports: The attr_protected method allows developers to specify a blacklist of model attributes which users should […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]