Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/tsens: Fixed null pointer dereferencing. The function computeinterceptslope is called from calibrate8960 in tsens-8960.c. This call involves a parameter of type priv, p1, NULL, ONEPTCALIB, which leads to a null...

EUVD-2025-5330

Malicious code in bioql PyPI...

Malicious code in continent-slope-went (npm)

The package continent-slope-went was found to contain malicious code...

MAL-2025-43886 Malicious code in continent-slope-went (npm)

The package continent-slope-went was found to contain malicious code...

Malicious code in test-mlw2-slope-wagon (npm)

The package test-mlw2-slope-wagon was found to contain malicious code...

Malicious code in test-mlw2-slope-haiks-cloys-durst (npm)

The package test-mlw2-slope-haiks-cloys-durst was found to contain malicious code...

Malicious code in @malware-test-slope-haiks-cloys-durst/test-mlw3-slope-haiks-cloys-durst (npm)

The package @malware-test-slope-haiks-cloys-durst/test-mlw3-slope-haiks-cloys-durst was found to contain malicious code...

MAL-2025-36258 Malicious code in test-mlw2-slope-wagon (npm)

The package test-mlw2-slope-wagon was found to contain malicious code...

MAL-2025-36257 Malicious code in test-mlw2-slope-haiks-cloys-durst (npm)

The package test-mlw2-slope-haiks-cloys-durst was found to contain malicious code...

Security update for transfig

This update for transfig fixes the following issues: Update to fig2dev version 3.2.9a CVE-2025-31162: Fixed a floating point exception in fig2dev in getslope function bsc1240380. CVE-2025-31163: Fixed a segmentation fault in fig2dev in putpatternarc function bsc1240381. CVE-2025-31164: Fixed a he...

UBUNTU-CVE-2025-31162

Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via getslope function...

CVE-2025-31162

Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via getslope function...

fig2dev 安全漏洞

fig2dev is a simple tool from the Xfig open source. It is used to translate fig code from a named fig file into a specified graphics language. A security vulnerability exists in fig2dev version 3.2.9a, which stems from a floating-point exception in the getslope function that could lead to a denia...

PT-2025-13562 · Fig2Dev +4 · Fig2Dev +4

Name of the Vulnerable Software and Affected Versions: fig2dev version 3.2.9a Description: The issue is related to a floating point exception in the fig2dev component, specifically in the get slope function. This exception can be triggered by an attacker through local input manipulation,...

Canon多款产品 缓冲区错误漏洞

Canon Generic PCL6 V4 Printer Driver and others are products of Canon Japan.Canon Generic PCL6 V4 Printer Driver is a Canon Generic PCL6 V4 printer driver.Canon Generic UFR II V4 Printer Canon Generic UFR II V4 Printer Driver is a Canon Generic UFR II V4 printer driver.Canon Generic LIPSLX V4...

PT-2025-8229 · Unknown · Generic Ufr Ii V4 Printer Driver +2

Name of the Vulnerable Software and Affected Versions: Generic PCL6 V4 Printer Driver affected versions not specified Generic UFR II V4 Printer Driver affected versions not specified Generic LIPSLX V4 Printer Driver affected versions not specified Description: The issue is related to an...

CVE-2024-11902

The Slope Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slope-reservations' shortcode in all versions up to, and including, 4.2.12 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-11902 Slope Widgets <= 4.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Slope Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slope-reservations' shortcode in all versions up to, and including, 4.2.12 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-11902

CVE-2024-11902 affects the Slope Widgets WordPress plugin. The issue is a Stored Cross-Site Scripting vulnerability via the plugin’s slope-reservations shortcode, present in all versions up to 4.2.11, caused by insufficient input sanitization and output escaping of user-supplied attributes. Conse...

CVE-2024-11902 Slope Widgets <= 4.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Slope Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slope-reservations' shortcode in all versions up to, and including, 4.2.12 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...