13 matches found
@adenta/cms (>=0.0.6, <=1.1.1-0), @contentql/core (>=0.1.2, <=0.3.5) +15 more potentially affected by CVE-2026-34748 via @payloadcms/next (>=3.0.0-beta.48, <=3.78.0-internal.ab11ffa)
@payloadcms/next NPM version =3.0.0-beta.48, =0.0.6, =0.1.2, =1.0.2, =0.1.0, =3.2.0, =0.2.0, =1.0.54, =0.1.0, =0.1.4, =1.0.0, =3.0.0-beta.3, =1.53.40, =0.0.3, =1.0.0 and more Source cves: CVE-2026-34748 Source advisory: GHSA-MMXC-95CH-2J7C...
CVE-2026-34748 @payloadcms/next has Stored XSS in Admin Panel
Payload is a free and open source headless content management system. Prior to version 3.78.0 in @payloadcms/next, a stored Cross-Site Scripting XSS vulnerability existed in the admin panel. An authenticated user with write access to a collection could save content that, when viewed by another...
@adenta/cms (>=0.0.6, <=1.1.1-0), @contentql/core (>=0.1.2, <=0.3.5) +15 more potentially affected by CVE-2026-34748 via @payloadcms/next (>=3.0.0-beta.48, <=3.78.0-internal.ab11ffa)
@payloadcms/next NPM version =3.0.0-beta.48, =0.0.6, =0.1.2, =1.0.2, =0.1.0, =3.2.0, =0.2.0, =1.0.54, =0.1.0, =0.1.4, =1.0.0, =3.0.0-beta.3, =1.53.40, =0.0.3, =1.0.0 and more Source cves: CVE-2026-34748 Source advisory: MEND:CVE-2026-34748...
CVE-2024-34748
In DevmemXReservationPageAddress of devicememserver.c, there is a possible use-after-free due to improper casting. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-34748
In DevmemXReservationPageAddress of devicememserver.c, there is a possible use-after-free due to improper casting. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-34748
In DevmemXReservationPageAddress of devicememserver.c, there is a possible use-after-free due to improper casting. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-34748
The Linux Kernel is affected by a use-after-free vulnerability in the _DevmemXReservationPageAddress function of devicemem_server.c, caused by improper casting . This flaw allows for a local escalation of privilege in the kernel without requiring additional execution privileges or user interactio...
CVE-2022-34748
Siemens Simcenter Femap (all versions before 2022.2) is affected by CVE-2022-34748 due to an out-of-bounds write while parsing X_T files. The underlying issue is a write past the end of an allocated structure, enabling code execution in the context of the current process. ZDI’s advisory indicates...
CVE-2021-34748
creationtimestamp| type| source ---|---|--- 2021-10-07 00:32:27+00:00| seen| https://t.me/cibsecurity/30116...
CVE-2021-34748 Cisco Intersight Virtual Appliance Command Injection Vulnerability
A vulnerability in the web-based management interface of Cisco Intersight Virtual Appliance could allow an authenticated, remote attacker to perform a command injection attack on an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this...
CVE-2021-34748
Cisco Intersight Virtual Appliance is affected by a command-injection vulnerability in its web-based management interface caused by insufficient input validation. An authenticated, remote attacker could send crafted input to the interface and execute arbitrary commands with root-level privileges....
