Lucene search
+L

372 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.7 views

Malicious code in dd-transcode-ctrl (npm)

The package dd-transcode-ctrl was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in @zalastax/nolb-dd (npm)

The package @zalastax/nolb-dd was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.7 views

Malicious code in dd-test-coverage-sandbox (npm)

The package dd-test-coverage-sandbox was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-18113 Malicious code in dd-transcode-ctrl (npm)

The package dd-transcode-ctrl was found to contain malicious code...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/06/27 12:0 a.m.34 views

PT-2025-35973

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the libiscsi component. Specifically, the iscsi conn-dd data field is initialized regardless of whether memory allocation succeeds. If ib fast reg...

5.5CVSS6.1AI score0.00172EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 10:6 a.m.9 views

CVE-2024-30554

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wouter Dijkstra DD Rating allows Stored XSS.This issue affects DD Rating: from n/a through 1.7.1...

5.9CVSS8.6AI score0.00319EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:19 p.m.10 views

CVE-2020-13976

An issue was discovered in DD-WRT through 16214. The Diagnostic page allows remote attackers to execute arbitrary commands via shell metacharacters in the host field of the ping command. Exploitation through CSRF might be possible. NOTE: software maintainers consider the report invalid because it...

8.8CVSS8.1AI score0.01766EPSS
SaveExploits1
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.5 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: powerpc/mm/fault: Fixed the reporting of kfence page faults. The copyfromkernelnofault function can be called when reading /proc/kcore. /proc/kcore may contain kfence objects that are not mapped, and reading these objects via...

7.8CVSS6.5AI score0.00224EPSS
SaveExploits0References3
CNVD
CNVD
added 2025/02/10 12:0 a.m.5 views

DELL PowerProtect DD Path Traversal Vulnerability

DELL PowerProtect DD is a family of data protection storage appliances from Dell, built on the Data Domain platform and designed for enterprise-level users. The DELL PowerProtect DD suffers from a path traversal vulnerability that can be exploited by an attacker to illegally overwrite operating...

7.1CVSS6.9AI score0.00182EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/02/10 12:0 a.m.33 views

Dell PowerProtect DD Elevation of Privilege Vulnerability

Dell PowerProtect DD is Dell's data protection solution for backing up and restoring data. A security vulnerability exists in Dell PowerProtect DD. An attacker could exploit the vulnerability to cause elevation of privilege...

7.8CVSS6.8AI score0.00142EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:10 a.m.12 views

CVE-2024-38525

dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann JSON library. However, due to the way the JSON library is invoked, it throws an uncaught...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/04 3:15 a.m.24 views

CVE-2025-22475

Dell PowerProtect DD, versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.10 contains a use of a Cryptographic Primitive with a Risky Implementation vulnerability. A remote attacker could potentially exploit this vulnerability, leading to Information tampering...

7.5CVSS0.00222EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/04 3:15 a.m.5 views

CVE-2025-22475

Dell PowerProtect DD, versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.10 contains a use of a Cryptographic Primitive with a Risky Implementation vulnerability. A remote attacker could potentially exploit this vulnerability, leading to Information tampering...

7.5CVSS5.8AI score0.00222EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/04 2:19 a.m.10 views

CVE-2025-22475

Dell PowerProtect DD, versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.10 contains a use of a Cryptographic Primitive with a Risky Implementation vulnerability. A remote attacker could potentially exploit this vulnerability, leading to Information tampering...

3.7CVSS4.2AI score0.00222EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/01 4:15 a.m.16 views

CVE-2024-53296

Dell PowerProtect DD versions prior to 7.10.1.50 and 7.13.1.20 contain a Stack-based Buffer Overflow vulnerability in the RestAPI. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

4.9CVSS0.00382EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/01 4:15 a.m.6 views

CVE-2024-51534

Dell PowerProtect DD versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain a path traversal vulnerability. A local low privileged could potentially exploit this vulnerability to gain unauthorized overwrite of OS files stored on the server filesystem. Exploitation could lead to denial o...

7.1CVSS5.8AI score0.00182EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/01 4:15 a.m.7 views

CVE-2024-53296

Dell PowerProtect DD versions prior to 7.10.1.50 and 7.13.1.20 contain a Stack-based Buffer Overflow vulnerability in the RestAPI. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

4.9CVSS5.8AI score0.00382EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/16 8:15 p.m.7 views

CVE-2025-23528

Incorrect Privilege Assignment vulnerability in Mosterd3d DD Roles dd-roles allows Privilege Escalation.This issue affects DD Roles: from n/a through = 4.1...

8.8CVSS0.00543EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/16 8:6 p.m.46 views

CVE-2025-23528

CVE-2025-23528 describes an Incorrect Privilege Assignment in the WordPress plugin DD Roles (by Wouter Dijkstra) that enables authenticated privilege escalation. Affected: DD Roles up to version 4.1. The vulnerability is rated with CVSS 3.1/3.1: Base score 8.8 (High), vectors: AV:N/AC:L/PR:L/UI:N...

8.8CVSS7.2AI score0.00543EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/16 8:6 p.m.6 views

CVE-2025-23528 WordPress DD Roles plugin <= 4.1 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Mosterd3d DD Roles dd-roles allows Privilege Escalation.This issue affects DD Roles: from n/a through = 4.1...

8.8CVSS8.6AI score0.00543EPSS
SaveExploits0References1
Rows per page
Query Builder