Lucene search
K

40 matches found

RedhatCVE
RedhatCVE
added 2026/05/09 2:21 a.m.7 views

CVE-2026-8125

A vulnerability was detected in code-projects Simple Chat System 1.0. This vulnerability affects unknown code of the file sendMessage.php. The manipulation of the argument type/length/business parameter validity results in sql injection. The attack may be launched remotely. The exploit is now...

6.5CVSS5.8AI score0.00011EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/08 1:30 a.m.2 views

CVE-2026-8125

A vulnerability was detected in code-projects Simple Chat System 1.0. This vulnerability affects unknown code of the file sendMessage.php. The manipulation of the argument type/length/business parameter validity results in sql injection. The attack may be launched remotely. The exploit is now...

6.5CVSS5.8AI score0.00011EPSS
Exploits0References5Affected Software1
OpenVAS
OpenVAS
added 2026/03/27 12:0 a.m.3 views

Ubuntu: Security Advisory (USN-8125-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.8AI score0.00231EPSS
Exploits5References3
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-8125 Malicious code in @kollorg/aliquam-quae-natus (npm)

The package @kollorg/aliquam-quae-natus was found to contain malicious code...

7.2AI score
Exploits0
OSV
OSV
added 2025/07/25 2:15 a.m.0 views

CVE-2025-8125

A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /system/role/authUser/allocatedList. The manipulation of the argument paramsdataScope leads to sql injection. The attack may be launched...

9.8CVSS5.7AI score
Exploits0References4
CVE
CVE
added 2025/07/25 1:2 a.m.15 views

CVE-2025-8125

CVE-2025-8125 affects deerwms deer-wms-2 up to version 3.3. The vulnerability is an SQL injection in the file /system/role/authUser/allocatedList caused by improper handling of the params[dataScope] parameter. It can be exploited remotely, and the exploit has been disclosed publicly. Multiple sou...

9.8CVSS6.7AI score0.00223EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/07/25 1:2 a.m.8 views

CVE-2025-8125 deerwms deer-wms-2 allocatedList sql injection

A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /system/role/authUser/allocatedList. The manipulation of the argument paramsdataScope leads to sql injection. The attack may be launched...

6.5CVSS0.00223EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2025/06/30 12:0 a.m.6 views

Oracle Linux 10 : firefox (ELSA-2025-8125)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-8125 advisory. 128.11.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.11.0-1 - Update to 128.11.0 128.10.1-1 - Update to 128.10.1...

9.8CVSS8.2AI score0.00994EPSS
Exploits1References3
CVE
CVE
added 2025/02/04 9:27 p.m.42 views

CVE-2024-8125

CVE-2024-8125 affects OpenText Content Management (Extended ECM) with the WebReports module installed and enabled, versioned 10.0–24.4. The vulnerability is due to improper validation of a specified input type, enabling parameter injection that could lead to remote code execution. The exposure re...

5.4CVSS8.1AI score0.00365EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/04 9:27 p.m.8 views

CVE-2024-8125 A remote code vulnerability has been discovered in OpenText™ Content Management.

Improper Validation of Specified Type of Input vulnerability in OpenText™ Content Management Extended ECM allows Parameter Injection. A bad actor with the required OpenText Content Management privileges not root could expose the vulnerability to carry out a remote code execution attack on the...

5.4CVSS7.4AI score0.00365EPSS
Exploits0References1
Circl
Circl
added 2024/02/04 2:11 p.m.0 views

CVE-2019-8125

creationtimestamp| type| source ---|---|--- 2024-02-04 14:11:35+00:00| seen| https://t.me/ctinow/178827...

7.2CVSS7AI score0.0106EPSS
Exploits0References1
vulnersOsv
vulnersOsv
added 2022/05/17 4:12 a.m.1 views

com.geeoz.atom:atom-api (>=1.0d12 <=1.0d31), com.geeoz.atom:atom-kie (=1.0d31) +36 more potentially affected by CVE-2014-8125 via org.jbpm:jbpm-bpmn2 (>=5.1.0.Final <=6.2.0.CR4)

org.jbpm:jbpm-bpmn2 MAVEN version =5.1.0.Final, =1.0d12, =1.0d30, =1.0d18, =1.0d12, =1.0d12, =0.2, =1.1.0.17-1, =0.5.0, =0.5.0, =0.5.4 and more Source cves: CVE-2014-8125 Source advisory: OSV:GHSA-6QX9-RF9G-7JMR...

7.5CVSS5.8AI score0.00957EPSS
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2021/10/05 9:1 p.m.14 views

Security Bulletin: XXE Vulnerability in Drools Affects IBM Sterling B2B Integrator (CVE-2014-8125)

Summary IBM Sterling B2B Integrator has addressed the security vulnerability. Vulnerability Details CVEID: CVE-2014-8125 DESCRIPTION: Drools and jBPM could allow a remote attacker to obtain sensitive information, caused by an XML External Entity Injection XXE error within the jBPM runtime. By...

7.5CVSS6.1AI score0.00957EPSS
Exploits0Affected Software1
CVE
CVE
added 2021/03/01 11:8 p.m.38 views

CVE-2016-8125

CVE-2016-8125 is rejected/not used; this entry does not represent an active vulnerability.

6.9AI score
Exploits0
Cvelist
Cvelist
added 2021/03/01 11:8 p.m.7 views

CVE-2016-8125

...

Exploits0
CVE
CVE
added 2020/02/04 7:8 p.m.56 views

CVE-2020-8125

The CVE-2020-8125 issue affects the npm package klona (versions ≤ 1.1.0). Root cause: flaw in input validation enabling prototype pollution, allowing an attacker to corrupt object prototypes and potentially lead to remote code execution or denial of service in applications that deep-clone objects...

9.8CVSS9.7AI score0.01074EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2019/11/05 10:51 p.m.39 views

CVE-2019-8125

Magento 1 (prior to 1.9.x and 1.14.x) is affected by a remote code execution vulnerability that an authenticated admin can trigger by modifying configuration parameters through a crafted support configuration. This is supported by multiple CVE references in the provided documents and lists SUPEE-...

7.2CVSS7.4AI score0.0106EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2018/07/11 12:29 a.m.19 views

CVE-2018-8125

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8262, CVE-2018-8274, CVE-2018-8275, CVE-2018-8279, CVE-2018-8301...

7.6CVSS7.6AI score0.19838EPSS
Exploits2References3
Prion
Prion
added 2018/07/11 12:29 a.m.21 views

Remote code execution

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8125, CVE-2018-8274, CVE-2018-8275, CVE-2018-8279, CVE-2018-8301...

7.6CVSS7.5AI score0.80263EPSS
Exploits3References3
Prion
Prion
added 2018/07/11 12:29 a.m.17 views

Remote code execution

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8125, CVE-2018-8262, CVE-2018-8274, CVE-2018-8275, CVE-2018-8279...

7.6CVSS7.5AI score0.80263EPSS
Exploits3References3
Rows per page
Query Builder