Vuldb Updates

A vulnerability identified as problematic has been detected in sindresorhus file-type up to 21.3.0. The affected element is an unknown function of the component WMV/WMA. This manipulation causes infinite loop. This vulnerability is handled as CVE-2026-31808. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability labeled as critical has been found in Adobe Acrobat Reader up to 24.001.30307/24.001.30308/25.001.21265. The impacted element is an unknown function of the component Security Feature. Such manipulation leads to improper certificate validation. This vulnerability is uniquely identified as CVE-2026-27221. The attack can be launched remotely. No exploit exists. The affected component should be upgraded.

A vulnerability categorized as problematic has been discovered in SiYuan up to 3.5.9. This affects an unknown function of the file /api/icon/getDynamicIcon of the component Endpoint. Such manipulation leads to cross site scripting. This vulnerability is traded as CVE-2026-31807. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability identified as problematic has been detected in SiYuan up to 3.5.9. This impacts the function HasPrefix of the file /api/icon/getDynamicIcon. Performing a manipulation results in cross site scripting. This vulnerability is known as CVE-2026-31809. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

A vulnerability was found in parse-community parse-server up to 8.6.22/9.0.0 9.5.2-alpha.9 and classified as problematic. Affected is an unknown function of the component Batch Request Endpoint. Such manipulation leads to improper control of interaction frequency. This vulnerability is listed as CVE-2026-30972. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability marked as critical has been reported in parse-community parse-server up to 8.6.21/9.0.0 9.5.2-alpha.8. The affected element is an unknown function. Performing a manipulation results in improper authentication. This vulnerability is known as CVE-2026-30967. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability described as critical has been identified in parse-community parse-server up to 8.6.24/9.0.0 9.5.2-alpha.11. The impacted element is an unknown function. Executing a manipulation can lead to missing authorization. This vulnerability is handled as CVE-2026-31800. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability classified as critical has been found in parse-community parse-server up to 8.6.19/9.0.0 9.5.2-alpha.6. This affects an unknown function of the component Delete Record Handler. The manipulation leads to improper access controls. This vulnerability is uniquely identified as CVE-2026-30966. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Kovah LinkAce up to 2.1.0. The affected element is the function processTaxonomy of the file LinkRepository.php. Executing a manipulation can lead to authorization bypass. The identification of this vulnerability is CVE-2026-30954. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in Google Android. The impacted element is an unknown function. The manipulation leads to out-of-bounds write. This vulnerability is referenced as CVE-2026-0122. The attack can only be performed from a local environment. No exploit is available. It is suggested to install a patch to address this issue.

A vulnerability has been found in parse-community parse-server up to 8.6.18/9.0.0 9.5.2-alpha.5 and classified as critical. This impacts an unknown function. This manipulation causes improper access controls. This vulnerability is tracked as CVE-2026-30962. The attack is possible to be carried out remotely. No exploit exists. The affected component should be upgraded.

A vulnerability labeled as critical has been found in parse-community parse-server up to 8.6.20/9.0.0 9.5.2-alpha.7. Impacted is the function redirectClassNameForKey of the component Query Parameter Handler. Such manipulation leads to incorrect authorization. This vulnerability is traded as CVE-2026-30965. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability classified as problematic was found in parse-community parse-server up to 8.6.15/9.0.0 9.5.2-alpha.2. This impacts an unknown function. The manipulation results in incorrect authorization. This vulnerability was named CVE-2026-30947. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in parse-community parse-server up to 8.6.17/9.0.0 9.5.2-alpha.4. Affected is an unknown function. This manipulation causes improper authentication. The identification of this vulnerability is CVE-2026-30949. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Google Android. It has been classified as critical. The affected element is the function EfwApTransport::ProcessRxRing of the file efw_ap_transport.cc. This manipulation causes out-of-bounds write. This vulnerability is tracked as CVE-2026-0123. The attack is restricted to local execution. No exploit exists. It is suggested to install a patch to address this issue.

A vulnerability was found in Google Android. It has been rated as critical. This affects an unknown function. Performing a manipulation results in out-of-bounds write. This vulnerability is cataloged as CVE-2026-0124. It is possible to initiate the attack remotely. There is no exploit available. To fix this issue, it is recommended to deploy a patch.

A vulnerability identified as problematic has been detected in parse-community parse-server up to 8.6.16/9.0.0 9.5.2-alpha.3. Affected is an unknown function of the component SVG File Parser. The manipulation leads to cross site scripting. This vulnerability is documented as CVE-2026-30948. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability identified as critical has been detected in gtsteffaniak filebrowser. This impacts an unknown function of the file /public/api/share/info. This manipulation causes missing authentication. This vulnerability is tracked as CVE-2026-30933. The attack is possible to be carried out remotely. No exploit exists. It is suggested to install a patch to address this issue.

A vulnerability identified as critical has been detected in powersync-ja powersync-service, service-core and service-sync-rules. This issue affects some unknown processing of the component PowerSync Service. The manipulation leads to improper authorization. This vulnerability is referenced as CVE-2026-30870. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

A vulnerability was found in CODESYS Installer. It has been classified as critical. This vulnerability affects unknown code. Performing a manipulation results in time-of-check time-of-use. This vulnerability is known as CVE-2026-2364. Attacking locally is a requirement. No exploit is available. Upgrading the affected component is recommended.