Skip to content
Noroxi

FreeBSD records

641 published records for vendor freebsd.

Researcher profile

Entered KEV
1 · 0.2%
Weaponized
13 · 2%
Pre-auth RCE
54
With a fix record
37.1%
Median publish → KEV
6 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

641 records
  • CVE-2011-4862
    69This week

    Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and

    CriticalCVSS 10.0WeaponizedEPSS 95%

    mit · krb5-applDec 24, 2011

  • CVE-2026-106931
    65This week

    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with r

    HighCVSS 8.5KEVWeaponizedEPSS 2%

    e-guardian · siteguardOct 14, 2026

  • CVE-2020-13160
    63This week

    AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution.

    CriticalCVSS 9.8WeaponizedEPSS 80%

    anydesk · anydeskJun 9, 2020

  • CVE-2024-6387
    62This week

    Openssh: regresshion - race condition in ssh allows rce/dos

    HighCVSS 8.1Proof of conceptEPSS 99%

    sonicwall · sma 6200 firmwareJul 1, 2024

  • CVE-2003-0466
    62This week

    Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code,

    CriticalCVSS 9.8Proof of conceptEPSS 78%

    redhat · wu ftpdAug 27, 2003

  • CVE-2007-3798
    60This week

    Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via craf

    CriticalCVSS 9.8Proof of conceptEPSS 70%

    tcpdump · tcpdumpJul 16, 2007

  • CVE-2003-0694
    60This week

    The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using

    CriticalCVSS 10.0WeaponizedEPSS 66%

    sendmail · advanced message serverOct 6, 2003

  • CVE-2020-7457
    60This week

    In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 11.3-RELEASE before p

    HighCVSS 8.1WeaponizedEPSS 33%

    freebsd · freebsdJul 9, 2020

  • CVE-2002-0391
    56Plan

    Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including di

    CriticalCVSS 9.8No exploitEPSS 58%

    sun · solarisAug 12, 2002

  • CVE-1999-0046
    56Plan

    Buffer overflow of rlogin program using TERM environmental variable.

    CriticalCVSS 10.0Proof of conceptEPSS 51%

    bsdi · bsd osFeb 6, 1997

  • CVE-2001-0554
    52Plan

    Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a

    CriticalCVSS 10.0Proof of conceptEPSS 38%

    mit · kerberosAug 14, 2001

  • CVE-2023-48795
    51Plan

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas

    MediumCVSS 5.9Proof of conceptEPSS 93%

    ssh · sshDec 18, 2023

  • CVE-2006-0900
    51Plan

    nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the Prot

    HighCVSS 7.8WeaponizedEPSS 65%

    freebsd · freebsdFeb 27, 2006

  • CVE-2020-1967
    46Plan

    Segmentation fault in SSL_check_chain

    HighCVSS 7.5Proof of conceptEPSS 53%

    openssl · opensslApr 21, 2020

  • CVE-2018-17157
    46Plan

    In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error when handling opcodes can cause memory corruption by s

    CriticalCVSS 9.8No exploitEPSS 24%

    freebsd · freebsdDec 4, 2018

  • CVE-2001-0247
    46Plan

    Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} se

    CriticalCVSS 10.0Proof of conceptEPSS 19%

    mit · kerberos 5Jun 18, 2001

  • CVE-2005-0356
    45Plan

    Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attacke

    MediumCVSS 5.0Proof of conceptEPSS 82%

    cisco · agent desktopMay 31, 2005

  • CVE-2010-1938
    44Plan

    Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-P

    CriticalCVSS 9.3Proof of conceptEPSS 22%

    freebsd · freebsdMay 28, 2010

  • CVE-2008-0122
    44Plan

    Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEAS

    CriticalCVSS 10.0No exploitEPSS 12%

    isc · bindJan 15, 2008

  • CVE-2006-4304
    44Plan

    Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before

    CriticalCVSS 10.0No exploitEPSS 11%

    freebsd · freebsdAug 23, 2006

  • CVE-2009-4502
    43Plan

    The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the

    CriticalCVSS 9.3WeaponizedEPSS 21%

    zabbix · zabbixDec 31, 2009

  • CVE-2003-0001
    42Plan

    Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain inf

    MediumCVSS 5.0Proof of conceptEPSS 72%

    freebsd · freebsdJan 17, 2003

  • CVE-2021-3449
    42Plan

    NULL pointer deref in signature_algorithms processing

    MediumCVSS 5.9Proof of conceptEPSS 63%

    openssl · opensslMar 25, 2021

  • CVE-2008-2427
    42Plan

    Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted

    CriticalCVSS 9.3Proof of conceptEPSS 16%

    freebsd · freebsdJun 24, 2008

  • CVE-2018-7183
    42Plan

    Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by lever

    CriticalCVSS 9.8No exploitEPSS 10%

    ntp · ntpMar 8, 2018