Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

45 matches found

NVD
NVD•added 2026/09/29 3:17 p.m.•15 views

CVE-2026-102570

ClipBucket v5 through 5.5.3-197 contains a time-based blind SQL injection vulnerability in the language update function where the languageid parameter is concatenated unescaped into the WHERE clause of an UPDATE statement. An authenticated administrator with basicsettings permission can inject...

7CVSS0.00237EPSS
SaveExploits0References5
EUVD
EUVD•added 2026/09/29 2:22 p.m.•14 views

EUVD-2026-88971

ClipBucket v5 through 5.5.3-197 contains a time-based blind SQL injection vulnerability in the language update function where the languageid parameter is concatenated unescaped into the WHERE clause of an UPDATE statement. An authenticated administrator with basicsettings permission can inject...

7CVSS6.1AI score0.00237EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies•added 2026/09/29 12:00 a.m.•10 views

PT-2026-102628

ClipBucket v5 through 5.5.3-197 contains a time-based blind SQL injection vulnerability in the language update function where the language id parameter is concatenated unescaped into the WHERE clause of an UPDATE statement. An authenticated administrator with basic settings permission can inject...

7CVSS6.1AI score0.00237EPSS
SaveExploits0References6
NVD
NVD•added 2026/08/17 4:16 a.m.•29 views

CVE-2026-19980

A security flaw has been discovered in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. Affected by this issue is the function ui.updatelangs of the component Language Update. Performing ...

7.4CVSS0.00393EPSS
SaveExploits0References5
EUVD
EUVD•added 2026/08/17 3:45 a.m.•31 views

EUVD-2026-60040

A security flaw has been discovered in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. Affected by this issue is the function ui.updatelangs of the component Language Update. Performing ...

7.4CVSS5.4AI score0.00393EPSS
SaveExploits0References5
Cvelist
Cvelist•added 2026/08/17 3:45 a.m.•59 views

CVE-2026-19980 GL.iNet XE3000 Language Update ui.update_langs code injection

A security flaw has been discovered in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. Affected by this issue is the function ui.updatelangs of the component Language Update. Performing ...

7.4CVSS0.00393EPSS
SaveExploits0References5
CVE
CVE•added 2026/08/17 3:45 a.m.•50 views

CVE-2026-19980

GL.iNet devices (A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000, XE3000) up to 4.8.x are affected by a vulnerability in the Language Update component (ui.update_langs). Manipulating the hour/min/week argument results ...

7.4CVSS6.8AI score0.00393EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment•added 2026/08/17 3:45 a.m.•18 views

CVE-2026-19980 GL.iNet XE3000 Language Update ui.update_langs code injection

A security flaw has been discovered in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. Affected by this issue is the function ui.updatelangs of the component Language Update. Performing ...

7.4CVSS6.8AI score0.00393EPSS
SaveExploits0References5
attackerkb
attackerkb•added 2026/08/17 3:45 a.m.•50 views

CVE-2026-19980

A security flaw has been discovered in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. Affected by this issue is the function ui.updatelangs of the component Language Update. Performing ...

7.4CVSS7.2AI score0.00393EPSS
SaveExploits0References6Affected Software17
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/17 12:00 a.m.•6 views

CVE-2026-19980: Improper Control of Generation of Code

A security flaw has been discovered in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. Affected by this issue is the function ui.updatelangs of the component Language Update. Performing ...

7.4CVSS6.8AI score0.00393EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/08/17 12:00 a.m.•26 views

PT-2026-73199

A security flaw has been discovered in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. Affected by this issue is the function ui.update langs of the component Language Update. Performing...

7.4CVSS7.2AI score0.00393EPSS
SaveExploits0References6
osv_mgasa
osv_mgasa•added 2026/07/20 7:06 p.m.•34 views

MGASA-2026-0285 Updated php8.4 and php8.5 packages fix security vulnerabilities

The updated php8.4 and php8.5 packages fix several security issues, e.g. Memory corruption zendmmheap corrupted in opensslencrypt with AES-WRAP-PAD. CVE-2026-14355...

5.6CVSS6.2AI score0.00279EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus•added 2026/07/16 12:00 a.m.•20 views

openSUSE 16 Security Update : go1.25-openssl (openSUSE-SU-2026:21319-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21319-1 advisory. This update for go1.25-openssl fixes the following issues - Update to version go1.25.12 bsc1244485. - CVE-2025-61732: cmd/cgo: discrepancy betwe...

10CVSS7AI score0.00915EPSS
SaveExploits1References94
Oracle linux
Oracle linux•added 2026/07/14 12:00 a.m.•22 views

git-lfs security update

3.4.1-12 - Rebuild with new Golang - Resolves: RHEL-187191...

7.5CVSS7.2AI score0.00813EPSS
SaveExploits0
osv_suse
osv_suse•added 2026/07/13 2:31 p.m.•25 views

SUSE-SU-2026:22643-1 Security update for go1.25

This update for go1.25 fixes the following issues - Update to version go1.25.12 bsc1244485. - CVE-2026-25679: net/url: reject IPv6 literal not at start of host bsc1259264. - CVE-2026-27139: os: FileInfo can escape from a Root bsc1259268. - CVE-2026-27142: html/template: URLs in meta content...

7.8CVSS6.7AI score0.00834EPSS
SaveExploits0References14
Oracle linux
Oracle linux•added 2026/06/26 12:00 a.m.•22 views

golang security, bug fix, and enhancement update

1.26.4-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.4-1 - Update to Go 1.26.4 fips-1 - Resolves: RHEL-183349...

5.3CVSS6.8AI score0.00412EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus•added 2026/06/23 12:00 a.m.•22 views

Oracle Linux 9 : buildah (ELSA-2026-19186)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19186 advisory. - fixes CVE-2026-34986 - Rebuild for new golang to address CVE-2025-61726 Tenable has extracted the preceding description block directly from the Oracle Linux...

7.5CVSS6.6AI score0.02326EPSS
SaveExploits0References2
osv_opensuse
osv_opensuse•added 2026/06/17 8:37 a.m.•15 views

OPENSUSE-SU-2026:20977-1 Security update for go1.25

This update for go1.25 fixes the following issues Update to go1.25.11 bsc1244485: - CVE-2026-27145: crypto/x509: split candidate hostname only once bsc1267450. - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader bsc1267442. - CVE-2026-42507: net/textproto: arbitrary input are...

7.5CVSS6.7AI score0.00591EPSS
SaveExploits0References9
osv_suse
osv_suse•added 2026/06/09 7:05 p.m.•28 views

SUSE-SU-2026:2326-1 Security update for go1.25

This update for go1.25 fixes the following issues Update to go1.25.11 bsc1244485: - CVE-2026-27145: crypto/x509: split candidate hostname only once bsc1267450. - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader bsc1267442. - CVE-2026-42507: net/textproto: arbitrary input are...

7.5CVSS6.7AI score0.00591EPSS
SaveExploits0References8
osv_clsa
osv_clsa•added 2026/05/13 10:06 a.m.•59 views

CLSA-2025-1762538558 containernetworking-plugins: Fix of 13 CVEs

rebuild with newer golang to fix multiple security vulnerabilities: - CVE-2023-24534: fix HTTP/2 rapid reset attack leading to denial of service - CVE-2023-29400: fix HTTP/2 frame processing panic leading to denial of service - CVE-2022-41725: fix HTTP/2 server connection handling causing...

9.8CVSS6.5AI score0.04561EPSS
SaveExploits0References1
Rows per page
Query Builder