CVE-2023-34117

Summary: CVE-2023-34117 describes a relative path traversal in the Zoom Client SDK prior to 5.15.0, enabling an unauthorized local user to disclose information via local access. Affected software: Zoom Client SDK (pre-5.15.0). Root cause: relative path traversal in the SDK. Impact: information di...

CVE-2023-34117: Relative Path Traversal

Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via local access...

PT-2023-24687 · Zoom · Zoom Client Sdk

Name of the Vulnerable Software and Affected Versions: Zoom Client SDK versions prior to 5.15.0 Description: The issue concerns a relative path traversal that may allow an unauthorized user to enable information disclosure via local access. Recommendations: For versions prior to 5.15.0, update to...

Improper Authorization

github.com/codenotary/immudb is vulnerable to improper authorization. A malicious attacker is able to provide falsified proof that will be accepted by the client SDK, signing a falsified transaction replacing the genuine one. This vulnerability only affects immudb client SDKs, the immudb server...

immudb data forgery problem vulnerability

Immudb is a database with built-in cryptographic proof and authentication. A data forgery issue vulnerability exists in codenotary immudb versions prior to 1.4.1, which stems from a client SDK that does not validate the UUID and can accept any value reported by the server, which can be exploited ...

CVE-2022-36111 immundb has insufficient verification of data authenticity

immudb is a database with built-in cryptographic proof and verification. In versions prior to 1.4.1, a malicious immudb server can provide a falsified proof that will be accepted by the client SDK signing a falsified transaction replacing the genuine one. This situation can not be triggered by a...

CVE-2022-36111: Insufficient Verification of Data Authenticity

immudb is a database with built-in cryptographic proof and verification. In versions prior to 1.4.1, a malicious immudb server can provide a falsified proof that will be accepted by the client SDK signing a falsified transaction replacing the genuine one. This situation can not be triggered by a...

GHSA-672P-M5JQ-MRH8 Insufficient Verification of Proofs generated by the immudb server in client SDK.

Impact In certain scenario a malicious immudb server can provide a falsified proof that will be accepted by the client SDK signing a falsified transaction replacing the genuine one. This situation can not be triggered by a genuine immudb server and requires the client to perform a specific list o...

Insufficient Verification of Proofs generated by the immudb server in client SDK.

Impact In certain scenario a malicious immudb server can provide a falsified proof that will be accepted by the client SDK signing a falsified transaction replacing the genuine one. This situation can not be triggered by a genuine immudb server and requires the client to perform a specific list o...

Malicious Package

Overview bi-client-sdk is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

MAL-2022-1560 Malicious code in bi-client-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4958232b726a1860e2249777a33af7cb9441504fb1a639578f964f844068a8c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bi-client-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4958232b726a1860e2249777a33af7cb9441504fb1a639578f964f844068a8c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-300 Malicious code in @grubhubprod/order-taking-client-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4c6e56a04f848f7b73d05f70cacf34eeaa6fbe9b1e7df5354464782bf7224e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1926 Malicious code in client-sdk-contract-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe4a02bd1d1d6b8dc69d43a33f5f9e0da5592d4cc02571a1e6e51fa53cda52b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in client-sdk-contract-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe4a02bd1d1d6b8dc69d43a33f5f9e0da5592d4cc02571a1e6e51fa53cda52b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: TLS padding vulnerability affects Informix Dynamic Server ( CVE-2014-8730)

Summary IBM Informix Dynamic Server can be affected by a TLS Transport Layer Security padding vulnerability which can allow a remote attacker to obtain sensitive information. Vulnerability Details The following vulnerability affects IBM Informix Dynamic Server. CVEID: CVE-2014-8730 DESCRIPTION: I...

Security Bulletin: IBM Informix Client SDK is affected by GSKIT vulnerabilities

Summary IBM Informix Client SDK has addressed the issues reported for the following GSKIT vulnerabilities. Vulnerability Details CVEID: CVE-2016-0705 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a double-free error when parsing DSA private keys. An attacker could exploit...

CVE-2018-8531

A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption Vulnerability." This affects Hub Device Client SDK, Azure IoT Edge...

Microsoft Azure IoT Device Client SDK Remote Memory Corruption Vulnerability

Microsoft C SDK for Azure IoT is a C-based software development kit for developing Azure IoT Internet of Things platform applications from Microsoft. A remote memory corruption vulnerability exists in the Microsoft Azure IoT Device Client SDK. An attacker can exploit this vulnerability to execute...

CVE-2018-8531: Out-of-bounds Write

A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption Vulnerability." This affects Hub Device Client SDK, Azure IoT Edge...