Lucene search
K

40 matches found

EUVD
EUVD
added 2026/04/04 3:30 p.m.3 views

EUVD-2018-21735

Microsoft Watchr 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 8145 characters into the search bar and trigger a search operation to caus...

6.9CVSS6.1AI score0.00017EPSS
Exploits0References4
NVD
NVD
added 2026/04/04 2:16 p.m.3 views

CVE-2018-25240

Watchr 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 8145 characters into the search bar and trigger a search operation to cause the...

6.9CVSS0.00017EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/04/04 12:0 a.m.2 views

PT-2026-30361

Microsoft Watchr 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 8145 characters into the search bar and trigger a search operation to caus...

6.9CVSS6.1AI score0.00017EPSS
Exploits0References4
Circl
Circl
added 2025/08/20 4:18 a.m.9 views

CVE-2025-8145

creationtimestamp| type| source ---|---|--- 2025-08-20 04:18:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwsl44e7oa2e...

8.8CVSS7.3AI score0.02062EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:30 a.m.3 views

CVE-2024-8145

A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8. Affected by this issue is some unknown functionality of the file /index.php/admin of the component Article Handler. The manipulation of the argument Title leads to basic cross site scripting. The attack may be...

5.1CVSS6.2AI score0.00102EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:12 p.m.5 views

CVE-2020-8145

The UniFi Video Server Windows web interface configuration restore functionality at the “backup” and “wizard” endpoints does not implement sufficient privilege checks. Low privileged users, belonging to the PUBLICGROUP or CUSTOMGROUP groups, can access these endpoints and overwrite the current...

6.5CVSS6.8AI score0.00231EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:53 a.m.5 views

CVE-2019-8145

A stored cross-site scripting XSS vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code into the attribute set name when listing the products...

5.4CVSS5.3AI score0.00148EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2014-8145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple heap-based buffer overflows in Sound eXchange SoX 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the 1...

7.5CVSS6.7AI score0.12998EPSS
Exploits1References2
Circl
Circl
added 2024/08/25 9:16 a.m.1 views

CVE-2024-8145

creationtimestamp| type| source ---|---|--- 2024-08-25 09:16:30+00:00| seen| https://t.me/cvedetector/4081...

5.1CVSS3.9AI score0.00102EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/08/25 5:31 a.m.10 views

CVE-2024-8145 ClassCMS Article admin cross site scripting

A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8. Affected by this issue is some unknown functionality of the file /index.php/admin of the component Article Handler. The manipulation of the argument Title leads to basic cross site scripting. The attack may be...

5.1CVSS6.4AI score0.00102EPSS
Exploits1References4
Circl
Circl
added 2024/02/05 8:41 a.m.3 views

CVE-2019-8145

creationtimestamp| type| source ---|---|--- 2024-02-05 08:41:25+00:00| seen| https://t.me/ctinow/179038...

5.4CVSS5.5AI score0.00148EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 5:25 a.m.1 views

SUSE CVE-2014-8145

Multiple heap-based buffer overflows in Sound eXchange SoX 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the 1 startread or 2 AdpcmReadBlock function...

7.5CVSS6.1AI score0.12998EPSS
Exploits1References3
CVE
CVE
added 2021/03/01 11:8 p.m.35 views

CVE-2016-8145

CVE-2016-8145 entry is rejected/not used and does not represent an active vulnerability entry.

6.9AI score
Exploits0
Cvelist
Cvelist
added 2021/03/01 11:8 p.m.13 views

CVE-2016-8145

...

Exploits0
OpenVAS
OpenVAS
added 2020/04/08 12:0 a.m.42 views

UniFi Video <= 3.9.3 Multiple Vulnerabilities

UniFi Video on Windows is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

8.4CVSS7.2AI score0.00262EPSS
Exploits0References1
NVD
NVD
added 2020/04/01 11:15 p.m.14 views

CVE-2020-8145

The UniFi Video Server Windows web interface configuration restore functionality at the “backup” and “wizard” endpoints does not implement sufficient privilege checks. Low privileged users, belonging to the PUBLICGROUP or CUSTOMGROUP groups, can access these endpoints and overwrite the current...

6.5CVSS6.5AI score0.00231EPSS
Exploits0References1
CVE
CVE
added 2020/04/01 10:20 p.m.44 views

CVE-2020-8145

CVE-2020-8145 affects the UniFi Video Server (Windows) web interface. The vulnerability is in the backup and wizard configuration-restore endpoints, which do not perform sufficient privilege checks. Low-privilege users (PUBLIC_GROUP or CUSTOM_GROUP) can access these endpoints and overwrite the cu...

6.5CVSS6.8AI score0.00231EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/04/01 10:20 p.m.15 views

CVE-2020-8145

The UniFi Video Server Windows web interface configuration restore functionality at the “backup” and “wizard” endpoints does not implement sufficient privilege checks. Low privileged users, belonging to the PUBLICGROUP or CUSTOMGROUP groups, can access these endpoints and overwrite the current...

7.1AI score0.00231EPSS
Exploits0References1
CVE
CVE
added 2019/11/06 12:4 a.m.62 views

CVE-2019-8145

CVE-2019-8145 describes a stored XSS vulnerability in Magento: authenticated users can inject arbitrary JavaScript into the attribute set name when listing products. Affected versions are Magento 2.2 before 2.2.10 and Magento 2.3 before 2.3.3 (or 2.3.2-p1). The issue stems from the attribute set ...

5.4CVSS5.3AI score0.00148EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2019/11/06 12:4 a.m.11 views

CVE-2019-8145

A stored cross-site scripting XSS vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code into the attribute set name when listing the products...

5.4AI score0.00148EPSS
Exploits0References1
Rows per page
Query Builder