SUSE CVE-2026-10705

A flaw has been found in dask up to 3.0. Affected by this issue is the function nuniqueapprox of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree of complexity is...

CVE-2026-10705

creationtimestamp| type| source ---|---|--- 2026-06-03 03:24:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mne5vvlfz425...

DEBIAN-CVE-2026-10705

A flaw has been found in dask up to 3.0. Affected by this issue is the function nuniqueapprox of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree of complexity is...

UBUNTU-CVE-2026-10705

A flaw has been found in dask up to 3.0. Affected by this issue is the function nuniqueapprox of the file dask/dataframe/hyperloglog.py of the component HLL Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. A high degree of complexity is...

Linux Distros Unpatched Vulnerability : CVE-2026-10705

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in dask up to 3.0. Affected by this issue is the function nuniqueapprox of the file dask/dataframe/hyperloglog.py of the component HLL...

RHSA-2026:10705 Red Hat Security Advisory: rhc security update

Bulletin has no description...

CVE-2025-10705

creationtimestamp| type| source ---|---|--- 2025-10-23 14:51:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3umda5j2n2u...

CVE-2024-10705

The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.5 via the 'mpgdownloadfilebylink' function. This makes it possible for authenticated attackers, with editor-level access and above, to make web...

CVE-2024-10705

creationtimestamp| type| source ---|---|--- 2025-01-26 06:45:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113893307619009077 2025-01-26 07:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgmuwubikn2c 2025-01-26 08:35:22+00:00| seen|...

CVE-2024-10705

CVE-2024-10705 affects the WordPress plugin “Multiple Page Generator Plugin – MPG” with vulnerability in all versions up to 4.0.5. The flaw is Server-Side Request Forgery (SSRF) via the mpg_download_file_by_link function, allowing authenticated attackers with editor-level access or higher to trig...

CVE-2024-10705 Multiple Page Generator Plugin – MPG <= 4.0.5 - Authenticated (Editor+) Server-Side Request Forgery via fileUrl

The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.5 via the 'mpgdownloadfilebylink' function. This makes it possible for authenticated attackers, with editor-level access and above, to make web...

CVE-2024-10705 Multiple Page Generator Plugin – MPG <= 4.0.5 - Authenticated (Editor+) Server-Side Request Forgery via fileUrl

The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.5 via the 'mpgdownloadfilebylink' function. This makes it possible for authenticated attackers, with editor-level access and above, to make web...

MSC-2023-10705

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Malware dropper – this package contains a Trojan...

io.undertow:undertow-servlet (1.0.0.alpha12), io.undertow:undertow-websockets-jsr (1.0.0.alpha12) potentially affected by CVE-2020-10705 via io.undertow:undertow-core (1.0.0.alpha12)

io.undertow:undertow-core MAVEN version 1.0.0.alpha12 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha12 - io.undertow:undertow-websockets-jsr 1.0.0.alpha12 Source...

io.undertow:undertow-servlet (1.0.7.final), io.undertow:undertow-websockets-jsr (1.0.7.final) potentially affected by CVE-2020-10705 via io.undertow:undertow-core (1.0.7.final)

io.undertow:undertow-core MAVEN version 1.0.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.7.final - io.undertow:undertow-websockets-jsr 1.0.7.final Source cves:...

io.jboot:jboot (>=1.0-alpha5, <=1.0-beta4), io.joshworks.extensions:admin (>=0.3.0, <=0.5.1) +64 more potentially affected by CVE-2020-10705 via io.undertow:undertow-core (1.4.16.final)

io.undertow:undertow-core MAVEN version 1.4.16.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.jboot:jboot =1.0-alpha5, =0.3.0, =0.3.0, =0.3.0, =0.3, =0.1, =2.1.0-alpha21, =2.1.0-alpha21,...

com.mpay24.payment:mpay24-payment-sdk (1.0.0.0), com.mpay24.payment:mpay24-soap-base (1.0.0.0) +11 more potentially affected by CVE-2020-10705 via io.undertow:undertow-core (1.0.10.final)

io.undertow:undertow-core MAVEN version 1.0.10.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.mpay24.payment:mpay24-payment-sdk 1.0.0.0 - com.mpay24.payment:mpay24-soap-base 1.0.0.0 -...

io.undertow:undertow-servlet (1.0.0.alpha21), io.undertow:undertow-websockets-jsr (1.0.0.alpha21) +26 more potentially affected by CVE-2020-10705 via io.undertow:undertow-core (1.0.0.alpha21)

io.undertow:undertow-core MAVEN version 1.0.0.alpha21 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha21 - io.undertow:undertow-websockets-jsr 1.0.0.alpha21 -...

io.undertow:undertow-http2-test-suite (1.3.4.final), io.undertow:undertow-servlet (1.3.4.final) +19 more potentially affected by CVE-2020-10705 via io.undertow:undertow-core (1.3.4.final)

io.undertow:undertow-core MAVEN version 1.3.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.4.final - io.undertow:undertow-servlet 1.3.4.final -...

com.brinkus.labs:labs-cloud-starter-service (>=1.1.0, <=1.4.0), com.gitblit.fathom:fathom-core (0.8.4) +88 more potentially affected by CVE-2020-10705 via io.undertow:undertow-core (1.3.23.final)

io.undertow:undertow-core MAVEN version 1.3.23.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.brinkus.labs:labs-cloud-starter-service =1.1.0, =1.4.0 - com.gitblit.fathom:fathom-core 0.8.4 -...