CVE-2024-38158

Azure IoT SDK Remote Code Execution Vulnerability...

CVE-2024-38157

Azure IoT SDK Remote Code Execution Vulnerability...

CVE-2024-38158

Azure IoT SDK Remote Code Execution Vulnerability...

CVE-2024-38158 Azure IoT SDK Remote Code Execution Vulnerability

...

CVE-2024-38158

CVE-2024-38158 affects the Azure IoT SDK. Connected sources indicate the issue involves a memory-after-free condition that can lead to remote code execution in affected Azure IoT SDK components. Some third‑party advisories describe it as enabling arbitrary code execution on vulnerable systems, wi...

CVE-2024-38157 Azure IoT SDK Remote Code Execution Vulnerability

...

CVE-2024-38157 Azure IoT SDK Remote Code Execution Vulnerability

...

CVE-2024-38157

Azure IoT SDK Remote Code Execution Vulnerability (CVE-2024-38157) affects the Azure IoT SDK. CVSSv3.1 base score 7.0 with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. Exploitation requires local access; impact includes compromise of confidentiality, integrity and availability. Connected documents...

Azure IoT SDK Remote Code Execution Vulnerability

...

.NET 8.0 security update

8.0.108-1.0.1 - Add support for Oracle Linux 8.0.108-1 - Update to .NET SDK 8.0.108 and Runtime 8.0.8 - Resolves: RHEL-52389 8.0.107-2 - Fix ownership of some missed directories - Resolves: RHEL-47080...

PT-2024-5737 · Microsoft · Azure Iot Sdk

Name of the Vulnerable Software and Affected Versions: Azure IoT SDK affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited to execute arbitrary code. Recommendations: At the moment, there is no information about a...

KLA71478 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in .NET and Visua...

Security Bulletin: The IBM® Engineering Lifecycle Engineering product using the -Xgc:concurrentScavenge option on IBM Z is vulnerable to Buffer overflow in GC

Summary CVE-2024-3933 affects IBM SDK, Java Technology Edition. An update has been released to address the vulnerability. Following IBM® Engineering Lifecycle Engineering product is vulnerable to this attack, it has been addressed in this bulletin: IBM Engineering Test Management, IBM Jazz...

MAL-2024-7952 Malicious code in dx-virtual-assistent-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b41db1f1208b92ea920b51ff3e83bf1718e6d1e551159eb752a0325961c9fd6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Watson Explorer and Watson Explorer Content Analytics Studio

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by Watson Explorer and Watson Explorer Content Analytics Studio. Watson Explorer and Watson Explorer Content Analytics Studio have addressed the applicable Vulnerability Details CVEID:CVE-2024-21094...

Information Disclosure

matrix-react-sdk is vulnerable to Information Disclosure. The vulnerability is due to a malicious homeserver manipulating a user's account data to enable URL previews in encrypted rooms, causing any URLs in encrypted messages to be sent to the server. Attackers can use this to intercept URLs in...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Db2 (October 2023 CPU)

Summary If you use IBM® Db2® as your database in your IBM Datacap deployment, please follow the Db2 security bulletin referred here to remedy the vulnerabilities. Vulnerability Details CVEID:CVE-2023-22081 DESCRIPTION: An unspecified vulnerability in Java SE related to the JSSE component could...

CVE-2024-42347

matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. A malicious homeserver could manipulate a user's account data to cause the client to enable URL previews in end-to-end encrypted rooms, in which case any URLs in encrypted messages would be sent to the...

CVE-2024-42347 URL preview setting for a room is controllable by the homeserver in matrix-react-sdk

matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. A malicious homeserver could manipulate a user's account data to cause the client to enable URL previews in end-to-end encrypted rooms, in which case any URLs in encrypted messages would be sent to the...

CVE-2024-42347

Affects matrix-react-sdk (Matrix web client component). A malicious homeserver could manipulate a user’s account data to enable URL previews in end-to-end encrypted rooms, causing URLs from encrypted messages to be sent to the server. This is mitigated by upgrading to matrix-react-sdk version 3.1...