CVE-2025-31162 fig2dev float point exception

Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via getslope function...

CVE-2025-31163 fig2dev segmentation fault

Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via putpatternarc function...

CVE-2025-31163

CVE-2025-31163 corresponds to a segmentation fault in the xfig tool fig2dev, triggered by local input manipulation in put_patternarc for version 3.2.9a. The issue is publicly discussed across multiple advisories and has been addressed in various distributions: SUSE advisories (SUSE-SU-2025:01835-...

CVE-2025-31164

Fig2dev in version 3.2.9a is vulnerable to a heap-buffer overflow in create_line_with_spline (CVE-2025-31164). Attackers could exploit via locally manipulated input, as described in multiple advisories (e.g., SUSE, Debian, Mageia) that also reference related CVEs 31162/31163. Affected distributio...

PT-2025-13563 · Xfig +4 · Xfig +4

Name of the Vulnerable Software and Affected Versions: xfig fig2dev version 3.2.9a Description: The issue is related to a segmentation fault in the fig2dev component of xfig, which can be triggered by manipulating local input via the put patternarc function. This can lead to a null pointer...

PT-2025-13562 · Fig2Dev +4 · Fig2Dev +4

Name of the Vulnerable Software and Affected Versions: fig2dev version 3.2.9a Description: The issue is related to a floating point exception in the fig2dev component, specifically in the get slope function. This exception can be triggered by an attacker through local input manipulation,...

Fedora 41 : nodejs-nodemon (2025-0951177024)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-0951177024 advisory. Added patch for CVE-2024-4068 rhbz2280624 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

CVE-2025-1445

A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61850 TLS connection takes place in specific timing situations, when IEC61850 communication is active. Precondition is that IEC61850 as client or server are...

The vulnerability of Google Chrome browsers, related to memory usage after deallocation, allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of Google Chrome relates to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to compromise privacy, integrity, and accessibility of data...

The vulnerability of the SMB2_ioctl_init() function in the fs/cifs/smb2pdu.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SMB2ioctlinit function in the fs/cifs/smb2pdu.c module of the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-2820

An authenticated attacker can compromise the availability of the device via the network...

CVE-2025-2820 Denial of Service

An authenticated attacker can compromise the availability of the device via the network...

CVE-2025-2820

CVE-2025-2820 affects Bizerba GLx and CWX terminals (as cited by multiple sources). An authenticated attacker can disrupt availability of the device over the network (CVSS: Network, Privileges Required Low, User Interaction None, Impact: Availability High). The connected Red Hat, NVD, CVE List, a...

CVE-2025-2820 Denial of Service

An authenticated attacker can compromise the availability of the device via the network...

Security Bulletin: IBM Security Verify Directory products have multiple security vulnerabilities (CVE-2022-33164, CVE-2022-33168, CVE-2022-33161, CVE-2022-32755)

Summary Several vulnerabilities have been addressed in IBM Security Directory Server, IBM Security Directory Suite, and IBM Security Verify Directory products. Vulnerability Details CVEID:CVE-2022-33164 DESCRIPTION: IBM Security Directory Server 7.2.0 could allow a remote attacker to traverse...

Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities

Summary IBM Cloud Transformation Advisor has addressed multiple security vulnerabilities including those in Node.js, IBM WebSphere Application Server Liberty and various other libraries. Vulnerability Details CVEID:CVE-2022-24839 DESCRIPTION: Sparkle Motion Nokogiri is vulnerable to a denial of...

Bizerba GLx和Bizerba CWX 安全漏洞

Bizerba GLx and Bizerba CWX are both series of operating terminals from Bizerba. A security vulnerability exists in the Bizerba GLx and Bizerba CWX, which stems from a vulnerability that could lead to a breach of device availability...

PT-2025-12943 · Bizerba Se & Co. Kg · Product Family Glx/Cwx

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An authenticated attacker can compromise the availability of the device via the network. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

The vulnerability of the SmartFabric OS10 network operating system, related to the use of the default password, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SmartFabric OS10 network operating system is related to the use of a default password. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-1445

A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61850 TLS connection takes place in specific timing situations, when IEC61850 communication is active. Precondition is that IEC61850 as client or server are...