VULN/vuln-cve
1
0 Fork 0
Code Pull Requests Actions Activity

CVE sync 2026-11-13T06:30:59Z

Browse Source
This commit is contained in:
Vulnerability Bot committed 2026-11-13 07:31:03 +01:00
1 parent b9c64be95d
commit 355ea74f98
24 files changed
+2041 -478
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

data/2026/109xxx/CVE-2026-109832.json
+3 -3
View File
@@ -8,7 +8,7 @@
"assignerShortName": "redhat",
"dateReserved": "2026-10-13T06:16:06.797Z",
"datePublished": "2026-10-13T11:36:13.397Z",
"dateUpdated": "2026-11-12T01:58:16.384Z"
"dateUpdated": "2026-11-13T05:59:41.563Z"
},
"containers": {
"cna": {
@@ -89,7 +89,7 @@
"product": "Red Hat Enterprise Linux 10",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "gnome-remote-desktop",
"defaultStatus": "affected",
"defaultStatus": "unaffected",
"cpes": [
"cpe:/a:redhat:enterprise_linux:10"
]
@@ -179,7 +179,7 @@
"providerMetadata": {
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat",
"dateUpdated": "2026-11-12T01:58:16.384Z"
"dateUpdated": "2026-11-13T05:59:41.563Z"
},
"x_generator": {
"engine": "cvelib 1.8.0"
data/2026/116xxx/CVE-2026-116059.json
+83
View File
@@ -0,0 +1,83 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-116059",
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"state": "PUBLISHED",
"assignerShortName": "WPScan",
"dateReserved": "2026-10-24T21:42:41.322Z",
"datePublished": "2026-11-13T06:00:06.766Z",
"dateUpdated": "2026-11-13T06:00:06.766Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan",
"dateUpdated": "2026-11-13T06:00:06.766Z"
},
"title": "LetsRecover <= 1.2.0 - Unauthenticated SQL Injection",
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-89 SQL Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Unknown",
"product": "LetsRecover",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThanOrEqual": "1.2.0"
}
],
"defaultStatus": "unknown"
}
],
"descriptions": [
{
"lang": "en",
"value": "The LetsRecover WordPress plugin through 1.2.0 does not sanitize a user-supplied value that is used as a database column name in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to append SQL to the query and read arbitrary data from the database, which is then returned through a second unauthenticated action."
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/4a15043f-99f3-4ba5-aecf-c9eec77220a3/",
"tags": [
"exploit",
"vdb-entry",
"technical-description"
]
}
],
"credits": [
{
"lang": "en",
"value": "Naoki Kawahigashi",
"type": "finder"
},
{
"lang": "en",
"value": "WPScan",
"type": "coordinator"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
}
}
data/2026/118xxx/CVE-2026-118063.json
+78
View File
@@ -0,0 +1,78 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-118063",
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"state": "PUBLISHED",
"assignerShortName": "WPScan",
"dateReserved": "2026-10-27T15:38:33.514Z",
"datePublished": "2026-11-13T06:00:06.947Z",
"dateUpdated": "2026-11-13T06:00:06.947Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan",
"dateUpdated": "2026-11-13T06:00:06.947Z"
},
"title": "Advance Guest Post <= 1.9 - Unauthenticated Arbitrary File Upload via gallery_action",
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-434 Unrestricted Upload of File with Dangerous Type",
"lang": "en",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Unknown",
"product": "Advance Guest Post",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThanOrEqual": "1.9"
}
],
"defaultStatus": "unknown"
}
],
"descriptions": [
{
"lang": "en",
"value": "The Advance Guest Post WordPress plugin through 1.9 does not properly validate uploaded files, relying on a case-sensitive and incomplete extension check that unauthenticated users can trivially bypass, allowing them to upload arbitrary files, including executable PHP variants, into a web-reachable directory, which can lead to remote code execution depending on the server configuration."
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/45ea832a-9ed9-4f75-bc84-1b09794d362a/",
"tags": [
"exploit",
"vdb-entry",
"technical-description"
]
}
],
"credits": [
{
"lang": "en",
"value": "WPScan",
"type": "coordinator"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
}
}
data/2026/118xxx/CVE-2026-118064.json
+83
View File
@@ -0,0 +1,83 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-118064",
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"state": "PUBLISHED",
"assignerShortName": "WPScan",
"dateReserved": "2026-10-27T15:38:38.123Z",
"datePublished": "2026-11-13T06:00:07.125Z",
"dateUpdated": "2026-11-13T06:00:07.125Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan",
"dateUpdated": "2026-11-13T06:00:07.125Z"
},
"title": "Advance Guest Post <= 1.9 - Unauthenticated Arbitrary File Upload via featured_action",
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-434 Unrestricted Upload of File with Dangerous Type",
"lang": "en",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Unknown",
"product": "Advance Guest Post",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThanOrEqual": "1.9"
}
],
"defaultStatus": "unknown"
}
],
"descriptions": [
{
"lang": "en",
"value": "The Advance Guest Post WordPress plugin through 1.9 does not properly restrict or validate file uploads, authorizing an upload action with a nonce exposed to every front-end visitor and checking only a file's leading bytes, allowing unauthenticated users to upload arbitrary PHP files and execute code remotely.\n\nSuccessful exploitation additionally requires the target to run PHP 7.x; on PHP 8.0 and later the vulnerable code path raises a fatal error before the file is written."
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/897a812b-b84b-4422-9f3b-20402a0a8af5/",
"tags": [
"exploit",
"vdb-entry",
"technical-description"
]
}
],
"credits": [
{
"lang": "en",
"value": "Muni Nitish Kumar Yaddala",
"type": "finder"
},
{
"lang": "en",
"value": "WPScan",
"type": "coordinator"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
}
}
data/2026/118xxx/CVE-2026-118065.json
+83
View File
@@ -0,0 +1,83 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-118065",
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"state": "PUBLISHED",
"assignerShortName": "WPScan",
"dateReserved": "2026-10-27T15:38:42.223Z",
"datePublished": "2026-11-13T06:00:07.303Z",
"dateUpdated": "2026-11-13T06:00:07.303Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan",
"dateUpdated": "2026-11-13T06:00:07.303Z"
},
"title": "Advance Guest Post <= 1.9 - Unauthenticated Arbitrary Attachment Deletion",
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-862 Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Unknown",
"product": "Advance Guest Post",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThanOrEqual": "1.9"
}
],
"defaultStatus": "unknown"
}
],
"descriptions": [
{
"lang": "en",
"value": "The Advance Guest Post WordPress plugin through 1.9 does not perform any authorization or ownership check when deleting media attachments, relying only on a nonce exposed to every site visitor, allowing unauthenticated users to permanently delete arbitrary Media Library attachments and their files."
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/77771b0e-a3e7-4dd6-b5b4-c179c6db1deb/",
"tags": [
"exploit",
"vdb-entry",
"technical-description"
]
}
],
"credits": [
{
"lang": "en",
"value": "Muni Nitish Kumar Yaddala",
"type": "finder"
},
{
"lang": "en",
"value": "WPScan",
"type": "coordinator"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
}
}
data/2026/120xxx/CVE-2026-120407.json
+83
View File
@@ -0,0 +1,83 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-120407",
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"state": "PUBLISHED",
"assignerShortName": "WPScan",
"dateReserved": "2026-11-02T10:54:18.398Z",
"datePublished": "2026-11-13T06:00:07.477Z",
"dateUpdated": "2026-11-13T06:00:07.477Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan",
"dateUpdated": "2026-11-13T06:00:07.477Z"
},
"title": "Contact Form 7 < 6.2.5 - Editor+ Sensitive User Data Disclosure via Form Default Values",
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-200 Information Exposure",
"lang": "en",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Unknown",
"product": "Contact Form 7",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "6.2.5"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "The Contact Form 7 WordPress plugin before 6.2.5 does not restrict which user properties a form field's default value can be populated from, allowing users with the Editor role and above to obtain the password hash and sensitive user meta (such as two-factor secrets) of higher-privileged users, including administrators, who view and submit the form."
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/a981358b-6736-4d46-9352-b57a11dbcb54/",
"tags": [
"exploit",
"vdb-entry",
"technical-description"
]
}
],
"credits": [
{
"lang": "en",
"value": "Epihack Bénin",
"type": "finder"
},
{
"lang": "en",
"value": "WPScan",
"type": "coordinator"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
}
}
data/2026/121xxx/CVE-2026-121853.json
+83
View File
@@ -0,0 +1,83 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-121853",
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"state": "PUBLISHED",
"assignerShortName": "WPScan",
"dateReserved": "2026-11-04T09:20:04.668Z",
"datePublished": "2026-11-13T06:00:07.647Z",
"dateUpdated": "2026-11-13T06:00:07.647Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan",
"dateUpdated": "2026-11-13T06:00:07.647Z"
},
"title": "AppPresser < 5.0.0 - Unauthenticated Plugin and Theme Version Disclosure",
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-200 Information Exposure",
"lang": "en",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Unknown",
"product": "AppPresser",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "5.0.0"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "The AppPresser WordPress plugin before 5.0.0 does not restrict access to two of its REST API endpoints, allowing unauthenticated visitors to retrieve the installed versions of AppPresser, its add-ons, several third-party AppPresser WordPress plugin before 5.0.0 and its ."
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/674849e9-44ad-496f-baba-6d17d58b5807/",
"tags": [
"exploit",
"vdb-entry",
"technical-description"
]
}
],
"credits": [
{
"lang": "en",
"value": "Raphael P. Cigana",
"type": "finder"
},
{
"lang": "en",
"value": "WPScan",
"type": "coordinator"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
}
}
data/2026/123xxx/CVE-2026-123093.json
+92
View File
@@ -0,0 +1,92 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-123093",
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"state": "PUBLISHED",
"assignerShortName": "WPScan",
"dateReserved": "2026-11-05T12:04:43.863Z",
"datePublished": "2026-11-13T06:00:07.819Z",
"dateUpdated": "2026-11-13T06:00:07.819Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan",
"dateUpdated": "2026-11-13T06:00:07.819Z"
},
"title": "WP Remote Users Sync < 2.2.1 - Subscriber+ Activity Log Deletion",
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-862 Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"description": "CWE-352 Cross-Site Request Forgery (CSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Unknown",
"product": "WP Remote Users Sync",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "2.2.1"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "The WP Remote Users Sync WordPress plugin before 2.2.1 does not have authorisation and CSRF checks in one of its AJAX actions, allowing any authenticated user, such as a subscriber, to delete the WP Remote Users Sync WordPress plugin before 2.2.1's entire activity log."
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/d5082119-feab-4978-b975-fd86a91b68a0/",
"tags": [
"exploit",
"vdb-entry",
"technical-description"
]
}
],
"credits": [
{
"lang": "en",
"value": "Aaron (wellknown.info)",
"type": "finder"
},
{
"lang": "en",
"value": "WPScan",
"type": "coordinator"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
}
}
data/2026/123xxx/CVE-2026-123097.json
+83
View File
@@ -0,0 +1,83 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-123097",
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"state": "PUBLISHED",
"assignerShortName": "WPScan",
"dateReserved": "2026-11-05T12:23:52.121Z",
"datePublished": "2026-11-13T06:00:08.059Z",
"dateUpdated": "2026-11-13T06:00:08.059Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan",
"dateUpdated": "2026-11-13T06:00:08.059Z"
},
"title": "WP Remote Users Sync < 2.2.1 - Privilege Escalation to Administrator via 'create' and 'update' Sync Actions",
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-269 Improper Privilege Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Unknown",
"product": "WP Remote Users Sync",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "2.2.1"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "The WP Remote Users Sync WordPress plugin before 2.2.1 does not restrict which account fields a synchronised site may set when it creates or updates users, allowing a site holding the shared synchronisation keys to assign the administrator role, modify any existing account and write arbitrary user metadata, bypassing the receiving site's role and metadata restrictions."
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/9df17b10-261c-4d93-a24d-76b10b65456f/",
"tags": [
"exploit",
"vdb-entry",
"technical-description"
]
}
],
"credits": [
{
"lang": "en",
"value": "Md Jahid Bin Sabit",
"type": "finder"
},
{
"lang": "en",
"value": "WPScan",
"type": "coordinator"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
}
}
data/2026/123xxx/CVE-2026-123124.json
+93
View File
@@ -0,0 +1,93 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-123124",
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"state": "PUBLISHED",
"assignerShortName": "WPScan",
"dateReserved": "2026-11-05T13:04:03.458Z",
"datePublished": "2026-11-13T06:00:08.243Z",
"dateUpdated": "2026-11-13T06:00:08.243Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan",
"dateUpdated": "2026-11-13T06:00:08.243Z"
},
"title": "WooCommerce Vindi Pagamento <= 0.8.3 - Unauthenticated Stored XSS via 'code' Parameter",
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-79 Cross-Site Scripting (XSS)",
"lang": "en",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Unknown",
"product": "WooCommerce Vindi Pagamento",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThanOrEqual": "0.8.3"
}
],
"defaultStatus": "unknown"
}
],
"descriptions": [
{
"lang": "en",
"value": "The WooCommerce Vindi Pagamento WordPress plugin through 0.8.3 does not perform any authorisation check when updating an order's shipment tracking code, and does not escape that code when displaying it on the order edit page, allowing unauthenticated attackers to perform Stored Cross-Site Scripting attacks against administrators and shop managers who view an order paid through the gateway.\nThe stored payload is only rendered on sites using WooCommerce's legacy (WordPress posts) order storage."
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/861d57fa-54dd-4980-8f0e-9d8a2874072f/",
"tags": [
"exploit",
"vdb-entry",
"technical-description"
]
}
],
"credits": [
{
"lang": "en",
"value": "Enrico Marcolini",
"type": "finder"
},
{
"lang": "en",
"value": "Claudio Marchesini",
"type": "finder"
},
{
"lang": "en",
"value": "Dottor Marc",
"type": "finder"
},
{
"lang": "en",
"value": "WPScan",
"type": "coordinator"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
}
}
data/2026/123xxx/CVE-2026-123670.json
+83
View File
@@ -0,0 +1,83 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-123670",
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"state": "PUBLISHED",
"assignerShortName": "WPScan",
"dateReserved": "2026-11-06T09:33:36.605Z",
"datePublished": "2026-11-13T06:00:08.415Z",
"dateUpdated": "2026-11-13T06:00:08.415Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan",
"dateUpdated": "2026-11-13T06:00:08.415Z"
},
"title": "Essential Real Estate 5.3.5 - Customer+ Email Relay Allowlist Poisoning",
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-284 Improper Access Control",
"lang": "en",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Unknown",
"product": "Essential Real Estate",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "5.3.5",
"lessThan": "5.3.6"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "The Essential Real Estate WordPress plugin before 5.3.6 does not verify that the recipients it allows for its contact email action are legitimate, allowing users with the self-registered Customer role to add any address to that allowlist so that unauthenticated users can then send emails with attacker-controlled content to it through the site."
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/04d772fe-001d-4f25-a11a-dedf16064ce4/",
"tags": [
"exploit",
"vdb-entry",
"technical-description"
]
}
],
"credits": [
{
"lang": "en",
"value": "Aabideen Bangash",
"type": "finder"
},
{
"lang": "en",
"value": "WPScan",
"type": "coordinator"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
}
}
data/2026/123xxx/CVE-2026-123711.json
+83
View File
@@ -0,0 +1,83 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-123711",
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"state": "PUBLISHED",
"assignerShortName": "WPScan",
"dateReserved": "2026-11-06T10:24:10.762Z",
"datePublished": "2026-11-13T06:00:08.588Z",
"dateUpdated": "2026-11-13T06:00:08.588Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan",
"dateUpdated": "2026-11-13T06:00:08.588Z"
},
"title": "WPCOM Member < 1.8.3 - Unauthenticated Account Takeover via WeChat Login Code Brute-Force",
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-287 Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Unknown",
"product": "WPCOM Member",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "1.8.3"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "The WPCOM Member WordPress plugin before 1.8.3 does not limit or bind attempts to verify WeChat login codes, allowing unauthenticated attackers to brute-force a code issued to another user and log in as that user, including administrators, when WeChat official-account keyword login is enabled."
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/7d7ca1b4-0d9e-4127-8252-cfe0bb51b18a/",
"tags": [
"exploit",
"vdb-entry",
"technical-description"
]
}
],
"credits": [
{
"lang": "en",
"value": "Aabideen Bangash",
"type": "finder"
},
{
"lang": "en",
"value": "WPScan",
"type": "coordinator"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
}
}
data/2026/124xxx/CVE-2026-124664.json
+78
View File
@@ -0,0 +1,78 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-124664",
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"state": "PUBLISHED",
"assignerShortName": "WPScan",
"dateReserved": "2026-11-09T09:14:06.527Z",
"datePublished": "2026-11-13T06:00:08.763Z",
"dateUpdated": "2026-11-13T06:00:08.763Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan",
"dateUpdated": "2026-11-13T06:00:08.763Z"
},
"title": "Mine CloudVod < 2.6.7 - Unauthenticated Paid Lesson Content Disclosure",
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-200 Information Exposure",
"lang": "en",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Unknown",
"product": "Mine CloudVod",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "2.6.7"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "The Mine CloudVod WordPress plugin before 2.6.7 does not check whether the requester is enrolled in a course, or authorised at all, before returning the course's full curriculum together with the raw content of every published lesson, allowing unauthenticated visitors to retrieve paid lesson content, such as direct video source URLs, and the passwords of password-protected lessons."
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/92b85179-c9b3-44a4-b72d-26c43b3a61bc/",
"tags": [
"exploit",
"vdb-entry",
"technical-description"
]
}
],
"credits": [
{
"lang": "en",
"value": "WPScan",
"type": "coordinator"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
}
}
data/2026/124xxx/CVE-2026-124763.json
+92
View File
@@ -0,0 +1,92 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-124763",
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"state": "PUBLISHED",
"assignerShortName": "WPScan",
"dateReserved": "2026-11-09T12:50:51.991Z",
"datePublished": "2026-11-13T06:00:08.945Z",
"dateUpdated": "2026-11-13T06:00:08.945Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan",
"dateUpdated": "2026-11-13T06:00:08.945Z"
},
"title": "AM Wishlist <= 1.1.0 - Unauthenticated Option Overwrite via amwl_upload_file",
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-862 Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"description": "CWE-352 Cross-Site Request Forgery (CSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Unknown",
"product": "Woocommerce Wishlist",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThanOrEqual": "1.1.0"
}
],
"defaultStatus": "unknown"
}
],
"descriptions": [
{
"lang": "en",
"value": "The Woocommerce Wishlist WordPress plugin through 1.1.0 does not have authorisation and CSRF checks in one of its unauthenticated AJAX actions, allowing unauthenticated users to overwrite any site option with the URL of an uploaded image or an empty value, breaking the site (for example by changing its URL or active , or deactivating every Woocommerce Wishlist WordPress plugin through 1.1.0)."
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/557b9f2b-4673-4efb-b7a5-f68c0b2222ac/",
"tags": [
"exploit",
"vdb-entry",
"technical-description"
]
}
],
"credits": [
{
"lang": "en",
"value": "Usama Arshad",
"type": "finder"
},
{
"lang": "en",
"value": "WPScan",
"type": "coordinator"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
}
}
data/2026/124xxx/CVE-2026-124822.json
+83
View File
@@ -0,0 +1,83 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-124822",
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"state": "PUBLISHED",
"assignerShortName": "WPScan",
"dateReserved": "2026-11-09T13:24:25.289Z",
"datePublished": "2026-11-13T06:00:09.152Z",
"dateUpdated": "2026-11-13T06:00:09.152Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan",
"dateUpdated": "2026-11-13T06:00:09.152Z"
},
"title": "Easy DragDrop File Uploader < 1.1.10 - Unauthenticated Arbitrary File Deletion via Path Traversal",
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-73 External Control of File Name or Path",
"lang": "en",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Unknown",
"product": "Easy DragDrop File Uploader",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "1.1.10"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "The Easy DragDrop File Uploader WordPress plugin before 1.1.10 does not validate a user-supplied path before deleting it, allowing unauthenticated users to delete arbitrary files and directories on the server, such as wp-config.php."
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/2c3537df-1312-442a-816d-904285c0e9c1/",
"tags": [
"exploit",
"vdb-entry",
"technical-description"
]
}
],
"credits": [
{
"lang": "en",
"value": "Quantum",
"type": "finder"
},
{
"lang": "en",
"value": "WPScan",
"type": "coordinator"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
}
}
data/2026/124xxx/CVE-2026-124833.json
+83
View File
@@ -0,0 +1,83 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-124833",
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"state": "PUBLISHED",
"assignerShortName": "WPScan",
"dateReserved": "2026-11-09T13:52:06.074Z",
"datePublished": "2026-11-13T06:00:09.349Z",
"dateUpdated": "2026-11-13T06:00:09.349Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan",
"dateUpdated": "2026-11-13T06:00:09.349Z"
},
"title": "Ahime Image Printer <= 1.0.0 - Unauthenticated Arbitrary File Upload",
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-434 Unrestricted Upload of File with Dangerous Type",
"lang": "en",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Unknown",
"product": "Ahime Image Printer",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThanOrEqual": "1.0.0"
}
],
"defaultStatus": "unknown"
}
],
"descriptions": [
{
"lang": "en",
"value": "The Ahime Image Printer WordPress plugin through 1.0.0 does not validate the name, extension or type of uploaded files before writing them to disk, allowing unauthenticated attackers to upload arbitrary files, including PHP, and execute code on the server."
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/3b24b6d4-061c-4229-9ced-c2306eee44ea/",
"tags": [
"exploit",
"vdb-entry",
"technical-description"
]
}
],
"credits": [
{
"lang": "en",
"value": "Khaled Alenazi (Nxploited)",
"type": "finder"
},
{
"lang": "en",
"value": "WPScan",
"type": "coordinator"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
}
}
data/2026/125xxx/CVE-2026-125711.json
+343
View File
@@ -0,0 +1,343 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-125711",
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"state": "PUBLISHED",
"assignerShortName": "WPScan",
"dateReserved": "2026-11-10T10:36:40.667Z",
"datePublished": "2026-11-13T06:00:09.524Z",
"dateUpdated": "2026-11-13T06:00:09.524Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan",
"dateUpdated": "2026-11-13T06:00:09.524Z"
},
"title": "Trustindex Review Widget Plugins < 14.3 - Editor+ Stored XSS via Business Name",
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-79 Cross-Site Scripting (XSS)",
"lang": "en",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Unknown",
"product": "Widgets for Google Reviews",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "WP Tripadvisor Review Widgets",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Widgets for Booking.com Reviews",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Widgets for Reviews & Recommendations",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Widgets for Airbnb Reviews",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Widgets for Yelp Reviews",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Widgets for Amazon Reviews",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Widgets for Thumbtack Reviews",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Widgets for Ebay Reviews",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Widgets for Zillow Reviews",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Widgets for Capterra Reviews",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Widgets for Expedia Reviews",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Widgets for Opentable Reviews",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Widgets for WordPress Reviews",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Widgets for Hotels.com Reviews",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Review Widgets for Szallas.hu",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Widgets for AliExpress Reviews",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Widgets for Árukereső Reviews",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Widgets for Foursquare Reviews",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Widgets for Alibaba Reviews",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Widgets for SourceForge Reviews",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "14.3"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "The Widgets for Google Reviews WordPress plugin before 14.3, WP Tripadvisor Review Widgets WordPress plugin before 14.3, Widgets for Booking.com Reviews WordPress plugin before 14.3, Widgets for Reviews & Recommendations WordPress plugin before 14.3, Widgets for Airbnb Reviews WordPress plugin before 14.3, Widgets for Yelp Reviews WordPress plugin before 14.3, Widgets for Amazon Reviews WordPress plugin before 14.3, Widgets for Thumbtack Reviews WordPress plugin before 14.3, Widgets for Ebay Reviews WordPress plugin before 14.3, Widgets for Zillow Reviews WordPress plugin before 14.3, Widgets for Capterra Reviews WordPress plugin before 14.3, Widgets for Expedia Reviews WordPress plugin before 14.3, Widgets for Opentable Reviews WordPress plugin before 14.3, Widgets for WordPress Reviews WordPress plugin before 14.3, Widgets for Hotels.com Reviews WordPress plugin before 14.3, Review Widgets for Szallas.hu WordPress plugin before 14.3, Widgets for AliExpress Reviews WordPress plugin before 14.3, Widgets for Árukereső Reviews WordPress plugin before 14.3, Widgets for Foursquare Reviews WordPress plugin before 14.3, Widgets for Alibaba Reviews WordPress plugin before 14.3, Widgets for SourceForge Reviews WordPress plugin before 14.3 do not sanitise and escape the connected business details before outputting them in their review widgets, which could allow users with the Editor role and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in a multisite setup)."
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/87cbeff9-277e-48ea-b61a-53e1e2aaeed2/",
"tags": [
"exploit",
"vdb-entry",
"technical-description"
]
}
],
"credits": [
{
"lang": "en",
"value": "Sanjeev Kumar",
"type": "finder"
},
{
"lang": "en",
"value": "WPScan",
"type": "coordinator"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
}
}
data/2026/125xxx/CVE-2026-125912.json
+83
View File
@@ -0,0 +1,83 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-125912",
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"state": "PUBLISHED",
"assignerShortName": "WPScan",
"dateReserved": "2026-11-10T13:26:13.879Z",
"datePublished": "2026-11-13T06:00:09.699Z",
"dateUpdated": "2026-11-13T06:00:09.699Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan",
"dateUpdated": "2026-11-13T06:00:09.699Z"
},
"title": "WP Ultimate CSV Importer < 9.2 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via Media Import",
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-94 Improper Control of Generation of Code ('Code Injection')",
"lang": "en",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Unknown",
"product": "WP Ultimate CSV Importer",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "9.2"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "The WP Ultimate CSV Importer WordPress plugin before 9.2 does not restrict the destination filename and extension, nor validate the fetched content type, when importing remote media, allowing an Administrator of a Multisite subsite to write and execute arbitrary PHP in the shared WordPress context despite not being a Network Administrator and being unable to install WP Ultimate CSV Importer WordPress plugin before 9.2 or edit files."
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/b7484863-c97d-49d2-b818-0308a720c556/",
"tags": [
"exploit",
"vdb-entry",
"technical-description"
]
}
],
"credits": [
{
"lang": "en",
"value": "Charles Vosburgh",
"type": "finder"
},
{
"lang": "en",
"value": "WPScan",
"type": "coordinator"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
}
}
data/2026/126xxx/CVE-2026-126119.json
+83
View File
@@ -0,0 +1,83 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-126119",
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"state": "PUBLISHED",
"assignerShortName": "WPScan",
"dateReserved": "2026-11-10T17:58:11.970Z",
"datePublished": "2026-11-13T06:00:09.870Z",
"dateUpdated": "2026-11-13T06:00:09.870Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan",
"dateUpdated": "2026-11-13T06:00:09.870Z"
},
"title": "Streamit Plugin < 1.3.10 - Unauthenticated Remote Code Execution via Arbitrary Function Call",
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-94 Improper Control of Generation of Code ('Code Injection')",
"lang": "en",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Unknown",
"product": "Streamit",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "1.3.10"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "The Streamit WordPress plugin before 1.3.10 does not perform any authorization or nonce verification on one of its unauthenticated AJAX routes, which invokes an attacker-supplied PHP function with an attacker-supplied argument array, allowing unauthenticated attackers to call arbitrary functions (for example to create an administrator account), leading to privilege escalation and remote code execution."
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/41d42891-1170-4e84-959c-d2eec010bf7c/",
"tags": [
"exploit",
"vdb-entry",
"technical-description"
]
}
],
"credits": [
{
"lang": "en",
"value": "Erwan LR (WPScan)",
"type": "finder"
},
{
"lang": "en",
"value": "WPScan",
"type": "coordinator"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "WPScan CVE Generator"
}
}
}
}
data/2026/33xxx/CVE-2026-33818.json
+2 -2
View File
@@ -8,14 +8,14 @@
"assignerShortName": "Go",
"dateReserved": "2026-03-23T20:35:32.815Z",
"datePublished": "2026-08-13T21:58:52.821Z",
"dateUpdated": "2026-11-12T23:22:53.118Z"
"dateUpdated": "2026-11-13T05:20:05.373Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"shortName": "Go",
"dateUpdated": "2026-11-12T23:22:53.118Z"
"dateUpdated": "2026-11-13T05:20:05.373Z"
},
"title": "Enforce maximum recursion depth in encoding/asn1",
"descriptions": [
data/2026/42xxx/CVE-2026-42504.json
+2 -2
View File
@@ -8,14 +8,14 @@
"assignerShortName": "Go",
"dateReserved": "2026-04-28T00:21:12.792Z",
"datePublished": "2026-06-02T22:01:37.219Z",
"dateUpdated": "2026-11-12T23:22:51.537Z"
"dateUpdated": "2026-11-13T05:20:03.838Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"shortName": "Go",
"dateUpdated": "2026-11-12T23:22:51.537Z"
"dateUpdated": "2026-11-13T05:20:03.838Z"
},
"title": "Quadratic complexity in WordDecoder.DecodeHeader in mime",
"descriptions": [
data/delta.json
+116 -397
View File
@@ -1,403 +1,122 @@
{
"fetchTime": "2026-11-13T05:14:42.455Z",
"numberOfChanges": 66,
"new": [],
"fetchTime": "2026-11-13T06:02:51.287Z",
"numberOfChanges": 19,
"new": [
{
"cveId": "CVE-2026-116059",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116059",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116059.json",
"dateUpdated": "2026-11-13T06:00:06.766Z"
},
{
"cveId": "CVE-2026-118063",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118063",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118063.json",
"dateUpdated": "2026-11-13T06:00:06.947Z"
},
{
"cveId": "CVE-2026-118064",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118064",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118064.json",
"dateUpdated": "2026-11-13T06:00:07.125Z"
},
{
"cveId": "CVE-2026-118065",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118065",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118065.json",
"dateUpdated": "2026-11-13T06:00:07.303Z"
},
{
"cveId": "CVE-2026-120407",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120407",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120407.json",
"dateUpdated": "2026-11-13T06:00:07.477Z"
},
{
"cveId": "CVE-2026-121853",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121853",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121853.json",
"dateUpdated": "2026-11-13T06:00:07.647Z"
},
{
"cveId": "CVE-2026-123093",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123093",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123093.json",
"dateUpdated": "2026-11-13T06:00:07.819Z"
},
{
"cveId": "CVE-2026-123097",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123097",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123097.json",
"dateUpdated": "2026-11-13T06:00:08.059Z"
},
{
"cveId": "CVE-2026-123124",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123124",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123124.json",
"dateUpdated": "2026-11-13T06:00:08.243Z"
},
{
"cveId": "CVE-2026-123670",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123670",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123670.json",
"dateUpdated": "2026-11-13T06:00:08.415Z"
},
{
"cveId": "CVE-2026-123711",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123711",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123711.json",
"dateUpdated": "2026-11-13T06:00:08.588Z"
},
{
"cveId": "CVE-2026-124664",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124664",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124664.json",
"dateUpdated": "2026-11-13T06:00:08.763Z"
},
{
"cveId": "CVE-2026-124763",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124763",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124763.json",
"dateUpdated": "2026-11-13T06:00:08.945Z"
},
{
"cveId": "CVE-2026-124822",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124822",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124822.json",
"dateUpdated": "2026-11-13T06:00:09.152Z"
},
{
"cveId": "CVE-2026-124833",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124833",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124833.json",
"dateUpdated": "2026-11-13T06:00:09.349Z"
},
{
"cveId": "CVE-2026-125711",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125711",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125711.json",
"dateUpdated": "2026-11-13T06:00:09.524Z"
},
{
"cveId": "CVE-2026-125912",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125912",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125912.json",
"dateUpdated": "2026-11-13T06:00:09.699Z"
},
{
"cveId": "CVE-2026-126119",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126119",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126119.json",
"dateUpdated": "2026-11-13T06:00:09.870Z"
}
],
"updated": [
{
"cveId": "CVE-2026-0169",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-0169",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0169.json",
"dateUpdated": "2026-11-13T05:02:13.385Z"
},
{
"cveId": "CVE-2026-0175",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-0175",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0175.json",
"dateUpdated": "2026-11-13T05:02:04.834Z"
},
{
"cveId": "CVE-2026-0178",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-0178",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0178.json",
"dateUpdated": "2026-11-13T05:02:14.523Z"
},
{
"cveId": "CVE-2026-114713",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114713",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114713.json",
"dateUpdated": "2026-11-13T05:03:13.644Z"
},
{
"cveId": "CVE-2026-116304",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116304",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116304.json",
"dateUpdated": "2026-11-13T05:03:09.030Z"
},
{
"cveId": "CVE-2026-116306",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116306",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116306.json",
"dateUpdated": "2026-11-13T05:03:05.208Z"
},
{
"cveId": "CVE-2026-116307",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116307",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116307.json",
"dateUpdated": "2026-11-13T05:03:01.428Z"
},
{
"cveId": "CVE-2026-116309",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116309",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116309.json",
"dateUpdated": "2026-11-13T05:03:03.964Z"
},
{
"cveId": "CVE-2026-116313",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116313",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116313.json",
"dateUpdated": "2026-11-13T05:03:11.325Z"
},
{
"cveId": "CVE-2026-116314",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116314",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116314.json",
"dateUpdated": "2026-11-13T05:03:10.163Z"
},
{
"cveId": "CVE-2026-116315",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116315",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116315.json",
"dateUpdated": "2026-11-13T05:03:07.821Z"
},
{
"cveId": "CVE-2026-116316",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116316",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116316.json",
"dateUpdated": "2026-11-13T05:03:12.485Z"
},
{
"cveId": "CVE-2026-116317",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116317",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116317.json",
"dateUpdated": "2026-11-13T05:03:06.415Z"
},
{
"cveId": "CVE-2026-116318",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116318",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116318.json",
"dateUpdated": "2026-11-13T05:03:00.256Z"
},
{
"cveId": "CVE-2026-116319",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116319",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116319.json",
"dateUpdated": "2026-11-13T05:02:57.971Z"
},
{
"cveId": "CVE-2026-116320",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116320",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116320.json",
"dateUpdated": "2026-11-13T05:02:56.846Z"
},
{
"cveId": "CVE-2026-116331",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116331",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116331.json",
"dateUpdated": "2026-11-13T05:02:55.665Z"
},
{
"cveId": "CVE-2026-116332",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116332",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116332.json",
"dateUpdated": "2026-11-13T05:02:54.542Z"
},
{
"cveId": "CVE-2026-116335",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116335",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116335.json",
"dateUpdated": "2026-11-13T05:02:53.309Z"
},
{
"cveId": "CVE-2026-116336",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116336",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116336.json",
"dateUpdated": "2026-11-13T05:02:51.006Z"
},
{
"cveId": "CVE-2026-120139",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120139",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120139.json",
"dateUpdated": "2026-11-13T05:02:49.844Z"
},
{
"cveId": "CVE-2026-120141",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120141",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120141.json",
"dateUpdated": "2026-11-13T05:02:47.419Z"
},
{
"cveId": "CVE-2026-120142",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120142",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120142.json",
"dateUpdated": "2026-11-13T05:02:45.117Z"
},
{
"cveId": "CVE-2026-120143",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120143",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120143.json",
"dateUpdated": "2026-11-13T05:02:43.971Z"
},
{
"cveId": "CVE-2026-120144",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120144",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120144.json",
"dateUpdated": "2026-11-13T05:02:41.507Z"
},
{
"cveId": "CVE-2026-120151",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120151",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120151.json",
"dateUpdated": "2026-11-13T05:02:40.366Z"
},
{
"cveId": "CVE-2026-120153",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120153",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120153.json",
"dateUpdated": "2026-11-13T05:02:37.985Z"
},
{
"cveId": "CVE-2026-124854",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124854",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124854.json",
"dateUpdated": "2026-11-13T05:02:52.160Z"
},
{
"cveId": "CVE-2026-124907",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124907",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124907.json",
"dateUpdated": "2026-11-13T05:02:48.682Z"
},
{
"cveId": "CVE-2026-124918",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124918",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124918.json",
"dateUpdated": "2026-11-13T05:02:42.835Z"
},
{
"cveId": "CVE-2026-124919",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124919",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124919.json",
"dateUpdated": "2026-11-13T05:02:46.237Z"
},
{
"cveId": "CVE-2026-124951",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124951",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124951.json",
"dateUpdated": "2026-11-13T05:02:39.159Z"
},
{
"cveId": "CVE-2026-18447",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-18447",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18447.json",
"dateUpdated": "2026-11-13T05:02:36.602Z"
},
{
"cveId": "CVE-2026-55309",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55309",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55309.json",
"dateUpdated": "2026-11-13T05:02:15.678Z"
},
{
"cveId": "CVE-2026-55312",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55312",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55312.json",
"dateUpdated": "2026-11-13T05:02:24.903Z"
},
{
"cveId": "CVE-2026-55319",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55319",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55319.json",
"dateUpdated": "2026-11-13T05:02:16.859Z"
},
{
"cveId": "CVE-2026-55360",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55360",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55360.json",
"dateUpdated": "2026-11-13T05:02:26.042Z"
},
{
"cveId": "CVE-2026-55362",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55362",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55362.json",
"dateUpdated": "2026-11-13T05:02:35.537Z"
},
{
"cveId": "CVE-2026-56898",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56898",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56898.json",
"dateUpdated": "2026-11-13T05:02:27.140Z"
},
{
"cveId": "CVE-2026-56909",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56909",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56909.json",
"dateUpdated": "2026-11-13T05:02:28.215Z"
},
{
"cveId": "CVE-2026-56910",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56910",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56910.json",
"dateUpdated": "2026-11-13T05:01:53.563Z"
},
{
"cveId": "CVE-2026-56912",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56912",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56912.json",
"dateUpdated": "2026-11-13T05:02:21.443Z"
},
{
"cveId": "CVE-2026-56926",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56926",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56926.json",
"dateUpdated": "2026-11-13T05:01:54.734Z"
},
{
"cveId": "CVE-2026-56930",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56930",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56930.json",
"dateUpdated": "2026-11-13T05:01:55.830Z"
},
{
"cveId": "CVE-2026-56946",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56946",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56946.json",
"dateUpdated": "2026-11-13T05:02:18.087Z"
},
{
"cveId": "CVE-2026-56951",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56951",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56951.json",
"dateUpdated": "2026-11-13T05:01:56.950Z"
},
{
"cveId": "CVE-2026-56966",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56966",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56966.json",
"dateUpdated": "2026-11-13T05:01:58.091Z"
},
{
"cveId": "CVE-2026-56980",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56980",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56980.json",
"dateUpdated": "2026-11-13T05:01:59.203Z"
},
{
"cveId": "CVE-2026-56995",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56995",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56995.json",
"dateUpdated": "2026-11-13T05:02:00.488Z"
},
{
"cveId": "CVE-2026-57037",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57037",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57037.json",
"dateUpdated": "2026-11-13T05:02:05.970Z"
},
{
"cveId": "CVE-2026-57043",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57043",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57043.json",
"dateUpdated": "2026-11-13T05:02:29.344Z"
},
{
"cveId": "CVE-2026-57047",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57047",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57047.json",
"dateUpdated": "2026-11-13T05:02:20.363Z"
},
{
"cveId": "CVE-2026-58681",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58681",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58681.json",
"dateUpdated": "2026-11-13T05:02:22.566Z"
},
{
"cveId": "CVE-2026-58690",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58690",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58690.json",
"dateUpdated": "2026-11-13T05:02:30.568Z"
},
{
"cveId": "CVE-2026-58705",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58705",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58705.json",
"dateUpdated": "2026-11-13T05:02:11.065Z"
},
{
"cveId": "CVE-2026-58787",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58787",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58787.json",
"dateUpdated": "2026-11-13T05:02:07.169Z"
},
{
"cveId": "CVE-2026-58796",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58796",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58796.json",
"dateUpdated": "2026-11-13T05:02:09.881Z"
},
{
"cveId": "CVE-2026-58799",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58799",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58799.json",
"dateUpdated": "2026-11-13T05:02:23.801Z"
},
{
"cveId": "CVE-2026-59597",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59597",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59597.json",
"dateUpdated": "2026-11-13T05:02:12.200Z"
},
{
"cveId": "CVE-2026-59606",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59606",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59606.json",
"dateUpdated": "2026-11-13T05:02:31.853Z"
},
{
"cveId": "CVE-2026-59626",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59626",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59626.json",
"dateUpdated": "2026-11-13T05:02:19.211Z"
},
{
"cveId": "CVE-2026-59631",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59631",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59631.json",
"dateUpdated": "2026-11-13T05:01:52.433Z"
},
{
"cveId": "CVE-2026-59635",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59635",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59635.json",
"dateUpdated": "2026-11-13T05:02:01.844Z"
},
{
"cveId": "CVE-2026-6460",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-6460",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/6xxx/CVE-2026-6460.json",
"dateUpdated": "2026-11-13T05:02:34.185Z"
},
{
"cveId": "CVE-2026-6467",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-6467",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/6xxx/CVE-2026-6467.json",
"dateUpdated": "2026-11-13T05:02:33.028Z"
},
{
"cveId": "CVE-2026-95397",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95397",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95397.json",
"dateUpdated": "2026-11-13T05:02:03.598Z"
"cveId": "CVE-2026-109832",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109832",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109832.json",
"dateUpdated": "2026-11-13T05:59:41.563Z"
}
],
"error": []
data/deltaLog.json
+143 -71
View File
@@ -1,4 +1,147 @@
[
{
"fetchTime": "2026-11-13T06:02:51.287Z",
"numberOfChanges": 19,
"new": [
{
"cveId": "CVE-2026-116059",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116059",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116059.json",
"dateUpdated": "2026-11-13T06:00:06.766Z"
},
{
"cveId": "CVE-2026-118063",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118063",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118063.json",
"dateUpdated": "2026-11-13T06:00:06.947Z"
},
{
"cveId": "CVE-2026-118064",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118064",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118064.json",
"dateUpdated": "2026-11-13T06:00:07.125Z"
},
{
"cveId": "CVE-2026-118065",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118065",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118065.json",
"dateUpdated": "2026-11-13T06:00:07.303Z"
},
{
"cveId": "CVE-2026-120407",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120407",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120407.json",
"dateUpdated": "2026-11-13T06:00:07.477Z"
},
{
"cveId": "CVE-2026-121853",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121853",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121853.json",
"dateUpdated": "2026-11-13T06:00:07.647Z"
},
{
"cveId": "CVE-2026-123093",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123093",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123093.json",
"dateUpdated": "2026-11-13T06:00:07.819Z"
},
{
"cveId": "CVE-2026-123097",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123097",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123097.json",
"dateUpdated": "2026-11-13T06:00:08.059Z"
},
{
"cveId": "CVE-2026-123124",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123124",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123124.json",
"dateUpdated": "2026-11-13T06:00:08.243Z"
},
{
"cveId": "CVE-2026-123670",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123670",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123670.json",
"dateUpdated": "2026-11-13T06:00:08.415Z"
},
{
"cveId": "CVE-2026-123711",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123711",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123711.json",
"dateUpdated": "2026-11-13T06:00:08.588Z"
},
{
"cveId": "CVE-2026-124664",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124664",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124664.json",
"dateUpdated": "2026-11-13T06:00:08.763Z"
},
{
"cveId": "CVE-2026-124763",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124763",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124763.json",
"dateUpdated": "2026-11-13T06:00:08.945Z"
},
{
"cveId": "CVE-2026-124822",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124822",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124822.json",
"dateUpdated": "2026-11-13T06:00:09.152Z"
},
{
"cveId": "CVE-2026-124833",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124833",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124833.json",
"dateUpdated": "2026-11-13T06:00:09.349Z"
},
{
"cveId": "CVE-2026-125711",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125711",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125711.json",
"dateUpdated": "2026-11-13T06:00:09.524Z"
},
{
"cveId": "CVE-2026-125912",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125912",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125912.json",
"dateUpdated": "2026-11-13T06:00:09.699Z"
},
{
"cveId": "CVE-2026-126119",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126119",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126119.json",
"dateUpdated": "2026-11-13T06:00:09.870Z"
}
],
"updated": [
{
"cveId": "CVE-2026-109832",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109832",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109832.json",
"dateUpdated": "2026-11-13T05:59:41.563Z"
}
],
"error": []
},
{
"fetchTime": "2026-11-13T05:20:34.461Z",
"numberOfChanges": 2,
"new": [],
"updated": [
{
"cveId": "CVE-2026-33818",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33818.json",
"dateUpdated": "2026-11-13T05:20:05.373Z"
},
{
"cveId": "CVE-2026-42504",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42504.json",
"dateUpdated": "2026-11-13T05:20:03.838Z"
}
],
"error": []
},
{
"fetchTime": "2026-11-13T05:14:42.455Z",
"numberOfChanges": 66,
@@ -808349,76 +808492,5 @@
}
],
"error": []
},
{
"fetchTime": "2026-10-14T05:46:42.936Z",
"numberOfChanges": 1,
"new": [
{
"cveId": "CVE-2026-94370",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94370",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94370.json",
"dateUpdated": "2026-10-14T05:43:27.953Z"
}
],
"updated": [],
"error": []
},
{
"fetchTime": "2026-10-14T05:25:24.460Z",
"numberOfChanges": 8,
"new": [
{
"cveId": "CVE-2026-107153",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107153",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107153.json",
"dateUpdated": "2026-10-14T05:12:36.187Z"
},
{
"cveId": "CVE-2026-110457",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110457",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110457.json",
"dateUpdated": "2026-10-14T05:12:18.433Z"
},
{
"cveId": "CVE-2026-110458",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110458",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110458.json",
"dateUpdated": "2026-10-14T05:16:02.475Z"
},
{
"cveId": "CVE-2026-110459",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110459",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110459.json",
"dateUpdated": "2026-10-14T05:19:10.065Z"
},
{
"cveId": "CVE-2026-50216",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-50216",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50216.json",
"dateUpdated": "2026-10-14T05:15:29.627Z"
},
{
"cveId": "CVE-2026-50217",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-50217",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50217.json",
"dateUpdated": "2026-10-14T05:18:39.774Z"
},
{
"cveId": "CVE-2026-50218",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-50218",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50218.json",
"dateUpdated": "2026-10-14T05:21:46.208Z"
}
],
"updated": [
{
"cveId": "CVE-2026-50215",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-50215",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50215.json",
"dateUpdated": "2026-10-14T05:12:51.661Z"
}
],
"error": []
}
]
state/sync.json
+3 -3
View File
@@ -1,7 +1,7 @@
{
"source": "https://github.com/CVEProject/cvelistV5.git",
"upstream_commit": "68cd701e826810199fa5b4bdbd0ebbdf13037bcc",
"upstream_commit": "7c4df4700e93212a2fc02e349dc1f7958010681e",
"since_year": 2017,
"records": 331817,
"synced_at_utc": "2026-11-13T05:25:39.776871+00:00"
"records": 331835,
"synced_at_utc": "2026-11-13T06:26:14.288192+00:00"
}