Advisories · Weakness
CWE-159.
Every Advisory and CVE whose sources give the weakness CWE-159, newest first.
- CVSS 7.2 High
Tornado has cookie attribute injection via .RequestHandler.set_cookie
- CWE-159
<6.5.5 · fixed in 6.5.5
GHSA-fqwm-6jpj-5wxc · CVE-2026-35536 - CVSS 5.9 Medium
SuiteCRM has blind XSS in return_id parameter
- SuiteCRM
- Cross-site scripting (XSS)
- CWE-116
- CVSS 5.5 Medium
Denial of Service in Microsoft OS
- Microsoft Windows OS
- CWE-159
- CVSS 3.6 Low
OpenBSD OpenSSH: ssh in OpenSSH before 10.1 allows control characters in usernames that originate from…
- OpenBSD OpenSSH
- CWE-159
- CVSS 1.7 Low
RISC Zero Ethereum invalid commitment with digest value of zero accepted by Steel.validateCommitment
- CWE-159
<2.1.1 · fixed in 2.1.1
GHSA-gjv3-89hh-9xq2 · CVE-2025-52884 - CVSS 5.3 Medium
Failure to check for packets from the broadcast address allows potential DDoS amplification attack in Meshtastic firmware
- meshtastic firmware
- CWE-138
- CWE-159
- CVSS 5.3 Medium
Special characters break path parsing in XML functions
- PHP
- CWE-159
- CVSS 5.5 Medium
busybox: An incorrect handling of a special element in Busybox's ash applet leads to denial of…
- busybox
- CWE-159
- CVSS 5.3 Medium
Host Header Injection allowing web cache poisoning attacks
- Secomea GateManager
- CWE-159
- CVSS 7.5 High
Junos OS: Kernel crash (vmcore) or FPC crash due to mbuf leak
- Juniper Networks Junos OS
- CWE-159
- CVSS 7.5 High
Junos OS and Junos OS Evolved: RPD crash when processing a specific BGP packet
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-159
- CWE-690
- CVSS 7.5 High
Junos OS and Junos OS Evolved: RPD crash while processing a specific BGP update information.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-159
-
PrinterLogic Print Management Software does not sanitize special characters
- PrinterLogic Management Software
- CWE-159