40 matches found
EUVD-2018-21735
Microsoft Watchr 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 8145 characters into the search bar and trigger a search operation to caus...
CVE-2018-25240
Watchr 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 8145 characters into the search bar and trigger a search operation to cause the...
PT-2026-30361
Microsoft Watchr 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 8145 characters into the search bar and trigger a search operation to caus...
CVE-2025-8145
creationtimestamp| type| source ---|---|--- 2025-08-20 04:18:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwsl44e7oa2e...
CVE-2024-8145
A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8. Affected by this issue is some unknown functionality of the file /index.php/admin of the component Article Handler. The manipulation of the argument Title leads to basic cross site scripting. The attack may be...
CVE-2020-8145
The UniFi Video Server Windows web interface configuration restore functionality at the “backup” and “wizard” endpoints does not implement sufficient privilege checks. Low privileged users, belonging to the PUBLICGROUP or CUSTOMGROUP groups, can access these endpoints and overwrite the current...
CVE-2019-8145
A stored cross-site scripting XSS vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code into the attribute set name when listing the products...
Linux Distros Unpatched Vulnerability : CVE-2014-8145
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple heap-based buffer overflows in Sound eXchange SoX 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the 1...
CVE-2024-8145
creationtimestamp| type| source ---|---|--- 2024-08-25 09:16:30+00:00| seen| https://t.me/cvedetector/4081...
CVE-2024-8145 ClassCMS Article admin cross site scripting
A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8. Affected by this issue is some unknown functionality of the file /index.php/admin of the component Article Handler. The manipulation of the argument Title leads to basic cross site scripting. The attack may be...
CVE-2019-8145
creationtimestamp| type| source ---|---|--- 2024-02-05 08:41:25+00:00| seen| https://t.me/ctinow/179038...
SUSE CVE-2014-8145
Multiple heap-based buffer overflows in Sound eXchange SoX 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the 1 startread or 2 AdpcmReadBlock function...
CVE-2016-8145
CVE-2016-8145 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2016-8145
...
UniFi Video <= 3.9.3 Multiple Vulnerabilities
UniFi Video on Windows is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...
CVE-2020-8145
The UniFi Video Server Windows web interface configuration restore functionality at the “backup” and “wizard” endpoints does not implement sufficient privilege checks. Low privileged users, belonging to the PUBLICGROUP or CUSTOMGROUP groups, can access these endpoints and overwrite the current...
CVE-2020-8145
CVE-2020-8145 affects the UniFi Video Server (Windows) web interface. The vulnerability is in the backup and wizard configuration-restore endpoints, which do not perform sufficient privilege checks. Low-privilege users (PUBLIC_GROUP or CUSTOM_GROUP) can access these endpoints and overwrite the cu...
CVE-2020-8145
The UniFi Video Server Windows web interface configuration restore functionality at the “backup” and “wizard” endpoints does not implement sufficient privilege checks. Low privileged users, belonging to the PUBLICGROUP or CUSTOMGROUP groups, can access these endpoints and overwrite the current...
CVE-2019-8145
CVE-2019-8145 describes a stored XSS vulnerability in Magento: authenticated users can inject arbitrary JavaScript into the attribute set name when listing products. Affected versions are Magento 2.2 before 2.2.10 and Magento 2.3 before 2.3.3 (or 2.3.2-p1). The issue stems from the attribute set ...
CVE-2019-8145
A stored cross-site scripting XSS vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code into the attribute set name when listing the products...