Logging Monitoring

🟢 Low   ⏱ 5–15 min  Last verified: 13 February 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-ormar — vulnerabilities Related CVEs: CVE-2026-26198 CVE-2026-27953 Upstream summary: https://github.com/ormar-orm/ormar/security/advisories reports: SQL Injection in aggregate functions min() and max() Pydantic Validation Bypass via __pk_only__ and __excluded__ Kwargs Injection in Model […]

🟠 High   ⏱ 15–60 min  Last verified: 13 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — federation denial of service via malformed events Related CVEs: CVE-2021-39163 CVE-2021-39164 CVE-2021-41281 CVE-2022-31052 CVE-2024-31208 CVE-2024-37302 CVE-2024-37303 CVE-2024-52805  +4 more Upstream summary: element-hq/synapse developers report: A malicious server can […]

🟠 High   ⏱ 15–60 min  Last verified: 13 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tiff — multiple vulnerabilities Related CVEs: CVE-2009-2347 CVE-2015-8665 CVE-2015-8683 CVE-2016-5314 CVE-2016-5320 CVE-2016-5875 CVE-2017-5225 CVE-2017-7592  +10 more Upstream summary: NVD reports: Please reference CVE/URL list for details Table of contents Symptom […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2011-0708 CVE-2011-4566 CVE-2011-4885 Upstream summary: php development team reports: Security Enhancements and Fixes in PHP 5.3.9: Added max_input_vars directive to prevent attacks based on […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PyYAML — arbitrary code execution Related CVEs: CVE-2017-18342 CVE-2020-14343 CVE-2020-1747 Upstream summary: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not included. […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Improper Handling of Case Sensitivity Related CVEs: CVE-2024-32879 Upstream summary: GitHub Advisory Database: Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default […]