831 matches found
CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
DEBIAN-CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
DEBIAN-CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
Command injection
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
UBUNTU-CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
UBUNTU-CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
Command injection
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
PT-2024-1853
Name of the Vulnerable Software and Affected Versions FontForge versions through 20230101 Description The issue allows command injection via crafted archives or compressed files. This is due to the lack of measures to neutralize special elements, which can enable an attacker to execute arbitrary...
CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
CVE-2024-25082
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files...
CVE-2024-25082
FontForge (through 20230101) is affected by CVE-2024-25081 and CVE-2024-25082, allowing shell command injection via specially crafted filenames or archives/compressed files. Public advisories from Debian (DSA-5641-1), AlmaLinux (ALSA-2024-2495 / ALSA-2024-565), and Amazon Linux (ALAS2024-2495 / A...
PT-2024-1850
Name of the Vulnerable Software and Affected Versions FontForge versions through 20230101 Description The issue exists due to the lack of neutralization of special elements in the software. This can allow an attacker to execute arbitrary commands via crafted filenames. The estimated number of...