NetBSD

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-14983 Upstream summary: pkgsrc audit-packages flagged chocolate-doom<3.0.1 for vulnerability class 'buffer-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-14983 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2006-4337 CVE-2006-4335 CVE-2006-4338 Upstream summary: pkgsrc audit-packages flagged lha<1.14i for vulnerability class 'local-code-execution'. Reference: http://www2m.biglobe.ne.jp/~dolphin/lha/lha-unix.htm Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-19518 CVE-2018-19935 Upstream summary: pkgsrc audit-packages flagged php71-imap<7.1.25 for vulnerability class 'command-injection'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-19518 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2016-7134 Upstream summary: pkgsrc audit-packages flagged php70-curl<7.0.10 for vulnerability class 'heap-overflow'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7134 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2013-7490 CVE-2013-7491 CVE-2014-10401 CVE-2014-10402 CVE-2020-14392 CVE-2020-14393 CVE-2019-20919 Upstream summary: pkgsrc audit-packages flagged p5-DBI<1.46nb2 for vulnerability class 'local-file-write'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0077 Table of contents Symptom & Impact Environment & Reproduction Root […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2012-2126 CVE-2012-2125 CVE-2013-4363 CVE-2013-4287 Upstream summary: pkgsrc audit-packages flagged ruby1{8,9,93}-rubygems<1.8.23 for vulnerability class 'remote-spoofing'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2126 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2006-2894 CVE-2008-2803 CVE-2008-2811 CVE-2008-0016 CVE-2008-3836 CVE-2008-4059 CVE-2010-1206 CVE-2010-3765  +11 more Upstream summary: pkgsrc audit-packages flagged firefox{,2}{,-bin,-gtk1}<2.0.0.8 for vulnerability class 'remote-information-exposure'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2894 Table of contents Symptom & Impact Environment […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged ruby19-railties<3.0.4 for vulnerability class 'cross-site-request-forgeries'. Reference: http://weblog.rubyonrails.org/2011/2/8/csrf-protection-bypass-in-ruby-on-rails Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2016-10211 CVE-2017-5924 CVE-2018-19974 CVE-2018-19975 CVE-2018-19976 CVE-2016-10210 CVE-2017-5923 CVE-2017-9465  +9 more Upstream summary: pkgsrc audit-packages flagged yara<3.6.0 for vulnerability class 'use-after-free'. Reference: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10211 Table of contents Symptom & Impact Environment […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-17383 Upstream summary: pkgsrc audit-packages flagged ruby{22,24,25,26}-netaddr<2.0.4 for vulnerability class 'insecure-file-permissions'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-17383 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]