173 matches found
deepin-linux_reader_RCE-exploit
CVE-2023-50254 - Deepin Linux's default document viewer deepin-reader RCE CVE-2023-50254: PoC Exploit for Deepin-reader RCE that affects unpatched Deepin Linux Desktops. Deepin Linux's default document reader "deepin-reader" software suffers from a serious vulnerability due to a design flaw that...
OESA-2026-3509 deepin-compressor security update
. Security Fixes: Deepin-Compressor is the default archive manager of Deepin Linux OS. Prior to 5.12.21, there's a path traversal vulnerability in deepin-compressor that can be exploited to achieve Remote Command Execution on the target system upon opening crafted archives. Users are advised to...
OESA-2026-3508 deepin-compressor security update
. Security Fixes: Deepin-Compressor is the default archive manager of Deepin Linux OS. Prior to 5.12.21, there's a path traversal vulnerability in deepin-compressor that can be exploited to achieve Remote Command Execution on the target system upon opening crafted archives. Users are advised to...
OESA-2026-3507 deepin-compressor security update
. Security Fixes: Deepin-Compressor is the default archive manager of Deepin Linux OS. Prior to 5.12.21, there's a path traversal vulnerability in deepin-compressor that can be exploited to achieve Remote Command Execution on the target system upon opening crafted archives. Users are advised to...
OESA-2026-3506 deepin-compressor security update
. Security Fixes: Deepin-Compressor is the default archive manager of Deepin Linux OS. Prior to 5.12.21, there's a path traversal vulnerability in deepin-compressor that can be exploited to achieve Remote Command Execution on the target system upon opening crafted archives. Users are advised to...
[SECURITY] Fedora 44 Update: dtk6widget-6.7.32-5.fc44
Deepin Tool Kit WidgetDtkWidget provides the base widgets on Deepin...
[SECURITY] Fedora 44 Update: dtk6gui-6.7.32-4.fc44
Deepin Tool Kit DtkGui is the development graphical user interface of all C++/Qt Developer work on Deepin...
[SECURITY] Fedora 44 Update: dtk6core-6.7.32-3.fc44
Deepin tool kit core modules...
CVE-2026-35207
dde-control-center is the control panel of DDE, the Deepin Desktop Environment. plugin-deepinid is a plugin in dde-control-center, which provides the deepinid cloud service. Prior to 6.1.80, plugin-deepinid is configured to skip TLS certificate verification when fetching the user's avatar from...
[SECURITY] Fedora 44 Update: deepin-image-viewer-5.8.2-21.fc44
Deepin Image Viewer...
[SECURITY] Fedora 44 Update: dtk6gui-6.7.32-5.fc44
Deepin Tool Kit DtkGui is the development graphical user interface of all C++/Qt Developer work on Deepin...
CVE-2026-35207
dde-control-center is the control panel of DDE, the Deepin Desktop Environment. plugin-deepinid is a plugin in dde-control-center, which provides the deepinid cloud service. Prior to 6.1.80, plugin-deepinid is configured to skip TLS certificate verification when fetching the user's avatar from...
EUVD-2026-20991
dde-control-center is the control panel of DDE, the Deepin Desktop Environment. plugin-deepinid is a plugin in dde-control-center, which provides the deepinid cloud service. Prior to 6.1.80, plugin-deepinid is configured to skip TLS certificate verification when fetching the user's avatar from...
CVE-2026-35207
In dde-control-center (Deepin Desktop Environment), the plugin-deepinid insecurely skipped TLS certificate verification when fetching user avatars from openapi.deepin.com and similar providers. Prior to version 6.1.80, this allowed a (MITM) attacker to intercept traffic, potentially replace the a...
CVE-2026-35207
dde-control-center is the control panel of DDE, the Deepin Desktop Environment. plugin-deepinid is a plugin in dde-control-center, which provides the deepinid cloud service. Prior to 6.1.80, plugin-deepinid is configured to skip TLS certificate verification when fetching the user's avatar from...
CVE-2026-35207 deepinid plugin in dde-control-center is configured to skip TLS certificate verification when downloading avatar from remote server
dde-control-center is the control panel of DDE, the Deepin Desktop Environment. plugin-deepinid is a plugin in dde-control-center, which provides the deepinid cloud service. Prior to 6.1.80, plugin-deepinid is configured to skip TLS certificate verification when fetching the user's avatar from...
CVE-2025-23222
An issue was discovered in Deepin dde-api-proxy through 1.0.19 in which unprivileged users can access D-Bus services as root. Specifically, dde-api-proxy runs as root and forwards messages from arbitrary local users to legacy D-Bus methods in the actual D-Bus services, and the actual D-Bus servic...
Unity Linux 20.1070a Security Update: deepin-compressor (UTSA-2025-991249)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991249 advisory. deepin-compressor Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not tested for this iss...
Unity Linux 20.1070e Security Update: deepin-compressor (UTSA-2025-991246)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991246 advisory. deepin-compressor Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not tested for this iss...