This issue affects Mail Mint: from n/a through 1.17.7.
" + } + ] + } + ], "affected": [ { + "vendor": "WPFunnels Team", + "product": "Mail Mint", + "packageName": "mail-mint", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", - "packageName": "mail-mint", - "product": "Mail Mint", - "vendor": "WPFunnels", "versions": [ { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "1.17.7", "changes": [ { "at": "1.17.8", "status": "unaffected" } - ], - "lessThanOrEqual": "1.17.7", - "status": "affected", - "version": "0", - "versionType": "custom" + ] } ] } ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/mail-mint/vulnerability/wordpress-mail-mint-1-17-7-sensitive-data-exposure-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], "credits": [ { "lang": "en", - "type": "finder", - "value": "Denver Jackson | Patchstack Bug Bounty Program" - } - ], - "datePublic": "2026-04-01T16:40:08.398Z", - "descriptions": [ - { - "lang": "en", - "supportingMedia": [ - { - "base64": false, - "type": "text/html", - "value": "Insertion of Sensitive Information Into Sent Data vulnerability in WPFunnels Mail Mint mail-mint allows Retrieve Embedded Sensitive Data.This issue affects Mail Mint: from n/a through <= 1.17.7.
" - } - ], - "value": "Insertion of Sensitive Information Into Sent Data vulnerability in WPFunnels Mail Mint mail-mint allows Retrieve Embedded Sensitive Data.This issue affects Mail Mint: from n/a through <= 1.17.7." - } - ], - "impacts": [ - { - "capecId": "CAPEC-37", - "descriptions": [ - { - "lang": "en", - "value": "Retrieve Embedded Sensitive Data" - } - ] + "value": "Denver Jackson | Patchstack Bug Bounty Program", + "type": "finder" } ], "metrics": [ { - "cvssV3_1": { - "attackComplexity": "LOW", - "attackVector": "NETWORK", - "availabilityImpact": "NONE", - "baseScore": 7.5, - "baseSeverity": "HIGH", - "confidentialityImpact": "HIGH", - "integrityImpact": "NONE", - "privilegesRequired": "NONE", - "scope": "UNCHANGED", - "userInteraction": "NONE", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", - "version": "3.1" - }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } - ] + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + } } ], "problemTypes": [ @@ -104,20 +107,34 @@ ] } ], - "providerMetadata": { - "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", - "shortName": "Patchstack", - "dateUpdated": "2026-04-29T09:51:55.529Z" - }, - "references": [ + "impacts": [ { - "tags": [ - "vdb-entry" - ], - "url": "https://patchstack.com/database/Wordpress/Plugin/mail-mint/vulnerability/wordpress-mail-mint-1-17-7-sensitive-data-exposure-vulnerability?_s_id=cve" + "capecId": "CAPEC-37", + "descriptions": [ + { + "lang": "en", + "value": "Retrieve Embedded Sensitive Data" + } + ] } ], - "title": "WordPress Mail Mint plugin <= 1.17.7 - Sensitive Data Exposure Vulnerability" + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Mail Mint plugin to the latest available version (at least 1.17.8).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Mail Mint plugin to the latest available version (at least 1.17.8)." + } + ] + } + ], + "tags": [ + "x_known-exploited-vulnerability", + "x_open-source" + ] }, "adp": [ { diff --git a/data/2026/113xxx/CVE-2026-113408.json b/data/2026/113xxx/CVE-2026-113408.json new file mode 100644 index 0000000000..6fe572aef9 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113408.json @@ -0,0 +1,125 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113408", + "assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", + "state": "PUBLISHED", + "assignerShortName": "GitLab", + "dateReserved": "2026-10-20T06:03:58.616Z", + "datePublished": "2026-11-12T07:09:19.100Z", + "dateUpdated": "2026-11-12T07:09:19.100Z" + }, + "containers": { + "cna": { + "title": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Git", + "descriptions": [ + { + "lang": "en", + "value": "Path traversal in Git allows writing to arbitrary file via cloning and committing to bad repository" + } + ], + "affected": [ + { + "vendor": "Git", + "product": "Git", + "repo": "https://gitlab.com/git-scm/git", + "cpes": [ + "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*" + ], + "versions": [ + { + "version": "2.50.1", + "status": "affected" + }, + { + "version": "2.51.2", + "status": "affected" + }, + { + "version": "2.52.0", + "status": "affected" + }, + { + "version": "2.53.0", + "status": "affected" + }, + { + "version": "2.54.0", + "status": "affected" + }, + { + "version": "2.55.0", + "status": "affected" + }, + { + "version": "2.56.0", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", + "cweId": "CWE-22", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.com/gitlab-org/git/-/work_items/809" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseScore": 3.3, + "baseSeverity": "LOW" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "Upgrade to versions 2.50.2, 2.51.3, 2.52.1, 2.53.1, 2.54.1, 2.55.1, 2.56.1 or above." + } + ], + "credits": [ + { + "lang": "en", + "value": "ehdgks0627, un3xploitable", + "type": "finder" + } + ], + "providerMetadata": { + "orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", + "shortName": "GitLab", + "dateUpdated": "2026-11-12T07:09:19.100Z" + } + } + } +} \ No newline at end of file diff --git a/data/2026/12xxx/CVE-2026-12507.json b/data/2026/12xxx/CVE-2026-12507.json new file mode 100644 index 0000000000..fa78197f78 --- /dev/null +++ b/data/2026/12xxx/CVE-2026-12507.json @@ -0,0 +1,204 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-12507", + "assignerOrgId": "0fc0942c-577d-436f-ae8e-945763c79b02", + "state": "PUBLISHED", + "assignerShortName": "Zohocorp", + "dateReserved": "2026-06-17T10:49:52.198Z", + "datePublished": "2026-11-12T06:48:54.703Z", + "dateUpdated": "2026-11-12T06:48:54.703Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "0fc0942c-577d-436f-ae8e-945763c79b02", + "shortName": "Zohocorp", + "dateUpdated": "2026-11-12T06:48:54.703Z" + }, + "title": "Authenticated remote code execution", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-89", + "description": "CWE-89 – SQL Injection", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-242", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-242 – Code Injection" + } + ] + } + ], + "affected": [ + { + "vendor": "Zohocorp", + "product": "AssetExplorer", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "7860", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Zohocorp", + "product": "ServiceDesk Plus", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "15290", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Zohocorp", + "product": "ServiceDesk Plus MSP", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "15150", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Zohocorp", + "product": "SupportCenter Plus", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "15150", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "cpeApplicability": [ + { + "operator": "OR", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zohocorp:assetexplorer:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "7860" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zohocorp:servicedesk_plus:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "15290" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zohocorp:servicedesk_plus_msp:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "15150" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zohocorp:supportcenter_plus:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "15150" + } + ] + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Zohocorp ManageEngine AssetExplorer versions below 7860, ServiceDesk Plus versions below 15290, ServiceDesk Plus MSP versions below 15150, and SupportCenter Plus versions below 15150 are affected by a authenticated remote code execution vulnerability in the Reports module. An authenticated user with the Create Query Reports permission could exploit specially crafted database queries to execute arbitrary commands on the underlying server.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Zohocorp ManageEngine AssetExplorer versions below 7860, ServiceDesk Plus versions below 15290, ServiceDesk Plus MSP versions below 15150, and SupportCenter Plus versions below 15150 are affected by a authenticated remote code execution vulnerability in the Reports module. An authenticated user with the Create Query Reports permission could exploit specially crafted database queries to execute arbitrary commands on the underlying server." + } + ] + } + ], + "references": [ + { + "url": "https://www.manageengine.com/products/service-desk/cve-2026-12507.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "CRITICAL", + "baseScore": 9.1, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/12xxx/CVE-2026-12591.json b/data/2026/12xxx/CVE-2026-12591.json new file mode 100644 index 0000000000..da35ecbc2e --- /dev/null +++ b/data/2026/12xxx/CVE-2026-12591.json @@ -0,0 +1,129 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-12591", + "assignerOrgId": "0fc0942c-577d-436f-ae8e-945763c79b02", + "state": "PUBLISHED", + "assignerShortName": "Zohocorp", + "dateReserved": "2026-06-18T09:09:27.284Z", + "datePublished": "2026-11-12T06:55:31.695Z", + "dateUpdated": "2026-11-12T06:55:31.695Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "0fc0942c-577d-436f-ae8e-945763c79b02", + "shortName": "Zohocorp", + "dateUpdated": "2026-11-12T06:55:31.695Z" + }, + "title": "Privilege Escalation", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-862", + "description": "CWE-862 – Missing Authorization", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-122", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-122 – Privilege Abuse" + } + ] + } + ], + "affected": [ + { + "vendor": "Zohocorp", + "product": "M365 Manager Plus", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "4818", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "cpeApplicability": [ + { + "operator": "OR", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zohocorp:m365_manager_plus:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "4818" + } + ] + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Zohocorp ManageEngine M365 Manager Plus versions below 4818 is affected by an authenticated technician may exploit insufficient permission validation in the delegated administration interface to escalate privileges beyond their intended scope, which could result in remote code execution during administrative processing.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Zohocorp ManageEngine M365 Manager Plus versions below 4818 is affected by an authenticated technician may exploit insufficient permission validation in the delegated administration interface to escalate privileges beyond their intended scope, which could result in remote code execution during administrative processing." + } + ] + } + ], + "references": [ + { + "url": "https://www.manageengine.com/microsoft-365-management-reporting/CVE-2026-12591.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "CRITICAL", + "baseScore": 9.9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/87xxx/CVE-2026-87772.json b/data/2026/87xxx/CVE-2026-87772.json new file mode 100644 index 0000000000..b0fb70b530 --- /dev/null +++ b/data/2026/87xxx/CVE-2026-87772.json @@ -0,0 +1,125 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-87772", + "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", + "state": "PUBLISHED", + "assignerShortName": "TR-CERT", + "dateReserved": "2026-09-09T08:22:44.834Z", + "datePublished": "2026-11-12T06:35:54.306Z", + "dateUpdated": "2026-11-12T06:35:54.306Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", + "shortName": "TR-CERT", + "dateUpdated": "2026-11-12T06:35:54.306Z" + }, + "title": "Unauthenticated Polkit Privilege Escalation in TÜBİTAK BİLGEM's Pardus About", + "datePublic": "2026-11-12T06:32:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-863", + "description": "CWE-863 Incorrect Authorization", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-233", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-233 Privilege Escalation" + } + ] + } + ], + "affected": [ + { + "vendor": "TÜBİTAK BİLGEM Software Technologies Research Institute", + "product": "Pardus About", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "1.2.5", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows Privilege Escalation.\n\nThis issue affects Pardus About: before 1.2.5.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows Privilege Escalation.This issue affects Pardus About: before 1.2.5.
" + } + ] + } + ], + "references": [ + { + "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1521", + "tags": [ + "government-resource" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Sevban DÖNMEZ", + "type": "finder" + } + ], + "source": { + "defect": [ + "TR-26-1521" + ], + "advisory": "TR-26-1521", + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/8xxx/CVE-2026-8331.json b/data/2026/8xxx/CVE-2026-8331.json new file mode 100644 index 0000000000..080530cdfe --- /dev/null +++ b/data/2026/8xxx/CVE-2026-8331.json @@ -0,0 +1,199 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-8331", + "assignerOrgId": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", + "state": "PUBLISHED", + "assignerShortName": "Microchip", + "dateReserved": "2026-05-11T15:27:37.104Z", + "datePublished": "2026-11-12T06:21:04.118Z", + "dateUpdated": "2026-11-12T06:26:09.676Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", + "shortName": "Microchip", + "dateUpdated": "2026-11-12T06:26:09.676Z" + }, + "title": "TimePictra ermote code execution via file upload", + "datePublic": "2026-11-12T06:20:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-434", + "description": "CWE-434 Unrestricted upload of file with dangerous type", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-1", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs" + } + ] + } + ], + "affected": [ + { + "vendor": "Microchip", + "product": "TimePictra", + "collectionURL": "https://www.microchip.com/en-us/products/clock-and-timing/systems/synchronization-management-monitoring/timepictra", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "12.0", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution." + } + ] + } + ], + "references": [ + { + "url": "https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timepictra-remote-code-execution-via-file-upload", + "tags": [ + "vendor-advisory" + ] + }, + { + "url": "https://www.gruppotim.it/en/footer/TIM-red-team.html", + "tags": [ + "third-party-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "Upgrade to TimePictra 12.0 platform or later", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Upgrade to TimePictra 12.0 platform or later
Upgrade to TimePictra 12.0 platform or later
This issue affects GiveWP: from n/a through 4.16.9.
" } ] } ], "affected": [ { - "vendor": "Nexcess", + "vendor": "Liquid Web / StellarWP", + "product": "GiveWP", + "packageName": "give", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", - "packageName": "give", - "product": "GiveWP", "versions": [ { - "lessThanOrEqual": "4.16.9", - "status": "affected", - "version": "n/a", + "version": "0", "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "4.16.9", "changes": [ { "at": "4.17.0", @@ -64,25 +55,19 @@ ] } ], - "descriptions": [ - { - "lang": "en", - "supportingMedia": [ - { - "base64": false, - "type": "text/html", - "value": "Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions." - } - ], - "value": "Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions." - } - ], "references": [ { + "url": "https://patchstack.com/database/wordpress/plugin/give/vulnerability/wordpress-givewp-plugin-4-16-9-sensitive-data-exposure-vulnerability?_s_id=cve", "tags": [ "vdb-entry" - ], - "url": "https://patchstack.com/database/wordpress/plugin/give/vulnerability/wordpress-givewp-plugin-4-16-9-sensitive-data-exposure-vulnerability?_s_id=cve" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Intrudify | Patchstack Bug Bounty Program", + "type": "finder" } ], "metrics": [ @@ -95,6 +80,10 @@ } ], "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", @@ -102,41 +91,50 @@ "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", - "availabilityImpact": "NONE", - "version": "3.1", - "baseSeverity": "MEDIUM", - "baseScore": 6.5, - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + "availabilityImpact": "NONE" } } ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-862", + "description": "Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-37", + "descriptions": [ + { + "lang": "en", + "value": "Retrieve Embedded Sensitive Data" + } + ] + } + ], "solutions": [ { "lang": "en", + "value": "Update the WordPress GiveWP plugin to the latest available version (at least 4.17.0).", "supportingMedia": [ { - "base64": false, "type": "text/html", + "base64": false, "value": "Update the WordPress GiveWP plugin to the latest available version (at least 4.17.0)." } - ], - "value": "Update the WordPress GiveWP plugin to the latest available version (at least 4.17.0)." + ] } ], - "credits": [ - { - "lang": "en", - "type": "finder", - "user": "00000000-0000-4000-9000-000000000000", - "value": "Intrudify | Patchstack Bug Bounty Program" - } - ], - "source": { - "discovery": "EXTERNAL" - }, - "x_generator": { - "engine": "Vulnogram 0.2.0" - } + "tags": [ + "x_known-exploited-vulnerability", + "x_open-source" + ] }, "adp": [ { diff --git a/data/delta.json b/data/delta.json index 607c4805fd..07865f25ae 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,140 +1,21 @@ { - "fetchTime": "2026-11-12T06:13:57.937Z", - "numberOfChanges": 22, + "fetchTime": "2026-11-12T07:11:08.547Z", + "numberOfChanges": 2, "new": [ { - "cveId": "CVE-2026-106027", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106027", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106027.json", - "dateUpdated": "2026-11-12T06:00:06.145Z" - }, - { - "cveId": "CVE-2026-110041", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110041", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110041.json", - "dateUpdated": "2026-11-12T06:00:06.327Z" - }, - { - "cveId": "CVE-2026-110072", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110072", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110072.json", - "dateUpdated": "2026-11-12T06:00:06.497Z" - }, - { - "cveId": "CVE-2026-110959", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110959", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110959.json", - "dateUpdated": "2026-11-12T06:00:06.674Z" - }, - { - "cveId": "CVE-2026-118421", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118421", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118421.json", - "dateUpdated": "2026-11-12T06:00:06.857Z" - }, - { - "cveId": "CVE-2026-118531", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118531", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118531.json", - "dateUpdated": "2026-11-12T06:00:07.049Z" - }, - { - "cveId": "CVE-2026-118597", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118597", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118597.json", - "dateUpdated": "2026-11-12T06:09:34.999Z" - }, - { - "cveId": "CVE-2026-119039", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119039", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119039.json", - "dateUpdated": "2026-11-12T06:00:07.223Z" - }, - { - "cveId": "CVE-2026-119040", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119040", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119040.json", - "dateUpdated": "2026-11-12T06:00:07.503Z" - }, - { - "cveId": "CVE-2026-121498", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121498", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121498.json", - "dateUpdated": "2026-11-12T06:00:07.678Z" - }, - { - "cveId": "CVE-2026-122003", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122003", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122003.json", - "dateUpdated": "2026-11-12T06:00:08.273Z" - }, - { - "cveId": "CVE-2026-123044", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123044", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123044.json", - "dateUpdated": "2026-11-12T06:00:08.453Z" - }, - { - "cveId": "CVE-2026-123092", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123092", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123092.json", - "dateUpdated": "2026-11-12T06:00:08.632Z" - }, - { - "cveId": "CVE-2026-124647", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124647", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124647.json", - "dateUpdated": "2026-11-12T06:00:08.827Z" - }, - { - "cveId": "CVE-2026-124648", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124648", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124648.json", - "dateUpdated": "2026-11-12T06:00:08.998Z" - }, - { - "cveId": "CVE-2026-124652", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124652", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124652.json", - "dateUpdated": "2026-11-12T06:00:09.181Z" - }, - { - "cveId": "CVE-2026-124653", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124653", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124653.json", - "dateUpdated": "2026-11-12T06:00:09.357Z" - }, - { - "cveId": "CVE-2026-124665", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124665", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124665.json", - "dateUpdated": "2026-11-12T06:00:09.578Z" - }, - { - "cveId": "CVE-2026-124814", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124814", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124814.json", - "dateUpdated": "2026-11-12T06:00:09.772Z" - }, - { - "cveId": "CVE-2026-124815", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124815", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124815.json", - "dateUpdated": "2026-11-12T06:00:09.952Z" - }, - { - "cveId": "CVE-2026-124817", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124817", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124817.json", - "dateUpdated": "2026-11-12T06:00:10.134Z" - }, - { - "cveId": "CVE-2026-76792", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-76792", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76792.json", - "dateUpdated": "2026-11-12T06:00:10.307Z" + "cveId": "CVE-2026-113408", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113408", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113408.json", + "dateUpdated": "2026-11-12T07:09:19.100Z" + } + ], + "updated": [ + { + "cveId": "CVE-2025-2399", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-2399", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2399.json", + "dateUpdated": "2026-11-12T07:09:39.167Z" } ], - "updated": [], "error": [] } \ No newline at end of file diff --git a/data/deltaLog.json b/data/deltaLog.json index 6ad85f61e0..7d73020a0f 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,119 @@ [ + { + "fetchTime": "2026-11-12T07:11:08.547Z", + "numberOfChanges": 2, + "new": [ + { + "cveId": "CVE-2026-113408", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113408", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113408.json", + "dateUpdated": "2026-11-12T07:09:19.100Z" + } + ], + "updated": [ + { + "cveId": "CVE-2025-2399", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-2399", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2399.json", + "dateUpdated": "2026-11-12T07:09:39.167Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T06:59:01.781Z", + "numberOfChanges": 3, + "new": [ + { + "cveId": "CVE-2026-12591", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-12591", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12591.json", + "dateUpdated": "2026-11-12T06:55:31.695Z" + } + ], + "updated": [ + { + "cveId": "CVE-2025-47541", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-47541", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/47xxx/CVE-2025-47541.json", + "dateUpdated": "2026-11-12T06:57:18.956Z" + }, + { + "cveId": "CVE-2026-96834", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96834", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96834.json", + "dateUpdated": "2026-11-12T06:58:58.882Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T06:53:21.344Z", + "numberOfChanges": 1, + "new": [ + { + "cveId": "CVE-2026-12507", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-12507", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12507.json", + "dateUpdated": "2026-11-12T06:48:54.703Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-12T06:40:33.493Z", + "numberOfChanges": 3, + "new": [ + { + "cveId": "CVE-2026-87772", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-87772", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/87xxx/CVE-2026-87772.json", + "dateUpdated": "2026-11-12T06:35:54.306Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-8332", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-8332", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8332.json", + "dateUpdated": "2026-11-12T06:30:02.426Z" + }, + { + "cveId": "CVE-2026-8333", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-8333", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8333.json", + "dateUpdated": "2026-11-12T06:30:50.933Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T06:28:44.744Z", + "numberOfChanges": 3, + "new": [ + { + "cveId": "CVE-2026-8331", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-8331", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8331.json", + "dateUpdated": "2026-11-12T06:26:09.676Z" + }, + { + "cveId": "CVE-2026-8332", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-8332", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8332.json", + "dateUpdated": "2026-11-12T06:19:49.994Z" + }, + { + "cveId": "CVE-2026-8333", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-8333", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8333.json", + "dateUpdated": "2026-11-12T06:18:29.144Z" + } + ], + "updated": [], + "error": [] + }, { "fetchTime": "2026-11-12T06:13:57.937Z", "numberOfChanges": 22, @@ -848481,101 +848596,5 @@ ], "updated": [], "error": [] - }, - { - "fetchTime": "2026-10-13T07:08:38.373Z", - "numberOfChanges": 5, - "new": [ - { - "cveId": "CVE-2026-108975", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108975", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108975.json", - "dateUpdated": "2026-10-13T06:45:19.180Z" - }, - { - "cveId": "CVE-2026-109106", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109106", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109106.json", - "dateUpdated": "2026-10-13T07:00:17.356Z" - }, - { - "cveId": "CVE-2026-75826", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-75826", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75826.json", - "dateUpdated": "2026-10-13T06:59:06.919Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-106139", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106139", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106139.json", - "dateUpdated": "2026-10-13T06:43:01.945Z" - }, - { - "cveId": "CVE-2026-93492", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-93492", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/93xxx/CVE-2026-93492.json", - "dateUpdated": "2026-10-13T06:56:18.293Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-13T06:40:15.470Z", - "numberOfChanges": 8, - "new": [ - { - "cveId": "CVE-2026-103316", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103316", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103316.json", - "dateUpdated": "2026-10-13T06:06:57.552Z" - }, - { - "cveId": "CVE-2026-108973", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108973", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108973.json", - "dateUpdated": "2026-10-13T06:15:08.553Z" - }, - { - "cveId": "CVE-2026-108974", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108974", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108974.json", - "dateUpdated": "2026-10-13T06:30:11.492Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-105318", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105318", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105318.json", - "dateUpdated": "2026-10-13T06:22:16.869Z" - }, - { - "cveId": "CVE-2026-42696", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42696", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42696.json", - "dateUpdated": "2026-10-13T06:13:18.105Z" - }, - { - "cveId": "CVE-2026-42697", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42697", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42697.json", - "dateUpdated": "2026-10-13T06:13:04.166Z" - }, - { - "cveId": "CVE-2026-66588", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66588", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66588.json", - "dateUpdated": "2026-10-13T06:09:30.600Z" - }, - { - "cveId": "CVE-2026-66651", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66651", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66651.json", - "dateUpdated": "2026-10-13T06:13:44.698Z" - } - ], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index 992eae3e89..05a9d5878b 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "48044dedaadad50d198ba53c697fe236bdc3aef9", + "upstream_commit": "4d2a535d62430e3aa7d681ac0693511d3426865a", "since_year": 2017, - "records": 331478, - "synced_at_utc": "2026-11-12T06:26:35.032607+00:00" + "records": 331485, + "synced_at_utc": "2026-11-12T07:31:25.091344+00:00" }