OESA-2026-2027 libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fixes: A flaw was found in libsoup. When establishing HTTPS tunnels through a configur...

OESA-2026-2030 libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fixes: A flaw was found in libsoup. When establishing HTTPS tunnels through a configur...

OESA-2026-2029 libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fixes: A flaw was found in libsoup. When establishing HTTPS tunnels through a configur...

CLSA-2026-1777036238 libsoup: Fix of CVE-2026-5119

CVE-2026-5119: do not send cookies to a HTTP proxy for a HTTPS request...

CLSA-2026-1777035524 libsoup: Fix of CVE-2026-5119

CVE-2026-5119: do not send cookies to a HTTP proxy for a HTTPS request...

Linux Distros Unpatched Vulnerability : CVE-2026-5119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the...

CVE-2026-5119

creationtimestamp| type| source ---|---|--- 2026-03-30 08:20:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miba5rua5c2s 2026-03-30 18:58:59+00:00| seen| https://bsky.app/profile/kona.meow.social.ap.brid.gy/post/3micdspwo23u2 2026-06-04 11:21:51+00:00| seen|...

MiracleLinux 3 : glibc-2.5-118.3.0.1.AXS3 (AXSA:2014-522:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-522:01 advisory. Description: The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory,...

Linux Distros Unpatched Vulnerability : CVE-2017-5119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacke...

CVE-2025-5119

A vulnerability has been found in Emlog Pro 2.5.11 and classified as critical. This vulnerability affects unknown code of the file /include/controller/apicontroller.php. The manipulation of the argument tag leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

CVE-2025-5119

creationtimestamp| type| source ---|---|--- 2025-05-23 21:45:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17475 2025-05-23 23:29:34+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpurw3j4mea2 2025-05-24...

CVE-2025-5119 Emlog Pro api_controller.php sql injection

A vulnerability has been found in Emlog Pro 2.5.11 and classified as critical. This vulnerability affects unknown code of the file /include/controller/apicontroller.php. The manipulation of the argument tag leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

CVE-2011-5119

Multiple race conditions in Comodo Internet Security before 5.8.211697.2124 allow local users to bypass the Defense+ feature via unspecified vectors...

Linux Distros Unpatched Vulnerability : CVE-2014-5119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Off-by-one error in the gconvtranslitfind function in gconvtrans.c in GNU C Library aka glibc allows context-dependent attackers to cause a denial of service...

CVE-2024-5119

creationtimestamp| type| source ---|---|--- 2025-02-14 09:46:59+00:00| seen| Telegram/e4UdCvJdz8sgcZEogcNn3WoEP6J9-lk4JuqUDnmlSoGcaSoP...

CVE-2019-5119

An exploitable SQL injection vulnerability exist in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing exfiltrati...

CVE-2024-5119 SourceCodester Event Registration System sql injection

A vulnerability was found in SourceCodester Event Registration System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php?f=loadregistration. The manipulation of the argument lastid/eventid leads to sql injection. The attack may be initiated...

CVE-2024-5119 SourceCodester Event Registration System sql injection

A vulnerability was found in SourceCodester Event Registration System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php?f=loadregistration. The manipulation of the argument lastid/eventid leads to sql injection. The attack may be initiated...

CVE-2019-5119

creationtimestamp| type| source ---|---|--- 2024-01-29 09:11:11+00:00| seen| https://t.me/ctinow/175113...

CVE-2023-5119 Forminator and Forminator Pro < 1.27.0 - Admin+ Stored Cross-Site Scripting

The Forminator WordPress plugin before 1.27.0 does not properly sanitize the redirect-url field in the form submission settings, which could allow high-privilege users such as an administrator to inject arbitrary web scripts even when the unfilteredhtml capability is disallowed for example in a...