From 2cd685bf8d91184b0cd26ce3ebb9b7380e32cf29 Mon Sep 17 00:00:00 2001 From: Vulnerability Bot Date: Thu, 12 Nov 2026 08:37:20 +0100 Subject: [PATCH] CVE sync 2026-11-12T07:37:15Z --- data/2025/2xxx/CVE-2025-2399.json | 6 +- data/2025/47xxx/CVE-2025-47541.json | 141 +++++++++-------- data/2026/113xxx/CVE-2026-113408.json | 125 +++++++++++++++ data/2026/12xxx/CVE-2026-12507.json | 204 +++++++++++++++++++++++++ data/2026/12xxx/CVE-2026-12591.json | 129 ++++++++++++++++ data/2026/87xxx/CVE-2026-87772.json | 125 +++++++++++++++ data/2026/8xxx/CVE-2026-8331.json | 199 ++++++++++++++++++++++++ data/2026/8xxx/CVE-2026-8332.json | 199 ++++++++++++++++++++++++ data/2026/8xxx/CVE-2026-8333.json | 199 ++++++++++++++++++++++++ data/2026/96xxx/CVE-2026-96834.json | 122 ++++++++------- data/delta.json | 147 ++---------------- data/deltaLog.json | 211 ++++++++++++++------------ state/sync.json | 6 +- 13 files changed, 1454 insertions(+), 359 deletions(-) create mode 100644 data/2026/113xxx/CVE-2026-113408.json create mode 100644 data/2026/12xxx/CVE-2026-12507.json create mode 100644 data/2026/12xxx/CVE-2026-12591.json create mode 100644 data/2026/87xxx/CVE-2026-87772.json create mode 100644 data/2026/8xxx/CVE-2026-8331.json create mode 100644 data/2026/8xxx/CVE-2026-8332.json create mode 100644 data/2026/8xxx/CVE-2026-8333.json diff --git a/data/2025/2xxx/CVE-2025-2399.json b/data/2025/2xxx/CVE-2025-2399.json index 0f128d908f..5331f5f51d 100644 --- a/data/2025/2xxx/CVE-2025-2399.json +++ b/data/2025/2xxx/CVE-2025-2399.json @@ -8,14 +8,14 @@ "assignerShortName": "Mitsubishi", "dateReserved": "2025-03-17T08:30:11.608Z", "datePublished": "2026-03-10T04:40:00.599Z", - "dateUpdated": "2026-08-27T06:35:04.566Z" + "dateUpdated": "2026-11-12T07:09:39.167Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "e0f77b61-78fd-4786-b3fb-1ee347a748ad", "shortName": "Mitsubishi", - "dateUpdated": "2026-08-27T06:35:04.566Z" + "dateUpdated": "2026-11-12T07:09:39.167Z" }, "title": "Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series", "problemTypes": [ @@ -146,7 +146,7 @@ "versions": [ { "status": "affected", - "version": "System Number BND-2036W000 all versions" + "version": "System Number BND-2036W000 versions BK and prior" } ], "defaultStatus": "unaffected" diff --git a/data/2025/47xxx/CVE-2025-47541.json b/data/2025/47xxx/CVE-2025-47541.json index 40cb272c8f..ea43dc7e10 100644 --- a/data/2025/47xxx/CVE-2025-47541.json +++ b/data/2025/47xxx/CVE-2025-47541.json @@ -8,88 +8,91 @@ "assignerShortName": "Patchstack", "dateReserved": "2025-05-07T09:39:53.906Z", "datePublished": "2025-05-23T12:43:30.943Z", - "dateUpdated": "2026-04-29T09:51:55.529Z" + "dateUpdated": "2026-11-12T06:57:18.956Z" }, "containers": { "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-12T06:57:18.956Z" + }, + "title": "WordPress Mail Mint plugin <= 1.17.7 - Sensitive Data Exposure Vulnerability", + "datePublic": "2025-05-07T10:52:41.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in WPFunnels Team Mail Mint mail-mint allows Retrieve Embedded Sensitive Data.This issue affects Mail Mint: from n/a through 1.17.7.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in WPFunnels Team Mail Mint mail-mint allows Retrieve Embedded Sensitive Data.

This issue affects Mail Mint: from n/a through 1.17.7.

" + } + ] + } + ], "affected": [ { + "vendor": "WPFunnels Team", + "product": "Mail Mint", + "packageName": "mail-mint", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", - "packageName": "mail-mint", - "product": "Mail Mint", - "vendor": "WPFunnels", "versions": [ { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "1.17.7", "changes": [ { "at": "1.17.8", "status": "unaffected" } - ], - "lessThanOrEqual": "1.17.7", - "status": "affected", - "version": "0", - "versionType": "custom" + ] } ] } ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/mail-mint/vulnerability/wordpress-mail-mint-1-17-7-sensitive-data-exposure-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], "credits": [ { "lang": "en", - "type": "finder", - "value": "Denver Jackson | Patchstack Bug Bounty Program" - } - ], - "datePublic": "2026-04-01T16:40:08.398Z", - "descriptions": [ - { - "lang": "en", - "supportingMedia": [ - { - "base64": false, - "type": "text/html", - "value": "Insertion of Sensitive Information Into Sent Data vulnerability in WPFunnels Mail Mint mail-mint allows Retrieve Embedded Sensitive Data.

This issue affects Mail Mint: from n/a through <= 1.17.7.

" - } - ], - "value": "Insertion of Sensitive Information Into Sent Data vulnerability in WPFunnels Mail Mint mail-mint allows Retrieve Embedded Sensitive Data.This issue affects Mail Mint: from n/a through <= 1.17.7." - } - ], - "impacts": [ - { - "capecId": "CAPEC-37", - "descriptions": [ - { - "lang": "en", - "value": "Retrieve Embedded Sensitive Data" - } - ] + "value": "Denver Jackson | Patchstack Bug Bounty Program", + "type": "finder" } ], "metrics": [ { - "cvssV3_1": { - "attackComplexity": "LOW", - "attackVector": "NETWORK", - "availabilityImpact": "NONE", - "baseScore": 7.5, - "baseSeverity": "HIGH", - "confidentialityImpact": "HIGH", - "integrityImpact": "NONE", - "privilegesRequired": "NONE", - "scope": "UNCHANGED", - "userInteraction": "NONE", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", - "version": "3.1" - }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } - ] + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + } } ], "problemTypes": [ @@ -104,20 +107,34 @@ ] } ], - "providerMetadata": { - "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", - "shortName": "Patchstack", - "dateUpdated": "2026-04-29T09:51:55.529Z" - }, - "references": [ + "impacts": [ { - "tags": [ - "vdb-entry" - ], - "url": "https://patchstack.com/database/Wordpress/Plugin/mail-mint/vulnerability/wordpress-mail-mint-1-17-7-sensitive-data-exposure-vulnerability?_s_id=cve" + "capecId": "CAPEC-37", + "descriptions": [ + { + "lang": "en", + "value": "Retrieve Embedded Sensitive Data" + } + ] } ], - "title": "WordPress Mail Mint plugin <= 1.17.7 - Sensitive Data Exposure Vulnerability" + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Mail Mint plugin to the latest available version (at least 1.17.8).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Mail Mint plugin to the latest available version (at least 1.17.8)." + } + ] + } + ], + "tags": [ + "x_known-exploited-vulnerability", + "x_open-source" + ] }, "adp": [ { diff --git a/data/2026/113xxx/CVE-2026-113408.json b/data/2026/113xxx/CVE-2026-113408.json new file mode 100644 index 0000000000..6fe572aef9 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113408.json @@ -0,0 +1,125 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113408", + "assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", + "state": "PUBLISHED", + "assignerShortName": "GitLab", + "dateReserved": "2026-10-20T06:03:58.616Z", + "datePublished": "2026-11-12T07:09:19.100Z", + "dateUpdated": "2026-11-12T07:09:19.100Z" + }, + "containers": { + "cna": { + "title": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Git", + "descriptions": [ + { + "lang": "en", + "value": "Path traversal in Git allows writing to arbitrary file via cloning and committing to bad repository" + } + ], + "affected": [ + { + "vendor": "Git", + "product": "Git", + "repo": "https://gitlab.com/git-scm/git", + "cpes": [ + "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*" + ], + "versions": [ + { + "version": "2.50.1", + "status": "affected" + }, + { + "version": "2.51.2", + "status": "affected" + }, + { + "version": "2.52.0", + "status": "affected" + }, + { + "version": "2.53.0", + "status": "affected" + }, + { + "version": "2.54.0", + "status": "affected" + }, + { + "version": "2.55.0", + "status": "affected" + }, + { + "version": "2.56.0", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", + "cweId": "CWE-22", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.com/gitlab-org/git/-/work_items/809" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseScore": 3.3, + "baseSeverity": "LOW" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "Upgrade to versions 2.50.2, 2.51.3, 2.52.1, 2.53.1, 2.54.1, 2.55.1, 2.56.1 or above." + } + ], + "credits": [ + { + "lang": "en", + "value": "ehdgks0627, un3xploitable", + "type": "finder" + } + ], + "providerMetadata": { + "orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", + "shortName": "GitLab", + "dateUpdated": "2026-11-12T07:09:19.100Z" + } + } + } +} \ No newline at end of file diff --git a/data/2026/12xxx/CVE-2026-12507.json b/data/2026/12xxx/CVE-2026-12507.json new file mode 100644 index 0000000000..fa78197f78 --- /dev/null +++ b/data/2026/12xxx/CVE-2026-12507.json @@ -0,0 +1,204 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-12507", + "assignerOrgId": "0fc0942c-577d-436f-ae8e-945763c79b02", + "state": "PUBLISHED", + "assignerShortName": "Zohocorp", + "dateReserved": "2026-06-17T10:49:52.198Z", + "datePublished": "2026-11-12T06:48:54.703Z", + "dateUpdated": "2026-11-12T06:48:54.703Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "0fc0942c-577d-436f-ae8e-945763c79b02", + "shortName": "Zohocorp", + "dateUpdated": "2026-11-12T06:48:54.703Z" + }, + "title": "Authenticated remote code execution", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-89", + "description": "CWE-89 – SQL Injection", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-242", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-242 – Code Injection" + } + ] + } + ], + "affected": [ + { + "vendor": "Zohocorp", + "product": "AssetExplorer", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "7860", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Zohocorp", + "product": "ServiceDesk Plus", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "15290", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Zohocorp", + "product": "ServiceDesk Plus MSP", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "15150", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Zohocorp", + "product": "SupportCenter Plus", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "15150", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "cpeApplicability": [ + { + "operator": "OR", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zohocorp:assetexplorer:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "7860" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zohocorp:servicedesk_plus:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "15290" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zohocorp:servicedesk_plus_msp:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "15150" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zohocorp:supportcenter_plus:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "15150" + } + ] + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Zohocorp ManageEngine AssetExplorer versions below 7860, ServiceDesk Plus versions below 15290, ServiceDesk Plus MSP versions below 15150, and SupportCenter Plus versions below 15150 are affected by a authenticated remote code execution vulnerability in the Reports module. An authenticated user with the Create Query Reports permission could exploit specially crafted database queries to execute arbitrary commands on the underlying server.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Zohocorp ManageEngine AssetExplorer versions below 7860, ServiceDesk Plus versions below 15290, ServiceDesk Plus MSP versions below 15150, and SupportCenter Plus versions below 15150 are affected by a authenticated remote code execution vulnerability in the Reports module. An authenticated user with the Create Query Reports permission could exploit specially crafted database queries to execute arbitrary commands on the underlying server." + } + ] + } + ], + "references": [ + { + "url": "https://www.manageengine.com/products/service-desk/cve-2026-12507.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "CRITICAL", + "baseScore": 9.1, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/12xxx/CVE-2026-12591.json b/data/2026/12xxx/CVE-2026-12591.json new file mode 100644 index 0000000000..da35ecbc2e --- /dev/null +++ b/data/2026/12xxx/CVE-2026-12591.json @@ -0,0 +1,129 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-12591", + "assignerOrgId": "0fc0942c-577d-436f-ae8e-945763c79b02", + "state": "PUBLISHED", + "assignerShortName": "Zohocorp", + "dateReserved": "2026-06-18T09:09:27.284Z", + "datePublished": "2026-11-12T06:55:31.695Z", + "dateUpdated": "2026-11-12T06:55:31.695Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "0fc0942c-577d-436f-ae8e-945763c79b02", + "shortName": "Zohocorp", + "dateUpdated": "2026-11-12T06:55:31.695Z" + }, + "title": "Privilege Escalation", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-862", + "description": "CWE-862 – Missing Authorization", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-122", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-122 – Privilege Abuse" + } + ] + } + ], + "affected": [ + { + "vendor": "Zohocorp", + "product": "M365 Manager Plus", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "4818", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "cpeApplicability": [ + { + "operator": "OR", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zohocorp:m365_manager_plus:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "4818" + } + ] + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Zohocorp ManageEngine M365 Manager Plus versions below 4818 is affected by an authenticated technician may exploit insufficient permission validation in the delegated administration interface to escalate privileges beyond their intended scope, which could result in remote code execution during administrative processing.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Zohocorp ManageEngine M365 Manager Plus versions below 4818 is affected by an authenticated technician may exploit insufficient permission validation in the delegated administration interface to escalate privileges beyond their intended scope, which could result in remote code execution during administrative processing." + } + ] + } + ], + "references": [ + { + "url": "https://www.manageengine.com/microsoft-365-management-reporting/CVE-2026-12591.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "CRITICAL", + "baseScore": 9.9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/87xxx/CVE-2026-87772.json b/data/2026/87xxx/CVE-2026-87772.json new file mode 100644 index 0000000000..b0fb70b530 --- /dev/null +++ b/data/2026/87xxx/CVE-2026-87772.json @@ -0,0 +1,125 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-87772", + "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", + "state": "PUBLISHED", + "assignerShortName": "TR-CERT", + "dateReserved": "2026-09-09T08:22:44.834Z", + "datePublished": "2026-11-12T06:35:54.306Z", + "dateUpdated": "2026-11-12T06:35:54.306Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", + "shortName": "TR-CERT", + "dateUpdated": "2026-11-12T06:35:54.306Z" + }, + "title": "Unauthenticated Polkit Privilege Escalation in TÜBİTAK BİLGEM's Pardus About", + "datePublic": "2026-11-12T06:32:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-863", + "description": "CWE-863 Incorrect Authorization", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-233", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-233 Privilege Escalation" + } + ] + } + ], + "affected": [ + { + "vendor": "TÜBİTAK BİLGEM Software Technologies Research Institute", + "product": "Pardus About", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "1.2.5", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows Privilege Escalation.\n\nThis issue affects Pardus About: before 1.2.5.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows Privilege Escalation.

This issue affects Pardus About: before 1.2.5.

" + } + ] + } + ], + "references": [ + { + "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1521", + "tags": [ + "government-resource" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Sevban DÖNMEZ", + "type": "finder" + } + ], + "source": { + "defect": [ + "TR-26-1521" + ], + "advisory": "TR-26-1521", + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/8xxx/CVE-2026-8331.json b/data/2026/8xxx/CVE-2026-8331.json new file mode 100644 index 0000000000..080530cdfe --- /dev/null +++ b/data/2026/8xxx/CVE-2026-8331.json @@ -0,0 +1,199 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-8331", + "assignerOrgId": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", + "state": "PUBLISHED", + "assignerShortName": "Microchip", + "dateReserved": "2026-05-11T15:27:37.104Z", + "datePublished": "2026-11-12T06:21:04.118Z", + "dateUpdated": "2026-11-12T06:26:09.676Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", + "shortName": "Microchip", + "dateUpdated": "2026-11-12T06:26:09.676Z" + }, + "title": "TimePictra ermote code execution via file upload", + "datePublic": "2026-11-12T06:20:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-434", + "description": "CWE-434 Unrestricted upload of file with dangerous type", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-1", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs" + } + ] + } + ], + "affected": [ + { + "vendor": "Microchip", + "product": "TimePictra", + "collectionURL": "https://www.microchip.com/en-us/products/clock-and-timing/systems/synchronization-management-monitoring/timepictra", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "12.0", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution." + } + ] + } + ], + "references": [ + { + "url": "https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timepictra-remote-code-execution-via-file-upload", + "tags": [ + "vendor-advisory" + ] + }, + { + "url": "https://www.gruppotim.it/en/footer/TIM-red-team.html", + "tags": [ + "third-party-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "Upgrade to TimePictra 12.0 platform or later", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Upgrade to TimePictra 12.0 platform or later

" + } + ] + } + ], + "timeline": [ + { + "time": "2026-04-09T13:36:00.000Z", + "lang": "en", + "value": "Initial report" + } + ], + "credits": [ + { + "lang": "en", + "value": "Dario Emilio Bertani", + "type": "finder" + }, + { + "lang": "en", + "value": "Andrea Sindoni", + "type": "finder" + }, + { + "lang": "en", + "value": "Antonio Carriero", + "type": "finder" + }, + { + "lang": "en", + "value": "Marco Manieri", + "type": "finder" + }, + { + "lang": "en", + "value": "Vito Pistillo", + "type": "finder" + }, + { + "lang": "en", + "value": "Davide Renna", + "type": "finder" + }, + { + "lang": "en", + "value": "Renna Leone", + "type": "finder" + }, + { + "lang": "en", + "value": "Massimiliano Brolli", + "type": "finder" + }, + { + "lang": "en", + "value": "TIM Security Red Team Research", + "type": "reporter" + } + ], + "source": { + "advisory": "PSIRT-137", + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/8xxx/CVE-2026-8332.json b/data/2026/8xxx/CVE-2026-8332.json new file mode 100644 index 0000000000..09ddabad4f --- /dev/null +++ b/data/2026/8xxx/CVE-2026-8332.json @@ -0,0 +1,199 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-8332", + "assignerOrgId": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", + "state": "PUBLISHED", + "assignerShortName": "Microchip", + "dateReserved": "2026-05-11T15:27:51.427Z", + "datePublished": "2026-11-12T06:19:49.994Z", + "dateUpdated": "2026-11-12T06:30:02.426Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", + "shortName": "Microchip", + "dateUpdated": "2026-11-12T06:30:02.426Z" + }, + "title": "TimePictra root password hardcoded in installation files", + "datePublic": "2026-11-12T06:29:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-798", + "description": "CWE-798", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-205", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-205" + } + ] + } + ], + "affected": [ + { + "vendor": "Microchip", + "product": "TimePictra", + "collectionURL": "https://www.microchip.com/en-us/products/clock-and-timing/systems/synchronization-management-monitoring/timepictra", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "12.0", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to those files to obtain privileged credentials", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to those files to obtain privileged credentials" + } + ] + } + ], + "references": [ + { + "url": "https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timepictra-root-password-hardcoded-in-installation-files", + "tags": [ + "vendor-advisory" + ] + }, + { + "url": "https://www.gruppotim.it/en/footer/TIM-red-team.html", + "tags": [ + "third-party-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "Upgrade to TimePictra 12.0 platform or later", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Upgrade to TimePictra 12.0 platform or later" + } + ] + } + ], + "timeline": [ + { + "time": "2026-04-09T13:36:00.000Z", + "lang": "en", + "value": "Initial report" + } + ], + "credits": [ + { + "lang": "en", + "value": "Dario Emilio Bertani", + "type": "finder" + }, + { + "lang": "en", + "value": "Andrea Sindoni", + "type": "finder" + }, + { + "lang": "en", + "value": "Antonio Carriero", + "type": "finder" + }, + { + "lang": "en", + "value": "Marco Manieri", + "type": "finder" + }, + { + "lang": "en", + "value": "Vito Pistillo", + "type": "finder" + }, + { + "lang": "en", + "value": "Davide Renna", + "type": "finder" + }, + { + "lang": "en", + "value": "Renna Leone", + "type": "finder" + }, + { + "lang": "en", + "value": "Massimiliano Brolli", + "type": "finder" + }, + { + "lang": "en", + "value": "TIM Security Red Team Research", + "type": "reporter" + } + ], + "source": { + "advisory": "PSIRT-138", + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/8xxx/CVE-2026-8333.json b/data/2026/8xxx/CVE-2026-8333.json new file mode 100644 index 0000000000..504099dea6 --- /dev/null +++ b/data/2026/8xxx/CVE-2026-8333.json @@ -0,0 +1,199 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-8333", + "assignerOrgId": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", + "state": "PUBLISHED", + "assignerShortName": "Microchip", + "dateReserved": "2026-05-11T15:28:04.746Z", + "datePublished": "2026-11-12T06:18:29.144Z", + "dateUpdated": "2026-11-12T06:30:50.933Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", + "shortName": "Microchip", + "dateUpdated": "2026-11-12T06:30:50.933Z" + }, + "title": "TimePictra Stored Cross-site Scripting", + "datePublic": "2026-11-12T06:17:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-79", + "description": "CWE-79", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-63", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-63" + } + ] + } + ], + "affected": [ + { + "vendor": "Microchip", + "product": "TimePictra", + "collectionURL": "https://www.microchip.com/en-us/products/clock-and-timing/systems/synchronization-management-monitoring/timepictra", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "12.0", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated, low-privileged attacker to store malicious script content that executes when another user views the affected page", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated, low-privileged attacker to store malicious script content that executes when another user views the affected page" + } + ] + } + ], + "references": [ + { + "url": "https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timepictra-stored-cross-site-scripting-vulnerability", + "tags": [ + "vendor-advisory" + ] + }, + { + "url": "https://www.gruppotim.it/en/footer/TIM-red-team.html", + "tags": [ + "third-party-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "CRITICAL", + "baseScore": 9.4, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "Upgrade to TimePictra 12.0 platform or later", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Upgrade to TimePictra 12.0 platform or later

" + } + ] + } + ], + "timeline": [ + { + "time": "2026-04-09T13:36:00.000Z", + "lang": "en", + "value": "Initial report" + } + ], + "credits": [ + { + "lang": "en", + "value": "Dario Emilio Bertani", + "type": "finder" + }, + { + "lang": "en", + "value": "Andrea Sindoni", + "type": "finder" + }, + { + "lang": "en", + "value": "Antonio Carriero", + "type": "finder" + }, + { + "lang": "en", + "value": "Marco Manieri", + "type": "finder" + }, + { + "lang": "en", + "value": "Vito Pistillo", + "type": "finder" + }, + { + "lang": "en", + "value": "Davide Renna", + "type": "finder" + }, + { + "lang": "en", + "value": "Renna Leone", + "type": "finder" + }, + { + "lang": "en", + "value": "Massimiliano Brolli", + "type": "finder" + }, + { + "lang": "en", + "value": "TIM Security Red Team Research", + "type": "reporter" + } + ], + "source": { + "advisory": "PSIRT-139", + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96834.json b/data/2026/96xxx/CVE-2026-96834.json index f6da29c335..b36d9620b7 100644 --- a/data/2026/96xxx/CVE-2026-96834.json +++ b/data/2026/96xxx/CVE-2026-96834.json @@ -8,52 +8,43 @@ "assignerShortName": "Patchstack", "dateReserved": "2026-09-23T17:30:22.499Z", "datePublished": "2026-09-30T12:27:45.550Z", - "dateUpdated": "2026-09-30T13:27:13.706Z" + "dateUpdated": "2026-11-12T06:58:58.882Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack", - "dateUpdated": "2026-09-30T12:27:45.550Z" + "dateUpdated": "2026-11-12T06:58:58.882Z" }, "title": "WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability", - "problemTypes": [ + "datePublic": "2026-09-24T11:15:30.000Z", + "descriptions": [ { - "descriptions": [ + "lang": "en", + "value": "Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Retrieve Embedded Sensitive Data.This issue affects GiveWP: from n/a through 4.16.9.", + "supportingMedia": [ { - "lang": "en", - "cweId": "CWE-862", - "description": "CWE-862 Missing Authorization", - "type": "CWE" - } - ] - } - ], - "impacts": [ - { - "capecId": "CAPEC-37", - "descriptions": [ - { - "lang": "en", - "value": "CAPEC-37 Retrieve Embedded Sensitive Data" + "type": "text/html", + "base64": false, + "value": "Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Retrieve Embedded Sensitive Data.

This issue affects GiveWP: from n/a through 4.16.9.

" } ] } ], "affected": [ { - "vendor": "Nexcess", + "vendor": "Liquid Web / StellarWP", + "product": "GiveWP", + "packageName": "give", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", - "packageName": "give", - "product": "GiveWP", "versions": [ { - "lessThanOrEqual": "4.16.9", - "status": "affected", - "version": "n/a", + "version": "0", "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "4.16.9", "changes": [ { "at": "4.17.0", @@ -64,25 +55,19 @@ ] } ], - "descriptions": [ - { - "lang": "en", - "supportingMedia": [ - { - "base64": false, - "type": "text/html", - "value": "Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions." - } - ], - "value": "Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions." - } - ], "references": [ { + "url": "https://patchstack.com/database/wordpress/plugin/give/vulnerability/wordpress-givewp-plugin-4-16-9-sensitive-data-exposure-vulnerability?_s_id=cve", "tags": [ "vdb-entry" - ], - "url": "https://patchstack.com/database/wordpress/plugin/give/vulnerability/wordpress-givewp-plugin-4-16-9-sensitive-data-exposure-vulnerability?_s_id=cve" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Intrudify | Patchstack Bug Bounty Program", + "type": "finder" } ], "metrics": [ @@ -95,6 +80,10 @@ } ], "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", @@ -102,41 +91,50 @@ "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", - "availabilityImpact": "NONE", - "version": "3.1", - "baseSeverity": "MEDIUM", - "baseScore": 6.5, - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + "availabilityImpact": "NONE" } } ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-862", + "description": "Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-37", + "descriptions": [ + { + "lang": "en", + "value": "Retrieve Embedded Sensitive Data" + } + ] + } + ], "solutions": [ { "lang": "en", + "value": "Update the WordPress GiveWP plugin to the latest available version (at least 4.17.0).", "supportingMedia": [ { - "base64": false, "type": "text/html", + "base64": false, "value": "Update the WordPress GiveWP plugin to the latest available version (at least 4.17.0)." } - ], - "value": "Update the WordPress GiveWP plugin to the latest available version (at least 4.17.0)." + ] } ], - "credits": [ - { - "lang": "en", - "type": "finder", - "user": "00000000-0000-4000-9000-000000000000", - "value": "Intrudify | Patchstack Bug Bounty Program" - } - ], - "source": { - "discovery": "EXTERNAL" - }, - "x_generator": { - "engine": "Vulnogram 0.2.0" - } + "tags": [ + "x_known-exploited-vulnerability", + "x_open-source" + ] }, "adp": [ { diff --git a/data/delta.json b/data/delta.json index 607c4805fd..07865f25ae 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,140 +1,21 @@ { - "fetchTime": "2026-11-12T06:13:57.937Z", - "numberOfChanges": 22, + "fetchTime": "2026-11-12T07:11:08.547Z", + "numberOfChanges": 2, "new": [ { - "cveId": "CVE-2026-106027", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106027", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106027.json", - "dateUpdated": "2026-11-12T06:00:06.145Z" - }, - { - "cveId": "CVE-2026-110041", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110041", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110041.json", - "dateUpdated": "2026-11-12T06:00:06.327Z" - }, - { - "cveId": "CVE-2026-110072", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110072", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110072.json", - "dateUpdated": "2026-11-12T06:00:06.497Z" - }, - { - "cveId": "CVE-2026-110959", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110959", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110959.json", - "dateUpdated": "2026-11-12T06:00:06.674Z" - }, - { - "cveId": "CVE-2026-118421", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118421", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118421.json", - "dateUpdated": "2026-11-12T06:00:06.857Z" - }, - { - "cveId": "CVE-2026-118531", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118531", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118531.json", - "dateUpdated": "2026-11-12T06:00:07.049Z" - }, - { - "cveId": "CVE-2026-118597", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118597", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118597.json", - "dateUpdated": "2026-11-12T06:09:34.999Z" - }, - { - "cveId": "CVE-2026-119039", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119039", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119039.json", - "dateUpdated": "2026-11-12T06:00:07.223Z" - }, - { - "cveId": "CVE-2026-119040", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119040", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119040.json", - "dateUpdated": "2026-11-12T06:00:07.503Z" - }, - { - "cveId": "CVE-2026-121498", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121498", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121498.json", - "dateUpdated": "2026-11-12T06:00:07.678Z" - }, - { - "cveId": "CVE-2026-122003", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122003", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122003.json", - "dateUpdated": "2026-11-12T06:00:08.273Z" - }, - { - "cveId": "CVE-2026-123044", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123044", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123044.json", - "dateUpdated": "2026-11-12T06:00:08.453Z" - }, - { - "cveId": "CVE-2026-123092", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123092", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123092.json", - "dateUpdated": "2026-11-12T06:00:08.632Z" - }, - { - "cveId": "CVE-2026-124647", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124647", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124647.json", - "dateUpdated": "2026-11-12T06:00:08.827Z" - }, - { - "cveId": "CVE-2026-124648", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124648", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124648.json", - "dateUpdated": "2026-11-12T06:00:08.998Z" - }, - { - "cveId": "CVE-2026-124652", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124652", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124652.json", - "dateUpdated": "2026-11-12T06:00:09.181Z" - }, - { - "cveId": "CVE-2026-124653", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124653", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124653.json", - "dateUpdated": "2026-11-12T06:00:09.357Z" - }, - { - "cveId": "CVE-2026-124665", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124665", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124665.json", - "dateUpdated": "2026-11-12T06:00:09.578Z" - }, - { - "cveId": "CVE-2026-124814", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124814", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124814.json", - "dateUpdated": "2026-11-12T06:00:09.772Z" - }, - { - "cveId": "CVE-2026-124815", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124815", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124815.json", - "dateUpdated": "2026-11-12T06:00:09.952Z" - }, - { - "cveId": "CVE-2026-124817", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124817", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124817.json", - "dateUpdated": "2026-11-12T06:00:10.134Z" - }, - { - "cveId": "CVE-2026-76792", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-76792", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76792.json", - "dateUpdated": "2026-11-12T06:00:10.307Z" + "cveId": "CVE-2026-113408", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113408", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113408.json", + "dateUpdated": "2026-11-12T07:09:19.100Z" + } + ], + "updated": [ + { + "cveId": "CVE-2025-2399", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-2399", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2399.json", + "dateUpdated": "2026-11-12T07:09:39.167Z" } ], - "updated": [], "error": [] } \ No newline at end of file diff --git a/data/deltaLog.json b/data/deltaLog.json index 6ad85f61e0..7d73020a0f 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,119 @@ [ + { + "fetchTime": "2026-11-12T07:11:08.547Z", + "numberOfChanges": 2, + "new": [ + { + "cveId": "CVE-2026-113408", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113408", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113408.json", + "dateUpdated": "2026-11-12T07:09:19.100Z" + } + ], + "updated": [ + { + "cveId": "CVE-2025-2399", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-2399", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2399.json", + "dateUpdated": "2026-11-12T07:09:39.167Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T06:59:01.781Z", + "numberOfChanges": 3, + "new": [ + { + "cveId": "CVE-2026-12591", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-12591", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12591.json", + "dateUpdated": "2026-11-12T06:55:31.695Z" + } + ], + "updated": [ + { + "cveId": "CVE-2025-47541", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-47541", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/47xxx/CVE-2025-47541.json", + "dateUpdated": "2026-11-12T06:57:18.956Z" + }, + { + "cveId": "CVE-2026-96834", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96834", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96834.json", + "dateUpdated": "2026-11-12T06:58:58.882Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T06:53:21.344Z", + "numberOfChanges": 1, + "new": [ + { + "cveId": "CVE-2026-12507", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-12507", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12507.json", + "dateUpdated": "2026-11-12T06:48:54.703Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-12T06:40:33.493Z", + "numberOfChanges": 3, + "new": [ + { + "cveId": "CVE-2026-87772", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-87772", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/87xxx/CVE-2026-87772.json", + "dateUpdated": "2026-11-12T06:35:54.306Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-8332", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-8332", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8332.json", + "dateUpdated": "2026-11-12T06:30:02.426Z" + }, + { + "cveId": "CVE-2026-8333", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-8333", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8333.json", + "dateUpdated": "2026-11-12T06:30:50.933Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T06:28:44.744Z", + "numberOfChanges": 3, + "new": [ + { + "cveId": "CVE-2026-8331", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-8331", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8331.json", + "dateUpdated": "2026-11-12T06:26:09.676Z" + }, + { + "cveId": "CVE-2026-8332", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-8332", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8332.json", + "dateUpdated": "2026-11-12T06:19:49.994Z" + }, + { + "cveId": "CVE-2026-8333", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-8333", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8333.json", + "dateUpdated": "2026-11-12T06:18:29.144Z" + } + ], + "updated": [], + "error": [] + }, { "fetchTime": "2026-11-12T06:13:57.937Z", "numberOfChanges": 22, @@ -848481,101 +848596,5 @@ ], "updated": [], "error": [] - }, - { - "fetchTime": "2026-10-13T07:08:38.373Z", - "numberOfChanges": 5, - "new": [ - { - "cveId": "CVE-2026-108975", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108975", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108975.json", - "dateUpdated": "2026-10-13T06:45:19.180Z" - }, - { - "cveId": "CVE-2026-109106", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109106", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109106.json", - "dateUpdated": "2026-10-13T07:00:17.356Z" - }, - { - "cveId": "CVE-2026-75826", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-75826", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75826.json", - "dateUpdated": "2026-10-13T06:59:06.919Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-106139", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106139", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106139.json", - "dateUpdated": "2026-10-13T06:43:01.945Z" - }, - { - "cveId": "CVE-2026-93492", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-93492", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/93xxx/CVE-2026-93492.json", - "dateUpdated": "2026-10-13T06:56:18.293Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-13T06:40:15.470Z", - "numberOfChanges": 8, - "new": [ - { - "cveId": "CVE-2026-103316", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103316", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103316.json", - "dateUpdated": "2026-10-13T06:06:57.552Z" - }, - { - "cveId": "CVE-2026-108973", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108973", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108973.json", - "dateUpdated": "2026-10-13T06:15:08.553Z" - }, - { - "cveId": "CVE-2026-108974", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108974", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108974.json", - "dateUpdated": "2026-10-13T06:30:11.492Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-105318", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105318", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105318.json", - "dateUpdated": "2026-10-13T06:22:16.869Z" - }, - { - "cveId": "CVE-2026-42696", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42696", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42696.json", - "dateUpdated": "2026-10-13T06:13:18.105Z" - }, - { - "cveId": "CVE-2026-42697", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42697", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42697.json", - "dateUpdated": "2026-10-13T06:13:04.166Z" - }, - { - "cveId": "CVE-2026-66588", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66588", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66588.json", - "dateUpdated": "2026-10-13T06:09:30.600Z" - }, - { - "cveId": "CVE-2026-66651", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66651", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66651.json", - "dateUpdated": "2026-10-13T06:13:44.698Z" - } - ], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index 992eae3e89..05a9d5878b 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "48044dedaadad50d198ba53c697fe236bdc3aef9", + "upstream_commit": "4d2a535d62430e3aa7d681ac0693511d3426865a", "since_year": 2017, - "records": 331478, - "synced_at_utc": "2026-11-12T06:26:35.032607+00:00" + "records": 331485, + "synced_at_utc": "2026-11-12T07:31:25.091344+00:00" }