🟢 Low ⏱ 5–15 min Last verified: 15 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py39-OWSLib — arbitrary file read vulnerability Related CVEs: CVE-2023-27476 Upstream summary: Jorge Rosillo reports: OWSLib's XML parser (which supports both `lxml` and `xml.etree`) does not disable entity resolution for `lxml`, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-21825 CVE-2021-21810 CVE-2021-21828 CVE-2021-21827 CVE-2021-21826 CVE-2021-21811 Upstream summary: pkgsrc audit-packages flagged xmill-[0-9]* for vulnerability class 'remote-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-21825 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 15 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tidy — heap-buffer-overflow Related CVEs: CVE-2015-5522 CVE-2015-5523 Upstream summary: Geoff McLane reports: tidy is affected by a write out of bounds when processing malformed html files. This issue could be […]
![NetBSD 10.0 — cyrus-imapd-2.2.[7-8] — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0](https://www.progressiverobot.com/wp-content/uploads/2026/05/netbsd-10-0-cyrus-imapd-2-2-7-8-vulnerability-patch-remediation.jpg "NetBSD 10.0 — cyrus-imapd — vulnerability — patch and remediation guide 4")
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged cyrus-imapd{,nb*} for vulnerability class 'remote-code-execution'. Reference: http://security.e-matters.de/advisories/152004.txt Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟢 Low ⏱ 5–15 min Last verified: 15 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Postfix — memory corruption vulnerability Related CVEs: CVE-2011-0411 CVE-2011-1720 Upstream summary: The Postfix SMTP server has a memory corruption error, when the Cyrus SASL library is used with authentication mechanisms […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:9318 Related CVEs: CVE-2019-10086 CVE-2025-48734 Upstream summary: The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fix(es): * apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default […]
🟢 Low ⏱ 5–15 min Last verified: 15 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kdelibs — integer overflow in khtml Related CVEs: CVE-2005-0396 CVE-2006-4811 Upstream summary: Red Hat reports: An integer overflow flaw was found in the way Qt handled pixmap images. The KDE […]
🟢 Low ⏱ 5–15 min Last verified: 15 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mkvtoolnix — code execution via specially crafted files Upstream summary: Moritz Bunkus reports: most of the bugs fixed on 2016-09-06 and 2016-09-07 for issue #1780 are potentially exploitable. The scenario […]
🟡 Medium ⏱ 10–30 min Last verified: 15 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1382 CVE-2009-2459 CVE-2024-40446 Upstream summary: Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-65430 CVE-2025-65431 Upstream summary: An issue was discovered in allauth-django before 65.13.0. IdP: marking a user as is_active=False after having handed tokens for that user […]
