🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1398 Related CVEs: CVE-2025-68161 Upstream summary: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, even when the […]
🟢 Low ⏱ 5–15 min Last verified: 3 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pear-XML_RPC — remote PHP code injection vulnerability Related CVEs: CVE-2005-2498 Upstream summary: A Hardened-PHP Project Security Advisory reports: When the library parses XMLRPC requests/responses, it constructs a string of PHP […]
🟠 High ⏱ 15–60 min Last verified: 3 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: acroread9 — Multiple Vulnerabilities Related CVEs: CVE-2004-0630 CVE-2004-1152 CVE-2005-1306 CVE-2005-1625 CVE-2005-1912 CVE-2005-2470 CVE-2011-1353 CVE-2011-2431 +12 more Upstream summary: The Adobe Security Team reports: An unspecified vulnerability in the U3D component […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1665 Related CVEs: CVE-2026-3219 CVE-2026-6357 CVE-2026-21441 CVE-2025-66418 CVE-2025-66471 CVE-2025-8869 CVE-2024-47081 CVE-2025-50181 +6 more Upstream summary: pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether […]
🟢 Low ⏱ 5–15 min Last verified: 3 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — PL/Perl environment variable changes execute arbitrary code Related CVEs: CVE-2024-10979 Upstream summary: PostgreSQL project reports: Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user […]
🟡 Medium ⏱ 10–30 min Last verified: 3 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-Mail-SpamAssassin — local user symlink-attack DoS vulnerability Related CVEs: CVE-2004-0796 CVE-2005-1266 CVE-2007-2873 Upstream summary: SpamAssassin website reports: A local user symlink-attack DoS vulnerability in SpamAssassin has been found, affecting versions […]
🟡 Medium ⏱ 10–30 min Last verified: 3 June 2026 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: minio — Privilege Escalation via Session Policy Bypass in Service Accounts and STS Related CVEs: CVE-2021-41137 CVE-2021-43858 CVE-2022-24842 CVE-2024-24747 CVE-2024-36107 CVE-2025-62506 Upstream summary: mino reports: A privilege escalation vulnerability allows […]
🟠 High ⏱ 15–60 min Last verified: 3 June 2026 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — Multiple vulnerabilities Related CVEs: CVE-2024-10977 CVE-2025-1094 CVE-2025-12817 CVE-2025-12818 CVE-2025-4207 CVE-2026-6472 CVE-2026-6473 CVE-2026-6474 +8 more Upstream summary: The PostgreSQL project reports: Missing authorization in PostgreSQL CREATE TYPE allows an […]
🟢 Low ⏱ 5–15 min Last verified: 3 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-22185 Upstream summary: OpenLDAP Lightning Memory-Mapped Database (LMDB) versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffer underflow in the readline() function of mdb_load. […]
🟢 Low ⏱ 5–15 min Last verified: 3 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenVPN — two remote denial-of-service vulnerabilities Related CVEs: CVE-2017-7478 CVE-2017-7479 Upstream summary: Samuli Seppänen reports: OpenVPN v2.4.0 was audited for security vulnerabilities independently by Quarkslabs (funded by OSTIF) and Cryptography […]
