diff --git a/data/2026/107xxx/CVE-2026-107407.json b/data/2026/107xxx/CVE-2026-107407.json new file mode 100644 index 0000000000..9d6c0afca2 --- /dev/null +++ b/data/2026/107xxx/CVE-2026-107407.json @@ -0,0 +1,135 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-107407", + "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "state": "PUBLISHED", + "assignerShortName": "NetScaler", + "dateReserved": "2026-10-08T00:18:26.021Z", + "datePublished": "2026-11-13T02:01:33.369Z", + "dateUpdated": "2026-11-13T02:01:33.369Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "shortName": "NetScaler", + "dateUpdated": "2026-11-13T02:01:33.369Z" + }, + "title": "Memory overflow in SMPP traffic can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway", + "datePublic": "2026-11-12T23:05:00.000Z", + "affected": [ + { + "vendor": "Citrix NetScaler", + "product": "ADC", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.58 FIPS", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-37.293 FIPs and NDcPP", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Citrix NetScaler", + "product": "Gateway", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Memory overflow in SMPP traffic can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Memory overflow in SMPP traffic can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway." + } + ] + } + ], + "references": [ + { + "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "LOW", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "CRITICAL", + "baseScore": 9.3, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/107xxx/CVE-2026-107408.json b/data/2026/107xxx/CVE-2026-107408.json new file mode 100644 index 0000000000..f3731ced61 --- /dev/null +++ b/data/2026/107xxx/CVE-2026-107408.json @@ -0,0 +1,135 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-107408", + "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "state": "PUBLISHED", + "assignerShortName": "NetScaler", + "dateReserved": "2026-10-08T00:18:26.021Z", + "datePublished": "2026-11-13T02:04:05.605Z", + "dateUpdated": "2026-11-13T02:04:05.605Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "shortName": "NetScaler", + "dateUpdated": "2026-11-13T02:04:05.605Z" + }, + "title": "Memory corruption in DNS / DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway", + "datePublic": "2026-11-12T23:05:00.000Z", + "affected": [ + { + "vendor": "Citrix NetScaler", + "product": "ADC", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.58 FIPS", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-37.293 FIPs and NDcPP", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Citrix NetScaler", + "product": "Gateway", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Memory corruption in DNS / DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Memory corruption in DNS / DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway." + } + ] + } + ], + "references": [ + { + "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "LOW", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "CRITICAL", + "baseScore": 9.3, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/107xxx/CVE-2026-107409.json b/data/2026/107xxx/CVE-2026-107409.json new file mode 100644 index 0000000000..b7650ac52a --- /dev/null +++ b/data/2026/107xxx/CVE-2026-107409.json @@ -0,0 +1,135 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-107409", + "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "state": "PUBLISHED", + "assignerShortName": "NetScaler", + "dateReserved": "2026-10-08T00:18:26.021Z", + "datePublished": "2026-11-13T02:05:45.195Z", + "dateUpdated": "2026-11-13T02:05:45.195Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "shortName": "NetScaler", + "dateUpdated": "2026-11-13T02:05:45.195Z" + }, + "title": "Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a Denial of Service in NetScaler ADC and NetScaler Gateway", + "datePublic": "2026-11-12T23:05:00.000Z", + "affected": [ + { + "vendor": "Citrix NetScaler", + "product": "ADC", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.58 FIPS", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-37.293 FIPs and NDcPP", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Citrix NetScaler", + "product": "Gateway", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a Denial of Service in NetScaler ADC and NetScaler Gateway.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a Denial of Service in NetScaler ADC and NetScaler Gateway." + } + ] + } + ], + "references": [ + { + "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "CRITICAL", + "baseScore": 9.3, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/107xxx/CVE-2026-107410.json b/data/2026/107xxx/CVE-2026-107410.json new file mode 100644 index 0000000000..683db56cdf --- /dev/null +++ b/data/2026/107xxx/CVE-2026-107410.json @@ -0,0 +1,135 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-107410", + "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "state": "PUBLISHED", + "assignerShortName": "NetScaler", + "dateReserved": "2026-10-08T00:18:26.021Z", + "datePublished": "2026-11-13T02:10:10.553Z", + "dateUpdated": "2026-11-13T02:10:10.553Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "shortName": "NetScaler", + "dateUpdated": "2026-11-13T02:10:10.553Z" + }, + "title": "Memory overflow in NetScaler Push can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway", + "datePublic": "2026-11-12T23:05:00.000Z", + "affected": [ + { + "vendor": "Citrix NetScaler", + "product": "ADC", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.58 FIPS", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-37.293 FIPs and NDcPP", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Citrix NetScaler", + "product": "Gateway", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Memory overflow in NetScaler Push can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Memory overflow in NetScaler Push can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway." + } + ] + } + ], + "references": [ + { + "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "LOW", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "CRITICAL", + "baseScore": 9.3, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/127xxx/CVE-2026-127281.json b/data/2026/127xxx/CVE-2026-127281.json new file mode 100644 index 0000000000..21758fa885 --- /dev/null +++ b/data/2026/127xxx/CVE-2026-127281.json @@ -0,0 +1,172 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-127281", + "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", + "state": "PUBLISHED", + "assignerShortName": "VulDB", + "dateReserved": "2026-11-12T17:34:34.329Z", + "datePublished": "2026-11-13T01:15:20.637Z", + "dateUpdated": "2026-11-13T01:15:20.637Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", + "shortName": "VulDB", + "dateUpdated": "2026-11-13T01:15:20.637Z" + }, + "title": "lanyulei ferry JWT Validation auth.go improper authentication", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-287", + "lang": "en", + "description": "Improper Authentication" + } + ] + } + ], + "affected": [ + { + "vendor": "lanyulei", + "product": "ferry", + "versions": [ + { + "version": "1.0.0", + "status": "affected" + }, + { + "version": "1.0.0-beta.1", + "status": "affected" + } + ], + "cpes": [ + "cpe:2.3:a:lanyulei:ferry:*:*:*:*:*:*:*:*" + ], + "modules": [ + "JWT Validation" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was found in lanyulei ferry 1.0.0-beta.1/1.0.0. Affected is an unknown function of the file middleware/auth.go of the component JWT Validation. The manipulation results in improper authentication. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": [ + { + "cvssV4_0": { + "version": "4.0", + "baseScore": 6.9, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", + "baseSeverity": "MEDIUM" + } + }, + { + "cvssV3_1": { + "version": "3.1", + "baseScore": 7.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C", + "baseSeverity": "HIGH" + } + }, + { + "cvssV3_0": { + "version": "3.0", + "baseScore": 7.3, + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C", + "baseSeverity": "HIGH" + } + }, + { + "cvssV2_0": { + "version": "2.0", + "baseScore": 7.5, + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C" + } + } + ], + "timeline": [ + { + "time": "2026-11-12T00:00:00.000Z", + "lang": "en", + "value": "Advisory disclosed" + }, + { + "time": "2026-11-12T01:00:00.000Z", + "lang": "en", + "value": "VulDB entry created" + }, + { + "time": "2026-11-12T18:39:50.000Z", + "lang": "en", + "value": "VulDB entry last update" + } + ], + "credits": [ + { + "lang": "en", + "value": "liumiya (VulDB User)", + "type": "reporter" + }, + { + "lang": "en", + "value": "VulDB CNA Team", + "type": "coordinator" + } + ], + "references": [ + { + "url": "https://vuldb.com/vuln/436447", + "name": "VDB-436447 | lanyulei ferry JWT Validation auth.go improper authentication", + "tags": [ + "vdb-entry" + ] + }, + { + "url": "https://vuldb.com/vuln/436447/cti", + "name": "VDB-436447 | CTI Indicators (IOB, IOC, IOA)", + "tags": [ + "signature", + "permissions-required" + ] + }, + { + "url": "https://vuldb.com/cve/CVE-2026-127281", + "name": "CVE-2026-127281 | CVE Analysis and Report", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://vuldb.com/submit/1041008", + "name": "Submit #1041008 | lanyulei ferry <= 1.0.0 JWT Empty Secret Authentication Bypass", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://vuldb.com/submit/1041009", + "name": "Submit #1041009 | lanyulei ferry <= 1.0.0 Authentication Bypass by Primary Weakness (Duplicate)", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://github.com/liumiya63-arch/CVE/blob/main/ferry-CVE-en-20261018/CVE-ferry-jwt-auth-bypass.md", + "tags": [ + "exploit" + ] + } + ], + "x_generator": [ + "VulDB PVTS v202611" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/127xxx/CVE-2026-127282.json b/data/2026/127xxx/CVE-2026-127282.json new file mode 100644 index 0000000000..41a5e0b0cb --- /dev/null +++ b/data/2026/127xxx/CVE-2026-127282.json @@ -0,0 +1,173 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-127282", + "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", + "state": "PUBLISHED", + "assignerShortName": "VulDB", + "dateReserved": "2026-11-12T17:38:41.488Z", + "datePublished": "2026-11-13T01:30:27.919Z", + "dateUpdated": "2026-11-13T01:30:27.919Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", + "shortName": "VulDB", + "dateUpdated": "2026-11-13T01:30:27.919Z" + }, + "title": "SourceCodester Smart Attendance System with QR Code Scanner reset_password.php cross site scripting", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-79", + "lang": "en", + "description": "Cross Site Scripting" + } + ] + }, + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-94", + "lang": "en", + "description": "Code Injection" + } + ] + } + ], + "affected": [ + { + "vendor": "SourceCodester", + "product": "Smart Attendance System with QR Code Scanner", + "versions": [ + { + "version": "1.0", + "status": "affected" + } + ], + "cpes": [ + "cpe:2.3:a:sourcecodester:smart_attendance_system_with_qr_code_scanner:*:*:*:*:*:*:*:*" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was determined in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected by this vulnerability is an unknown functionality of the file reset_password.php. This manipulation of the argument Username causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized." + } + ], + "metrics": [ + { + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.3, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P", + "baseSeverity": "MEDIUM" + } + }, + { + "cvssV3_1": { + "version": "3.1", + "baseScore": 4.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C", + "baseSeverity": "MEDIUM" + } + }, + { + "cvssV3_0": { + "version": "3.0", + "baseScore": 4.3, + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C", + "baseSeverity": "MEDIUM" + } + }, + { + "cvssV2_0": { + "version": "2.0", + "baseScore": 5, + "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:C" + } + } + ], + "timeline": [ + { + "time": "2026-11-12T00:00:00.000Z", + "lang": "en", + "value": "Advisory disclosed" + }, + { + "time": "2026-11-12T01:00:00.000Z", + "lang": "en", + "value": "VulDB entry created" + }, + { + "time": "2026-11-12T18:43:55.000Z", + "lang": "en", + "value": "VulDB entry last update" + } + ], + "credits": [ + { + "lang": "en", + "value": "yuechuya (VulDB User)", + "type": "reporter" + } + ], + "references": [ + { + "url": "https://vuldb.com/vuln/436448", + "name": "VDB-436448 | SourceCodester Smart Attendance System with QR Code Scanner reset_password.php cross site scripting", + "tags": [ + "vdb-entry", + "technical-description" + ] + }, + { + "url": "https://vuldb.com/vuln/436448/cti", + "name": "VDB-436448 | CTI Indicators (IOB, IOC, TTP, IOA)", + "tags": [ + "signature", + "permissions-required" + ] + }, + { + "url": "https://vuldb.com/cve/CVE-2026-127282", + "name": "CVE-2026-127282 | CVE Analysis and Report", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://vuldb.com/submit/1041018", + "name": "Submit #1041018 | SourceCodester Smart Attendance System with QR Code Scanner 1.0 Cross Site Scripting", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://github.com/yuechuya/sourcecodester-vuln-reports/blob/main/reports/VULN-07-Reflected-XSS-ResetPassword.md", + "tags": [ + "exploit" + ] + }, + { + "url": "https://www.sourcecodester.com/", + "tags": [ + "product" + ] + } + ], + "tags": [ + "x_freeware" + ], + "x_generator": [ + "VulDB PVTS v202611" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/127xxx/CVE-2026-127283.json b/data/2026/127xxx/CVE-2026-127283.json new file mode 100644 index 0000000000..66935fed01 --- /dev/null +++ b/data/2026/127xxx/CVE-2026-127283.json @@ -0,0 +1,177 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-127283", + "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", + "state": "PUBLISHED", + "assignerShortName": "VulDB", + "dateReserved": "2026-11-12T17:38:45.352Z", + "datePublished": "2026-11-13T01:45:20.555Z", + "dateUpdated": "2026-11-13T01:45:20.555Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", + "shortName": "VulDB", + "dateUpdated": "2026-11-13T01:45:20.555Z" + }, + "title": "SourceCodester Food Ordering System Admin Image update_food.php unrestricted upload", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-434", + "lang": "en", + "description": "Unrestricted Upload" + } + ] + }, + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-284", + "lang": "en", + "description": "Improper Access Controls" + } + ] + } + ], + "affected": [ + { + "vendor": "SourceCodester", + "product": "Food Ordering System", + "versions": [ + { + "version": "1.0", + "status": "affected" + } + ], + "cpes": [ + "cpe:2.3:a:sourcecodester:food_ordering_system:*:*:*:*:*:*:*:*" + ], + "modules": [ + "Admin Image Handler" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was identified in SourceCodester Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file admin/update_food.php of the component Admin Image Handler. Such manipulation of the argument cmd leads to unrestricted upload. The attack may be performed from remote. The exploit is publicly available and might be used." + } + ], + "metrics": [ + { + "cvssV4_0": { + "version": "4.0", + "baseScore": 6.9, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", + "baseSeverity": "MEDIUM" + } + }, + { + "cvssV3_1": { + "version": "3.1", + "baseScore": 7.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C", + "baseSeverity": "HIGH" + } + }, + { + "cvssV3_0": { + "version": "3.0", + "baseScore": 7.3, + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C", + "baseSeverity": "HIGH" + } + }, + { + "cvssV2_0": { + "version": "2.0", + "baseScore": 7.5, + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C" + } + } + ], + "timeline": [ + { + "time": "2026-11-12T00:00:00.000Z", + "lang": "en", + "value": "Advisory disclosed" + }, + { + "time": "2026-11-12T01:00:00.000Z", + "lang": "en", + "value": "VulDB entry created" + }, + { + "time": "2026-11-12T18:44:07.000Z", + "lang": "en", + "value": "VulDB entry last update" + } + ], + "credits": [ + { + "lang": "en", + "value": "yuechuya (VulDB User)", + "type": "reporter" + } + ], + "references": [ + { + "url": "https://vuldb.com/vuln/436449", + "name": "VDB-436449 | SourceCodester Food Ordering System Admin Image update_food.php unrestricted upload", + "tags": [ + "vdb-entry", + "technical-description" + ] + }, + { + "url": "https://vuldb.com/vuln/436449/cti", + "name": "VDB-436449 | CTI Indicators (IOB, IOC, TTP, IOA)", + "tags": [ + "signature", + "permissions-required" + ] + }, + { + "url": "https://vuldb.com/cve/CVE-2026-127283", + "name": "CVE-2026-127283 | CVE Analysis and Report", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://vuldb.com/submit/1041048", + "name": "Submit #1041048 | SourceCodester Food Ordering System in PHP and MySQL 1.0 Unrestricted File Upload Leading to Remote Code Execution", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://github.com/yuechuya/sourcecodester-vuln-reports/blob/main/reports/Food-Ordering-System/VULN-F1-Unauth-File-Upload-RCE.md", + "tags": [ + "broken-link", + "exploit" + ] + }, + { + "url": "https://www.sourcecodester.com/", + "tags": [ + "product" + ] + } + ], + "tags": [ + "x_freeware" + ], + "x_generator": [ + "VulDB PVTS v202611" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/127xxx/CVE-2026-127284.json b/data/2026/127xxx/CVE-2026-127284.json new file mode 100644 index 0000000000..b3979e654f --- /dev/null +++ b/data/2026/127xxx/CVE-2026-127284.json @@ -0,0 +1,177 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-127284", + "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", + "state": "PUBLISHED", + "assignerShortName": "VulDB", + "dateReserved": "2026-11-12T17:38:49.084Z", + "datePublished": "2026-11-13T02:00:26.141Z", + "dateUpdated": "2026-11-13T02:00:26.141Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", + "shortName": "VulDB", + "dateUpdated": "2026-11-13T02:00:26.141Z" + }, + "title": "SourceCodester Food Ordering System Admin Write add_category.php sql injection", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-89", + "lang": "en", + "description": "SQL Injection" + } + ] + }, + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-74", + "lang": "en", + "description": "Injection" + } + ] + } + ], + "affected": [ + { + "vendor": "SourceCodester", + "product": "Food Ordering System", + "versions": [ + { + "version": "1.0", + "status": "affected" + } + ], + "cpes": [ + "cpe:2.3:a:sourcecodester:food_ordering_system:*:*:*:*:*:*:*:*" + ], + "modules": [ + "Admin Write Handler" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A security flaw has been discovered in SourceCodester Food Ordering System 1.0. This affects an unknown part of the file admin/add_category.php of the component Admin Write Handler. Performing a manipulation of the argument title/description/price/current_image/featured/active/id results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks." + } + ], + "metrics": [ + { + "cvssV4_0": { + "version": "4.0", + "baseScore": 6.9, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", + "baseSeverity": "MEDIUM" + } + }, + { + "cvssV3_1": { + "version": "3.1", + "baseScore": 7.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C", + "baseSeverity": "HIGH" + } + }, + { + "cvssV3_0": { + "version": "3.0", + "baseScore": 7.3, + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C", + "baseSeverity": "HIGH" + } + }, + { + "cvssV2_0": { + "version": "2.0", + "baseScore": 7.5, + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C" + } + } + ], + "timeline": [ + { + "time": "2026-11-12T00:00:00.000Z", + "lang": "en", + "value": "Advisory disclosed" + }, + { + "time": "2026-11-12T01:00:00.000Z", + "lang": "en", + "value": "VulDB entry created" + }, + { + "time": "2026-11-12T18:44:11.000Z", + "lang": "en", + "value": "VulDB entry last update" + } + ], + "credits": [ + { + "lang": "en", + "value": "yuechuya (VulDB User)", + "type": "reporter" + } + ], + "references": [ + { + "url": "https://vuldb.com/vuln/436450", + "name": "VDB-436450 | SourceCodester Food Ordering System Admin Write add_category.php sql injection", + "tags": [ + "vdb-entry", + "technical-description" + ] + }, + { + "url": "https://vuldb.com/vuln/436450/cti", + "name": "VDB-436450 | CTI Indicators (IOB, IOC, TTP, IOA)", + "tags": [ + "signature", + "permissions-required" + ] + }, + { + "url": "https://vuldb.com/cve/CVE-2026-127284", + "name": "CVE-2026-127284 | CVE Analysis and Report", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://vuldb.com/submit/1041049", + "name": "Submit #1041049 | SourceCodester Food Ordering System in PHP and MySQL 1.0 SQL Injection", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://github.com/yuechuya/sourcecodester-vuln-reports/blob/main/reports/Food-Ordering-System/VULN-F2-Unauth-SQL-Injection.md", + "tags": [ + "broken-link", + "exploit" + ] + }, + { + "url": "https://www.sourcecodester.com/", + "tags": [ + "product" + ] + } + ], + "tags": [ + "x_freeware" + ], + "x_generator": [ + "VulDB PVTS v202611" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/128xxx/CVE-2026-128321.json b/data/2026/128xxx/CVE-2026-128321.json index fc4d8ab510..f306fe2bbd 100644 --- a/data/2026/128xxx/CVE-2026-128321.json +++ b/data/2026/128xxx/CVE-2026-128321.json @@ -8,7 +8,7 @@ "assignerShortName": "certcc", "dateReserved": "2026-11-13T00:02:00.631Z", "datePublished": "2026-11-13T00:08:32.021Z", - "dateUpdated": "2026-11-13T00:08:32.021Z" + "dateUpdated": "2026-11-13T02:05:51.969Z" }, "containers": { "cna": { @@ -76,6 +76,21 @@ "shortName": "certcc", "dateUpdated": "2026-11-13T00:08:32.021Z" } - } + }, + "adp": [ + { + "title": "CVE Program Container", + "references": [ + { + "url": "https://www.kb.cert.org/vuls/id/644655" + } + ], + "providerMetadata": { + "orgId": "af854a3a-2127-422b-91ae-364da2661108", + "shortName": "CVE", + "dateUpdated": "2026-11-13T02:05:51.969Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/15xxx/CVE-2026-15465.json b/data/2026/15xxx/CVE-2026-15465.json new file mode 100644 index 0000000000..a2de9054f9 --- /dev/null +++ b/data/2026/15xxx/CVE-2026-15465.json @@ -0,0 +1,123 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-15465", + "assignerOrgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce", + "state": "PUBLISHED", + "assignerShortName": "imaginationtech", + "dateReserved": "2026-07-10T21:04:02.026Z", + "datePublished": "2026-11-13T02:10:11.401Z", + "dateUpdated": "2026-11-13T02:10:11.401Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce", + "shortName": "imaginationtech", + "dateUpdated": "2026-11-13T02:10:11.401Z" + }, + "title": "GPU DDK - Write UAF in OSDebugSignalPID due to incorrect management of PID resources", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-416", + "description": "CWE-416: Use After Free", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-26", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-26: Leveraging Race Conditions (candidate mapping for a use-after-free memory lifetime issue)" + } + ] + } + ], + "affected": [ + { + "vendor": "Imagination Technologies", + "product": "Graphics DDK", + "platforms": [ + "Linux", + "Android" + ], + "versions": [ + { + "status": "affected", + "version": "1.18 RTM2", + "versionType": "custom" + }, + { + "status": "affected", + "version": "23.2 RTM2", + "versionType": "custom" + }, + { + "status": "affected", + "version": "24.2 RTM2", + "versionType": "custom" + }, + { + "status": "affected", + "version": "25.1 RTM2", + "versionType": "custom" + }, + { + "status": "affected", + "version": "25.3 RTM", + "versionType": "custom" + }, + { + "status": "affected", + "version": "26.1 RTM2", + "versionType": "custom" + }, + { + "status": "affected", + "version": "26.2 RTM", + "versionType": "custom" + }, + { + "status": "unaffected", + "version": "26.3 RTM", + "versionType": "custom" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Software installed and run as a non-privileged user may conduct improper GPU system calls through the DDK kernel module interface. Under unsupported use of the interface, a use-after-free condition may occur that can lead to kernel memory corruption, platform instability, or system reboot.\n\n\n\nThe weakness occurs when software references memory after it has been released. Accessing memory after free may result in corruption of valid data structures, unexpected program behaviour, process crashes, or execution of unintended operations.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Software installed and run as a non-privileged user may conduct improper GPU system calls through the DDK kernel module interface. Under unsupported use of the interface, a use-after-free condition may occur that can lead to kernel memory corruption, platform instability, or system reboot.

The weakness occurs when software references memory after it has been released. Accessing memory after free may result in corruption of valid data structures, unexpected program behaviour, process crashes, or execution of unintended operations.

" + } + ] + } + ], + "references": [ + { + "url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/" + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.4" + } + } + } +} \ No newline at end of file diff --git a/data/delta.json b/data/delta.json index fe2f488188..f6bdebbc36 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,14 +1,51 @@ { - "fetchTime": "2026-11-13T01:02:20.067Z", - "numberOfChanges": 1, + "fetchTime": "2026-11-13T02:11:19.758Z", + "numberOfChanges": 7, "new": [ { - "cveId": "CVE-2026-127279", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127279", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127279.json", - "dateUpdated": "2026-11-13T01:00:25.095Z" + "cveId": "CVE-2026-107407", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107407", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107407.json", + "dateUpdated": "2026-11-13T02:01:33.369Z" + }, + { + "cveId": "CVE-2026-107408", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107408", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107408.json", + "dateUpdated": "2026-11-13T02:04:05.605Z" + }, + { + "cveId": "CVE-2026-107409", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107409", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107409.json", + "dateUpdated": "2026-11-13T02:05:45.195Z" + }, + { + "cveId": "CVE-2026-107410", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107410", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107410.json", + "dateUpdated": "2026-11-13T02:10:10.553Z" + }, + { + "cveId": "CVE-2026-127284", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127284", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127284.json", + "dateUpdated": "2026-11-13T02:00:26.141Z" + }, + { + "cveId": "CVE-2026-15465", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-15465", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15465.json", + "dateUpdated": "2026-11-13T02:10:11.401Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-128321", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128321", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128321.json", + "dateUpdated": "2026-11-13T02:05:51.969Z" } ], - "updated": [], "error": [] } \ No newline at end of file diff --git a/data/deltaLog.json b/data/deltaLog.json index 3c8f3f57f6..3b515a72e7 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,97 @@ [ + { + "fetchTime": "2026-11-13T02:11:19.758Z", + "numberOfChanges": 7, + "new": [ + { + "cveId": "CVE-2026-107407", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107407", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107407.json", + "dateUpdated": "2026-11-13T02:01:33.369Z" + }, + { + "cveId": "CVE-2026-107408", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107408", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107408.json", + "dateUpdated": "2026-11-13T02:04:05.605Z" + }, + { + "cveId": "CVE-2026-107409", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107409", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107409.json", + "dateUpdated": "2026-11-13T02:05:45.195Z" + }, + { + "cveId": "CVE-2026-107410", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107410", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107410.json", + "dateUpdated": "2026-11-13T02:10:10.553Z" + }, + { + "cveId": "CVE-2026-127284", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127284", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127284.json", + "dateUpdated": "2026-11-13T02:00:26.141Z" + }, + { + "cveId": "CVE-2026-15465", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-15465", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15465.json", + "dateUpdated": "2026-11-13T02:10:11.401Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-128321", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128321", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128321.json", + "dateUpdated": "2026-11-13T02:05:51.969Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T01:47:18.123Z", + "numberOfChanges": 1, + "new": [ + { + "cveId": "CVE-2026-127283", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127283", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127283.json", + "dateUpdated": "2026-11-13T01:45:20.555Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-13T01:32:22.348Z", + "numberOfChanges": 1, + "new": [ + { + "cveId": "CVE-2026-127282", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127282", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127282.json", + "dateUpdated": "2026-11-13T01:30:27.919Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-13T01:20:48.106Z", + "numberOfChanges": 1, + "new": [ + { + "cveId": "CVE-2026-127281", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127281", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127281.json", + "dateUpdated": "2026-11-13T01:15:20.637Z" + } + ], + "updated": [], + "error": [] + }, { "fetchTime": "2026-11-13T01:02:20.067Z", "numberOfChanges": 1, @@ -809213,345 +809306,5 @@ } ], "error": [] - }, - { - "fetchTime": "2026-10-14T01:58:35.757Z", - "numberOfChanges": 5, - "new": [], - "updated": [ - { - "cveId": "CVE-2026-107806", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107806", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107806.json", - "dateUpdated": "2026-10-14T01:52:48.127Z" - }, - { - "cveId": "CVE-2026-107811", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107811", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107811.json", - "dateUpdated": "2026-10-14T01:57:18.316Z" - }, - { - "cveId": "CVE-2026-108108", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108108", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108108.json", - "dateUpdated": "2026-10-14T01:51:06.748Z" - }, - { - "cveId": "CVE-2026-108110", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108110", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108110.json", - "dateUpdated": "2026-10-14T01:55:25.986Z" - }, - { - "cveId": "CVE-2026-77532", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-77532", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/77xxx/CVE-2026-77532.json", - "dateUpdated": "2026-10-14T01:53:44.677Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T01:49:23.733Z", - "numberOfChanges": 18, - "new": [ - { - "cveId": "CVE-2026-110392", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110392", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110392.json", - "dateUpdated": "2026-10-14T01:45:50.377Z" - }, - { - "cveId": "CVE-2026-82715", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82715", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82715.json", - "dateUpdated": "2026-10-14T01:46:59.198Z" - }, - { - "cveId": "CVE-2026-86573", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-86573", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86573.json", - "dateUpdated": "2026-10-14T01:46:58.245Z" - }, - { - "cveId": "CVE-2026-86607", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-86607", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86607.json", - "dateUpdated": "2026-10-14T01:46:57.298Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-104079", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104079", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104079.json", - "dateUpdated": "2026-10-14T01:45:25.616Z" - }, - { - "cveId": "CVE-2026-107651", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107651", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107651.json", - "dateUpdated": "2026-10-14T01:32:02.554Z" - }, - { - "cveId": "CVE-2026-107728", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107728", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107728.json", - "dateUpdated": "2026-10-14T01:31:32.335Z" - }, - { - "cveId": "CVE-2026-107733", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107733", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107733.json", - "dateUpdated": "2026-10-14T01:33:16.443Z" - }, - { - "cveId": "CVE-2026-107738", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107738", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107738.json", - "dateUpdated": "2026-10-14T01:36:13.121Z" - }, - { - "cveId": "CVE-2026-107914", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107914", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107914.json", - "dateUpdated": "2026-10-14T01:42:54.861Z" - }, - { - "cveId": "CVE-2026-108103", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108103", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108103.json", - "dateUpdated": "2026-10-14T01:48:04.879Z" - }, - { - "cveId": "CVE-2026-108978", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108978", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108978.json", - "dateUpdated": "2026-10-14T01:47:10.567Z" - }, - { - "cveId": "CVE-2026-75349", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-75349", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75349.json", - "dateUpdated": "2026-10-14T01:37:42.382Z" - }, - { - "cveId": "CVE-2026-75350", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-75350", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75350.json", - "dateUpdated": "2026-10-14T01:38:32.316Z" - }, - { - "cveId": "CVE-2026-78016", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-78016", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/78xxx/CVE-2026-78016.json", - "dateUpdated": "2026-10-14T01:43:58.190Z" - }, - { - "cveId": "CVE-2026-78021", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-78021", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/78xxx/CVE-2026-78021.json", - "dateUpdated": "2026-10-14T01:44:30.679Z" - }, - { - "cveId": "CVE-2026-78797", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-78797", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/78xxx/CVE-2026-78797.json", - "dateUpdated": "2026-10-14T01:41:19.587Z" - }, - { - "cveId": "CVE-2026-82918", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82918", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82918.json", - "dateUpdated": "2026-10-14T01:36:14.848Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T01:30:11.666Z", - "numberOfChanges": 21, - "new": [ - { - "cveId": "CVE-2026-103423", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103423", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103423.json", - "dateUpdated": "2026-10-14T01:27:12.770Z" - }, - { - "cveId": "CVE-2026-103425", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103425", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103425.json", - "dateUpdated": "2026-10-14T01:27:13.278Z" - }, - { - "cveId": "CVE-2026-104749", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104749", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104749.json", - "dateUpdated": "2026-10-14T01:27:13.619Z" - }, - { - "cveId": "CVE-2026-104767", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104767", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104767.json", - "dateUpdated": "2026-10-14T01:27:14.736Z" - }, - { - "cveId": "CVE-2026-104995", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104995", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104995.json", - "dateUpdated": "2026-10-14T01:27:15.137Z" - }, - { - "cveId": "CVE-2026-107652", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107652", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107652.json", - "dateUpdated": "2026-10-14T01:27:14.328Z" - }, - { - "cveId": "CVE-2026-17092", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17092", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17092.json", - "dateUpdated": "2026-10-14T01:27:15.480Z" - }, - { - "cveId": "CVE-2026-92097", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92097", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92097.json", - "dateUpdated": "2026-10-14T01:27:15.838Z" - }, - { - "cveId": "CVE-2026-93388", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-93388", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/93xxx/CVE-2026-93388.json", - "dateUpdated": "2026-10-14T01:27:13.964Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-104075", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104075", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104075.json", - "dateUpdated": "2026-10-14T01:15:27.775Z" - }, - { - "cveId": "CVE-2026-107377", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107377", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107377.json", - "dateUpdated": "2026-10-14T01:09:58.803Z" - }, - { - "cveId": "CVE-2026-107383", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107383", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107383.json", - "dateUpdated": "2026-10-14T01:11:23.281Z" - }, - { - "cveId": "CVE-2026-107393", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107393", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107393.json", - "dateUpdated": "2026-10-14T01:16:50.766Z" - }, - { - "cveId": "CVE-2026-107399", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107399", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107399.json", - "dateUpdated": "2026-10-14T01:21:37.665Z" - }, - { - "cveId": "CVE-2026-107699", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107699", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107699.json", - "dateUpdated": "2026-10-14T01:12:55.896Z" - }, - { - "cveId": "CVE-2026-107708", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107708", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107708.json", - "dateUpdated": "2026-10-14T01:18:51.696Z" - }, - { - "cveId": "CVE-2026-107718", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107718", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107718.json", - "dateUpdated": "2026-10-14T01:24:14.635Z" - }, - { - "cveId": "CVE-2026-107723", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107723", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107723.json", - "dateUpdated": "2026-10-14T01:25:44.088Z" - }, - { - "cveId": "CVE-2026-107782", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107782", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107782.json", - "dateUpdated": "2026-10-14T01:19:53.192Z" - }, - { - "cveId": "CVE-2026-107796", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107796", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107796.json", - "dateUpdated": "2026-10-14T01:27:24.000Z" - }, - { - "cveId": "CVE-2026-107801", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107801", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107801.json", - "dateUpdated": "2026-10-14T01:28:23.129Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T01:09:15.625Z", - "numberOfChanges": 7, - "new": [], - "updated": [ - { - "cveId": "CVE-2026-107287", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107287", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107287.json", - "dateUpdated": "2026-10-14T00:58:57.237Z" - }, - { - "cveId": "CVE-2026-107292", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107292", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107292.json", - "dateUpdated": "2026-10-14T01:01:07.590Z" - }, - { - "cveId": "CVE-2026-107296", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107296", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107296.json", - "dateUpdated": "2026-10-14T01:01:55.870Z" - }, - { - "cveId": "CVE-2026-107301", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107301", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107301.json", - "dateUpdated": "2026-10-14T01:02:53.277Z" - }, - { - "cveId": "CVE-2026-107676", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107676", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107676.json", - "dateUpdated": "2026-10-14T00:59:55.023Z" - }, - { - "cveId": "CVE-2026-107695", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107695", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107695.json", - "dateUpdated": "2026-10-14T01:03:34.781Z" - }, - { - "cveId": "CVE-2026-97147", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97147", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97147.json", - "dateUpdated": "2026-10-14T01:07:30.221Z" - } - ], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index 110d6771f6..e0f99e1cd8 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "55f204c1fe26d24abf5581c31374a6c47b27b6d4", + "upstream_commit": "c070fc2ba063eb5d87c9db2ec310abe2fd758565", "since_year": 2017, - "records": 331796, - "synced_at_utc": "2026-11-13T01:26:19.142200+00:00" + "records": 331805, + "synced_at_utc": "2026-11-13T02:26:06.510108+00:00" }