WordPress Floating Window Music Player plugin <= 3.4.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross Site Request Forgery CSRF to Stored XSS vulnerability discovered by Skalucy in WordPress Plugin Floating Window Music Player versions = 3.4.2...

Linux Distros Unpatched Vulnerability : CVE-2022-38230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XPDF commit ffaf11c was discovered to contain a floating point exception FPE via DCTStream::decodeImage at /xpdf/Stream.cc. CVE-2022-38230 Note that Nessus reli...

Linux Distros Unpatched Vulnerability : CVE-2019-20051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A floating-point exception was discovered in PackLinuxElf::elfhash in plxelf.cpp in UPX 3.95. The vulnerability causes an application crash, which leads to deni...

Linux Distros Unpatched Vulnerability : CVE-2022-35434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jpeg-quantsmooth before commit 8879454 contained a floating point exception FPE via /jpeg- quantsmooth/jpegqs+0x4f5d6c. CVE-2022-35434 Note that Nessus relies o...

Linux Distros Unpatched Vulnerability : CVE-2021-40562

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Segmentation fault caused by a floating point exception exists in Gpac through 1.0.1 using mp4box via the naludmxenqueueordispatch function in reframenalu.c,...

CVE-2025-38670 arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()

In the Linux kernel, the following vulnerability has been resolved: arm64/entry: Mask DAIF in cpuswitchto, callonirqstack cpuswitchto and callonirqstack manipulate SP to change to different stacks along with the Shadow Call Stack if it is enabled. Those two stack changes cannot be done atomically...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the bpf, arm64 module not properly initializing fp in an exception boundary program...

Linux Distros Unpatched Vulnerability : CVE-2025-32364

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated...

Linux Distros Unpatched Vulnerability : CVE-2023-46009

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c. CVE-2023-46009 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2024-7883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using Arm Cortex-M Security Extensions CMSE, Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secu...

Linux Distros Unpatched Vulnerability : CVE-2022-49557

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: x86/fpu: KVM: Set the base guest FPU uABI size to sizeofstruct kvmxsave Set the starting uAB...

Linux Distros Unpatched Vulnerability : CVE-2022-49783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/fpu: Drop fpregs lock before inheriting FPU permissions Mike Galbraith reported the following against an old fork of preempt-rt but the same issue also...

Linux Distros Unpatched Vulnerability : CVE-2025-37991

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - parisc: Fix double SIGFPE crash Camm noticed that on parisc a SIGFPE exception will crash an application with a second SIGFPE in the signal handler. Dave...

PT-2025-35962

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw where reading /proc/kthread/arch status can cause a NULL pointer dereference when CONFIG X86 DEBUG FPU is enabled. This occurs because the AVX-512...

Linux Distros Unpatched Vulnerability : CVE-2022-32981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 5.18.3 on powerpc 32-bit platforms. There is a buffer overflow in ptrace PEEKUSER and POKEUSER aka PEEKUSR a...

Linux Distros Unpatched Vulnerability : CVE-2023-52598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/ptrace: handle setting of fpc register correctly If the content of the floating point control fpc register of a traced process is modified with the ptrace...

arm64/fpsimd: Discard stale CPU state when handling SME traps

...

SUSE-SU-2025:01835-2 Security update for transfig

This update for transfig fixes the following issues: Update to fig2dev version 3.2.9a - CVE-2025-31162: Fixed a floating point exception in fig2dev in getslope function bsc1240380. - CVE-2025-31163: Fixed a segmentation fault in fig2dev in putpatternarc function bsc1240381. - CVE-2025-31164: Fixe...

DEBIAN-CVE-2025-38169

In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP On system with SME, a thread's kernel FPSIMD state may be erroneously clobbered during a context switch immediately after that state is restored. Systems without SME...

DEBIAN-CVE-2025-38170

In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Discard stale CPU state when handling SME traps The logic for handling SME traps manipulates saved FPSIMD/SVE/SME state incorrectly, and a race with preemption can result in a task having TIFSME set and...