13 matches found
CVE-2026-34998
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2022-34998
JPEGDEC commit be4843c was discovered to contain a global buffer overflow via JPEGDecodeMCU at /src/jpeg.inl...
CVE-2023-34998
creationtimestamp| type| source ---|---|--- 2023-09-05 20:17:10+00:00| seen| https://t.me/cibsecurity/69862...
CVE-2023-34998
An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to arbitrary authentication. An attacker can sniff network traffic to trigger this vulnerability...
CVE-2023-34998
CVE-2023-34998 : Open Automation Software OAS Platform v18.00.0072 OAS Engine contains an authentication bypass. An attacker who can sniff traffic can capture a valid U_EP credential and craft privileged requests, bypassing authentication. The vulnerability enables access via unencrypted admin tr...
Open Automation Software OAS Platform OAS Engine authentication bypass vulnerability
Talos Vulnerability Report TALOS-2023-1770 Open Automation Software OAS Platform OAS Engine authentication bypass vulnerability September 5, 2023 CVE Number CVE-2023-34998 SUMMARY An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platfor...
CVE-2022-34998
CVE-2022-34998 concerns JPEGDEC, a JPEG decoder. The connected records specify a global buffer overflow in the JPEGDecodeMCU path inside /src/jpeg.inl, caused by commit be4843c. This issue applies to JPEGDEC’s decoding component and is described with a HIGH impact context (CVSS 3.1 metrics indica...
CVE-2021-34998
This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Free Antivirus 20.2.0.0. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists with...
CVE-2021-34998
CVE-2021-34998 affects Panda Security Free Antivirus 20.2.0.0. The flaw is in named pipes handling, where an untrusted process can impersonate the pipe client, enabling local privilege escalation to SYSTEM. Documents indicate local exploitation with low authentication, and references include ZDI-...
CVE-2026-34998
...
CVE-2026-34998
CVE-2026-34998 is rejected/not used; this record is withdrawn and does not represent an active vulnerability.
CVE-2025-34998
This CVE-2025-34998 entry is rejected/not used and does not represent an active vulnerability.
CVE-2025-34998
...