Lucene search
+L

14485 matches found

osv-ubuntu
osv-ubuntu
•added 2025/12/31 7:15 a.m.•14 views

UBUNTU-CVE-2025-15270

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.2AI score0.0061EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2025/12/31 7:15 a.m.•14 views

CVE-2025-15271

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.2AI score0.0061EPSS
SaveExploits0References2
OSV
OSV
•added 2025/12/31 7:15 a.m.•22 views

UBUNTU-CVE-2025-15271

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS6.2AI score0.0061EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/31 6:58 a.m.•4 views

CVE-2025-15271 FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.3AI score0.0061EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/31 6:58 a.m.•51 views

CVE-2025-15271

FontForge (SFD file parser) is affected by CVE-2025-15271 due to improper validation of array indices, causing a write past the end of an allocated array. The flaw enables remote code execution with user interaction (the target must open a malicious SFD or visit a crafted page). The vulnerability...

8.8CVSS8.3AI score0.0061EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
•added 2025/12/31 6:58 a.m.•19 views

CVE-2025-15271

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.3AI score0.0061EPSS
SaveExploits0
EUVD
EUVD
•added 2025/12/31 6:58 a.m.•21 views

EUVD-2025-205896

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS7AI score0.0061EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2025/12/31 6:58 a.m.•23 views

CVE-2025-15271

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.3AI score0.0061EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2025/12/31 6:58 a.m.•10 views

CVE-2025-15270

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.2AI score0.0061EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/31 6:58 a.m.•43 views

CVE-2025-15270 FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS0.0061EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/12/31 6:58 a.m.•10 views

CVE-2025-15270

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.2AI score0.0061EPSS
SaveExploits0
EUVD
EUVD
•added 2025/12/31 6:58 a.m.•14 views

EUVD-2025-205897

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.2AI score0.0061EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/31 6:58 a.m.•5 views

CVE-2025-15270 FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.2AI score0.0061EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/31 6:58 a.m.•75 views

CVE-2025-15270

FontForge SFD File Parsing vulnerabilities (CVE-2025-15270) arise from improper validation of data while parsing SFD files, causing out-of-bounds writes and remote code execution. The connected Mageia advisory confirms a FontForge fix in updated packages; other sources describe the same issue and...

8.8CVSS8.2AI score0.0061EPSS
SaveExploits0References1Affected Software1
SUSE CVE
SUSE CVE
•added 2025/12/31 12:29 a.m.•12 views

SUSE CVE-2023-54170

In the Linux kernel, the following vulnerability has been resolved: keys: Fix linking a duplicate key to a keyring's assocarray When making a DNS query inside the kernel using dnsquery, the request code can in rare cases end up creating a duplicate index key in the assocarray of the destination...

5.5CVSS5.9AI score0.00205EPSS
SaveExploits0References24
SUSE CVE
SUSE CVE
•added 2025/12/31 12:28 a.m.•11 views

SUSE CVE-2023-54194

In the Linux kernel, the following vulnerability has been resolved: exfat: use kvmallocarray/kvfree instead of kmallocarray/kfree The call stack shown below is a scenario in the Linux 4.19 kernel. Allocating memory failed where exfat fs use kmallocarray due to system memory fragmentation, while t...

3.3CVSS5.9AI score0.00208EPSS
SaveExploits0References19
Tenable Nessus
Tenable Nessus
•added 2025/12/31 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-15270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra...

8.8CVSS8.2AI score0.0061EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/12/31 12:00 a.m.•16 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992712)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992712 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Don't use tnumrange on array range checking for poke descriptors Hsin-Wei reported a KASAN...

7.8CVSS6.4AI score0.0026EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/31 12:00 a.m.•7 views

CVE-2025-15270: Improper Validation of Array Index

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.2AI score0.0061EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/12/31 12:00 a.m.•11 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993139)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993139 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix potential null-ptr-deref on tracearray in kprobeeventgentestexit When...

5.5CVSS5.7AI score0.00201EPSS
SaveExploits0References4
Rows per page
Query Builder