Lucene search
+L

373 matches found

Github Security Blog
Github Security Blog
added 2026/03/26 4:45 p.m.12 views

dd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code execution

In versions of dd-trace-java prior to 1.60.3, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serialization filters. On JDK version 16 and earlier, an attacker with network access to a JMX or RMI port on an instrumented JVM could exploit this ...

9.8CVSS6.5AI score0.00622EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/03/26 4:45 p.m.10 views

GHSA-579Q-H82J-R5V2 dd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code execution

In versions of dd-trace-java prior to 1.60.3, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serialization filters. On JDK version 16 and earlier, an attacker with network access to a JMX or RMI port on an instrumented JVM could exploit this ...

9.8CVSS6.3AI score0.00622EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/01/21 12:00 a.m.22 views

DD-WRT security vulnerabilities

DD-WRT is an open-source alternative firmware based on Linux, developed by DD-WRT. It is suitable for various WLAN routers and embedded systems. Version DD-WRT 45723 contains a security vulnerability, which stems from a buffer overflow in the UPNP network discovery service. This vulnerability cou...

9.8CVSS6.3AI score0.01013EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/01/21 12:00 a.m.16 views

PT-2026-3807

DD-WRT version 45723 contains a buffer overflow vulnerability in the UPNP network discovery service that allows remote attackers to potentially execute arbitrary code. Attackers can send crafted M-SEARCH packets with oversized UUID payloads to trigger buffer overflow conditions on the target devi...

9.8CVSS6.4AI score0.01013EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/01/09 3:31 p.m.7 views

CVE-2025-46644

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.4.0.0, LTS2025 release version 8.3.1.10, LTS2024 release versions 7.13.1.0 through 7.13.1.40, LTS2023 release versions 7.10.1.0 through 7.10.1.70, contain an Improper Neutralization...

6CVSS6.1AI score0.00529EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:48 a.m.9 views

CVE-2025-23528

Incorrect Privilege Assignment vulnerability in Mosterd3d DD Roles dd-roles allows Privilege Escalation.This issue affects DD Roles: from n/a through = 4.1...

8.8CVSS7.2AI score0.00554EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/24 11:09 a.m.15 views

OESA-2025-2535 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix NULL dereference on q-elevator in blkmqelvswitchnone After grabbing q-sysfslock, q-elevator may become NULL because of elevator switch. Fix the NULL...

7.5CVSS6.5AI score0.0017EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2025/10/20 12:00 a.m.6 views

CVE-2025-54957

An issue was discovered in Dolby UDC 4.5 through 4.13. A crash of the DD+ decoder process can occur when a malformed DD+ bitstream is processed. When Evolution data is processed by evopriv.c from the DD+ bitstream, the decoder writes that data into a buffer. The length calculation for a write can...

9.4AI score0.01589EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/10/14 12:00 a.m.15 views

PT-2025-42572

Name of the Vulnerable Software and Affected Versions Dolby UDC versions 4.5 through 4.13 Description An out-of-bounds write exists in the Dolby Unified Decoder UDC when processing malformed Dolby Digital Plus DD+ bitstreams. The issue occurs in evo priv.c during the processing of Evolution data,...

9.8CVSS8AI score0.01589EPSS
SaveExploits1References68
OSV
OSV
added 2025/10/07 8:15 p.m.7 views

CVE-2025-36569

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...

6.7CVSS6AI score0.00485EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/07 7:38 p.m.13 views

CVE-2025-36569

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...

6.7CVSS0.00485EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/07 7:11 p.m.4 views

CVE-2025-43909

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Use of a Broken or Ris...

3.7CVSS6.5AI score0.00151EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2012-6152

Malware in sbrugna...

9.3CVSS8.6AI score0.01691EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2015-7211

Malware in sbrugna...

10CVSS9.5AI score0.02431EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.16 views

EUVD-2009-2756

Malware in sbrugna...

7.5CVSS6.4AI score0.05129EPSS
SaveExploits2References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2008-6933

Malware in sbrugna...

6.8CVSS6.4AI score0.01452EPSS
SaveExploits3References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2008-6934

Malware in sbrugna...

6.8CVSS6.4AI score0.01311EPSS
SaveExploits3References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2015-7212

Malware in sbrugna...

8.8CVSS8.8AI score0.00593EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2024-45806

Malicious code in bioql PyPI...

7.1CVSS6.6AI score0.00182EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2024-51943

Malicious code in bioql PyPI...

7.8CVSS7.6AI score0.00142EPSS
SaveExploits0References1
Rows per page
Query Builder