🟢 Low ⏱ 5–15 min Last verified: 17 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lasso — signature checking failure Related CVEs: CVE-2021-28091 Upstream summary: entrouvert reports: When AuthnResponse messages are not signed (which is permitted by the specifiation), all assertion's signatures should be checked, […]
🟢 Low ⏱ 5–15 min Last verified: 17 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bastillion — log4j vulnerability Related CVEs: CVE-2021-44228 Upstream summary: FreeBSD port maintainer reports: Bastillion uses log4j. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🟡 Medium ⏱ 10–30 min Last verified: 17 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenVPN — avoid buffer overread parsing routes or endpoints Related CVEs: CVE-2008-3459 CVE-2020-11810 CVE-2023-46849 CVE-2023-46850 CVE-2025-10680 CVE-2025-12106 CVE-2025-13086 CVE-2025-2704 Upstream summary: Mikhail Khachaiants reports: socket: reject mismatched address family in […]
🟢 Low ⏱ 5–15 min Last verified: 17 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Ruby — Denial of Service and Unsafe Object Creation Vulnerability in JSON Related CVEs: CVE-2013-0269 Upstream summary: Aaron Patterson reports: When parsing certain JSON documents, the JSON gem can be […]
🟢 Low ⏱ 5–15 min Last verified: 17 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-ruby_parser — insecure tmp file usage Related CVEs: CVE-2013-0162 Upstream summary: Michael Scherer reports: This is a relatively minor tmp file usage issue. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 17 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: curl — Multiple vulnerabilities Related CVEs: CVE-2005-0490 CVE-2005-4077 CVE-2006-1061 CVE-2009-0037 CVE-2010-0734 CVE-2011-2192 CVE-2013-2174 CVE-2013-6422 +12 more Upstream summary: The curl project reports: Multiple vulnerabilities Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 16 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: acroread9 — Multiple Vulnerabilities Related CVEs: CVE-2004-0630 CVE-2004-1152 CVE-2005-1306 CVE-2005-1625 CVE-2005-1912 CVE-2005-2470 CVE-2011-1353 CVE-2011-2431 +12 more Upstream summary: The Adobe Security Team reports: An unspecified vulnerability in the U3D component […]
🟠 High ⏱ 15–60 min Last verified: 16 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: FreeBSD — EAP-pwd message reassembly issue with unexpected fragment Related CVEs: CVE-2015-1863 CVE-2015-4141 CVE-2015-4142 CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 CVE-2015-4146 CVE-2015-5310 +12 more Upstream summary: Problem Description: EAP-pwd implementation in hostapd (EAP […]
🟡 Medium ⏱ 10–30 min Last verified: 15 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2011-0708 CVE-2011-4566 CVE-2011-4885 Upstream summary: php development team reports: Security Enhancements and Fixes in PHP 5.3.9: Added max_input_vars directive to prevent attacks based on […]
🟡 Medium ⏱ 10–30 min Last verified: 15 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2008-2302 CVE-2009-3695 CVE-2010-3082 Upstream summary: The Django project reports: Please reference CVE/URL list for details Table of contents Symptom & Impact Environment & Reproduction […]
