MAL-2025-8151 Malicious code in @kollusietea/cumque-atque-adipisci (npm)

The package @kollusietea/cumque-atque-adipisci was found to contain malicious code...

WordPress HT Mega plugin <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions vulnerability

Authenticated Author+ Path Traversal to Limited Arbitrary CSS File Actions vulnerability discovered by wesley wcraft in WordPress Plugin HT Mega versions = 2.9.1...

CVE-2025-8151

creationtimestamp| type| source ---|---|--- 2025-07-31 11:44:50+00:00| seen| Telegram/XCdIz98ABXw50HVKekdPdV4J2Ru19XMViSF8o2sbINVVI0...

CVE-2025-8151 HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.9.1 via the 'saveblockcss' function. This makes it possible for authenticated attackers, with Author-level access and above, to create CSS files in any director...

CVE-2019-8151

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to manipulate shippment settings can execute arbitrary code through server-side request forgery due to unsafe handling of a carrier...

CVE-2024-8151

creationtimestamp| type| source ---|---|--- 2024-08-26 01:09:56+00:00| seen| https://t.me/cvedetector/4091...

CVE-2024-8151 SourceCodester Interactive Map with Marker delete-mark.php cross site scripting

A vulnerability was found in SourceCodester Interactive Map with Marker 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/delete-mark.php. The manipulation of the argument mark leads to cross site scripting. It is possible to initiate the attack...

CVE-2019-8151

creationtimestamp| type| source ---|---|--- 2024-02-04 15:51:13+00:00| seen| https://t.me/ctinow/178858...

Oracle Linux 9 : poppler (ELSA-2022-8151)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8151 advisory. 21.01.0-13 - Dont run out of file for Hints - Rebuild for 2096451 - Resolves: 2090970, 2096451 Tenable has extracted the preceding description block directly fr...

AlmaLinux 9 : poppler (ALSA-2022:8151)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:8151 advisory. - A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service DoS via a crafted PDF file. CVE-2022-27337 Note that...

OESA-2021-1391 rubygem-activeresource security update

REST on Rails. Wrap your RESTful web app with Ruby classes and work with them like Active Record models. Security Fixes: There is a possible information disclosure issue in Active Resource v5.1.1 that could allow an attacker to create specially crafted requests to access data in an unexpected way...

CVE-2016-8151

CVE-2016-8151 entry is rejected/not used; this CVE ID does not represent an active vulnerability.

CVE-2016-8151

...

CVE-2020-8151

There is a possible information disclosure issue in Active Resource v5.1.1 that could allow an attacker to create specially crafted requests to access data in an unexpected way and possibly leak information...

CVE-2020-8151

There is a possible information disclosure issue in Active Resource v5.1.1 that could allow an attacker to create specially crafted requests to access data in an unexpected way and possibly leak information...

CVE-2020-8151

CVE-2020-8151: In the Ruby gem Active Resource, there is an information-disclosure vulnerability in versions prior to 5.1.1 where an attacker can craft requests to access data in an unexpected way. The connected IBM security bulletin lists this CVE among multiple Rails-related issues but does not...

CVE-2020-8151

There is a possible information disclosure issue in Active Resource v5.1.1 that could allow an attacker to create specially crafted requests to access data in an unexpected way and possibly leak information...

CVE-2019-8151

CVE-2019-8151 affects Magento: versions 2.2 before 2.2.10 and 2.3 before 2.3.3, or 2.3.2-p1, are vulnerable. It requires an authenticated admin to manipulate shipping settings and can lead to remote code execution via server-side request forgery caused by unsafe handling of a carrier gateway. The...

CVE-2018-8151

An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8154...

Remote code execution

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8151...