19 matches found
Security Bulletin: MongoDB Enterprised Advanced affected by: Use After Free (CVE-2026-34764)
Summary There are vulnerabilities in electron-37.8.0.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-34764. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-34764 DESCRIPTION: Electron is a framework for writing cross-platform desktop applications...
@adiontaegerron/claude-multi-terminal (1.0.0), @ag9898/buddy (>=1.0.1, <=1.0.3) +419 more potentially affected by CVE-2026-34764 via electron (>=33.0.2, <=39.2.7)
electron NPM version =33.0.2, =1.0.1, =0.1.0-20260513.1, =1.0.11, =0.5.0, =0.9.0, =0.0.1, =1.0.1, =0.6.0, =0.6.3 - @bond-wm/react-config 0.6.0 and more Source cves: CVE-2026-34764 Source advisory: SNYK:JS-ELECTRON-15907847...
@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +10 more potentially affected by CVE-2026-34764 via electron (>=40.0.0, <=40.7.0)
electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-34764 Source advisory: OSV:GHSA-8X5Q-PVF5-64MP...
@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +10 more potentially affected by CVE-2026-34764 via electron (>=40.0.0, <=40.7.0)
electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-34764 Source advisory: SNYK:JS-ELECTRON-15907847...
@adiontaegerron/claude-multi-terminal (1.0.0), @ag9898/buddy (>=1.0.1, <=1.0.3) +419 more potentially affected by CVE-2026-34764 via electron (>=33.0.2, <=39.2.7)
electron NPM version =33.0.2, =1.0.1, =0.1.0-20260513.1, =1.0.11, =0.5.0, =0.9.0, =0.0.1, =1.0.1, =0.6.0, =0.6.3 - @bond-wm/react-config 0.6.0 and more Source cves: CVE-2026-34764 Source advisory: OSV:GHSA-8X5Q-PVF5-64MP...
cicy-desktop (>=2.1.30, <=2.1.342), snapview (>=1.0.5, <=1.3.0) potentially affected by CVE-2026-34764 via electron (41.0.3)
electron NPM version 41.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - cicy-desktop =2.1.30, =1.0.5, =1.3.0 Source cves: CVE-2026-34764 Source advisory: OSV:GHSA-8X5Q-PVF5-64MP...
MAL-2025-34764 Malicious code in test-attr (npm)
The package test-attr was found to contain malicious code...
CVE-2024-34764
creationtimestamp| type| source ---|---|--- 2025-03-02 11:46:30+00:00| seen| Telegram/Qlxx24iCv3JczgJfQ8yzAa92ZCsFWEBfmgOhAebhasBWNu4k...
CVE-2024-34764
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Collision with another CVE ID...
CVE-2024-34764
CVE-2024-34764 is marked as rejected by the CVE-Numbering Authority (collision with another CVE). Nevertheless, connected sources show a related vulnerability: Essential Addons for Elementor
CVE-2024-34764
...
WordPress Essential Addons for Elementor Plugin <= 5.9.15 is vulnerable to Cross Site Scripting (XSS)
Software Essential Addons for Elementor Type Plugin Vulnerable versions = 5.9.15 Fixed in 5.9.16 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34764 Patch priority Low CVSS severity Low 6.5 Developer WPDeveloper PSID a4a013050b39 Credits Ngô Thiên An ancorn from...
CVE-2022-34764
creationtimestamp| type| source ---|---|--- 2022-07-14 00:37:02+00:00| seen| https://t.me/cibsecurity/46205...
CVE-2022-34764
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service when parsing the URL. Affected Products: X80 advanced RTU Communication Module BMENOR2200H V1.0, OPC UA Modicon Communication Module BMENUA0100 V1.10 and prio...
CVE-2022-34764
CVE-2022-34764 describes a CWE-119 vulnerability (improper restriction of operations within the bounds of a memory buffer) that could cause a denial of service when parsing URLs. Affected Schneider Electric devices include the X80 advanced RTU Communication Module BMENOR2200H (V1.0) and the OPC U...
CVE-2021-34764
creationtimestamp| type| source ---|---|--- 2021-10-27 22:16:22+00:00| seen| https://t.me/cibsecurity/31306...
CVE-2021-34764
CVE-2021-34764 affects Cisco Firepower Management Center (FMC) web-based management interface, with multiple vulnerabilities enabling cross-site scripting (XSS) and open redirect attacks. The root cause is improper input validation of HTTP request parameters in the FMC web interface. Cisco’s advi...