Linux Distros Unpatched Vulnerability : CVE-2014-9747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The t42parseencoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly update the current position for immediates-only mode, which allows...

Linux Distros Unpatched Vulnerability : CVE-2014-9660

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The bdfparseglyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle a missing ENDCHAR record, which allows remote attackers to cause a...

Linux Distros Unpatched Vulnerability : CVE-2014-9661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - type42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete without triggering an error, which allows remote attackers to cause...

Linux Distros Unpatched Vulnerability : CVE-2017-13720

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection can cause a buffer...

Malicious code in datlowe-font (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1778 Malicious code in datlowe-font (npm)

--- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2007-4568

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the buildrange function in X.Org X Font Server xfs before 1.0.5 allows context- dependent attackers to execute arbitrary code via 1...

Linux Distros Unpatched Vulnerability : CVE-2007-4990

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The swapchar2b function in X.Org X Font Server xfs before 1.0.5 allows context-dependent attackers to execute arbitrary code via 1 QueryXBitmaps and 2...

Linux Distros Unpatched Vulnerability : CVE-2010-3768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 do not properly validate...

Linux Distros Unpatched Vulnerability : CVE-2011-1554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service...

PT-2025-9100 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A crash occurs due to a segmentation fault on an unknown address. The crash involves the chunk free object, pdfi free dict, and pdfi free font cff functions. Recommendations: At the moment,...

ghostscript:gs_device_faxg3_fuzzer: Segv on unknown address in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=6509774749630464 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicefaxg3fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: chunkfreeobject pdfifreedict...

CVE-2025-27304

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themelogger Contact Form 7 Star Rating with font Awesome contact-form-7-star-rating-with-font-awersome allows Stored XSS.This issue affects Contact Form 7 Star Rating with font Awesome: from n/a...

CVE-2025-27304

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themelogger Contact Form 7 Star Rating with font Awesome contact-form-7-star-rating-with-font-awersome allows Stored XSS.This issue affects Contact Form 7 Star Rating with font Awesome: from n/a...

WordPress Contact Form 7 Star Rating with font Awesome plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Contact Form 7 Star Rating with font Awesome versions = 1.3...

CVE-2025-27304 WordPress Contact Form 7 Star Rating with font Awesome plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themelogger Contact Form 7 Star Rating with font Awesome contact-form-7-star-rating-with-font-awersome allows Stored XSS.This issue affects Contact Form 7 Star Rating with font Awesome: from n/a...

CVE-2025-27304

CVE-2025-27304 affects the WordPress plugin Contact Form 7 Star Rating with font Awesome. It is a Stored XSS vulnerability due to improper neutralization of input during web page generation, impacting versions 1.3 and earlier. The CVE entry notes this is an authenticated issue (Editor+) and, per ...

CVE-2025-27304 WordPress Contact Form 7 Star Rating with font Awesome plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themelogger Contact Form 7 Star Rating with font Awesome contact-form-7-star-rating-with-font-awersome allows Stored XSS.This issue affects Contact Form 7 Star Rating with font Awesome: from n/a...

PT-2025-7734 · Unknown · Contact Form 7 Star Rating With Font Awesome

Name of the Vulnerable Software and Affected Versions: Contact Form 7 Star Rating with font Awesome versions 1.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which can lead to Stored XSS. This allows for malicious scripts to be stor...

CVE-2025-27304: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themelogger Contact Form 7 Star Rating with font Awesome contact-form-7-star-rating-with-font-awersome allows Stored XSS.This issue affects Contact Form 7 Star Rating with font Awesome: from n/a...