Drupal Admin LTE theme 授权问题漏洞

The Drupal Admin LTE theme is an AdminLTE based backend administration theme for the Drupal community. A security vulnerability exists in Drupal Admin LTE theme, which stems from the presence of a known security issue, where an attack requires administrator privileges and affects the...

Drupal Flattern 安全漏洞

Drupal Flattern is a Bootstrap-based responsive theme for the Drupal community that provides a clean, modern front-end design for Drupal websites, commonly used for enterprise sites and blogs. A security vulnerability exists in Drupal Flattern, which stems from the presence of a known security...

PT-2025-14876 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical issue affects the processing of the file /goform/wrlwpsset, leading to improper access controls. The attack may be initiated remotely. Recommendations: For Tenda FH1202 version...

Drupal Profile Private 安全漏洞

Drupal Profile Private is a feature or module in the Drupal community for creating private user profiles in Drupal. A security vulnerability exists in Drupal Profile Private, which stems from a known security issue, where an attack requires administrator privileges and affects the confidentiality...

GHSA-5VMP-M5V2-HX47 tough root metadata version is not checked for sequential versioning

Summary When updating the root role, a TUF client must establish a trusted line of continuity to the latest set of keys. While sequentially downloading new versions of the root metadata file, tough will not check that the root object version it received was the next sequential version from the...

CVE-2025-31163

Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via putpatternarc function...

CVE-2025-31164

heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via createlinewithspline...

CVE-2025-31163

Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via putpatternarc function...

DEBIAN-CVE-2025-31163

Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via putpatternarc function...

CVE-2025-31162

Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via getslope function...

UBUNTU-CVE-2025-31164

heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via createlinewithspline...

CVE-2025-2820

An authenticated attacker can compromise the availability of the device via the network...

CVE-2025-31162

CVE-2025-31162 affects fig2dev in Xfig, version 3.2.9a. The issue is a floating point exception in the get_slope function that can be triggered by crafted local input, leading to availability impact. Several connected advisories note fixes for this family of issues (CVE-2025-31162/31163/31164) by...

CVE-2025-31162 fig2dev float point exception

Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via getslope function...

CVE-2025-31162 fig2dev float point exception

Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via getslope function...

CVE-2025-31163 fig2dev segmentation fault

Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via putpatternarc function...

CVE-2025-31163

CVE-2025-31163 corresponds to a segmentation fault in the xfig tool fig2dev, triggered by local input manipulation in put_patternarc for version 3.2.9a. The issue is publicly discussed across multiple advisories and has been addressed in various distributions: SUSE advisories (SUSE-SU-2025:01835-...

CVE-2025-31164

Fig2dev in version 3.2.9a is vulnerable to a heap-buffer overflow in create_line_with_spline (CVE-2025-31164). Attackers could exploit via locally manipulated input, as described in multiple advisories (e.g., SUSE, Debian, Mageia) that also reference related CVEs 31162/31163. Affected distributio...

PT-2025-13563 · Xfig +4 · Xfig +4

Name of the Vulnerable Software and Affected Versions: xfig fig2dev version 3.2.9a Description: The issue is related to a segmentation fault in the fig2dev component of xfig, which can be triggered by manipulating local input via the put patternarc function. This can lead to a null pointer...

PT-2025-13562 · Fig2Dev +4 · Fig2Dev +4

Name of the Vulnerable Software and Affected Versions: fig2dev version 3.2.9a Description: The issue is related to a floating point exception in the fig2dev component, specifically in the get slope function. This exception can be triggered by an attacker through local input manipulation,...