13 matches found
CVE-2019-13145
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2025-13145
creationtimestamp| type| source ---|---|--- 2025-11-19 09:04:13+00:00| seen| https://gist.github.com/Darkcrai86/5b2c675d4edba3f6d1a4a40e826bcf6b...
CVE-2020-13145
Studio in Open edX Ironwood 2.5 allows users to upload SVG files via the "ContentFile Uploads" screen. These files can contain JavaScript code and thus lead to Stored XSS...
Linux Distros Unpatched Vulnerability : CVE-2017-13145
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a...
CVE-2024-13145
A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController. java. The manipulation of the argument file leads to unrestricted upload. The attack...
CVE-2024-13145
CVE-2024-13145 affects zhenfeng13 My-Blog 1.0. The vulnerability lies in the upload function (src/main/java/com/site/blog/my/core/controller/admin/uploadController.java): manipulation of the file parameter leads to unrestricted file upload. This enables remote exploitation. Multiple connected sou...
CVE-2020-13145
CVE-2020-13145 affects Open edX Studio (Ironwood 2.5). The vulnerability arises from allowing SVG file uploads via the Content > File Uploads screen, where uploaded SVGs can contain JavaScript and trigger Stored XSS. Multiple connected sources corroborate the same description, noting lack of p...
CVE-2019-13145
CVE-2019-13145 is rejected/not used; the entry does not represent an active vulnerability per the initial description.
CVE-2018-13145
The CVE-2018-13145 entry concerns the mintToken function of a JavaSwapTest (JST) Ethereum token smart contract, where an integer overflow is described as the underlying issue. The vulnerability is rooted in the smart contract’s mintToken logic, with the impact described as an integrity issue (per...
CVE-2017-13145
This CVE (CVE-2017-13145) affects ImageMagick’s JP2 coder ReadJP2Image in coders/jp2.c. The vulnerability stems from insufficient validation of channel geometry, which can cause a crash when processing JP2 images. Affected products/versions per the provided description: ImageMagick 6.x up to 6.9....
CVE-2017-13145
In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash...
Fedora Update for flac FEDORA-2015-13145
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...