MI
Vendor
MidnightBSD
18
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-54584 | MP mport MidnightBSD | 5.3 | Sep 21 | mport trusts environment-controlled temporary directories in privileged metadata extraction |
| CVE-2026-54579 | MP mport MidnightBSD | 2.3 | Sep 17 | mport mirror-selection ping accepts insufficiently validated ICMP replies |
| CVE-2026-54576 | MP mport MidnightBSD | 5.8 | Sep 17 | mport package installation has symlink TOCTOU in chown and chmod handling |
| CVE-2026-54587 | MP mport MidnightBSD | 5.8 | Sep 17 | mport directory asset installation is vulnerable to symlink and path traversal races |
| CVE-2026-54575 | MP mport MidnightBSD | 5.8 | Sep 17 | mport package fetch and clean paths are vulnerable to TOCTOU filesystem races |
| CVE-2026-54578 | MP mport MidnightBSD | 2.0 | Sep 17 | mport verify can compare stale checksum data after hashing failures |
| CVE-2026-54586 | MP mport MidnightBSD | 6.0 | Sep 17 | mport permits repository and package mirror fetches over insecure transport |
| CVE-2026-54585 | MP mport MidnightBSD | 6.0 | Sep 17 | mport sample file handling can write outside the configured root |
| CVE-2026-54580 | MP mport MidnightBSD | 8.3 | Sep 17 | mport index decompression can leave partial or corrupt index data after zstd failures |
| CVE-2026-54582 | MP mport MidnightBSD | 6.0 | Sep 17 | mport package installation can overwrite existing unmanaged or differently owned files |
| CVE-2026-54577 | MP mport MidnightBSD | 2.0 | Sep 17 | mport audit can inspect the wrong package when options are present |
| CVE-2026-54583 | MP mport MidnightBSD | 8.3 | Sep 17 | mport package bundle downloads allow unsafe destination filenames |
| CVE-2026-54581 | MP mport MidnightBSD | 8.3 | Sep 17 | mport bootstrap index fetch can continue after hash verification failure |
| CVE-2020-24863 | MI Midnightbsd Midnightbsd | 5.5 | Sep 3 | A memory corruption vulnerability was found in the kernel function kern_getfsstat in MidnightBSD before 1.2.7 and 1.3 through 2020-08-19, and FreeBSD through 11.4, that allows an… |
| CVE-2020-24385 | MI Midnightbsd Midnightbsd | 5.5 | Sep 3 | In MidnightBSD before 1.2.6 and 1.3 before August 2020, and FreeBSD before 7, a NULL pointer dereference was found in the Linux emulation layer that allows attackers to crash the… |
| CVE-2009-0687 | MI Midnightbsd Midnightbsd | – | Aug 11 | The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote… |
| CVE-2008-4609 | MI Midnightbsd Midnightbsd | – | Oct 20 | The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to… |
| CVE-2006-6013 | MI Midnightbsd Midnightbsd | – | Nov 21 | Integer signedness error in the fw_ioctl (FW_IOCTL) function in the FireWire (IEEE-1394) drivers (dev/firewire/fwdev.c) in various BSD kernels, including DragonFlyBSD, FreeBSD… |