FreeBSD : mongodb -- Malformed $group Query May Cause MongoDB Server to Crash (a5395e02-a2ca-11f0-8402-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a5395e02-a2ca-11f0-8402-b42e991fc52e advisory. [email protected] reports: An authorized user can cause a crash in the MongoDB Server through a specially...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414667)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414667 advisory. An issue was discovered in Xen through 4.14.x. Some OSes such as Linux, FreeBSD, and NetBSD are processing watch events using a single thread. If the events are...

FreeBSD : mongodb -- MongoDB Server access to non-initialized memory (a9dc3c61-a20f-11f0-91d8-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a9dc3c61-a20f-11f0-91d8-b42e991fc52e advisory. [email protected] reports: MongoDB Server may access non-initialized region of memory leading to unexpect...

FreeBSD : redis,valkey -- Lua library commands may lead to integer overflow and potential RCE (f6b8de04-a116-11f0-9446-f02f7497ecda)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f6b8de04-a116-11f0-9446-f02f7497ecda advisory. redis reports: An authenticated user may use a specially crafted Lua script to cause an integer overflo...

FreeBSD : redis,valkey -- Lua Use-After-Free may lead to remote code execution (17e85cae-a115-11f0-9446-f02f7497ecda)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 17e85cae-a115-11f0-9446-f02f7497ecda advisory. redis reports: An authenticated user may use a specially crafted Lua script to manipulate the garbage...

FreeBSD : redis,valkey -- Running Lua function as a different user (0258d37d-a118-11f0-9446-f02f7497ecda)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0258d37d-a118-11f0-9446-f02f7497ecda advisory. redis reports: An authenticated user may use a specially crafted Lua script to manipulate different LUA...

FreeBSD : redis,valkey -- Out of bound read due to a bug in LUA (0af2f18e-a119-11f0-9446-f02f7497ecda)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0af2f18e-a119-11f0-9446-f02f7497ecda advisory. redis reports: An authenticated user may use a specially crafted LUA script to read out-of-bound data o...

FreeBSD : qt6-webengine -- Multiple vulnerabilities (c27c05a7-a0c8-11f0-8471-4ccc6adda413)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the c27c05a7-a0c8-11f0-8471-4ccc6adda413 advisory. Qt qtwebengine-chromium repo reports: Backports for 9 security bugs in Chromium: Tenable has...

EUVD-2024-26911

Malicious code in bioql PyPI...

EUVD-2023-28637

Malicious code in bioql PyPI...

EUVD-2023-1110

Malicious code in bioql PyPI...

EUVD-2022-28193

Malicious code in bioql PyPI...

EUVD-2022-44151

Malicious code in bioql PyPI...

EUVD-2023-43994

Malicious code in bioql PyPI...

FreeBSD : chromium -- multiple security fixes (169a87de-a157-4558-9f97-a7395a9ae144)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 169a87de-a157-4558-9f97-a7395a9ae144 advisory. Chrome Releases reports: This update includes 21 security fixes: Tenable has extracted the...

FreeBSD : fetchmail -- potential crash when authenticating to SMTP server (21fba35e-a05f-11f0-a8b8-a1ef31191bc1)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 21fba35e-a05f-11f0-a8b8-a1ef31191bc1 advisory. Matthias Andree reports: fetchmail's SMTP client, when configured to authenticate, is susceptible to a...

FreeBSD : Django -- multiple vulnerabilities (90fc859e-9fe4-11f0-9fa2-080027836e8b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 90fc859e-9fe4-11f0-9fa2-080027836e8b advisory. Django reports: CVE-2025-59681: Potential SQL injection in QuerySet.annotate, alias, aggregate...

FreeBSD : LibreSSL -- overwrite and -read vulnerability (699ef80f-9e91-11f0-bc5f-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 699ef80f-9e91-11f0-bc5f-8447094a420f advisory. The LibreSSL project reports: An incorrect length check can result in a 4-byte overwrite and an 8-byte...

FreeBSD : py-mysql-connector-python -- Vulnerability in the MySQL Connectors product of Oracle MySQL (cb570d6f-9ea9-11f0-9446-f02f7497ecda)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the cb570d6f-9ea9-11f0-9446-f02f7497ecda advisory. Oracle reports: Vulnerability in the MySQL Connectors product of Oracle MySQL component:...

FreeBSD-SA-25:08.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-25:08.openssl Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in OpenSSL Category: contrib Module: openssl Announced: 2025-09-30 Credits:...