CVE-2018-8065

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory region that can be triggered by rapidly sending a variety of HTTP requests with long HTTP header values or long URIs.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Mar 12, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-80695.4QCMS version 3.0 has XSS via the webname parameter to the /backend/system.html URI.CVE-2018-80705.4QCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI.CVE-2018-80716.1Mautic before v2.13.0 has stored XSS via a theme config file.CVE-2018-80728.8An issue was discovered on EDIMAX IC-3140W through 3.06, IC-5150W through 3.09, and IC-6220DC through 3.06 devices. The ipcam_cgi binary con CVE-2018-80739.8Yii 2.x before 2.0.15 allows remote attackers to execute arbitrary LUA code via a variant of the CVE-2018-7269 attack in conjunction with th CVE-2018-80748.1Yii 2.x before 2.0.15 allows remote attackers to inject unintended search conditions via a variant of the CVE-2018-7269 attack in conjunctio CVE-2018-80767.5ZenMate 1.5.4 for macOS suffers from a type confusion vulnerability within the com.zenmate.chron-xpc LaunchDaemon component. The LaunchDaemo CVE-2018-80785.4YzmCMS 3.7 has Stored XSS via the title parameter to advertisement/adver/edit.html.CVE-2018-80875.5Memory leak in the hwsim_new_radio_nl function in drivers/net/wireless/mac80211_hwsim.c in the Linux kernel through 4.15.9 allows local user CVE-2018-80889.8org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restric CVE-2018-80907.8Quick Heal Total Security 64 bit 17.00 (QHTS64.exe), (QHTSFT64.exe) - Version 10.0.1.38; Quick Heal Total Security 32 bit 17.00 (QHTS32.exe)CVE-2018-80929.8Mautic before 2.13.0 allows CSV injection.