Lucene search
+L

10144 matches found

CVE
CVE
added 6 days ago52 views

CVE-2026-15337

Technical details are not publicly available in the provided documents. Monitor for updates.

6.9CVSS5.4AI score0.00521EPSS
SaveExploits0References7
Cvelist
Cvelist
added 6 days ago33 views

CVE-2026-15337 Potential denial-of-service vulnerability in check_for_language()

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...

6.9CVSS0.00521EPSS
SaveExploits0References7
CVE
CVE
added 6 days ago55 views

CVE-2025-29296

H3C devices listed (BE18000 V200R007, NX400 V100R015, NX30 Pro V100R0011, R3010 V100R009, NX15 V100R017, R1510 V100R016, NE36 Pro V100R002) expose multiple command injection flaws in the /api/esps handler. Vulnerable interfaces include esps.dhcpd.vlan (getlist, delete), esps.filter.url (add, modi...

9.8CVSS6AI score0.0224EPSS
SaveExploits0References2
Amazon
Amazon
added 6 days ago6 views

Important: runfinch-finch

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

7.8CVSS7.8AI score0.00447EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 6 days ago10 views

CVE-2025-29296

H3C Magic BE18000 V200R007, H3C NX400 V100R015, H3C Magic NX30 Pro V100R0011, H3C Magic R3010 V100R009, H3C Magic NX15 V100R017, H3C Magic R1510 V100R016, H3C NE36 Pro V100R002 and H3C MC102G HM1A0V200R010 contain multiple command injection vulnerabilities in the /api/esps request handler. The...

9.8CVSS6AI score0.0224EPSS
SaveExploits0References3
CVE
CVE
added last week53 views

CVE-2026-18685

CVE-2026-18685 affects GL.iNet GL-MT3000 devices up to firmware 4.4.5, specifically the function set_upgrade in /cgi-bin/glc of the component modem.so. The issue enables remote command injection due to the underlying vulnerability; attack vector is network with no authentication and no user inter...

10CVSS7.2AI score0.01989EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added last week10 views

CVE-2026-18685

A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the function setupgrade of the file /cgi-bin/glc of the component modem.so. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly...

10CVSS7.2AI score0.01989EPSS
SaveExploits0References5Affected Software1
Patchstack
Patchstack
added last week9 views

NPM: undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields

NPM: undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields vulnerability discovered by ? in WordPress Npm undici versions 6.28.0...

6.5CVSS7.2AI score0.00167EPSS
SaveExploits0References10Affected Software1
EUVD
EUVD
added last week8 views

EUVD-2026-50409

undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives...

7.4CVSS7.2AI score0.00325EPSS
SaveExploits0References6
Cvelist
Cvelist
added last week44 views

CVE-2026-18616 GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection

A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. The impacted element is the function server.setpeer of the file /cgi-bin/glc of the component wg-server.so Native Plugin. The manipulation of the argument publickey leads to command injection. Remote exploitation of the attack is...

10CVSS0.01989EPSS
SaveExploits0References5
NVD
NVD
added last week13 views

CVE-2026-18613

A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5. This issue affects the function plugins.setconfig of the file /cgi-bin/glc of the component plugins.so Native Plugin. Such manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the...

10CVSS0.00548EPSS
SaveExploits0References5
CVE
CVE
added last week37 views

CVE-2026-18613

GL-iNet GL-MT3000 (firmware up to 4.4.5) is affected by a vulnerability in the plugins.so Native Plugin: the function plugins.set_config in /cgi-bin/glc can be manipulated to cause injection. The attack is remote and publicly disclosed; vendor awareness confirmed. No remediation details are provi...

10CVSS7.1AI score0.00548EPSS
SaveExploits0References5
Cvelist
Cvelist
added last week44 views

CVE-2026-18613 GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection

A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5. This issue affects the function plugins.setconfig of the file /cgi-bin/glc of the component plugins.so Native Plugin. Such manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the...

10CVSS0.00548EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added last week11 views

CVE-2026-64827

Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an authentication bypass vulnerability in setenv.php where the redirectToLoginAdminIRequestHaveAccessToken function derives the current page name from PHPSELF and skips authentication when the value...

9.8CVSS5.5AI score0.00435EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2026/08/03 6:16 a.m.12 views

CVE-2026-18583

A weakness has been identified in mz-automation libiec61850 up to 1.6.1. This issue affects the function checkDataSetAccess of the file src/iec61850/server/mmsmapping/mmsmapping.c of the component MMS Request Handler. This manipulation causes out-of-bounds read. The attack can be initiated...

6.9CVSS0.00496EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2026/08/03 4:15 a.m.48 views

CVE-2026-18583 mz-automation libiec61850 MMS Request mms_mapping.c checkDataSetAccess out-of-bounds

A weakness has been identified in mz-automation libiec61850 up to 1.6.1. This issue affects the function checkDataSetAccess of the file src/iec61850/server/mmsmapping/mmsmapping.c of the component MMS Request Handler. This manipulation causes out-of-bounds read. The attack can be initiated...

6.9CVSS0.00496EPSS
SaveExploits0References9
Snyk
Snyk
added 2026/08/03 3:53 a.m.8 views

Excessive Iteration

Overview Affected versions of this package are vulnerable to Excessive Iteration in the HashRatchet.getint generation method of GroupKeySet, reached through PrivateMessage.unprotect, which loops while nextGeneration generation next; and caches every intermediate KeyGeneration in an unbounded...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.4 views

Excessive Iteration

Overview Affected versions of this package are vulnerable to Excessive Iteration in the HashRatchet.getint generation method of GroupKeySet, reached through PrivateMessage.unprotect, which loops while nextGeneration generation next; and caches every intermediate KeyGeneration in an unbounded...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/03 12:0 a.m.40 views

CVE-2026-67970

Incorrect access control in the DSSetDestPathCmd component of NASA cFS v7.0.1 allows attackers to access sensitive components via a path traversal...

0.00232EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/03 12:0 a.m.14 views

PT-2026-67453

A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5. This issue affects the function plugins.set config of the file /cgi-bin/glc of the component plugins.so Native Plugin. Such manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the...

10CVSS7.1AI score0.00548EPSS
SaveExploits0References6
Rows per page
Query Builder