CVE-2025-20095

Incorrect Default Permissions for some IntelR RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20095

Incorrect Default Permissions for some IntelR RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20043

Uncontrolled search path for some IntelR RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20043

Claimed vulnerability: CVE-2025-20043 concerns an uncontrolled search path in Intel RealSense SDK software prior to version 2.56.2. The underlying issue may enable escalation of privilege via local access for an authenticated user. Affected software/versions: Intel RealSense SDKs before 2.56.2. I...

CVE-2025-20043

Uncontrolled search path for some IntelR RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2025-21092 · Intel · Intel Realsense Sdks

Name of the Vulnerable Software and Affected Versions: IntelR RealSense™ SDK versions prior to 2.56.2 Description: The issue concerns incorrect default permissions for some IntelR RealSense™ SDK software, which may allow an authenticated user to potentially enable escalation of privilege via loca...

Intel RealSense SDK 代码问题漏洞

Intel RealSense SDK is a depth-aware camera development kit from Intel Corporation USA that supports 3D vision application development. A code issue vulnerability exists in Intel RealSense SDK versions prior to 2.56.2, which stems from improperly controlled search paths and could lead to elevatio...

Intel RealSense SDK 安全漏洞

Intel RealSense SDK is a depth perception camera development kit from Intel Corporation USA that supports 3D vision application development. A security vulnerability exists in Intel RealSense SDK versions prior to 2.56.2, which stems from improper default permissions and may result in elevated...

PT-2025-21080 · Intel · Intel Realsense Sdks

Name of the Vulnerable Software and Affected Versions: IntelR RealSense™ SDK versions prior to 2.56.2 Description: The issue concerns an uncontrolled search path in some IntelR RealSense™ SDK software, which may allow an authenticated user to potentially enable escalation of privilege via local...

Intel® RealSense™ SDK Software Advisory

Summary: Potential security vulnerabilities for some Intel® RealSense™ SDK software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-20095 Description: Incorrect Default Permissions for some...

MAL-2025-3719 Malicious code in braze-cordova-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a134f7ad8ed6890c33961d6e435a617d86f125f858f0009c731660c708a8c66e The OpenSSF Package Analysis project identified 'braze-cordova-sdk' @ 14.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in braze-cordova-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a134f7ad8ed6890c33961d6e435a617d86f125f858f0009c731660c708a8c66e The OpenSSF Package Analysis project identified 'braze-cordova-sdk' @ 14.0.0 npm as malicious. It is considered malicious because: - The package...

Security Bulletin: Multiple vulnerabilities in IBM SDK, Java technology affect IBM Tivoli Composite Application Manager for Transactions (Response Time)

Summary IBM SDK, Java Technology Edition is used by IBM Tivoli Composite Application Manager for Transactions Response Time Vulnerability Details CVEID:CVE-2024-21235 DESCRIPTION: Vulnerability in Java SE component: Hotspot. Difficult to exploit vulnerability allows unauthenticated attacker with...

Information Disclosure

Flags SDK is vulnerable to information disclosure. The vulnerability is due to a flaw in the flags discovery endpoint that allows attackers with detailed knowledge of the issue to list all feature flags, including names, descriptions, options, and default values...

.NET6.0 bug fix and enhancement update

An update is available for dotnet6.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

Time-of-Check To Time-of-Use (TOCTOU) Race Condition

snowflake-sdk is vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition. The vulnerability is due to improper validation of file ownership and permissions during logging configuration loading, allowing an attacker to modify the file between the check and its use...

Malicious code in lrc20-js-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c80ed84544322e91ea371449b18229734f12afd46bd03c7f7a5a04947ce64ba7 Any computer that has this package installed or running should be considered...

MAL-2025-3904 Malicious code in lrc20-js-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c80ed84544322e91ea371449b18229734f12afd46bd03c7f7a5a04947ce64ba7 Any computer that has this package installed or running should be considered...

Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint

Summary IBM Java:Two OpenJ9 internal ASCII to EBCDIC string wrapper vulnurabilities on z/OS Vulnerability Details CVEID:CVE-2025-1470 DESCRIPTION: In Eclipse OMR, from the initial contribution to version 0.4.0, some OMR internal port library and utilities consumers of z/OS atoe functions do not...

Citrix DaaS: Get-BrokerApplication - Invalid enum value 'PackagedApplication'

Get-BrokerApplication cmdlet fails with exception when running on the machine with Remote SDK installed. Exception details: The formatter threw an exception while trying to deserialize the message: There was an error while trying to deserialize parameter http://tempuri.org/:records. The...