Lucene search
K

40 matches found

RedhatCVE
RedhatCVE
added 2026/05/09 2:21 a.m.11 views

CVE-2026-8125

A vulnerability was detected in code-projects Simple Chat System 1.0. This vulnerability affects unknown code of the file sendMessage.php. The manipulation of the argument type/length/business parameter validity results in sql injection. The attack may be launched remotely. The exploit is now...

6.5CVSS5.8AI score0.0025EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/08 1:30 a.m.3 views

CVE-2026-8125

A vulnerability was detected in code-projects Simple Chat System 1.0. This vulnerability affects unknown code of the file sendMessage.php. The manipulation of the argument type/length/business parameter validity results in sql injection. The attack may be launched remotely. The exploit is now...

6.5CVSS5.8AI score0.0025EPSS
Exploits0References5Affected Software1
OpenVAS
OpenVAS
added 2026/03/27 12:0 a.m.5 views

Ubuntu: Security Advisory (USN-8125-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.8AI score0.23278EPSS
Exploits5References3
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-8125 Malicious code in @kollorg/aliquam-quae-natus (npm)

The package @kollorg/aliquam-quae-natus was found to contain malicious code...

7.2AI score
Exploits0
OSV
OSV
added 2025/07/25 2:15 a.m.1 views

CVE-2025-8125

A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /system/role/authUser/allocatedList. The manipulation of the argument paramsdataScope leads to sql injection. The attack may be launched...

9.8CVSS5.7AI score
Exploits0References4
CVE
CVE
added 2025/07/25 1:2 a.m.22 views

CVE-2025-8125

CVE-2025-8125 affects deerwms deer-wms-2 up to version 3.3. The vulnerability is an SQL injection in the file /system/role/authUser/allocatedList caused by improper handling of the params[dataScope] parameter. It can be exploited remotely, and the exploit has been disclosed publicly. Multiple sou...

9.8CVSS6.7AI score0.00435EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/07/25 1:2 a.m.11 views

CVE-2025-8125 deerwms deer-wms-2 allocatedList sql injection

A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /system/role/authUser/allocatedList. The manipulation of the argument paramsdataScope leads to sql injection. The attack may be launched...

6.5CVSS0.00435EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2025/06/30 12:0 a.m.10 views

Oracle Linux 10 : firefox (ELSA-2025-8125)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-8125 advisory. 128.11.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.11.0-1 - Update to 128.11.0 128.10.1-1 - Update to 128.10.1...

9.8CVSS8.2AI score0.08616EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/02/04 9:27 p.m.8 views

CVE-2024-8125 A remote code vulnerability has been discovered in OpenText™ Content Management.

Improper Validation of Specified Type of Input vulnerability in OpenText™ Content Management Extended ECM allows Parameter Injection. A bad actor with the required OpenText Content Management privileges not root could expose the vulnerability to carry out a remote code execution attack on the...

5.4CVSS7.4AI score0.00272EPSS
Exploits0References1
CVE
CVE
added 2025/02/04 9:27 p.m.45 views

CVE-2024-8125

CVE-2024-8125 affects OpenText Content Management (Extended ECM) with the WebReports module installed and enabled, versioned 10.0–24.4. The vulnerability is due to improper validation of a specified input type, enabling parameter injection that could lead to remote code execution. The exposure re...

5.4CVSS8.1AI score0.00272EPSS
Exploits0References1
Circl
Circl
added 2024/02/04 2:11 p.m.3 views

CVE-2019-8125

creationtimestamp| type| source ---|---|--- 2024-02-04 14:11:35+00:00| seen| https://t.me/ctinow/178827...

7.2CVSS7AI score0.01745EPSS
Exploits0References1
vulnersOsv
vulnersOsv
added 2022/05/17 4:12 a.m.2 views

com.geeoz.atom:atom-api (>=1.0d12 <=1.0d31), com.geeoz.atom:atom-kie (=1.0d31) +36 more potentially affected by CVE-2014-8125 via org.jbpm:jbpm-bpmn2 (>=5.1.0.Final <=6.2.0.CR4)

org.jbpm:jbpm-bpmn2 MAVEN version =5.1.0.Final, =1.0d12, =1.0d30, =1.0d18, =1.0d12, =1.0d12, =0.2, =1.1.0.17-1, =0.5.0, =0.5.0, =0.5.4 and more Source cves: CVE-2014-8125 Source advisory: OSV:GHSA-6QX9-RF9G-7JMR...

7.5CVSS5.8AI score0.02655EPSS
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2021/10/05 9:1 p.m.15 views

Security Bulletin: XXE Vulnerability in Drools Affects IBM Sterling B2B Integrator (CVE-2014-8125)

Summary IBM Sterling B2B Integrator has addressed the security vulnerability. Vulnerability Details CVEID: CVE-2014-8125 DESCRIPTION: Drools and jBPM could allow a remote attacker to obtain sensitive information, caused by an XML External Entity Injection XXE error within the jBPM runtime. By...

7.5CVSS6.1AI score0.02655EPSS
Exploits0Affected Software1
CVE
CVE
added 2021/03/01 11:8 p.m.40 views

CVE-2016-8125

CVE-2016-8125 is rejected/not used; this entry does not represent an active vulnerability.

6.9AI score
Exploits0
Cvelist
Cvelist
added 2021/03/01 11:8 p.m.14 views

CVE-2016-8125

...

Exploits0
CVE
CVE
added 2020/02/04 7:8 p.m.61 views

CVE-2020-8125

The CVE-2020-8125 issue affects the npm package klona (versions ≤ 1.1.0). Root cause: flaw in input validation enabling prototype pollution, allowing an attacker to corrupt object prototypes and potentially lead to remote code execution or denial of service in applications that deep-clone objects...

9.8CVSS9.7AI score0.04118EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2019/11/05 10:51 p.m.46 views

CVE-2019-8125

Magento 1 (prior to 1.9.x and 1.14.x) is affected by a remote code execution vulnerability that an authenticated admin can trigger by modifying configuration parameters through a crafted support configuration. This is supported by multiple CVE references in the provided documents and lists SUPEE-...

7.2CVSS7.4AI score0.01745EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2018/07/11 12:29 a.m.21 views

Remote code execution

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8125, CVE-2018-8262, CVE-2018-8274, CVE-2018-8279, CVE-2018-83...

7.6CVSS7.5AI score0.71043EPSS
Exploits3References3Affected Software1
Prion
Prion
added 2018/07/11 12:29 a.m.18 views

Remote code execution

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8125, CVE-2018-8262, CVE-2018-8274, CVE-2018-8275, CVE-2018-8279...

7.6CVSS7.5AI score0.71043EPSS
Exploits3References3
NVD
NVD
added 2018/07/11 12:29 a.m.20 views

CVE-2018-8125

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8262, CVE-2018-8274, CVE-2018-8275, CVE-2018-8279, CVE-2018-8301...

7.6CVSS7.6AI score0.18646EPSS
Exploits0References3
Rows per page
Query Builder