UBUNTU-CVE-2026-8159

[email protected] and lower versions are vulnerable to denial of service via regular expression backtracking in the Content-Disposition filename parameter parser. A crafted multipart upload with a long header value can cause regex matching to take seconds, blocking the event loop. Impact: any...

MiracleLinux 4 : kernel-2.6.32-504.12.2.el6 (AXSA:2015-106:03)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-106:03 advisory. Description: The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of...

MAL-2025-8159 Malicious code in @kollusietea/eum-mollitia-itaque-debitis (npm)

The package @kollusietea/eum-mollitia-itaque-debitis was found to contain malicious code...

CVE-2025-8159

creationtimestamp| type| source ---|---|--- 2025-07-25 15:08:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114914497629194333...

CVE-2024-8159

creationtimestamp| type| source ---|---|--- 2024-10-03 09:05:20+00:00| seen| https://t.me/cvedetector/6890...

CVE-2024-8159 Deep Freeze 9.00.020.5760 - Out-of-bounds read

Deep Freeze 9.00.020.5760 is vulnerable to an out-of-bounds read vulnerability by triggering the 0x70014 IOCTL code of the FarDisk.sys driver...

CVE-2015-8159

Technical details for CVE-2015-8159 are not publicly available in the provided documents. Monitor for updates.

CVE-2019-8159

creationtimestamp| type| source ---|---|--- 2024-02-04 16:16:22+00:00| seen| https://t.me/ctinow/178864...

Mageia: Security Advisory (MGASA-2015-0172)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2719-1 : ruby-actionpack-page-caching - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2719 advisory. - There is a vulnerability in actionpackpage-caching gem v1.2.1 that allows an attacker to write arbitrary files to a web server, potentially resulting in remote code...

[SECURITY] [DLA 2719-1] ruby-actionpack-page-caching security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2719-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler July 23, 2021 https://wiki.debian.org/LTS -...

SUSE: Security Advisory (SUSE-SU-2015:1071-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-8159

...

CVE-2016-8159

The CVE-2016-8159 entry is rejected/not used and does not represent an active vulnerability.

CVE-2020-8159

CVE-2020-8159 affects the actionpack-page-caching gem prior to 1.2.1. An attacker can write arbitrary files to the web server, potentially enabling remote code execution if unescaped ERB is written to a view. Documents show CVSS2 base 7.5 and CVSS3.1 base 9.8 (CRITICAL). Debian/DLA-2719-1 and rel...

CVE-2019-8159

Summary of CVE-2019-8159 : A remote code execution vulnerability in Magento, affecting Magento 2.2.x prior to 2.2.10 and Magento 2.3.x prior to 2.3.3 (or 2.3.2-p1). An authenticated user with system data manipulation privileges can execute arbitrary code via arbitrary file deletion and OS command...

Denial Of Service (DoS)

The kernel packages contain the Linux kernel, the core of any Linux operating system. It was found that the Linux kernel's Infiniband subsystem did not properly sanitize input parameters while registering memory regions from user space via the uverbs API. A local user with access to a...

CVE-2018-8159

CVE-2018-8159 is an elevation-of-privilege issue in Microsoft Exchange Server related to Outlook Web Access (OWA) not handling web requests properly. The connected Nessus plugin text indicates exploitation could allow script/content injection and user-information disclosure; it does not provide c...

Description of the security update for Microsoft Exchange Server 2013 and 2016: May 8, 2018

Description of the security update for Microsoft Exchange Server 2013 and 2016: May 8, 2018 Summary This security update resolves vulnerabilities in Microsoft Exchange. To learn more about these vulnerabilities, see the following Common Vulnerabilities and Exposures CVE: Microsoft Common...

Microsoft Exchange Server CVE-2018-8159 Remote Privilege Escalation Vulnerability

Description Microsoft Exchange Server is prone to a remote privilege-escalation vulnerability. Attackers can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Exchange Server 2013 Cumulative Update 19 Microsoft Exchange Server 2013 Cumulative Update 20 Microsoft...