Lucene search
+L

9149 matches found

OSV
OSV
added 2026/01/29 3:16 p.m.7 views

DEBIAN-CVE-2020-37011

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to cause an infinite malloc loop and potentially crash th...

8.4CVSS5.4AI score0.00411EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/01/29 3:16 p.m.9 views

CVE-2020-37011

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to exhaust memory through repeated malloc calls and...

8.4CVSS5.8AI score0.00411EPSS
SaveExploits0References4
OSV
OSV
added 2026/01/29 3:16 p.m.23 views

UBUNTU-CVE-2020-37011

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to exhaust memory through repeated malloc calls and...

8.4CVSS5.9AI score0.00411EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/01/29 2:28 p.m.12 views

CVE-2020-37011

Removed by vendor...

8.4CVSS5.8AI score0.00411EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/01/29 2:28 p.m.8 views

CVE-2020-37011

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to exhaust memory through repeated malloc calls and...

8.4CVSS5.8AI score0.00411EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2026/01/29 2:28 p.m.30 views

CVE-2020-37011

Gnome Fonts Viewer 3.34.0 is affected by a heap corruption vulnerability that allows out-of-bounds writes via a malformed TrueType Font (TTF) file. A crafted TTF with an oversized pattern can trigger an infinite malloc() loop and potentially crash the gnome-font-viewer process. Mitigation notes f...

8.4CVSS5.8AI score0.00411EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/01/29 2:28 p.m.10 views

EUVD-2020-30906

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to cause an infinite malloc loop and potentially crash th...

8.4CVSS5.9AI score0.00411EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/01/29 2:28 p.m.6 views

CVE-2020-37011 Gnome Fonts Viewer 3.34.0 Heap Corruption

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to exhaust memory through repeated malloc calls and...

8.4CVSS5.8AI score0.00411EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/01/29 2:28 p.m.39 views

CVE-2020-37011 Gnome Fonts Viewer 3.34.0 Heap Corruption

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to exhaust memory through repeated malloc calls and...

8.4CVSS0.00411EPSS
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/29 3:47 a.m.10 views

Malicious code in wallet-icon-font (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a89aa304ab9d5d7a44ee3e88112f9e35b876ad03a87090749c929e882289c721 The package wallet-icon-font was found to contain malicious code. Source: ghsa-malware 319f118931c6d4b46c7bf09c9474dd23e24873b1c32f093f631cc3dccd10ec...

5.8AI score
SaveExploits0References1
Snyk
Snyk
added 2026/01/29 3:47 a.m.3 views

Malicious Package

Overview wallet-icon-font is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.9AI score
SaveExploits0References2
OSV
OSV
added 2026/01/29 3:47 a.m.6 views

MAL-2026-598 Malicious code in wallet-icon-font (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a89aa304ab9d5d7a44ee3e88112f9e35b876ad03a87090749c929e882289c721 The package wallet-icon-font was found to contain malicious code. Source: ghsa-malware 319f118931c6d4b46c7bf09c9474dd23e24873b1c32f093f631cc3dccd10ec...

5.8AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2026/01/26 12:0 a.m.8 views

Canon Printers Multiple Vulnerabilities (CP2026-001)

Multiple vulnerabilities have been identified for certain Canon Small Office Multifunction Printers and Laser Printers. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

9.8CVSS5.8AI score0.00899EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2026/01/21 4:22 a.m.8 views

CVE-2025-14351

The Custom Fonts – Host Your Fonts Locally plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'BCFGoogleFontsCompatibility' class constructor function in all versions up to, and including, 2.1.16. This makes it possible for unauthenticated...

5.3CVSS5.5AI score0.00232EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/01/20 6:21 a.m.13 views

WordPress Custom Fonts - Host Your Fonts Locally plugin <= 2.1.16 - Missing Authorization to Unauthenticated Font Deletion vulnerability

WordPress Custom Fonts - Host Your Fonts Locally plugin = 2.1.16 - Missing Authorization to Unauthenticated Font Deletion vulnerability discovered by type5afe in WordPress Plugin Custom Fonts – Host Your Fonts Locally versions = 2.1.16...

5.3CVSS5.5AI score0.00232EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/01/20 4:15 a.m.8 views

CVE-2025-14351

The Custom Fonts – Host Your Fonts Locally plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'BCFGoogleFontsCompatibility' class constructor function in all versions up to, and including, 2.1.16. This makes it possible for unauthenticated...

5.3CVSS0.00232EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/20 3:25 a.m.5 views

CVE-2025-14351

The Custom Fonts – Host Your Fonts Locally plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'BCFGoogleFontsCompatibility' class constructor function in all versions up to, and including, 2.1.16. This makes it possible for unauthenticated...

5.3CVSS5.4AI score0.00232EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/01/20 3:25 a.m.5 views

CVE-2025-14351 Custom Fonts – Host Your Fonts Locally <= 2.1.16 - Missing Authorization to Unauthenticated Font Deletion

The Custom Fonts – Host Your Fonts Locally plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'BCFGoogleFontsCompatibility' class constructor function in all versions up to, and including, 2.1.16. This makes it possible for unauthenticated...

5.3CVSS5.5AI score0.00232EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/01/20 3:25 a.m.36 views

CVE-2025-14351 Custom Fonts – Host Your Fonts Locally <= 2.1.16 - Missing Authorization to Unauthenticated Font Deletion

The Custom Fonts – Host Your Fonts Locally plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'BCFGoogleFontsCompatibility' class constructor function in all versions up to, and including, 2.1.16. This makes it possible for unauthenticated...

5.3CVSS0.00232EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.7 views

MiracleLinux 8 : kernel-4.18.0-372.13.1.el8_6 (AXSA:2022-3780:12)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3780:12 advisory. kernel: buffer overflow in IPsec ESP transformation code CVE-2022-27666 kernel: out-of-bounds read in fbcongetfont function CVE-2020-28915 Tenable h...

7.8CVSS7.2AI score0.05524EPSS
SaveExploits2References3
Rows per page
Query Builder