126 matches found
Unity Linux 20.1060a / 20.1070a Security Update: dde-daemon (UTSA-2025-986267)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986267 advisory. dde-daemonDBus Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not tested for this issue...
Unity Linux 20.1060e / 20.1070e Security Update: dde-daemon (UTSA-2025-986271)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986271 advisory. dde-daemonDBus Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not tested for this issue...
EUVD-2025-12467
Malicious code in bioql PyPI...
EUVD-2022-24835
Malicious code in bioql PyPI...
EUVD-2025-3151
Malicious code in bioql PyPI...
CVE-2024-24337
CSV Injection vulnerability in '/members/moremember.pl' and '/admin/aqbudgets.pl' endpoints in Koha Library Management System version 23.05.05 and earlier allows attackers to to inject DDE commands into csv exports via the 'Budget' and 'Patrons Member' components...
CVE-2017-7622
dde-daemon, the daemon process of DDE Deepin Desktop Environment 15.0 through 15.3, runs with root privileges and hardly does anything to identify the user who calls the function through D-Bus. Anybody can change the grub config, even to append some arguments to make a backdoor or privilege...
The vulnerability of the Deepin operating system’s dde-api-proxy component allows a hacker to gain root privileges.
The vulnerability of the dde-api-proxy component in the Deepin operating system is related to insufficient verification of the source of the communication channel. Exploiting this vulnerability can allow an attacker to gain root privileges...
ZTE GoldenDB DDE Injection Vulnerability
ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. ZTE GoldenDB suffers from a DDE injection vulnerability, which can be...
CVE-2025-46579
There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed...
CVE-2025-46579
There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed...
CVE-2025-46579 ZTE GoldenDB Database product has a DDE injection vulnerability
There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed...
CVE-2025-46579 ZTE GoldenDB Database product has a DDE injection vulnerability
There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed...
CVE-2025-46579
The CVE-2025-46579 entry concerns ZTE GoldenDB with a DDE injection vulnerability. Attackers can inject DDE expressions via the interface, and when a user downloads and opens the affected file, the DDE commands can be executed. The available sources confirm the existence of this vulnerability and...
PT-2025-17978 · Goldendb · Goldendb
Name of the Vulnerable Software and Affected Versions: GoldenDB affected versions not specified Description: There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the...
CVE-2025-23222
An issue was discovered in Deepin dde-api-proxy through 1.0.19 in which unprivileged users can access D-Bus services as root. Specifically, dde-api-proxy runs as root and forwards messages from arbitrary local users to legacy D-Bus methods in the actual D-Bus services, and the actual D-Bus servic...
dde-api-proxy 安全漏洞
dde-api-proxy is a proxy program from Deepin open source. A security vulnerability exists in dde-api-proxy version 1.0.19, which stems from the fact that an unprivileged user can access the D-Bus service as root...
CVE-2025-23222
Deepin dde-api-proxy (v1.0.19 and earlier) exposes a local privilege-escalation flaw: the daemon runs as root and forwards local user D-Bus requests to legacy D-Bus services, which do not detect the proxy context. This can allow unprivileged users to access D-Bus methods that should be restricted...
PT-2025-4860 · Deepin · Dde-Api-Proxy
Name of the Vulnerable Software and Affected Versions: Deepin dde-api-proxy versions 1.0.0 through 1.0.19 Description: The issue allows unprivileged users to access D-Bus services as root because dde-api-proxy runs as root and forwards messages from arbitrary local users to legacy D-Bus methods i...
