Aggregator

Submit #842579 / VDB-374551

A vulnerability was found in GitBucket up to 4.46.1. It has been classified as critical. This affects the function Git.cloneRepository.setURI of the file src/main/scala/gitbucket/core/service/RepositoryCreationService.scala. Performing a manipulation of the argument url results in server-side request forgery. This vulnerability is reported as CVE-2026-13540. The attack is possible to be carried out remotely. Moreover, an exploit is present. To fix this issue, it is recommended to deploy a patch.

Submit #842051 / VDB-374550

Submit #842050 / VDB-374549

A vulnerability was found in Wavlink WL-NU516U1-A M16U1_V240425 and classified as critical. The impacted element is the function sub_407504 of the file /cgi-bin/wireless.cgi of the component POST Parameter Handler. Such manipulation of the argument Guest_ssid leads to stack-based buffer overflow. This vulnerability is documented as CVE-2026-13539. The attack can be executed remotely. Additionally, an exploit exists. It is suggested to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

A vulnerability has been found in Wavlink WL-NU516U1-A M16U1_V240425 and classified as critical. The affected element is the function sub_401D68 of the file /cgi-bin/wireless.cgi of the component POST Parameter Handler. This manipulation of the argument SSID2G2/SSID5G2/AuthMethod2/WPAPSK12 causes command injection. This vulnerability is registered as CVE-2026-13538. Remote exploitation of the attack is possible. Furthermore, an exploit is available. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Submit #836108 / VDB-374548

Submit #834024 / VDB-374547

Submit #834023 / VDB-374546

Submit #834022 / VDB-374546

Submit #834021 / VDB-374546

Submit #834019 / VDB-374546

Submit #834002 / VDB-320528

随着超级热浪席卷整个欧洲大陆，当地空调设备迎来销售热潮。日前，法国西部气温升至43℃，创下法国有记录以来，六月份最高气温；英格兰西南部地区 6月25日气温达到36.7℃，创下英国6月份最高气温纪录；2

A vulnerability labeled as problematic has been found in mb Support openVIVA. The impacted element is an unknown function of the component Vorgang Handler. The manipulation of the argument Name/Hauptverantwortlicher results in cross site scripting. This vulnerability is cataloged as CVE-2022-39172. The attack may be launched remotely. Furthermore, there is an exploit available. The affected component should be upgraded.

A vulnerability labeled as critical has been found in Plone CMS 3.x. This affects an unknown part. The manipulation results in credentials management. This vulnerability is cataloged as CVE-2008-1396. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Siemens RUGGEDCOM ROS RMC8388, RUGGEDCOM ROS RS416Pv2, RUGGEDCOM ROS RS416v2, RUGGEDCOM ROS RS900, RUGGEDCOM ROS RS900G, RUGGEDCOM ROS RSG2100, RUGGEDCOM ROS RSG2288, RUGGEDCOM ROS RSG2300, RUGGEDCOM ROS RSG2300P, RUGGEDCOM ROS RSG2488, RUGGEDCOM ROS RSG907R, RUGGEDCOM ROS RSG908C, RUGGEDCOM ROS RSG909R, RUGGEDCOM ROS RSG910C, RUGGEDCOM ROS RSG920P, RUGGEDCOM ROS RSL910, RUGGEDCOM ROS RST2228, RUGGEDCOM ROS RST2228P, RUGGEDCOM ROS RST916C and RUGGEDCOM ROS RST916P up to 5.5.x. This affects an unknown part of the component HTTP Request Handler. Such manipulation leads to resource consumption. This vulnerability is traded as CVE-2022-39158. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability labeled as problematic has been found in Siemens Parasolid. This impacts an unknown function of the component X_T File Handler. The manipulation results in out-of-bounds read. This vulnerability is known as CVE-2022-39157. Access to the local network is required for this attack. No exploit is available. The affected component should be upgraded.

A vulnerability classified as problematic has been found in Ignition. This affects an unknown part. The manipulation leads to information disclosure. This vulnerability is listed as CVE-2022-1706. The attack must be carried out from within the local network. There is no available exploit. Applying a patch is the recommended action to fix this issue.