Security Bulletin: Multiple Vulnerabilities of IBM Java SDK affect VMware Agent from IBM Tivoli Monitoring for Virtual Environments.

Summary IBM java SDK is used by VMware Agent from IBM Tivoli Monitoring for Virtual Environments. Vulnerability Details CVEID:CVE-2024-21147 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow a remote attacker to cause high confidentiality, high integrity...

Malicious code in grammyjs-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d05f6c295e765b1889ffc72832434e365ea15f5aa6f8a6a555f42364c86a2c17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1364 Malicious code in grammyjs-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d05f6c295e765b1889ffc72832434e365ea15f5aa6f8a6a555f42364c86a2c17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in telegramclient-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 544758d4b45ebd5665b1bb9b068290cad56fe4f586df9ae5491321a32733dd26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-tg-bot-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7691b80bd73d248d18ca3ab676ebf09d22c6e9702f8e80ec44aa70b3ce3ec020 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1369 Malicious code in node-tg-bot-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7691b80bd73d248d18ca3ab676ebf09d22c6e9702f8e80ec44aa70b3ce3ec020 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7266-1 digikam vulnerabilities

Zinuo Han and Ao Wang discovered that the Android DNG SDK, vendored in digiKam, did not correctly parse certain files. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2017-0691 It was...

Astra Linux – Vulnerability in Thunderbird

matrix-js-sdk is a client-server SDK for the Matrix messaging protocol, designed for JavaScript. Version 34.11.0 and earlier of matrix-js-sdk was vulnerable to client-side path traversal attacks through crafted MXC URIs. A malicious room member could trigger clients using matrix-js-sdk to send...

Unknown vulnerability in Coinbase Wallet SDK

Impact There is a security vulnerability in outdated versions of Coinbase Wallet SDK. This does not directly affect users' keys, smart contracts, or funds. Patches Please update to version = 4.3.0...

84447xe5t8 (1.0.0), @0xsquid/deposit-widget (>=0.0.2-beta.0, <=0.2.0) +255 more potentially affected by unknown CVE via @coinbase/wallet-sdk (>=4.0.0, <=4.2.4)

@coinbase/wallet-sdk NPM version =4.0.0, =0.0.2-beta.0, =2.1.11-beta.0, =3.0.0-beta.16, =0.0.1, =0.2.1, =5.50.0, =1.0.77-4.0, =0.0.1, =1.0.0-beta.1, =0.0.1, =0.0.1, =0.0.73-rc and more Source cves: unknown CVE Source advisory: OSV:GHSA-8RGJ-285W-QCQ4...

GHSA-8RGJ-285W-QCQ4 Unknown vulnerability in Coinbase Wallet SDK

Impact There is a security vulnerability in outdated versions of Coinbase Wallet SDK. This does not directly affect users' keys, smart contracts, or funds. Patches Please update to version = 4.3.0...

Security Bulletin: Vulnerability in Apache Avro Java SDK affects watsonx.data

Summary Apache Avro Java SDK is vulnerable to a denial of service attack, and this could affect watsonx.data. Vulnerability Details CVEID:CVE-2023-39410 DESCRIPTION: Apache Avro Java SDK is vulnerable to a denial of service, caused by an unsafe deserialization flaw. By sending specially crafted...

PT-2025-6215 · Coinbase · Coinbase Wallet Sdk

Name of the Vulnerable Software and Affected Versions: Coinbase Wallet SDK versions prior to 4.3.0 Description: There is a security issue in outdated versions of the software. This issue does not directly affect users' keys, smart contracts, or funds. Recommendations: Update to version 4.3.0 or...

Azure Linux 3.0 Security Update: cert-manager / helm (CVE-2024-26147)

The version of cert-manager / helm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26147 advisory. - Helm is a package manager for Charts for Kubernetes. Versions prior to 3.14.2 contain an...

Azure Linux 3.0 Security Update: azure-iot-sdk-c (CVE-2024-25110)

The version of azure-iot-sdk-c installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-25110 advisory. - The UAMQP is a general purpose C library for AMQP 1.0. During a call to opengetofferedcapabilities,...

BIT-DOTNET-SDK-2025-21171 .NET Remote Code Execution Vulnerability

.NET Remote Code Execution Vulnerability...

CVE-2021-40418

When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed from a frame within the video container. Upon destruction of the object that owns it, the...

Cosmos: Unauthorized coins transfer from locking account(s)

The Cosmos SDK was found to have a vulnerability that allowed unauthorized transfer of funds from locking accounts. The issue was specifically identified in the periodic-locking-account, but it was believed to affect other locking account types as well. The vulnerability stemmed from the way the...

CVE-2022-30904

In Bestechnic Bluetooth Mesh SDK BES2300 V1.0, a buffer overflow vulnerability can be triggered during provisioning, because there is no check for the SegN field of the Transaction Start PDU...

CVE-2022-36060

matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. Events sent with special strings in key places can temporarily disrupt or impede the matrix-react-sdk from functioning properly, such as by causing room or event tile crashes. The remainder of the application can appear...