13118 matches found
CVE-2024-10256
CVE-2024-10256 affects Ivanti Patch SDK. The issue is insufficient permissions in Ivanti Patch SDK before version 9.7.703, enabling a local authenticated attacker to delete arbitrary files. The vulnerability is documented across multiple sources (Red Hat, CNVD, CVE listings) with a CVSSv3.1 base ...
CVE-2024-10256
Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files...
CVE-2024-10256
Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files...
Security Advisory Ivanti Patch SDK (CVE-2024-10256)
Summary Ivanti has released updates for Ivanti Patch SDK which addresses a high severity vulnerability. Successful exploitation could lead to local arbitrary file deletion. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. NOTE: This article has be...
Ivanti Releases Security Updates for Multiple Products
Ivanti released security updates to address vulnerabilities in Ivanti Cloud Service Application, Ivanti Desktop and Server Management DSM, Ivanti Connect Secure and Police Secure, Ivanti Sentry, and Ivanti Patch SDK. CISA encourages users and administrators to review the following Ivanti security...
Ivanti Patch SDK 安全漏洞
Ivanti Patch SDK is a security tool development kit provided by Ivanti to help organizations automate system vulnerability remediation and patch management. Ivanti Patch SDK suffers from a privilege issue vulnerability that stems from insufficient privileges. An attacker could exploit this...
MAL-2024-11754 Malicious code in web-live-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e96245195cd1049cb66ab19ce9438f1ac6e5d2e00b7afa701c04b8aba2c3f355 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in web-live-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e96245195cd1049cb66ab19ce9438f1ac6e5d2e00b7afa701c04b8aba2c3f355 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-7298
A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...
CVE-2023-7298
CVE-2023-7298 concerns Autodesk FBX SDK. A crafted FBX file can trigger an Out-of-Bounds Write in the FBX parser, enabling a attacker to crash the process, corrupt data, or potentially execute arbitrary code in the affected product. Documented impacts include crash, data integrity risks, and remo...
Malicious code in solana-account-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11710 Malicious code in solana-account-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in sdk-sanity-generator (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11444 Malicious code in sdk-sanity-generator (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11443 Malicious code in sdk-interface (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in sdk-interface (npm)
--- -= Per source details. Do not edit below this line.=-...
PT-2024-15278 · Autodesk · Autodesk Fbx-Sdk
Name of the Vulnerable Software and Affected Versions: Autodesk FBX SDK affected versions not specified Description: A maliciously crafted FBX file, when parsed through the Autodesk FBX SDK, may force an Out-of-Bounds Write issue. This could allow a malicious actor to cause a crash, data...
MAL-2024-11285 Malicious code in @wf-wfmfe/sdk (npm)
--- -= Per source details. Do not edit below this line.=-...