Lucene search
K

12 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-4222

Malware in sbrugna...

6.8CVSS6.5AI score0.00377EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2025-12467

Malicious code in bioql PyPI...

8.4CVSS6.5AI score0.00166EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/04/29 2:6 a.m.19 views

CVE-2025-46579

There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed...

8.4CVSS7.4AI score0.00166EPSS
Exploits0References1
NVD
NVD
added 2025/04/27 2:15 a.m.11 views

CVE-2025-46579

There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed...

8.4CVSS0.00166EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/27 1:34 a.m.17 views

CVE-2025-46579 ZTE GoldenDB Database product has a DDE injection vulnerability

There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed...

8.4CVSS0.00166EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/27 1:34 a.m.3 views

CVE-2025-46579 ZTE GoldenDB Database product has a DDE injection vulnerability

There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed...

8.4CVSS8.5AI score0.00166EPSS
Exploits0References1
CVE
CVE
added 2025/04/27 1:34 a.m.96 views

CVE-2025-46579

The CVE-2025-46579 entry concerns ZTE GoldenDB with a DDE injection vulnerability. Attackers can inject DDE expressions via the interface, and when a user downloads and opens the affected file, the DDE commands can be executed. The available sources confirm the existence of this vulnerability and...

8.4CVSS8.6AI score0.00166EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/04/27 12:0 a.m.1 views

PT-2025-17978 · Goldendb · Goldendb

Name of the Vulnerable Software and Affected Versions: GoldenDB affected versions not specified Description: There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the...

8.4CVSS6.6AI score0.00166EPSS
Exploits0References12
NVD
NVD
added 2019/04/25 7:29 p.m.9 views

CVE-2018-12244

SEP Mac client prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection also known as formula injection vulnerability, which is a type of issue whereby an application or website allows untrusted input into CSV files...

6.8CVSS6.5AI score0.00377EPSS
Exploits0References2
Prion
Prion
added 2019/04/25 7:29 p.m.13 views

Design/Logic Flaw

SEP Mac client prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection also known as formula injection vulnerability, which is a type of issue whereby an application or website allows untrusted input into CSV files...

6.8CVSS6.5AI score0.00377EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2019/04/25 6:49 p.m.43 views

CVE-2018-12244

CVE-2018-12244 affects the SEP for Mac client, from versions before 12.1 RU6 MP9 and before 14.2 RU1. The issue is a CSV/DDE (formula) injection vulnerability where untrusted input placed in CSV files can be interpreted as commands or formulas by the application. The connected sources document th...

6.8CVSS6.5AI score0.00377EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/04/25 6:49 p.m.12 views

CVE-2018-12244

SEP Mac client prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection also known as formula injection vulnerability, which is a type of issue whereby an application or website allows untrusted input into CSV files...

6.5AI score0.00377EPSS
Exploits0References2
Rows per page
Query Builder