CVE-2026-34720

CVE-2026-34720 affects the Zammad web-based helpdesk system. Prior to versions 7.0.1 and 6.5.4, the SSO mechanism did not verify that the header originated from a trusted SSO proxy/gateway before applying subsequent actions, representing an origin-validation weakness. The issue is fixed in 7.0.1 ...

MAL-2025-34720 Malicious code in terereyes (npm)

The package terereyes was found to contain malicious code...

CVE-2024-34720

In comandroidinternalosZygoteCommandBuffernativeForkRepeatedly of comandroidinternalosZygoteCommandBuffer.cpp, there is a possible method to perform arbitrary code execution in any app zygote processes due to a logic error in the code. This could lead to local escalation of privilege with no...

CVE-2024-34720

creationtimestamp| type| source ---|---|--- 2024-07-09 23:36:45+00:00| seen| https://t.me/cvedetector/470...

Microsoft Windows Multiple Vulnerabilities (KB5017361)

This host is missing an important security update according to Microsoft KB5017361 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2022-34720

Windows Internet Key Exchange IKE Extension Denial of Service Vulnerability...

CVE-2022-34720

Windows Internet Key Exchange IKE Extension Denial of Service Vulnerability...

CVE-2022-34720

CVE-2022-34720 is a Windows IKE Extension Denial of Service vulnerability. The provided data notes a network-based attack vector with low complexity, no privileges required, and a HIGH availability impact (CVSS v3.1 base score 7.5). No exploit details or remediation/patch information is provided ...

CVE-2022-34720 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

...

CVE-2021-34720

creationtimestamp| type| source ---|---|--- 2021-09-12 04:53:55+00:00| seen| https://t.me/cyberbannewsir/3903...

CVE-2021-34720

Cisco IOS XR Software IP SLA responder and TWAMP vulnerability (CVE-2021-34720) allows an unauthenticated remote attacker to exhaust device packet memory or crash the IP SLA process, causing DoS. The issue arises from mishandled socket creation failures during IP SLA and TWAMP processing; exploit...

CVE-2025-34720

...

CVE-2025-34720

This CVE-2025-34720 entry is rejected and not used for an active vulnerability disclosure.