Fedora 43 : luksmeta (2025-e53e8fdc0a)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e53e8fdc0a advisory. Fix handling of large metadata Fix: CVE-2025-11568 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

CVE-2025-11568

A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the...

Linux Distros Unpatched Vulnerability : CVE-2017-11568

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines psread.c resulting in DoS or code execution via a crafted otf file...

CVE-2024-11568

creationtimestamp| type| source ---|---|--- 2024-11-21 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1563/...

RHEL 7 : fontforge (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - fontforge: Command injetion in help function uiutil.c CVE-2017-17521 - FontForge 20161012 is vulnerable t...

CVE-2019-11568

An issue was discovered in AikCms v2.0. There is a File upload vulnerability, as demonstrated by an admin/page/system/nav.php request with PHP code in a .php file with the application/octet-stream content type...

CVE-2019-11568

CVE-2019-11568 affects AikCms v2.0 . The vulnerability is a file upload issue demonstrated by an admin/navigation request (nav.php) where PHP code is uploaded as a .php file with content type application/octet-stream. The CVSS data indicates a high impact (C, I, A all HIGH) with network access an...

CVE-2018-11568

CVE-2018-11568 affects the GamePlan WordPress theme up to version 1.5.13.2. The vulnerability is a reflected XSS due to insufficient input sanitization in the s parameter; in some cases, are represented as HTML entities. Exploitation details are not provided in the connected documents, and a pat...

USN-3409-1: FontForge vulnerabilities

It was discovered that FontForge was vulnerable to a heap-based buffer over-read. A remote attacker could use a crafted file to DoS or execute arbitrary code. CVE-2017-11568, CVE-2017-11569, CVE-2017-11572 It was discovered that FontForge was vulnerable to a stack-based buffer overflow. A remote...

CVE-2017-11568

FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines (psread.c), exposing the system to DoS or potential arbitrary code execution via a crafted OpenType font. Public advisories (e.g., SUSE MGASA-2018-0037 and Mageia MGASA-2018-0037) document a fontforge updat...