Microsoft.Build.Tasks.Core .NET Spoofing Vulnerability

Microsoft Security Advisory CVE-2025-26646: .NET Spoofing Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 9.0.xxx and .NET 8.0.xxx SDK. This advisory also provides guidance on what developers can do to update their...

CVE-2025-20095

Incorrect Default Permissions for some IntelR RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20043

Uncontrolled search path for some IntelR RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20095

Incorrect Default Permissions for some IntelR RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20095

Incorrect Default Permissions for some IntelR RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20095

Intel RealSense SDK vulnerability CVE-2025-20095 affects Intel RealSense SDKs prior to 2.56.2. The issue is incorrect default permissions that may allow an authenticated local attacker to escalate privileges, impacting confidentiality, integrity, and availability. Affected product: Intel RealSens...

CVE-2025-20043

Claimed vulnerability: CVE-2025-20043 concerns an uncontrolled search path in Intel RealSense SDK software prior to version 2.56.2. The underlying issue may enable escalation of privilege via local access for an authenticated user. Affected software/versions: Intel RealSense SDKs before 2.56.2. I...

CVE-2025-20043

Uncontrolled search path for some IntelR RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20043

Uncontrolled search path for some IntelR RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2025-21092 · Intel · Intel Realsense Sdks

Name of the Vulnerable Software and Affected Versions: IntelR RealSense™ SDK versions prior to 2.56.2 Description: The issue concerns incorrect default permissions for some IntelR RealSense™ SDK software, which may allow an authenticated user to potentially enable escalation of privilege via loca...

Intel RealSense SDK 代码问题漏洞

Intel RealSense SDK is a depth-aware camera development kit from Intel Corporation USA that supports 3D vision application development. A code issue vulnerability exists in Intel RealSense SDK versions prior to 2.56.2, which stems from improperly controlled search paths and could lead to elevatio...

Intel RealSense SDK 安全漏洞

Intel RealSense SDK is a depth perception camera development kit from Intel Corporation USA that supports 3D vision application development. A security vulnerability exists in Intel RealSense SDK versions prior to 2.56.2, which stems from improper default permissions and may result in elevated...

PT-2025-21080 · Intel · Intel Realsense Sdks

Name of the Vulnerable Software and Affected Versions: IntelR RealSense™ SDK versions prior to 2.56.2 Description: The issue concerns an uncontrolled search path in some IntelR RealSense™ SDK software, which may allow an authenticated user to potentially enable escalation of privilege via local...

Intel® RealSense™ SDK Software Advisory

Summary: Potential security vulnerabilities for some Intel® RealSense™ SDK software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-20095 Description: Incorrect Default Permissions for some...

MAL-2025-3719 Malicious code in braze-cordova-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a134f7ad8ed6890c33961d6e435a617d86f125f858f0009c731660c708a8c66e The OpenSSF Package Analysis project identified 'braze-cordova-sdk' @ 14.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in braze-cordova-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a134f7ad8ed6890c33961d6e435a617d86f125f858f0009c731660c708a8c66e The OpenSSF Package Analysis project identified 'braze-cordova-sdk' @ 14.0.0 npm as malicious. It is considered malicious because: - The package...

Security Bulletin: Multiple vulnerabilities in IBM SDK, Java technology affect IBM Tivoli Composite Application Manager for Transactions (Response Time)

Summary IBM SDK, Java Technology Edition is used by IBM Tivoli Composite Application Manager for Transactions Response Time Vulnerability Details CVEID:CVE-2024-21235 DESCRIPTION: Vulnerability in Java SE component: Hotspot. Difficult to exploit vulnerability allows unauthenticated attacker with...

Information Disclosure

Flags SDK is vulnerable to information disclosure. The vulnerability is due to a flaw in the flags discovery endpoint that allows attackers with detailed knowledge of the issue to list all feature flags, including names, descriptions, options, and default values...

.NET6.0 bug fix and enhancement update

An update is available for dotnet6.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

Time-of-Check To Time-of-Use (TOCTOU) Race Condition

snowflake-sdk is vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition. The vulnerability is due to improper validation of file ownership and permissions during logging configuration loading, allowing an attacker to modify the file between the check and its use...