Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.1OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- High8.1OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- Medium4.3OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- Medium5.2OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- Medium5.9OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- Medium5.4OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- Medium5.4OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- High8.0OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- Critical9.9OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- High7.1OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- High7.0The framebuffer device model's maximum resolution constants were duplicated between the framebuffer and RFB modules and had gotten out of sync.EPSS 0.1%Oct 15, 2026
- High7.0The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream.EPSS 0.1%Oct 15, 2026
- High7.0The xHCI (USB 3) device model did not validate or save the event ring size provided by the guest.EPSS 0.1%Oct 15, 2026
- Medium5.5When an audio channel's buffer needs to be resized, the sound(4) driver checks that the buffer is not memory-mapped and then drops the channel lock to allocate a new buffer.EPSS 0.1%Oct 15, 2026
- High8.2When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter.EPSS 0.3%Oct 15, 2026
- UnknownThe IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6 address.EPSS 0.2%Oct 15, 2026
- Medium6.5TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding.EPSS 0.4%Oct 15, 2026
- UnknownSCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transferred.EPSS 0.2%Oct 15, 2026
- Unknownrenameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments.EPSS 0.2%Oct 15, 2026
- UnknownMultiple jail filesystem root escapesEPSS 0.2%Oct 15, 2026
- Unknownkqueue_fork_copy_knote() indexed into the child's file descriptor table using a knote's file descriptor number without a bounds check.EPSS 0.1%Oct 15, 2026
- UnknownMemory safety bugs in kqueue copy-on-fork implementationEPSS 0.1%Oct 15, 2026
- UnknownWhen semop(2) blocks waiting for a semaphore condition, it releases the per-set lock and sleeps.EPSS 0.2%Oct 15, 2026
- High7.5When bsdinstall or bsdconfig are prompted to scan for nearby Wi-Fi networks, they build up a list of network names and use bsddialog(1) to prompt the user to select a network.May 21, 2026
- Medium6.5In the case of the cap_net service, when a key present in the old limit was omitted from the new limit, the missing key was treated as "allow any" instead of being rejected.May 21, 2026
56 records · page 1 of 3
PreviousNext