FreeBSD

🟡 Medium   ⏱ 10–30 min  Last verified: 24 June 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nghttp2 — CWE-617: Reachable Assertion Related CVEs: CVE-2015-8659 CVE-2016-1544 CVE-2018-1000168 CVE-2019-9511 CVE-2019-9513 CVE-2020-11080 CVE-2026-27135 Upstream summary: https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6 reports: nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rsnapshot — local privilege escalation Related CVEs: CVE-2005-1064 Upstream summary: An rsnapshot Advisory reports: The copy_symlink() subroutine in rsnapshot incorrectly changes file ownership on the files pointed to by symlinks, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 June 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: homebox — multiple vulnerabilities Related CVEs: CVE-2026-26272 CVE-2026-27600 CVE-2026-27981 Upstream summary: Homebox reports: [HIGH] CVE-2026-27981: Auth Rate Limit Bypass via IP Spoofing [MODERATE] CVE-2026-27600: Blind SSRF [MODERATE] CVE-2026-26272: Stored XSS […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tomcat — multiple vulnerabilities Related CVEs: CVE-2014-0230 CVE-2014-7810 Upstream summary: Apache Software Foundation reports: Low: Denial of Service CVE-2014-0230 When a response for a request with a request body is […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gnupg — attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output Related CVEs: CVE-2016-6313 Upstream summary: Werner Koch reports: There was a […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — denial of service (crash) via crafted Postscript files Related CVEs: CVE-2015-3228 Upstream summary: MITRE reports: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-graphite-web — Multiple vulnerabilities Related CVEs: CVE-2013-5093 Upstream summary: Graphite developers report: This release contains several security fixes for cross-site scripting (XSS) as well as a fix for a remote-execution […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 June 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: navidrome — multiple vulnerabilities Related CVEs: CVE-2025-27112 CVE-2025-48948 CVE-2025-48949 CVE-2026-25578 CVE-2026-25579 Upstream summary: An XSS vulnerability in the frontend allows a malicious attacker to inject code through the comment metadata […]

🟠 High   ⏱ 15–60 min  Last verified: 23 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: imlib2 — denial of service vulnerabilities Related CVEs: CVE-2004-0802 CVE-2004-0817 CVE-2004-1025 CVE-2004-1026 CVE-2006-4806 CVE-2006-4807 CVE-2006-4808 CVE-2006-4809  +4 more Upstream summary: Enlightenment reports: GIF loader: Fix segv on images without colormap […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: NPM — Multiple vulnerabilities Related CVEs: CVE-2019-16775 CVE-2019-16776 CVE-2019-16777 Upstream summary: NPM reports: Global node_modules Binary Overwrite Symlink reference outside of node_modules Arbitrary File Write Table of contents Symptom & […]