@adenta/cms (>=0.0.6 <=1.1.1-0), @anjy7/navbar-cms (=0.0.5) +21 more potentially affected by CVE-2026-34748 via @payloadcms/next (>=3.0.0-alpha.46 <=3.78.0-internal.5219978)

@payloadcms/next NPM version =3.0.0-alpha.46, =0.0.6, =0.1.2, =1.0.2, =0.1.0, =3.2.0, =0.2.0, =1.0.54, =0.1.0, =0.1.4, =1.0.0, =0.0.5, =0.0.1, =0.0.4 and more Source cves: CVE-2026-34748 Source advisory: OSV:GHSA-MMXC-95CH-2J7C...

@01.software/sdk (>=0.0.1-251022.145258 <=0.2.3), @adenta/cms (>=0.0.6 <=1.1.1-0) +75 more potentially affected by CVE-2026-34748 via @payloadcms/ui (>=3.0.0-alpha.0 <=3.78.0-internal.5219978)

@payloadcms/ui NPM version =3.0.0-alpha.0, =0.0.1-251022.145258, =0.0.6, =3.70.0, =0.0.3, =3.39.2, =1.0.1-beta.3, =0.1.2, =0.0.1, =1.0.0, =0.1.0, =0.1.2, =1.0.0, =1.1.29 and more Source cves: CVE-2026-34748 Source advisory: SNYK:JS-PAYLOADCMSUI-15873862...

CVE-2024-34748

In DevmemXReservationPageAddress of devicememserver.c, there is a possible use-after-free due to improper casting. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-34748

In DevmemXReservationPageAddress of devicememserver.c, there is a possible use-after-free due to improper casting. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-34748

In DevmemXReservationPageAddress of devicememserver.c, there is a possible use-after-free due to improper casting. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-34748

Possible use-after-free in DevmemXReservationPageAddress of devicemem_server.c due to improper casting, enabling local kernel privilege escalation without extra privileges or user interaction. Affected: Linux kernel component described in multiple sources (CVE-2024-34748). Impact: local EoP with ...

CVE-2022-34748

Siemens Simcenter Femap (all versions before 2022.2) is affected by CVE-2022-34748 due to an out-of-bounds write while parsing X_T files. The underlying issue is a write past the end of an allocated structure, enabling code execution in the context of the current process. ZDI’s advisory indicates...

CVE-2021-34748

creationtimestamp| type| source ---|---|--- 2021-10-07 00:32:27+00:00| seen| https://t.me/cibsecurity/30116...

CVE-2021-34748 Cisco Intersight Virtual Appliance Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Intersight Virtual Appliance could allow an authenticated, remote attacker to perform a command injection attack on an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this...

CVE-2021-34748

Cisco Intersight Virtual Appliance is affected by a command-injection vulnerability in its web-based management interface caused by insufficient input validation. An authenticated, remote attacker could send crafted input to the interface and execute arbitrary commands with root-level privileges....

CVE-2025-34748

CVE-2025-34748 is rejected and not used for a vulnerability disclosure.

CVE-2025-34748

...