Lucene search
+L

2743 matches found

NVD
NVD
added 2025/12/31 7:15 a.m.13 views

CVE-2025-15270

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS0.00619EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2025/12/31 7:15 a.m.10 views

CVE-2025-15270

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS7.5AI score0.00619EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/31 7:15 a.m.13 views

UBUNTU-CVE-2025-15270

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS7.7AI score0.00619EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2025/12/31 7:15 a.m.11 views

CVE-2025-15271

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS7.5AI score0.00619EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2025/12/31 6:58 a.m.19 views

CVE-2025-15271

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS7.5AI score0.00619EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/31 6:58 a.m.3 views

CVE-2025-15271 FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.7AI score0.00619EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/31 6:58 a.m.47 views

CVE-2025-15271

FontForge (SFD file parser) is affected by CVE-2025-15271 due to improper validation of array indices, causing a write past the end of an allocated array. The flaw enables remote code execution with user interaction (the target must open a malicious SFD or visit a crafted page). The vulnerability...

8.8CVSS7.2AI score0.00619EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2025/12/31 6:58 a.m.17 views

CVE-2025-15271

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.3AI score0.00619EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2025/12/31 6:58 a.m.4 views

CVE-2025-15270 FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.7AI score0.00619EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2025/12/31 6:58 a.m.7 views

CVE-2025-15270

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.4AI score0.00619EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2025/12/31 6:58 a.m.8 views

CVE-2025-15270

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS7.5AI score0.00619EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/31 6:58 a.m.62 views

CVE-2025-15270

FontForge SFD File Parsing vulnerabilities (CVE-2025-15270) arise from improper validation of data while parsing SFD files, causing out-of-bounds writes and remote code execution. The connected Mageia advisory confirms a FontForge fix in updated packages; other sources describe the same issue and...

8.8CVSS7.2AI score0.00619EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/31 6:58 a.m.40 views

CVE-2025-15270 FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS0.00619EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/31 6:58 a.m.10 views

EUVD-2025-205897

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS7AI score0.00619EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2025-15270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra...

8.8CVSS8.2AI score0.00619EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:00 a.m.14 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992826)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992826 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check gpioid before used as array index WHY & HOW GPIOIDUNKNOWN -1 is not a vali...

7.8CVSS6.2AI score0.00267EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:00 a.m.6 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993188)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993188 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add array index check for hdcp ddc access Why Coverity reports OVERRUN warning. ...

7.8CVSS6.2AI score0.00245EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/30 12:00 a.m.10 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an array index out-of-bounds, which could lead to out-of-bounds reads...

5.8AI score0.00195EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/12/30 12:00 a.m.15 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992647)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992647 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add array index check for hdcp ddc access Why Coverity reports OVERRUN warning. ...

7.8CVSS6.2AI score0.00245EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/29 5:13 p.m.27 views

CLSA-2025-1767028399 java-11-openjdk: Fix of 5 CVEs

Upgrade to openjdk-11.0.29+7 GA. The following CVEs were fixed: - CVE-2023-48161: fix buffer overflow vulnerability - CVE-2024-21147: RangeCheckElimination array index overflow - CVE-2025-21587: fix TLS connection support to avoid unauthorized access to critical data - CVE-2025-53057: enhance...

7.5CVSS7AI score0.01136EPSS
SaveExploits1References1
Rows per page
Query Builder