CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Rapid7 Vulnerability Database (full)•added 2026/09/13 12:00 a.m.•2 views

CVE-2026-35867: Improper Neutralization of Special Elements used in an OS Command

A Command Injection vulnerability exists in the bsSetLimitCliinfo function within the libshare.so library of the LB-LINK router AC1900AZ2 V1.0.2 via shell metacharacters, if the device is deployed in a scenario where an actor is able to make a "POST /goform/setLimitClientcfg" call but does not...

3.1CVSS5.9AI score0.01017EPSS

SaveExploits0References2

Prion•added 2023/03/26 9:15 p.m.•39 views

Command injection

LB-LINK BL-AC19002.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/setLimitClientcfg...

7.5CVSS9.8AI score0.69663EPSS

SaveExploits1References1Affected Software4

Rapid7 Vulnerability Database (full)•added 2023/03/26 12:00 a.m.•1 views

CVE-2023-26801: Improper Neutralization of Special Elements used in a Command

9.8CVSS8.2AI score0.69663EPSS

SaveExploits1References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by