🟡 Medium ⏱ 10–30 min Last verified: 20 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Multiple implementations — DoS via hash algorithm collision Related CVEs: CVE-2011-4815 CVE-2011-4838 CVE-2011-5036 CVE-2011-5037 Upstream summary: oCERT reports: A variety of programming languages suffer from a denial-of-service (DoS) condition against […]
🟢 Low ⏱ 5–15 min Last verified: 20 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: potrace — multiple memory failure Related CVEs: CVE-2016-8685 CVE-2016-8686 Upstream summary: potrace reports: CVE-2016-8685: invalid memory access in findnext CVE-2016-8686: memory allocation failure Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 20 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mailman — content spoofing with invalid list names in web UI Related CVEs: CVE-2004-0412 CVE-2004-1143 CVE-2005-0202 CVE-2006-1712 CVE-2006-2191 CVE-2006-2941 CVE-2006-3636 CVE-2006-4624 +5 more Upstream summary: Mark Sapiro reports: A URL […]
🟢 Low ⏱ 5–15 min Last verified: 19 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libwasmtime — host panic with fd_renumber WASIp1 function Related CVEs: CVE-2025-53901 Upstream summary: WasmTime development team reports: A bug in Wasmtime's implementation of the WASIp1 set of import functions can […]
🟡 Medium ⏱ 10–30 min Last verified: 19 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: claws-mail — POP3 Format String Vulnerability Related CVEs: CVE-2005-0667 CVE-2005-0926 CVE-2007-2958 Upstream summary: A Secunia Advisory reports: A format string error in the "inc_put_error()" function in src/inc.c when displaying a […]
🟢 Low ⏱ 5–15 min Last verified: 19 January 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Jinja2 — Sandbox breakout through attr filter selecting format method Related CVEs: CVE-2024-34064 CVE-2025-27516 Upstream summary: [email protected] reports: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in […]
🟢 Low ⏱ 5–15 min Last verified: 19 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: qpress — directory traversal Related CVEs: CVE-2022-45866 Upstream summary: [email protected] reports: qpress before PierreLvx/qpress 20220819 and before version 11.3, as used in Percona XtraBackup and other products, allows directory traversal […]
🟢 Low ⏱ 5–15 min Last verified: 19 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]
🟠 High ⏱ 15–60 min Last verified: 18 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL Client — Multiple vulerabilities Related CVEs: CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858 +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 45 new security patches […]
🟢 Low ⏱ 5–15 min Last verified: 18 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-setuptools — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Related CVEs: CVE-2025-47273 Upstream summary: https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf reports: setuptools is a package that allows users to download, build, […]
