398 matches found
EUVD-2020-14452
Malware in sbrugna...
EUVD-2020-14448
Malware in sbrugna...
Unity Linux 20.1070e Security Update: transfig (UTSA-2025-984789)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984789 advisory. In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via readobjects function. Tenable has extracte...
Unity Linux 20.1070e Security Update: transfig (UTSA-2025-984799)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984799 advisory. In xfig diagramming tool, a stack-overflowwhile running fig2dev allows memory corruption via local input manipulation at the bezierspline function. Tenable has...
Unity Linux 20.1070e Security Update: transfig (UTSA-2025-984801)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984801 advisory. In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via readarcobject function...
EUVD-2025-12159
Malicious code in bioql PyPI...
EUVD-2025-12157
Malicious code in bioql PyPI...
EUVD-2025-12161
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2025-46397
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezierspline function. CVE-2025-46397 Note that...
Linux Distros Unpatched Vulnerability : CVE-2021-40241
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfig 3.2.7 is vulnerable to Buffer Overflow. CVE-2021-40241 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 8090...
Linux Distros Unpatched Vulnerability : CVE-2025-46398
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via readobjects function. CVE-2025-46398...
Linux Distros Unpatched Vulnerability : CVE-2025-46400
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via readarcobject function...
OESA-2025-1949 transfig security update
The transfig utility creates a makefile which translates FIG created by xfig or PIC figures into a specified LaTeX graphics language for example, PostScriptTM. Transfig is used to create TeX documents which are portable i.e., they can be printed in a wide variety of environments. Security Fixes: ...
OESA-2025-1948 transfig security update
The transfig utility creates a makefile which translates FIG created by xfig or PIC figures into a specified LaTeX graphics language for example, PostScriptTM. Transfig is used to create TeX documents which are portable i.e., they can be printed in a wide variety of environments. Security Fixes: ...
TencentOS Server 4: transfig (TSSA-2025:0488)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0488 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
Astra Linux – Vulnerability in fig2dev
A flaw was discovered in xfig. This vulnerability allows for possible code execution through local input manipulation using the bezierspline function...
Astra Linux – Vulnerability in fig2dev
In the xfig diagramming tool, a stack-overflow issue occurs during the execution of fig2dev, leading to memory corruption due to local input manipulation through the readobjects function...
Astra Linux – Vulnerability in fig2dev
In the xfig diagramming tool, a segmentation fault occurs when running fig2dev. This allows an attacker to gain control by manipulating inputs locally through the readarcobject function...
CVE-2023-45920
Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints. NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server or window manager...
