24114 matches found
CVE-2025-34502 Shuffle Master Deck Mate 2 Missing Secure Boot
Deck Mate 2 lacks a verified secure-boot chain and runtime integrity validation for its controller and display modules. Without cryptographic boot verification, an attacker with physical access can modify or replace the bootloader, kernel, or filesystem and gain persistent code execution on reboo...
CVE-2025-34502
The CVE-2025-34502 entry affects Deck Mate 2 by lacking a verified secure-boot chain and runtime integrity validation for its controller and display modules. This allows a physically proximate attacker to modify or replace the bootloader, kernel, or filesystem, enabling persistent code execution ...
CVE-2025-62711
Wasmtime is a runtime for WebAssembly. In versions from 38.0.0 to before 38.0.3, the implementation of component-model related host-to-wasm trampolines in Wasmtime contained a bug where it's possible to carefully craft a component, which when called in a specific way, would crash the host with a...
Light & Wonder Deck Mate security vulnerabilities
Light & Wonder Deck Mate is an automated licensing device from Light & Wonder, UK. A security vulnerability exists in Light & Wonder Deck Mate that stems from a lack of secure boot chain validation and runtime integrity validation, which could allow a physically accessible attacker to modify or...
PT-2025-43688
Name of the Vulnerable Software and Affected Versions Deck Mate 2 affected versions not specified Description The Deck Mate 2 device does not have a verified secure-boot chain or runtime integrity validation for its controller and display modules. Without cryptographic boot verification, an...
Security Bulletin: IBM DataPower Gateway affected by vulnerabilities in Java runtime
Summary Java Runtime is bundled with IBM DataPower Gateway, and used by some bundled components. CVE-2025-50059, CVE-2025-30754 Vulnerability Details CVEID:CVE-2025-50059 DESCRIPTION: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle...
Security Bulletin: multiple vulerability in IBM Spectrum Symphony with Node.js
Summary multiple vulerability in IBM Spectrum Symphony with Node.js Vulnerability Details CVEID:CVE-2024-27982 DESCRIPTION: The team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed headers can lead to HTTP request smuggling...
Security Bulletin: multiple vulerability in IBM Spectrum Symphony with IBM JRE
Summary multiple vulerability in IBM Spectrum Symphony with IBM JRE Vulnerability Details CVEID:CVE-2024-21147 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow a remote attacker to cause high confidentiality, high integrity impacts. CWE:CWE-200: Exposur...
Malicious code in skiko-js-wasm-runtime (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48847 Malicious code in internal-runtime-test (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in internal-runtime-test (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in internal-runtime (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48846 Malicious code in internal-runtime (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in circuit-runtime-ui-test (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48814 Malicious code in circuit-runtime-ui-test (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in circuit-runtime-ui (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48813 Malicious code in circuit-runtime-ui (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48812 Malicious code in circuit-runtime-test (npm)
--- -= Per source details. Do not edit below this line.=-...