Lucene search
K

14 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/12 7:50 p.m.4 views

CVE-2026-34685

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier NEEDS REVIEW: impact mismatch — ticket says 'Arbitrary file system write', CIA triad derives 'Security Feature Bypass'. Verify CVSS vector before publishing. are affected by an Improper Input...

3.4CVSS5.8AI score0.00059EPSS
Exploits0References2
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-34685 Malicious code in tempest-dcc0g-betnw-jewel-project (npm)

The package tempest-dcc0g-betnw-jewel-project was found to contain malicious code...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 9:34 p.m.5 views

CVE-2021-34685

UploadService in Hitachi Vantara Pentaho Business Analytics through 9.1 does not properly verify uploaded user files, which allows an authenticated user to upload various files of different file types. Specifically, a .jsp file is not allowed, but a .jsp. file is allowed and leads to remote code...

7.2CVSS7.3AI score0.0197EPSS
Exploits3References1
OSV
OSV
added 2024/07/09 4:15 a.m.1 views

CVE-2024-34685

Due to weak encoding of user-controlled input in SAP NetWeaver Knowledge Management XMLEditor which allows malicious scripts can be executed in the application, potentially leading to a Cross-Site Scripting XSS vulnerability. This has no impact on the availability of the application but it has a...

6.1CVSS5.8AI score
Exploits0References2
CVE
CVE
added 2022/08/09 7:51 p.m.133 views

CVE-2022-34685

Azure RTOS GUIX Studio Information Disclosure Vulnerability (CVE-2022-34685) affects GUIX Studio in Azure RTOS. Connected PT-security data describes an access-control error that can allow an attacker to disclose protected information via a specially crafted application; NVD/MSRC entries corrobora...

5.5CVSS5.6AI score0.01345EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2021/11/08 7:28 a.m.0 views

CVE-2021-34685

creationtimestamp| type| source ---|---|--- 2021-11-08 07:28:38+00:00| seen| https://t.me/cibsecurity/31951...

7.2CVSS7.2AI score0.0197EPSS
Exploits3References1
NVD
NVD
added 2021/11/08 4:15 a.m.13 views

CVE-2021-34685

UploadService in Hitachi Vantara Pentaho Business Analytics through 9.1 does not properly verify uploaded user files, which allows an authenticated user to upload various files of different file types. Specifically, a .jsp file is not allowed, but a .jsp. file is allowed and leads to remote code...

7.2CVSS0.0197EPSS
Exploits3References2
CVE
CVE
added 2021/11/08 3:37 a.m.64 views

CVE-2021-34685

CVE-2021-34685 affects Hitachi Vantara Pentaho Business Analytics (and Pentaho Business Server)

7.2CVSS7.3AI score0.0197EPSS
Exploits3References2Affected Software1
Packet Storm
Packet Storm
added 2021/11/05 12:0 a.m.455 views

Pentaho Business Analytics / Pentaho Business Server 9.1 Filename Bypass

Product: Pentaho Business Analytics / Pentaho Business Server Vendor / Manufacturer: Hitachi Vantara Affected Versions: = 9.1 Vulnerability Type: Bypass of Filename Extension Restrictions Solution Status: Fix Released on public GitHub repository Manufacturer Notification: June 2021 Public...

7.3AI score0.0197EPSS
Exploits3
The Hacker News
The Hacker News
added 2021/11/01 12:8 p.m.43 views

Critical Flaws Uncovered in Pentaho Business Analytics Software

Multiple vulnerabilities have been disclosed in Hitachi Vantara's Pentaho Business Analytics software that could be abused by malicious actors to upload arbitrary data files and even execute arbitrary code on the underlying host system of the application. The security weaknesses were reported by...

9.8CVSS1.1AI score0.9277EPSS
Exploits18
NVD
NVD
added 2007/02/21 11:28 p.m.13 views

CVE-2007-1056

VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is...

7.2CVSS6.3AI score0.00028EPSS
Exploits0References4
CVE
CVE
added 2007/02/07 10:0 p.m.57 views

CVE-2007-0832

The CVE-2007-0832 vulnerability affects VMware Workstation 5.5.3 build 34685, where the shared clipboard state is not updated promptly when the Enable copy and paste to and from this virtual machine checkbox is toggled. This lag in availability facilitates weaker host-guest isolation and could ...

1.2CVSS5.8AI score0.00053EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 1976/01/01 12:0 a.m.22 views

CVE-2025-34685

...

Exploits0
CVE
CVE
added 1976/01/01 12:0 a.m.2 views

CVE-2025-34685

CVE-2025-34685 is rejected/not used and does not represent an active vulnerability entry.

6.6AI score
Exploits0
Rows per page
Query Builder