Lucene search
K

563 matches found

Snyk
Snyk
added 2025/12/23 3:40 p.m.4 views

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation via the ddstime function due to insufficient validation in the time certificate verification. An attacker can gain elevated privileges and execute arbitrary commands by bypassing certificate checks...

10CVSS5.9AI score0.003EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/23 12:0 a.m.24 views

CVE-2025-67108

eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections...

0.00299EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/12/23 12:0 a.m.21 views

CVE-2025-67109

Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with System privileges...

0.003EPSS
Exploits0References4
CVE
CVE
added 2025/12/23 12:0 a.m.9 views

CVE-2025-67109

The CVE-2025-67109 entry concerns Eclipse Cyclone DDS prior to version 0.10.5, with a root cause described as improper verification of the time certificate. This weakness allows an attacker to bypass certificate checks and execute commands with System privileges. Multiple sources corroborate the ...

10CVSS6.9AI score0.003EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2025/12/23 12:0 a.m.24 views

CVE-2025-65865

An integer overflow in eProsima Fast-DDS v3.3 allows attackers to cause a Denial of Service DoS via a crafted input...

0.00413EPSS
Exploits1References4
CVE
CVE
added 2025/12/23 12:0 a.m.11 views

CVE-2025-67111

Vulnerability summary: CVE-2025-67111 affects OpenDDS DDS prior to 3.33.0. The issue is an integer overflow in the RTPS protocol implementation, enabling a Denial of Service via a crafted message. What’s affected: OpenDDS DDS (RTPS protocol implementation) before v3.33.0. Impact (as stated): Deni...

7.5CVSS6.6AI score0.00297EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/23 12:0 a.m.1 views

CVE-2025-65865

An integer overflow in eProsima Fast-DDS v3.3 allows attackers to cause a Denial of Service DoS via a crafted input...

6.6AI score0.00413EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/12/23 12:0 a.m.5 views

CVE-2025-67109

Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with System privileges...

6.9AI score0.003EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2025/12/23 12:0 a.m.2 views

CVE-2025-65865

An integer overflow in eProsima Fast-DDS v3.3 allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS5.9AI score0.00413EPSS
Exploits1References5
UbuntuCve
UbuntuCve
added 2025/12/23 12:0 a.m.3 views

CVE-2025-67108

eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections...

10CVSS5.9AI score0.00299EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/12/23 12:0 a.m.3 views

PT-2025-52762

Name of the Vulnerable Software and Affected Versions Eclipse Cyclone DDS versions prior to 0.10.5 Description A flaw exists in Eclipse Cyclone DDS that involves improper verification of the time certificate. This allows attackers to bypass certificate checks and potentially execute commands with...

10CVSS6.9AI score0.003EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2025/12/23 12:0 a.m.2 views

PT-2025-52763

Name of the Vulnerable Software and Affected Versions eProsima Fast-DDS version 3.3 Description An integer overflow in eProsima Fast-DDS v3.3 can allow attackers to cause a Denial of Service DoS through a specially crafted input. Recommendations At the moment, there is no information about a newe...

7.5CVSS6.8AI score0.00413EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2025/12/23 12:0 a.m.3 views

PT-2025-52764

Name of the Vulnerable Software and Affected Versions eProsima Fast-DDS version 3.3 Description The software contains improper validation for ticket revocation, which can lead to insecure communications and connections. Recommendations At the moment, there is no information about a newer version...

10CVSS6.5AI score0.00299EPSS
Exploits0References9
CNNVD
CNNVD
added 2025/12/23 12:0 a.m.2 views

Fast-DDS 安全漏洞

Fast-DDS is a complete DDS open source by eProsima. A security vulnerability exists in Fast-DDS version 3.3 that stems from improper ticket revocation validation and could lead to insecure communication...

10CVSS6.4AI score0.00299EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/12/23 12:0 a.m.4 views

Fast-DDS 安全漏洞

Fast-DDS is a complete DDS from eProsima Open Source. A security vulnerability exists in Fast-DDS version 3.3 that stems from an integer overflow and could lead to a denial of service attack...

7.5CVSS6.5AI score0.00413EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/12/23 12:0 a.m.3 views

Eclipse Cyclone DDS 安全漏洞

Eclipse Cyclone DDS is a very high performance and robust open source DDS implementation from the Eclipse Foundation. A security vulnerability exists in Eclipse Cyclone DDS versions prior to 0.10.5 that stems from improper validation of time certificates, which could lead to elevation of privileg...

10CVSS6.3AI score0.003EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2025/12/23 12:0 a.m.3 views

CVE-2025-67108

eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections...

10CVSS5.2AI score0.00299EPSS
Exploits0
Debian CVE
Debian CVE
added 2025/12/23 12:0 a.m.4 views

CVE-2025-65865

An integer overflow in eProsima Fast-DDS v3.3 allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS5.3AI score0.00413EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2025/12/23 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-65865

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in eProsima Fast-DDS v3.3 allows attackers to cause a Denial of Service DoS via a crafted input. CVE-2025-65865 Note that Nessus relies on t...

7.5CVSS5.9AI score0.00413EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/12/23 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-67108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections. CVE-2025-67108...

10CVSS5.8AI score0.00299EPSS
Exploits0References3
Rows per page
Query Builder