CVE-2025-68171 x86/fpu: Ensure XFD state on signal delivery

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure XFD state on signal delivery Sean reported 1 the following splat when running KVM tests: WARNING: CPU: 232 PID: 15391 at xfdvalidatestate+0x65/0x70 Call Trace: fpuclearuserstates+0x9c/0x100...

Denial Of Service

rhino is vulnerable to a Denial of Service. The vulnerability is due to improper handling of attacker-controlled floating-point values in the toFixed function, where small or specially crafted numbers trigger an expensive call chain that attempts to raise 5 to an extremely large power, and...

Rhino has high CPU usage and potential DoS when passing specific numbers to `toFixed()` function

When an application passed an attacker controlled float poing number into the toFixed function, it might lead to high CPU consumption and a potential Denial of Service. Small numbers go through this call stack: NativeNumber.numTo DToA.JSdtostr DToA.JSdtoa DToA.pow5mult where pow5mult attempts to...

GHSA-3W8Q-XQ97-5J7X Rhino has high CPU usage and potential DoS when passing specific numbers to `toFixed()` function

When an application passed an attacker controlled float poing number into the toFixed function, it might lead to high CPU consumption and a potential Denial of Service. Small numbers go through this call stack: NativeNumber.numTo DToA.JSdtostr DToA.JSdtoa DToA.pow5mult where pow5mult attempts to...

Mozilla Rhino 资源管理错误漏洞

Mozilla Rhino is an open source JavaScript engine from Mozilla Corporation. A resource management error vulnerability exists in Mozilla Rhino versions 1.8.1, 1.7.15.1, and prior to 1.7.14.1, which stems from the improper handling of floating point numbers by the toFixed function, which could lead...

CVE-2025-13566

A security vulnerability has been detected in jarun nnn up to 5.1. The impacted element is the function showcontentinfloatingwindow/runcmdasplugin of the file nnn/src/nnn.c. The manipulation leads to double free. An attack has to be approached locally. The identifier of the patch is...

EUVD-2025-198585

A security vulnerability has been detected in jarun nnn up to 5.1. The impacted element is the function showcontentinfloatingwindow/runcmdasplugin of the file nnn/src/nnn.c. The manipulation leads to double free. An attack has to be approached locally. The identifier of the patch is...

CVE-2025-13566

A security vulnerability has been detected in jarun nnn up to 5.1. The impacted element is the function showcontentinfloatingwindow/runcmdasplugin of the file nnn/src/nnn.c. The manipulation leads to double free. An attack has to be approached locally. The identifier of the patch is...

CVE-2025-13566 jarun nnn nnn.c run_cmd_as_plugin double free

A security vulnerability has been detected in jarun nnn up to 5.1. The impacted element is the function showcontentinfloatingwindow/runcmdasplugin of the file nnn/src/nnn.c. The manipulation leads to double free. An attack has to be approached locally. The identifier of the patch is...

CVE-2025-13566 jarun nnn nnn.c run_cmd_as_plugin double free

A security vulnerability has been detected in jarun nnn up to 5.1. The impacted element is the function showcontentinfloatingwindow/runcmdasplugin of the file nnn/src/nnn.c. The manipulation leads to double free. An attack has to be approached locally. The identifier of the patch is...

CVE-2025-13566

The CVE-2025-13566 entry applies to jarun nnn up to version 5.1. The vulnerability is in the function show_content_in_floating_window/run_cmd_as_plugin within nnn/src/nnn.c, where manipulation leads to a double free. The issue is exploitable with local access. A patch exists (patch identifier 2f0...

PT-2025-47859

A security vulnerability has been detected in jarun nnn up to 5.1. The impacted element is the function show content in floating window/run cmd as plugin of the file nnn/src/nnn.c. The manipulation leads to double free. An attack has to be approached locally. The identifier of the patch is...

nnn 资源管理错误漏洞

nnn is a terminal file manager by Arun Prakash Jana Personal Developer. A resource management error vulnerability exists in nnn 5.1 and earlier versions, which stems from a misbehavior of the function showcontentinfloatingwindow/runcmdasplugin in the file nnn/src/nnn.c, which could lead to a doub...

TencentOS Server 4: espeak-ng (TSSA-2025:0019)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0019 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Apache OpenOffice < 4.1.16 Multiple Vulnerabilities

The version of Apache OpenOffice installed on the remote host is prior to 4.1.16. It is, therefore, affected by multiple vulnerabilities, including: - Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of 'external data sources'. A missing Authorization vulnerability...

CVE-2025-64401

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used "floating frames" linke...

EUVD-2025-119983

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used "floating frames" linke...

CVE-2025-64401

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used "floating frames" linke...

CVE-2025-64401

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used "floating frames" linke...

CVE-2025-64401

A missing Authorization vulnerability in Apache OpenOffice (versions through 4.1.15) allows an attacker to craft a document that causes external links to load without user prompting. Specifically, documents utilizing "floating frames" linked to external files will load the contents of those frame...