Vuldb Updates

A vulnerability marked as problematic has been reported in Netgear WNR2000 up to 1.2.3.7. Affected by this vulnerability is an unknown functionality of the component Firmware Handler. Performing a manipulation results in denial of service. This vulnerability is identified as CVE-2022-46422. The attack can be initiated remotely. There is not any exploit available.

A vulnerability identified as problematic has been detected in Parrot Bebop 4.7.1. This affects an unknown part of the component DHCP Address Pool Handler. This manipulation causes resource consumption. The identification of this vulnerability is CVE-2022-46416. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability categorized as problematic has been discovered in DJI Spark 01.00.0900. Affected by this issue is some unknown functionality of the component DHCP Address Pool Handler. The manipulation results in resource consumption. This vulnerability was named CVE-2022-46415. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in jbardin scp.py up to 0.16.1. It has been rated as problematic. The impacted element is the function _recv_file/_recv_pushd of the component SCP Receive Handler. The manipulation leads to path traversal. This vulnerability is referenced as CVE-2026-109152. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

A vulnerability categorized as very critical has been discovered in Siemens Ruggedcom Crossbow up to 5.x. This vulnerability affects unknown code. Such manipulation leads to improper authorization. This vulnerability is referenced as CVE-2026-89205. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability classified as problematic was found in Siemens Ruggedcom Crossbow up to 5.x. This impacts an unknown function. Such manipulation of the argument Name/Value leads to sql injection. This vulnerability is documented as CVE-2026-89200. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability classified as problematic was found in EIPStackGroup OpENer 2.3. This impacts the function ForwardOpen connection-path parser of the component EtherNet/IP ForwardOpen connection-path parser. Executing a manipulation can lead to integer underflow. This vulnerability is handled as CVE-2026-75352. The attack can be executed remotely. There is not any exploit available. It is advisable to implement a patch to correct this issue.

A vulnerability described as problematic has been identified in PublicCMS up to 5.202608.a. Affected by this issue is the function SafeConfigComponent.getSafeUrl of the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java of the component pay Endpoint. Executing a manipulation of the argument returnUrl can lead to open redirect. This vulnerability is registered as CVE-2026-109160. It is possible to launch the attack remotely. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability marked as very critical has been reported in Veritas NetBackup Flex Scale and Access Appliance. Affected is an unknown function of the component Management Portal. Performing a manipulation results in Remote Code Execution. This vulnerability is known as CVE-2022-46414. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability labeled as very critical has been found in Veritas NetBackup Flex Scale and Access Appliance. This impacts an unknown function of the component Management Portal. Such manipulation leads to privilege escalation. This vulnerability is traded as CVE-2022-46413. The attack may be launched remotely. There is no exploit available.

A vulnerability described as critical has been identified in Veritas NetBackup Flex Scale up to 3.0. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to sandbox issue. This vulnerability is handled as CVE-2022-46412. The attack can be executed remotely. There is not any exploit available.

A vulnerability categorized as critical has been discovered in Document Foundation LibreOffice up to 26.2.4. Impacted is an unknown function of the component PICT Image Handler. The manipulation results in out-of-bounds read. This vulnerability is reported as CVE-2026-63279. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability was found in Document Foundation LibreOffice up to 26.2.4. It has been rated as critical. This issue affects some unknown processing of the component Font Conversion. The manipulation leads to stack-based buffer overflow. This vulnerability is documented as CVE-2026-63276. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability classified as critical was found in Document Foundation LibreOffice up to 26.2.4. Affected by this vulnerability is an unknown functionality. The manipulation results in stack-based buffer overflow. This vulnerability was named CVE-2026-63275. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in Document Foundation LibreOffice up to 26.2.4. Affected is an unknown function. The manipulation leads to heap-based buffer overflow. This vulnerability is uniquely identified as CVE-2026-63273. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability marked as critical has been reported in Document Foundation LibreOffice up to 26.2.4. This affects an unknown function. Performing a manipulation results in heap-based buffer overflow. This vulnerability is known as CVE-2026-63272. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 7.2.3. It has been declared as very critical. Affected is the function nfsd4_end_grace of the component nfsd. Executing a manipulation of the argument grace_ended can lead to double free. This vulnerability appears as CVE-2026-93221. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability classified as very critical has been found in Linux Kernel up to 7.2.3. This impacts the function send_signal_locked of the component signal. This manipulation causes race condition. The identification of this vulnerability is CVE-2026-93222. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 7.2.3 and classified as critical. Affected by this vulnerability is the function kick_sync_wait_bal_cb of the component sched_ext. Executing a manipulation can lead to deadlock. This vulnerability is registered as CVE-2026-93220. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 7.2.3 and classified as problematic. This affects the function sun4i_clkevt_next_event of the file drivers/timer-sun4i.c of the component timer-sun4i driver. Such manipulation leads to improper synchronization. This vulnerability is documented as CVE-2026-93219. The attack needs to be performed locally. There is not any exploit available. It is suggested to upgrade the affected component.