Security Bulletin: Multiple vulnerabilities in IBM® SDK, Java™ Technology Edition affect IBM Storage Protect Operations Center (CVE-2024-21094, CVE-2024-21085, CVE-2024-21011, CVE-2023-38264).

Summary IBM Storage Protect Operations Center may be impacted by multiple vulnerabilities in the IBM® SDK Java™ Technology Edition, Version 8, potentially leading to a loss of availability and integrity of the host system. Vulnerability Details CVEID:CVE-2024-21094 DESCRIPTION: An unspecified...

Security Bulletin: Out of bound read/write access vulnerability in IBM® SDK, Java™ Technology Edition version 8 may affect IBM Storage Protect Operations Center (CVE-2024-3933)

Summary Unrestricted out-of-bound read / write access vulnerability CVE-2024-3933 exist in IBM® SDK Java™ Technology Edition, Version 8, which is used by IBM Storage Protect Operations Center. Vulnerability Details CVEID:CVE-2024-3933 DESCRIPTION: Eclipse Openj9 could allow a local authenticated...

Security Bulletin: Vulnerabilities in IBM Java SDK (CVE-2024-21145, CVE-2024-21131) affect Power HMC.

Summary The IBM Java SDK library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2024-21145 DESCRIPTION: An unspecified vulnerability in Java SE related to the 2D component could allow a remote attacker to cause low...

Security Bulletin: Multiple vulnerabilities in IBM SDK, Java Technology Edition affect IBM Tivoli Netcool Impact

Summary IBM® SDK, Java™ Technology Edition is shipped as a component of IBM Tivoli Netcool Impact. Information about security vulnerabilities affecting IBM® SDK, Java™ Technology Edition has been published in a security bulletin. Vulnerability Details CVEID:CVE-2024-21235 DESCRIPTION: Vulnerabili...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in IBM SDK

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of IBM SDK Vulnerability Details CVEID:CVE-2024-21147 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow a remote attacker to cause high confidentiality, high integrity...

CVE-2024-9498

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress SDK installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9497

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress 4 SDK installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9498 Uncontrolled search path can lead to DLL hijacking in USBXpress SDK installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress SDK installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9498 Uncontrolled search path can lead to DLL hijacking in USBXpress SDK installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress SDK installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9498

CVE-2024-9498 affects the USBXpress SDK installer, where an uncontrolled search path enables DLL hijacking. This can lead to privilege escalation and arbitrary code execution when the impacted installer runs. Exploitation details are not provided in the connected documents. Remediation/fix detail...

CVE-2024-9497

The CVE-2024-9497 entry describes DLL hijacking in the USBXpress 4 SDK installer caused by an uncontrolled search path. The vulnerability enables local privilege escalation and arbitrary code execution when the impacted installer is run. Connected sources corroborate the issue across Red Hat, NVD...

CVE-2024-9497 Uncontrolled search path can lead to DLL hijacking in USBXpress 4 SDK installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress 4 SDK installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9497 Uncontrolled search path can lead to DLL hijacking in USBXpress 4 SDK installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress 4 SDK installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

Malicious code in lyft-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 877523dd053e13acd1b9e58650b8582eefdecf968a95e9997a115adbd7942683 The OpenSSF Package Analysis project identified 'lyft-sdk' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-538 Malicious code in lyft-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 877523dd053e13acd1b9e58650b8582eefdecf968a95e9997a115adbd7942683 The OpenSSF Package Analysis project identified 'lyft-sdk' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-506 Malicious code in instacart-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7c12c62007ba9de65054ea35d0f3c994ab23aacb3799c8ca20103678e4293cea The OpenSSF Package Analysis project identified 'instacart-sdk' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-493 Malicious code in iberia-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9114efb6f53e10904e0d6476483d50e50570a62201743b0c30f45de8156a7489 The OpenSSF Package Analysis project identified 'iberia-sdk' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in iberia-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9114efb6f53e10904e0d6476483d50e50570a62201743b0c30f45de8156a7489 The OpenSSF Package Analysis project identified 'iberia-sdk' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-470 Malicious code in godaddy-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fbc982202586a71e3e0e5ad119c42a6517f839d2b74320b097508397b127243a The OpenSSF Package Analysis project identified 'godaddy-sdk' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in bookingcom-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 37d470f4d657281365a79dd054d61a7b37be7317184d022ae9f05a3f8ac1e09d The OpenSSF Package Analysis project identified 'bookingcom-sdk' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...