CVE-2025-15271

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

CVE-2025-15270 FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

CVE-2025-15270

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

CVE-2025-15270

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

CVE-2025-15270

FontForge SFD File Parsing vulnerabilities (CVE-2025-15270) arise from improper validation of data while parsing SFD files, causing out-of-bounds writes and remote code execution. The connected Mageia advisory confirms a FontForge fix in updated packages; other sources describe the same issue and...

CVE-2025-15270 FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

EUVD-2025-205897

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

CVE-2025-15372

A weakness has been identified in youlaitech vue3-element-admin up to 3.4.0. This issue affects some unknown processing of the file src/views/system/notice/index.vue of the component Notice Handler. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2025-15372 youlaitech vue3-element-admin Notice index.vue cross site scripting

A weakness has been identified in youlaitech vue3-element-admin up to 3.4.0. This issue affects some unknown processing of the file src/views/system/notice/index.vue of the component Notice Handler. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2025-15372

The vulnerability is in youlaitech Vue3 Element Admin up to 3.4.0, affecting the Notice Handler component (src/views/system/notice/index.vue). The issue enables cross-site scripting due to unspecified input handling, with remote exploitation possible and a public PoC available. Multiple sources r...

EUVD-2022-55942

SOUND4 IMPACT/FIRST/PULSE/Eco =2.x contains an SQL injection vulnerability in the 'username' POST parameter of index.php that allows attackers to manipulate database queries. Attackers can inject arbitrary SQL code through the username parameter to bypass authentication and potentially access...

SUSE SLES12: libpng16-16 / libpng16-16-32bit / libpng16-compat-devel / etc (SUSE-SU-2025:4533-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4533-1 advisory. - CVE-2025-64720: Fixed buffer overflow in pngimagereadcomposite via incorrect palette premultiplication bsc1254159 - CVE-2025-64505: Fixed hea...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992868)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992868 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: check if leafidx greater than num leaves per dmap tree syzbot report a out of bounds in...

Linux Distros Unpatched Vulnerability : CVE-2025-15270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992826)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992826 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check gpioid before used as array index WHY & HOW GPIOIDUNKNOWN -1 is not a vali...

vue3-element-admin 安全漏洞

vue3-element-admin is a backend administration front-end template open-sourced by the Yurai Open Source Organization. A security vulnerability exists in vue3-element-admin version 3.4.0 and earlier, which stems from an incorrect operation of the file src/views/system/notice/index.vue, which could...

PT-2025-54270

A weakness has been identified in youlaitech vue3-element-admin up to 3.4.0. This issue affects some unknown processing of the file src/views/system/notice/index.vue of the component Notice Handler. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993078)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993078 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix buffer overflow in sja1105setupdevlinkregions If an error occurs in...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992926)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992926 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix invalid address access in lookuprec when index is 0 KASAN reported follow problem: BU...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993188)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993188 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add array index check for hdcp ddc access Why Coverity reports OVERRUN warning. ...