17 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-34346
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds read in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via loca...
CVE-2024-34346
creationtimestamp| type| source ---|---|--- 2024-05-09 15:03:39+00:00| published-proof-of-concept| https://t.me/HackingInsights/234...
deno_cli (>=0.18.0-preview4 <=0.23.0), deno_cli_snapshots (>=0.0.3 <=0.19.0) +2 more potentially affected by CVE-2024-34346 via deno (>=0.15.0 <=0.6.0)
deno CARGO version =0.15.0, =0.18.0-preview4, =0.0.3, =0.0.1, =0.23.0 Source cves: CVE-2024-34346 Source advisory: OSV:GHSA-23RX-C3G5-HV9W...
CVE-2024-34346 Deno contains a permission escalation via open of privileged files with missing `--deny` flag
Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. The Deno sandbox may be unexpectedly weakened by allowing file read/write access to privileged files in various locations on Unix and Windows platforms. For example, reading /proc/self/environ may provide access...
CVE-2023-34346
creationtimestamp| type| source ---|---|--- 2023-10-11 20:17:49+00:00| seen| https://t.me/cibsecurity/72119 2023-10-12 19:17:31+00:00| seen| https://t.me/truesecator/4958...
CVE-2023-34346
CVE-2023-34346 concerns a stack-based buffer overflow in the Yifan YF325 router. Talos reports the vulnerability exists in the httpd gwcfg.cgi get endpoint, where the code reads request data using Content-Length into a fixed-size buffer without proper bounds checking, allowing a specially crafted...
Yifan YF325 httpd gwcfg.cgi get stack-based buffer overflow vulnerability
Talos Vulnerability Report TALOS-2023-1764 Yifan YF325 httpd gwcfg.cgi get stack-based buffer overflow vulnerability October 11, 2023 CVE Number CVE-2023-34346 SUMMARY A stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality of Yifan YF325 v1.020221108. A...
CVE-2022-34346
creationtimestamp| type| source ---|---|--- 2023-02-17 00:12:56+00:00| seen| https://t.me/cibsecurity/58406...
CVE-2022-34346
Out-of-bounds read in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-34346
Out-of-bounds read in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-34346
CVE-2022-34346 concerns an out-of-bounds read in the Intel(R) Media SDK software prior to 22.2.2. An authenticated local attacker can potentially escalate privileges. Affected: Intel Media SDK before 22.2.2. Impact: privilege escalation with local access. Mitigation: upgrade to version 22.2.2 or ...
CVE-2022-34346
Out-of-bounds read in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-34346
Out-of-bounds read in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2021-34346
A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage...
CVE-2021-34346 Stack Based Overflow Vulnerability in NVR Storage Expansion
A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage...
CVE-2021-34346
A stack buffer overflow vulnerability in QNAP NVR Storage Expansion (pre-1.0.6) can allow remote arbitrary code execution. Fix: upgrade to NVR Storage Expansion 1.0.6 or later (2021-08-03). CVSS/metrics indicate network access, no authentication, and high impact to confidentiality, integrity, and...
CVE-2025-34346
CVE-2025-34346 is rejected/not used as stated in the Initial Description.