14 matches found
CVE-2026-34685
Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier NEEDS REVIEW: impact mismatch — ticket says 'Arbitrary file system write', CIA triad derives 'Security Feature Bypass'. Verify CVSS vector before publishing. are affected by an Improper Input...
MAL-2025-34685 Malicious code in tempest-dcc0g-betnw-jewel-project (npm)
The package tempest-dcc0g-betnw-jewel-project was found to contain malicious code...
CVE-2021-34685
UploadService in Hitachi Vantara Pentaho Business Analytics through 9.1 does not properly verify uploaded user files, which allows an authenticated user to upload various files of different file types. Specifically, a .jsp file is not allowed, but a .jsp. file is allowed and leads to remote code...
CVE-2024-34685
Due to weak encoding of user-controlled input in SAP NetWeaver Knowledge Management XMLEditor which allows malicious scripts can be executed in the application, potentially leading to a Cross-Site Scripting XSS vulnerability. This has no impact on the availability of the application but it has a...
CVE-2022-34685
Azure RTOS GUIX Studio Information Disclosure Vulnerability (CVE-2022-34685) affects GUIX Studio in Azure RTOS. Connected PT-security data describes an access-control error that can allow an attacker to disclose protected information via a specially crafted application; NVD/MSRC entries corrobora...
CVE-2021-34685
creationtimestamp| type| source ---|---|--- 2021-11-08 07:28:38+00:00| seen| https://t.me/cibsecurity/31951...
CVE-2021-34685
UploadService in Hitachi Vantara Pentaho Business Analytics through 9.1 does not properly verify uploaded user files, which allows an authenticated user to upload various files of different file types. Specifically, a .jsp file is not allowed, but a .jsp. file is allowed and leads to remote code...
CVE-2021-34685
CVE-2021-34685 affects Hitachi Vantara Pentaho Business Analytics (and Pentaho Business Server)
Pentaho Business Analytics / Pentaho Business Server 9.1 Filename Bypass
Product: Pentaho Business Analytics / Pentaho Business Server Vendor / Manufacturer: Hitachi Vantara Affected Versions: = 9.1 Vulnerability Type: Bypass of Filename Extension Restrictions Solution Status: Fix Released on public GitHub repository Manufacturer Notification: June 2021 Public...
Critical Flaws Uncovered in Pentaho Business Analytics Software
Multiple vulnerabilities have been disclosed in Hitachi Vantara's Pentaho Business Analytics software that could be abused by malicious actors to upload arbitrary data files and even execute arbitrary code on the underlying host system of the application. The security weaknesses were reported by...
CVE-2007-1056
VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is...
CVE-2007-0832
The CVE-2007-0832 vulnerability affects VMware Workstation 5.5.3 build 34685, where the shared clipboard state is not updated promptly when the Enable copy and paste to and from this virtual machine checkbox is toggled. This lag in availability facilitates weaker host-guest isolation and could ...
CVE-2025-34685
...
CVE-2025-34685
CVE-2025-34685 is rejected/not used and does not represent an active vulnerability entry.