CVE-2025-27069

Memory corruption while processing DDI command calls...

CVE-2025-27067

Memory corruption while processing DDI call with invalid buffer...

CVE-2025-27069 Untrusted Pointer Dereference in DSP Service

Memory corruption while processing DDI command calls...

CVE-2025-27069 Untrusted Pointer Dereference in DSP Service

Memory corruption while processing DDI command calls...

CVE-2025-27069: Untrusted Pointer Dereference

Memory corruption while processing DDI command calls...

CVE-2025-27067: Improper Validation of Array Index

Memory corruption while processing DDI call with invalid buffer...

azureml-evaluate-mlflow (>=0.0.35, <=0.0.36), ddi-fw (>=0.0.9, <=0.0.40) +3 more potentially affected by CVE-2025-52967 via mlflow (2.7.1)

mlflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.35, =0.0.9, =0.2.0, =1.7.0, =0.4.5, =0.4.9rc1 Source cves: CVE-2025-52967 Source advisory: OSV:PYSEC-2025-52...

CVE-2025-43946

TCPWave DDI 11.34P1C2 allows Remote Code Execution via Unrestricted File Upload combined with Path Traversal...

CVE-2025-43946

TCPWave DDI 11.34P1C2 allows Remote Code Execution via Unrestricted File Upload combined with Path Traversal...

CVE-2025-43946

TCPWave DDI 11.34P1C2 allows Remote Code Execution via Unrestricted File Upload combined with Path Traversal...

CVE-2025-43946

TCPWave DDI version 11.34P1C2 is vulnerable to Remote Code Execution (RCE) . This security flaw arises from a combination of Unrestricted File Upload and Path Traversal vulnerabilities. An attacker could exploit these weaknesses to execute malicious code on the system. As a mitigation, it is reco...

CVE-2025-43946

TCPWave DDI 11.34P1C2 allows Remote Code Execution via Unrestricted File Upload combined with Path Traversal...

CVE-2025-43946

TCPWave DDI 11.34P1C2 allows Remote Code Execution via Unrestricted File Upload combined with Path Traversal...

CVE-2025-43946: Unrestricted Upload of File with Dangerous Type

TCPWave DDI 11.34P1C2 allows Remote Code Execution via Unrestricted File Upload combined with Path Traversal...

PT-2025-17578 · Tcpwave · Tcpwave Ddi

Name of the Vulnerable Software and Affected Versions: TCPWave DDI version 11.34P1C2 Description: The issue allows for Remote Code Execution via Unrestricted File Upload combined with Path Traversal. Recommendations: For TCPWave DDI version 11.34P1C2, consider restricting access to file upload...

CVE-2024-46903

A vulnerability in Trend Micro Deep Discovery Inspector DDI versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

CVE-2024-5471

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys...

CVE-2024-5471

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys...

CVE-2024-27311

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder...

CVE-2024-5471 Agent takeover

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys...