From 4879b647935a6afc0e80e88018ea51d4c78bfd71 Mon Sep 17 00:00:00 2001 From: Vulnerability Bot Date: Thu, 12 Nov 2026 04:30:57 +0100 Subject: [PATCH] CVE sync 2026-11-12T03:30:52Z --- data/2023/41xxx/CVE-2023-41175.json | 20 +- data/2025/10xxx/CVE-2025-10935.json | 80 +++++++ data/2026/114xxx/CVE-2026-114556.json | 80 +++++++ data/2026/114xxx/CVE-2026-114558.json | 87 +++++++ data/2026/114xxx/CVE-2026-114559.json | 87 +++++++ data/2026/114xxx/CVE-2026-114560.json | 87 +++++++ data/2026/114xxx/CVE-2026-114561.json | 87 +++++++ data/2026/114xxx/CVE-2026-114562.json | 87 +++++++ data/2026/114xxx/CVE-2026-114563.json | 87 +++++++ data/2026/114xxx/CVE-2026-114564.json | 87 +++++++ data/2026/114xxx/CVE-2026-114565.json | 87 +++++++ data/2026/114xxx/CVE-2026-114566.json | 87 +++++++ data/2026/114xxx/CVE-2026-114567.json | 87 +++++++ data/2026/114xxx/CVE-2026-114568.json | 87 +++++++ data/2026/114xxx/CVE-2026-114569.json | 87 +++++++ data/2026/117xxx/CVE-2026-117687.json | 163 +++++++++++++ data/2026/118xxx/CVE-2026-118631.json | 80 +++++++ data/2026/118xxx/CVE-2026-118632.json | 80 +++++++ data/2026/121xxx/CVE-2026-121741.json | 80 +++++++ data/2026/121xxx/CVE-2026-121742.json | 80 +++++++ data/2026/121xxx/CVE-2026-121743.json | 80 +++++++ data/2026/121xxx/CVE-2026-121744.json | 80 +++++++ data/2026/121xxx/CVE-2026-121752.json | 80 +++++++ data/2026/121xxx/CVE-2026-121753.json | 80 +++++++ data/2026/122xxx/CVE-2026-122044.json | 80 +++++++ data/2026/125xxx/CVE-2026-125704.json | 40 +++- data/2026/126xxx/CVE-2026-126957.json | 147 ++++++++++++ data/2026/13xxx/CVE-2026-13269.json | 80 +++++++ data/2026/13xxx/CVE-2026-13270.json | 80 +++++++ data/delta.json | 27 ++- data/deltaLog.json | 321 +++++++++++++++++--------- state/sync.json | 6 +- 32 files changed, 2662 insertions(+), 146 deletions(-) create mode 100644 data/2025/10xxx/CVE-2025-10935.json create mode 100644 data/2026/114xxx/CVE-2026-114556.json create mode 100644 data/2026/114xxx/CVE-2026-114558.json create mode 100644 data/2026/114xxx/CVE-2026-114559.json create mode 100644 data/2026/114xxx/CVE-2026-114560.json create mode 100644 data/2026/114xxx/CVE-2026-114561.json create mode 100644 data/2026/114xxx/CVE-2026-114562.json create mode 100644 data/2026/114xxx/CVE-2026-114563.json create mode 100644 data/2026/114xxx/CVE-2026-114564.json create mode 100644 data/2026/114xxx/CVE-2026-114565.json create mode 100644 data/2026/114xxx/CVE-2026-114566.json create mode 100644 data/2026/114xxx/CVE-2026-114567.json create mode 100644 data/2026/114xxx/CVE-2026-114568.json create mode 100644 data/2026/114xxx/CVE-2026-114569.json create mode 100644 data/2026/117xxx/CVE-2026-117687.json create mode 100644 data/2026/118xxx/CVE-2026-118631.json create mode 100644 data/2026/118xxx/CVE-2026-118632.json create mode 100644 data/2026/121xxx/CVE-2026-121741.json create mode 100644 data/2026/121xxx/CVE-2026-121742.json create mode 100644 data/2026/121xxx/CVE-2026-121743.json create mode 100644 data/2026/121xxx/CVE-2026-121744.json create mode 100644 data/2026/121xxx/CVE-2026-121752.json create mode 100644 data/2026/121xxx/CVE-2026-121753.json create mode 100644 data/2026/122xxx/CVE-2026-122044.json create mode 100644 data/2026/126xxx/CVE-2026-126957.json create mode 100644 data/2026/13xxx/CVE-2026-13269.json create mode 100644 data/2026/13xxx/CVE-2026-13270.json diff --git a/data/2023/41xxx/CVE-2023-41175.json b/data/2023/41xxx/CVE-2023-41175.json index 0b7678dea7..3aa3f51192 100644 --- a/data/2023/41xxx/CVE-2023-41175.json +++ b/data/2023/41xxx/CVE-2023-41175.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2023-08-25T09:21:36.645Z", "datePublished": "2023-10-05T18:55:26.876Z", - "dateUpdated": "2026-01-22T15:42:35.970Z" + "dateUpdated": "2026-11-12T03:04:48.838Z" }, "containers": { "cna": { @@ -76,8 +76,8 @@ } ], "cpes": [ - "cpe:/a:redhat:enterprise_linux:9::crb", - "cpe:/a:redhat:enterprise_linux:9::appstream" + "cpe:/a:redhat:enterprise_linux:9::appstream", + "cpe:/a:redhat:enterprise_linux:9::crb" ] }, { @@ -87,7 +87,7 @@ "packageName": "libtiff", "defaultStatus": "unknown", "cpes": [ - "cpe:/o:redhat:enterprise_linux:6" + "cpe:/o:redhat:rhel_els:6" ] }, { @@ -97,7 +97,7 @@ "packageName": "compact-libtiff", "defaultStatus": "unknown", "cpes": [ - "cpe:/o:redhat:enterprise_linux:7" + "cpe:/o:redhat:rhel_els:7" ] }, { @@ -107,7 +107,7 @@ "packageName": "libtiff", "defaultStatus": "unknown", "cpes": [ - "cpe:/o:redhat:enterprise_linux:7" + "cpe:/o:redhat:rhel_els:7" ] }, { @@ -117,7 +117,7 @@ "packageName": "compat-libtiff3", "defaultStatus": "affected", "cpes": [ - "cpe:/o:redhat:enterprise_linux:8" + "cpe:/a:redhat:enterprise_linux:8" ] }, { @@ -127,7 +127,7 @@ "packageName": "libtiff", "defaultStatus": "affected", "cpes": [ - "cpe:/o:redhat:enterprise_linux:8" + "cpe:/a:redhat:enterprise_linux:8" ] }, { @@ -137,7 +137,7 @@ "packageName": "mingw-libtiff", "defaultStatus": "affected", "cpes": [ - "cpe:/o:redhat:enterprise_linux:8" + "cpe:/a:redhat:enterprise_linux:8" ] } ], @@ -201,7 +201,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-01-22T15:42:35.970Z" + "dateUpdated": "2026-11-12T03:04:48.838Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2025/10xxx/CVE-2025-10935.json b/data/2025/10xxx/CVE-2025-10935.json new file mode 100644 index 0000000000..0a7eaf5147 --- /dev/null +++ b/data/2025/10xxx/CVE-2025-10935.json @@ -0,0 +1,80 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2025-10935", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2025-09-24T20:52:31.185Z", + "datePublished": "2026-11-12T02:47:24.255Z", + "dateUpdated": "2026-11-12T02:47:24.255Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:47:24.255Z" + }, + "title": "libilbm ILBM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "libilbm ILBM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libilbm. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of ILBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27792." + } + ], + "affected": [ + { + "vendor": "libilbm", + "product": "libilbm", + "versions": [ + { + "version": "3.0.4", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-122", + "description": "CWE-122: Heap-based Buffer Overflow", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-887/", + "name": "ZDI-26-887", + "tags": [ + "x_research-advisory" + ] + } + ], + "dateAssigned": "2025-09-24T20:52:31.230Z", + "datePublic": "2026-11-06T22:15:13.436Z", + "source": { + "lang": "en", + "value": "MICHAEL RANDRIANANTENAINA [https://elkamika.blogspot.com/]" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114556.json b/data/2026/114xxx/CVE-2026-114556.json new file mode 100644 index 0000000000..fc6237263a --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114556.json @@ -0,0 +1,80 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114556", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-10-21T17:11:55.356Z", + "datePublished": "2026-11-12T02:55:13.755Z", + "dateUpdated": "2026-11-12T02:55:13.755Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:55:13.755Z" + }, + "title": "MailEnable Save Directory Traversal Arbitrary File Creation Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "MailEnable Save Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of MailEnable. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the implementation of the Save method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of SYSTEM. Was ZDI-CAN-29161." + } + ], + "affected": [ + { + "vendor": "MailEnable", + "product": "MailEnable", + "versions": [ + { + "version": "10.59", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-22", + "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-869/", + "name": "ZDI-26-869", + "tags": [ + "x_research-advisory" + ] + } + ], + "dateAssigned": "2026-10-21T17:11:55.385Z", + "datePublic": "2026-11-04T13:47:08.595Z", + "source": { + "lang": "en", + "value": "Nicolas Chatelain" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", + "baseScore": 7.4, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114558.json b/data/2026/114xxx/CVE-2026-114558.json new file mode 100644 index 0000000000..b6c822300a --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114558.json @@ -0,0 +1,87 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114558", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-10-21T17:13:32.105Z", + "datePublished": "2026-11-12T02:54:26.892Z", + "dateUpdated": "2026-11-12T02:54:26.892Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:54:26.892Z" + }, + "title": "OriginLab Origin Viewer OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "OriginLab Origin Viewer OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OPJU files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30738." + } + ], + "affected": [ + { + "vendor": "OriginLab", + "product": "Origin Viewer", + "versions": [ + { + "version": "9.9.5", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-787", + "description": "CWE-787: Out-of-bounds Write", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-886/", + "name": "ZDI-26-886", + "tags": [ + "x_research-advisory" + ] + }, + { + "url": "https://docs.originlab.com/cve/CVE-2026-114558", + "name": "vendor-provided URL", + "tags": [ + "vendor-advisory" + ] + } + ], + "dateAssigned": "2026-10-21T17:13:32.132Z", + "datePublic": "2026-11-06T22:09:28.130Z", + "source": { + "lang": "en", + "value": "rgod" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114559.json b/data/2026/114xxx/CVE-2026-114559.json new file mode 100644 index 0000000000..edc469b10a --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114559.json @@ -0,0 +1,87 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114559", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-10-21T17:13:35.477Z", + "datePublished": "2026-11-12T02:53:38.237Z", + "dateUpdated": "2026-11-12T02:53:38.237Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:53:38.237Z" + }, + "title": "OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OGG files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30431." + } + ], + "affected": [ + { + "vendor": "OriginLab", + "product": "Origin Viewer", + "versions": [ + { + "version": "9.9.5", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-787", + "description": "CWE-787: Out-of-bounds Write", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-876/", + "name": "ZDI-26-876", + "tags": [ + "x_research-advisory" + ] + }, + { + "url": "https://docs.originlab.com/cve/CVE-2026-114559", + "name": "vendor-provided URL", + "tags": [ + "vendor-advisory" + ] + } + ], + "dateAssigned": "2026-10-21T17:13:35.505Z", + "datePublic": "2026-11-06T22:08:28.407Z", + "source": { + "lang": "en", + "value": "rgod" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114560.json b/data/2026/114xxx/CVE-2026-114560.json new file mode 100644 index 0000000000..09ed54303d --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114560.json @@ -0,0 +1,87 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114560", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-10-21T17:13:39.478Z", + "datePublished": "2026-11-12T02:53:44.212Z", + "dateUpdated": "2026-11-12T02:53:44.212Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:53:44.212Z" + }, + "title": "OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OPJ files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30432." + } + ], + "affected": [ + { + "vendor": "OriginLab", + "product": "Origin Viewer", + "versions": [ + { + "version": "9.9.5", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-787", + "description": "CWE-787: Out-of-bounds Write", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-877/", + "name": "ZDI-26-877", + "tags": [ + "x_research-advisory" + ] + }, + { + "url": "https://docs.originlab.com/cve/CVE-2026-114560", + "name": "vendor-provided URL", + "tags": [ + "vendor-advisory" + ] + } + ], + "dateAssigned": "2026-10-21T17:13:39.506Z", + "datePublic": "2026-11-06T22:08:33.612Z", + "source": { + "lang": "en", + "value": "rgod" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114561.json b/data/2026/114xxx/CVE-2026-114561.json new file mode 100644 index 0000000000..acf9698107 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114561.json @@ -0,0 +1,87 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114561", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-10-21T17:13:42.705Z", + "datePublished": "2026-11-12T02:53:48.980Z", + "dateUpdated": "2026-11-12T02:53:48.980Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:53:48.980Z" + }, + "title": "OriginLab Origin Viewer OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "OriginLab Origin Viewer OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OPJU files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30433." + } + ], + "affected": [ + { + "vendor": "OriginLab", + "product": "Origin Viewer", + "versions": [ + { + "version": "9.9.5", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-787", + "description": "CWE-787: Out-of-bounds Write", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-878/", + "name": "ZDI-26-878", + "tags": [ + "x_research-advisory" + ] + }, + { + "url": "https://docs.originlab.com/cve/CVE-2026-114561", + "name": "vendor-provided URL", + "tags": [ + "vendor-advisory" + ] + } + ], + "dateAssigned": "2026-10-21T17:13:42.733Z", + "datePublic": "2026-11-06T22:08:38.956Z", + "source": { + "lang": "en", + "value": "rgod" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114562.json b/data/2026/114xxx/CVE-2026-114562.json new file mode 100644 index 0000000000..22a693f9b3 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114562.json @@ -0,0 +1,87 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114562", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-10-21T17:13:46.223Z", + "datePublished": "2026-11-12T02:53:54.134Z", + "dateUpdated": "2026-11-12T02:53:54.134Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:53:54.134Z" + }, + "title": "OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OGWU files. The issue results from the lack of proper validation of user-supplied data, which can result in a write before the start of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30736." + } + ], + "affected": [ + { + "vendor": "OriginLab", + "product": "Origin Viewer", + "versions": [ + { + "version": "9.9.5", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-787", + "description": "CWE-787: Out-of-bounds Write", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-879/", + "name": "ZDI-26-879", + "tags": [ + "x_research-advisory" + ] + }, + { + "url": "https://docs.originlab.com/cve/CVE-2026-114562", + "name": "vendor-provided URL", + "tags": [ + "vendor-advisory" + ] + } + ], + "dateAssigned": "2026-10-21T17:13:46.252Z", + "datePublic": "2026-11-06T22:08:45.303Z", + "source": { + "lang": "en", + "value": "rgod" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114563.json b/data/2026/114xxx/CVE-2026-114563.json new file mode 100644 index 0000000000..66f2c5f1a8 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114563.json @@ -0,0 +1,87 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114563", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-10-21T17:13:49.634Z", + "datePublished": "2026-11-12T02:53:59.330Z", + "dateUpdated": "2026-11-12T02:53:59.330Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:53:59.330Z" + }, + "title": "OriginLab Origin Viewer OGWU File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "OriginLab Origin Viewer OGWU File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OGWU files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30737." + } + ], + "affected": [ + { + "vendor": "OriginLab", + "product": "Origin Viewer", + "versions": [ + { + "version": "9.9.5", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-121", + "description": "CWE-121: Stack-based Buffer Overflow", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-880/", + "name": "ZDI-26-880", + "tags": [ + "x_research-advisory" + ] + }, + { + "url": "https://docs.originlab.com/cve/CVE-2026-114563", + "name": "vendor-provided URL", + "tags": [ + "vendor-advisory" + ] + } + ], + "dateAssigned": "2026-10-21T17:13:49.663Z", + "datePublic": "2026-11-06T22:08:50.978Z", + "source": { + "lang": "en", + "value": "rgod" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114564.json b/data/2026/114xxx/CVE-2026-114564.json new file mode 100644 index 0000000000..b36772f709 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114564.json @@ -0,0 +1,87 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114564", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-10-21T17:13:53.597Z", + "datePublished": "2026-11-12T02:54:03.414Z", + "dateUpdated": "2026-11-12T02:54:03.414Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:54:03.414Z" + }, + "title": "OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OGG files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30768." + } + ], + "affected": [ + { + "vendor": "OriginLab", + "product": "Origin Viewer", + "versions": [ + { + "version": "9.9.5", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-787", + "description": "CWE-787: Out-of-bounds Write", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-881/", + "name": "ZDI-26-881", + "tags": [ + "x_research-advisory" + ] + }, + { + "url": "https://docs.originlab.com/cve/CVE-2026-114564", + "name": "vendor-provided URL", + "tags": [ + "vendor-advisory" + ] + } + ], + "dateAssigned": "2026-10-21T17:13:53.624Z", + "datePublic": "2026-11-06T22:08:56.245Z", + "source": { + "lang": "en", + "value": "rgod" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114565.json b/data/2026/114xxx/CVE-2026-114565.json new file mode 100644 index 0000000000..dc29629535 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114565.json @@ -0,0 +1,87 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114565", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-10-21T17:13:56.961Z", + "datePublished": "2026-11-12T02:54:08.039Z", + "dateUpdated": "2026-11-12T02:54:08.039Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:54:08.039Z" + }, + "title": "OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OGG files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30769." + } + ], + "affected": [ + { + "vendor": "OriginLab", + "product": "Origin Viewer", + "versions": [ + { + "version": "9.9.5", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-787", + "description": "CWE-787: Out-of-bounds Write", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-882/", + "name": "ZDI-26-882", + "tags": [ + "x_research-advisory" + ] + }, + { + "url": "https://docs.originlab.com/cve/CVE-2026-114565", + "name": "vendor-provided URL", + "tags": [ + "vendor-advisory" + ] + } + ], + "dateAssigned": "2026-10-21T17:13:57.011Z", + "datePublic": "2026-11-06T22:09:02.736Z", + "source": { + "lang": "en", + "value": "rgod" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114566.json b/data/2026/114xxx/CVE-2026-114566.json new file mode 100644 index 0000000000..9339c3eaf3 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114566.json @@ -0,0 +1,87 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114566", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-10-21T17:14:00.073Z", + "datePublished": "2026-11-12T02:54:12.381Z", + "dateUpdated": "2026-11-12T02:54:12.381Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:54:12.381Z" + }, + "title": "OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OGM files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30770." + } + ], + "affected": [ + { + "vendor": "OriginLab", + "product": "Origin Viewer", + "versions": [ + { + "version": "9.9.5", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-119", + "description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-883/", + "name": "ZDI-26-883", + "tags": [ + "x_research-advisory" + ] + }, + { + "url": "https://docs.originlab.com/cve/CVE-2026-114566", + "name": "vendor-provided URL", + "tags": [ + "vendor-advisory" + ] + } + ], + "dateAssigned": "2026-10-21T17:14:00.101Z", + "datePublic": "2026-11-06T22:09:11.109Z", + "source": { + "lang": "en", + "value": "rgod" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114567.json b/data/2026/114xxx/CVE-2026-114567.json new file mode 100644 index 0000000000..dbdce0ac99 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114567.json @@ -0,0 +1,87 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114567", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-10-21T17:14:04.229Z", + "datePublished": "2026-11-12T02:54:17.236Z", + "dateUpdated": "2026-11-12T02:54:17.236Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:54:17.236Z" + }, + "title": "OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OGWU files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30771." + } + ], + "affected": [ + { + "vendor": "OriginLab", + "product": "Origin Viewer", + "versions": [ + { + "version": "9.9.5", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-787", + "description": "CWE-787: Out-of-bounds Write", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-884/", + "name": "ZDI-26-884", + "tags": [ + "x_research-advisory" + ] + }, + { + "url": "https://docs.originlab.com/cve/CVE-2026-114567", + "name": "vendor-provided URL", + "tags": [ + "vendor-advisory" + ] + } + ], + "dateAssigned": "2026-10-21T17:14:04.260Z", + "datePublic": "2026-11-06T22:09:17.050Z", + "source": { + "lang": "en", + "value": "rgod" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114568.json b/data/2026/114xxx/CVE-2026-114568.json new file mode 100644 index 0000000000..9d191eac0b --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114568.json @@ -0,0 +1,87 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114568", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-10-21T17:14:08.316Z", + "datePublished": "2026-11-12T02:54:21.432Z", + "dateUpdated": "2026-11-12T02:54:21.432Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:54:21.432Z" + }, + "title": "OriginLab Origin Viewer OPJ File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "OriginLab Origin Viewer OPJ File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OPJ files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-31587." + } + ], + "affected": [ + { + "vendor": "OriginLab", + "product": "Origin Viewer", + "versions": [ + { + "version": "9.9.5", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-122", + "description": "CWE-122: Heap-based Buffer Overflow", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-885/", + "name": "ZDI-26-885", + "tags": [ + "x_research-advisory" + ] + }, + { + "url": "https://docs.originlab.com/cve/CVE-2026-114568", + "name": "vendor-provided URL", + "tags": [ + "vendor-advisory" + ] + } + ], + "dateAssigned": "2026-10-21T17:14:08.346Z", + "datePublic": "2026-11-06T22:09:22.706Z", + "source": { + "lang": "en", + "value": "chwrld (@chwrld24)" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114569.json b/data/2026/114xxx/CVE-2026-114569.json new file mode 100644 index 0000000000..139a44ffaf --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114569.json @@ -0,0 +1,87 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114569", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-10-21T17:14:57.893Z", + "datePublished": "2026-11-12T02:53:34.115Z", + "dateUpdated": "2026-11-12T02:53:34.115Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:53:34.115Z" + }, + "title": "OriginLab Origin Viewer OGWU File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "OriginLab Origin Viewer OGWU File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OGWU files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30430." + } + ], + "affected": [ + { + "vendor": "OriginLab", + "product": "Origin Viewer", + "versions": [ + { + "version": "9.9.5", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-122", + "description": "CWE-122: Heap-based Buffer Overflow", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-875/", + "name": "ZDI-26-875", + "tags": [ + "x_research-advisory" + ] + }, + { + "url": "https://docs.originlab.com/cve/CVE-2026-114569", + "name": "vendor-provided URL", + "tags": [ + "vendor-advisory" + ] + } + ], + "dateAssigned": "2026-10-21T17:14:57.922Z", + "datePublic": "2026-11-06T22:08:23.246Z", + "source": { + "lang": "en", + "value": "rgod" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/117xxx/CVE-2026-117687.json b/data/2026/117xxx/CVE-2026-117687.json new file mode 100644 index 0000000000..0f51bbc2bf --- /dev/null +++ b/data/2026/117xxx/CVE-2026-117687.json @@ -0,0 +1,163 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-117687", + "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", + "state": "PUBLISHED", + "assignerShortName": "jpcert", + "dateReserved": "2026-11-06T06:33:18.178Z", + "datePublished": "2026-11-12T03:03:24.510Z", + "dateUpdated": "2026-11-12T03:03:24.510Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Six Apart Ltd.", + "product": "Movable Type", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "8.8.0", + "status": "affected", + "versionType": "semver", + "lessThanOrEqual": "8.8.6" + } + ] + }, + { + "vendor": "Six Apart Ltd.", + "product": "Movable Type Advanced", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "8.8.0", + "status": "affected", + "versionType": "semver", + "lessThanOrEqual": "8.8.6" + } + ] + }, + { + "vendor": "Six Apart Ltd.", + "product": "Movable Type", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "8.0.0", + "status": "affected", + "versionType": "semver", + "lessThanOrEqual": "8.0.13" + } + ] + }, + { + "vendor": "Six Apart Ltd.", + "product": "Movable Type Advanced", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "8.0.0", + "status": "affected", + "versionType": "semver", + "lessThanOrEqual": "8.0.13" + } + ] + }, + { + "vendor": "Six Apart Ltd.", + "product": "Movable Type Premium", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "2.00", + "status": "affected", + "versionType": "semver", + "lessThanOrEqual": "2.18" + } + ] + }, + { + "vendor": "Six Apart Ltd.", + "product": "Movable Type Premium Advanced Edition", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "2.00", + "status": "affected", + "versionType": "semver", + "lessThanOrEqual": "2.18" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Movable Type provided by Six Apart Ltd. contains a code injection vulnerability in its Dynamic Publishing functionality. By sending a specially crafted request that is processed by the Dynamic Publishing, an attacker may be able to execute arbitrary PHP code on the affected product." + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "Code injection", + "lang": "en-US", + "cweId": "CWE-94", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://movabletype.org/news/2026/11/mt-887-released.html" + }, + { + "url": "https://www.sixapart.jp/movabletype/news/2026/11/11-1100.html" + }, + { + "url": "https://jvn.jp/en/jp/JVN11786640/" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_0": { + "version": "3.0", + "baseSeverity": "HIGH", + "baseScore": 7.3, + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + } + }, + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseSeverity": "MEDIUM", + "baseScore": 6.9, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N" + } + } + ], + "providerMetadata": { + "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", + "shortName": "jpcert", + "dateUpdated": "2026-11-12T03:03:24.510Z" + } + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118631.json b/data/2026/118xxx/CVE-2026-118631.json new file mode 100644 index 0000000000..bebb8b6a69 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118631.json @@ -0,0 +1,80 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118631", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-10-28T16:58:46.034Z", + "datePublished": "2026-11-12T02:52:04.600Z", + "dateUpdated": "2026-11-12T02:52:04.600Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:52:04.600Z" + }, + "title": "Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability. This vulnerability allows local attackers to modify files on affected installations of Philips Hue Bridge Pro. An attacker must first obtain the ability to execute low-privileged code within a container on the target system, in order to exploit this vulnerability.\n\nThe specific flaw exists within the factory data service, which listens on TCP port 5001 by default. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to modify files in the context of the service account. Was ZDI-CAN-33090." + } + ], + "affected": [ + { + "vendor": "Philips", + "product": "Hue Bridge Pro", + "versions": [ + { + "version": "2071026000", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-88", + "description": "CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-890/", + "name": "ZDI-26-890", + "tags": [ + "x_research-advisory" + ] + } + ], + "dateAssigned": "2026-10-28T16:58:46.061Z", + "datePublic": "2026-11-06T22:17:21.881Z", + "source": { + "lang": "en", + "value": "Connor Ford @ByteInsight of TrendAI Zero Day Initiative" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N", + "baseScore": 3.8, + "baseSeverity": "LOW" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118632.json b/data/2026/118xxx/CVE-2026-118632.json new file mode 100644 index 0000000000..d6981b7b82 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118632.json @@ -0,0 +1,80 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118632", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-10-28T16:58:58.973Z", + "datePublished": "2026-11-12T02:52:15.303Z", + "dateUpdated": "2026-11-12T02:52:15.303Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:52:15.303Z" + }, + "title": "Philips Hue Bridge Pro SQL Injection Remote Code Execution Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "Philips Hue Bridge Pro SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge Pro. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.\n\nThe specific flaw exists within the HTTP service, which listens on TCP port 443 by default. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-33089." + } + ], + "affected": [ + { + "vendor": "Philips", + "product": "Hue Bridge Pro", + "versions": [ + { + "version": "2071026000", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-89", + "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-891/", + "name": "ZDI-26-891", + "tags": [ + "x_research-advisory" + ] + } + ], + "dateAssigned": "2026-10-28T16:58:59.001Z", + "datePublic": "2026-11-06T22:17:28.151Z", + "source": { + "lang": "en", + "value": "Connor Ford @ByteInsight of TrendAI Zero Day Initiative" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121741.json b/data/2026/121xxx/CVE-2026-121741.json new file mode 100644 index 0000000000..9987e911ce --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121741.json @@ -0,0 +1,80 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121741", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-11-03T23:32:33.395Z", + "datePublished": "2026-11-12T02:47:47.217Z", + "dateUpdated": "2026-11-12T02:47:47.217Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:47:47.217Z" + }, + "title": "Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30421." + } + ], + "affected": [ + { + "vendor": "Trimble", + "product": "SketchUp", + "versions": [ + { + "version": "26.1.252", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-416", + "description": "CWE-416: Use After Free", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-893/", + "name": "ZDI-26-893", + "tags": [ + "x_research-advisory" + ] + } + ], + "dateAssigned": "2026-11-03T23:32:33.485Z", + "datePublic": "2026-11-06T22:17:51.461Z", + "source": { + "lang": "en", + "value": "r1ngz3ro" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121742.json b/data/2026/121xxx/CVE-2026-121742.json new file mode 100644 index 0000000000..f692ea4cd2 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121742.json @@ -0,0 +1,80 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121742", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-11-03T23:33:29.237Z", + "datePublished": "2026-11-12T02:51:00.165Z", + "dateUpdated": "2026-11-12T02:51:00.165Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:51:00.165Z" + }, + "title": "Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of XE files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28757." + } + ], + "affected": [ + { + "vendor": "Ashlar-Vellum", + "product": "Cobalt", + "versions": [ + { + "version": "1204.209", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-416", + "description": "CWE-416: Use After Free", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-874/", + "name": "ZDI-26-874", + "tags": [ + "x_research-advisory" + ] + } + ], + "dateAssigned": "2026-11-03T23:33:29.266Z", + "datePublic": "2026-11-04T14:17:14.071Z", + "source": { + "lang": "en", + "value": "Rocco Calvi (@TecR0c) with TecSecurity" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121743.json b/data/2026/121xxx/CVE-2026-121743.json new file mode 100644 index 0000000000..87391fe8f0 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121743.json @@ -0,0 +1,80 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121743", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-11-03T23:34:02.743Z", + "datePublished": "2026-11-12T02:51:12.304Z", + "dateUpdated": "2026-11-12T02:51:12.304Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:51:12.304Z" + }, + "title": "Ashlar-Vellum Cobalt AR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "Ashlar-Vellum Cobalt AR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of AR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28675." + } + ], + "affected": [ + { + "vendor": "Ashlar-Vellum", + "product": "Cobalt", + "versions": [ + { + "version": "1204.209", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-122", + "description": "CWE-122: Heap-based Buffer Overflow", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-873/", + "name": "ZDI-26-873", + "tags": [ + "x_research-advisory" + ] + } + ], + "dateAssigned": "2026-11-03T23:34:02.774Z", + "datePublic": "2026-11-04T14:17:06.832Z", + "source": { + "lang": "en", + "value": "Rocco Calvi (@TecR0c) with TecSecurity" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121744.json b/data/2026/121xxx/CVE-2026-121744.json new file mode 100644 index 0000000000..d12894ba26 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121744.json @@ -0,0 +1,80 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121744", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-11-03T23:34:11.116Z", + "datePublished": "2026-11-12T02:51:21.092Z", + "dateUpdated": "2026-11-12T02:51:21.092Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:51:21.092Z" + }, + "title": "Ashlar-Vellum Cobalt XE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "Ashlar-Vellum Cobalt XE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of XE files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28172." + } + ], + "affected": [ + { + "vendor": "Ashlar-Vellum", + "product": "Cobalt", + "versions": [ + { + "version": "1204.204", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-121", + "description": "CWE-121: Stack-based Buffer Overflow", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-870/", + "name": "ZDI-26-870", + "tags": [ + "x_research-advisory" + ] + } + ], + "dateAssigned": "2026-11-03T23:34:11.148Z", + "datePublic": "2026-11-04T14:16:44.030Z", + "source": { + "lang": "en", + "value": "Rocco Calvi (@TecR0c) with TecSecurity" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121752.json b/data/2026/121xxx/CVE-2026-121752.json new file mode 100644 index 0000000000..71b33b9d68 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121752.json @@ -0,0 +1,80 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121752", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-11-03T23:40:18.321Z", + "datePublished": "2026-11-12T02:51:29.957Z", + "dateUpdated": "2026-11-12T02:51:29.957Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:51:29.957Z" + }, + "title": "Ashlar-Vellum Cobalt LI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "Ashlar-Vellum Cobalt LI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of LI files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28447." + } + ], + "affected": [ + { + "vendor": "Ashlar-Vellum", + "product": "Cobalt", + "versions": [ + { + "version": "1204.207", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-122", + "description": "CWE-122: Heap-based Buffer Overflow", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-871/", + "name": "ZDI-26-871", + "tags": [ + "x_research-advisory" + ] + } + ], + "dateAssigned": "2026-11-03T23:40:18.369Z", + "datePublic": "2026-11-04T14:16:52.045Z", + "source": { + "lang": "en", + "value": "Rocco Calvi (@TecR0c) with TecSecurity" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121753.json b/data/2026/121xxx/CVE-2026-121753.json new file mode 100644 index 0000000000..5c79a15a8b --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121753.json @@ -0,0 +1,80 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121753", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-11-03T23:40:27.234Z", + "datePublished": "2026-11-12T02:51:44.534Z", + "dateUpdated": "2026-11-12T02:51:44.534Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:51:44.534Z" + }, + "title": "Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of XE files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28587." + } + ], + "affected": [ + { + "vendor": "Ashlar-Vellum", + "product": "Cobalt", + "versions": [ + { + "version": "1204.207", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-416", + "description": "CWE-416: Use After Free", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-872/", + "name": "ZDI-26-872", + "tags": [ + "x_research-advisory" + ] + } + ], + "dateAssigned": "2026-11-03T23:40:27.266Z", + "datePublic": "2026-11-04T14:16:59.382Z", + "source": { + "lang": "en", + "value": "Rocco Calvi (@TecR0c) with TecSecurity" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122044.json b/data/2026/122xxx/CVE-2026-122044.json new file mode 100644 index 0000000000..df0f1fcdc1 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122044.json @@ -0,0 +1,80 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122044", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-11-04T15:32:47.497Z", + "datePublished": "2026-11-12T02:52:26.244Z", + "dateUpdated": "2026-11-12T02:52:26.244Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:52:26.244Z" + }, + "title": "Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge Pro. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the HTTP service, which listens on TCP port 443 by default. The issue results from the failure to apply a protection mechanism. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-33086." + } + ], + "affected": [ + { + "vendor": "Philips", + "product": "Hue Bridge Pro", + "versions": [ + { + "version": "2071026000", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-693", + "description": "CWE-693: Protection Mechanism Failure", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-892/", + "name": "ZDI-26-892", + "tags": [ + "x_research-advisory" + ] + } + ], + "dateAssigned": "2026-11-04T15:32:47.588Z", + "datePublic": "2026-11-06T22:17:35.605Z", + "source": { + "lang": "en", + "value": "Connor Ford @ByteInsight of TrendAI Zero Day Initiative" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125704.json b/data/2026/125xxx/CVE-2026-125704.json index 069cab17b5..88d0a9b6a6 100644 --- a/data/2026/125xxx/CVE-2026-125704.json +++ b/data/2026/125xxx/CVE-2026-125704.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-11-10T10:24:52.013Z", "datePublished": "2026-11-10T10:43:20.844Z", - "dateUpdated": "2026-11-11T19:00:58.688Z" + "dateUpdated": "2026-11-12T03:10:26.660Z" }, "containers": { "cna": { @@ -66,6 +66,24 @@ "cpe:/a:redhat:enterprise_linux:8::appstream" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 9", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "gstreamer1", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:1.22.12-3.el9_9.1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:enterprise_linux:9::appstream" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", @@ -85,16 +103,6 @@ "cpes": [ "cpe:/o:redhat:rhel_els:7" ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat Enterprise Linux 9", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "gstreamer1", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:enterprise_linux:9" - ] } ], "references": [ @@ -106,6 +114,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99228", + "name": "RHSA-2026:99228", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-125704", "tags": [ @@ -163,7 +179,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-11T19:00:58.688Z" + "dateUpdated": "2026-11-12T03:10:26.660Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/126xxx/CVE-2026-126957.json b/data/2026/126xxx/CVE-2026-126957.json new file mode 100644 index 0000000000..541c6300ef --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126957.json @@ -0,0 +1,147 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126957", + "assignerOrgId": "e2e69745-5e70-4e92-8431-deb5529a81ad", + "state": "PUBLISHED", + "assignerShortName": "zephyr", + "dateReserved": "2026-11-12T02:06:20.541Z", + "datePublished": "2026-11-12T02:23:44.385Z", + "dateUpdated": "2026-11-12T02:23:44.385Z" + }, + "containers": { + "cna": { + "affected": [ + { + "defaultStatus": "unaffected", + "packageName": "Zephyr", + "product": "Zephyr", + "repo": "https://github.com/zephyrproject-rtos/zephyr", + "vendor": "zephyrproject-rtos", + "versions": [ + { + "lessThanOrEqual": "4.4.0", + "status": "affected", + "version": "*", + "versionType": "git" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "supportingMedia": [ + { + "base64": false, + "type": "text/html", + "value": "ICMPv4 Record Route / Timestamp option: stack OOB read via ptr underflow in icmpv4.c" + } + ], + "value": "An integer underflow in Zephyr's IPv4 option handling allows a remote, unauthenticated attacker to read stack memory. When replying to an ICMP Echo Request that carries an IPv4 Record Route or Timestamp option, icmpv4_update_record_route() and icmpv4_update_time_stamp() in subsys/net/ip/icmpv4.c compute the length of the already recorded data as ptr - ptr_offset in uint8_t arithmetic. The attacker-controlled Pointer field is checked against the option length but not against the RFC 791 minimum (4 for Record Route, 5 for Timestamp), so a smaller value wraps the length to up to 252 bytes. net_pkt_write() then reads past the 40-byte opt_data stack buffer and up to 213 bytes of stack memory, which can include stack and heap pointers, are returned in the ICMP Echo Reply. A single packet triggers the leak and the device does not crash, so it can be repeated. Devices built with CONFIG_NET_IPV4_HDR_OPTIONS, which CONFIG_NET_IPV4_IGMP selects, are affected." + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "NONE", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "privilegesRequired": "NONE", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "version": "3.1" + }, + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ] + }, + { + "cvssV4_0": { + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "attackVector": "NETWORK", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "privilegesRequired": "NONE", + "subAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "userInteraction": "NONE", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", + "version": "4.0", + "vulnAvailabilityImpact": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE" + }, + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ] + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-125", + "description": "Out-of-bounds Read", + "lang": "en", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "cweId": "CWE-191", + "description": "Integer Underflow (Wrap or Wraparound)", + "lang": "en", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "cweId": "CWE-200", + "description": "Exposure of Sensitive Information to an Unauthorized Actor", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "providerMetadata": { + "orgId": "e2e69745-5e70-4e92-8431-deb5529a81ad", + "shortName": "zephyr", + "dateUpdated": "2026-11-12T02:23:44.385Z" + }, + "references": [ + { + "url": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-cvv6-5f6x-87qf" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "title": "ICMPv4 Record Route / Timestamp option: stack OOB read via ptr underflow in icmpv4.c", + "x_generator": { + "engine": "swg-tools/create-cve-info" + } + } + } +} \ No newline at end of file diff --git a/data/2026/13xxx/CVE-2026-13269.json b/data/2026/13xxx/CVE-2026-13269.json new file mode 100644 index 0000000000..30eb3e0c7e --- /dev/null +++ b/data/2026/13xxx/CVE-2026-13269.json @@ -0,0 +1,80 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-13269", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-06-24T21:23:19.396Z", + "datePublished": "2026-11-12T02:49:48.851Z", + "dateUpdated": "2026-11-12T02:49:48.851Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:49:48.851Z" + }, + "title": "Quest NetVault Backup StnzCreateKey Numeric Truncation Error Denial-of-Service Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "Quest NetVault Backup StnzCreateKey Numeric Truncation Error Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the StnzCreateKey function. The issue results from the lack of proper validation of user-supplied data, which can result in a numeric truncation error before allocating a buffer. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-28743." + } + ], + "affected": [ + { + "vendor": "Quest", + "product": "NetVault Backup", + "versions": [ + { + "version": "14.0.2.4", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-197", + "description": "CWE-197: Numeric Truncation Error", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-888/", + "name": "ZDI-26-888", + "tags": [ + "x_research-advisory" + ] + } + ], + "dateAssigned": "2026-06-24T21:23:19.422Z", + "datePublic": "2026-11-06T22:17:07.172Z", + "source": { + "lang": "en", + "value": "06fe5fd2bc53027c4a3b7e395af0b850e7b8a044" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/13xxx/CVE-2026-13270.json b/data/2026/13xxx/CVE-2026-13270.json new file mode 100644 index 0000000000..3e5a04795b --- /dev/null +++ b/data/2026/13xxx/CVE-2026-13270.json @@ -0,0 +1,80 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-13270", + "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "state": "PUBLISHED", + "assignerShortName": "zdi", + "dateReserved": "2026-06-24T21:23:28.760Z", + "datePublished": "2026-11-12T02:49:34.234Z", + "dateUpdated": "2026-11-12T02:49:34.234Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", + "shortName": "zdi", + "dateUpdated": "2026-11-12T02:49:34.234Z" + }, + "title": "Quest NetVault Backup nvpmgr Integer Underflow Denial-of-Service Vulnerability", + "descriptions": [ + { + "lang": "en", + "value": "Quest NetVault Backup nvpmgr Integer Underflow Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the nvpmgr service, which listens on UDP port 20031 by default. The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before allocating a buffer. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-28744." + } + ], + "affected": [ + { + "vendor": "Quest", + "product": "NetVault Backup", + "versions": [ + { + "version": "14.0.2.4", + "status": "affected" + } + ], + "defaultStatus": "unknown" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-191", + "description": "CWE-191: Integer Underflow (Wrap or Wraparound)", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-889/", + "name": "ZDI-26-889", + "tags": [ + "x_research-advisory" + ] + } + ], + "dateAssigned": "2026-06-24T21:23:28.783Z", + "datePublic": "2026-11-06T22:17:13.546Z", + "source": { + "lang": "en", + "value": "06fe5fd2bc53027c4a3b7e395af0b850e7b8a044" + }, + "metrics": [ + { + "format": "CVSS", + "cvssV3_0": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/delta.json b/data/delta.json index 0f9e374c16..06dba41f8c 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,14 +1,27 @@ { - "fetchTime": "2026-11-12T02:16:30.555Z", - "numberOfChanges": 1, + "fetchTime": "2026-11-12T03:17:12.952Z", + "numberOfChanges": 3, "new": [ { - "cveId": "CVE-2026-126795", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126795", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126795.json", - "dateUpdated": "2026-11-12T02:15:29.492Z" + "cveId": "CVE-2026-117687", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-117687", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/117xxx/CVE-2026-117687.json", + "dateUpdated": "2026-11-12T03:03:24.510Z" + } + ], + "updated": [ + { + "cveId": "CVE-2023-41175", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-41175", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41175.json", + "dateUpdated": "2026-11-12T03:04:48.838Z" + }, + { + "cveId": "CVE-2026-125704", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125704", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125704.json", + "dateUpdated": "2026-11-12T03:10:26.660Z" } ], - "updated": [], "error": [] } \ No newline at end of file diff --git a/data/deltaLog.json b/data/deltaLog.json index 955d747bf4..ff0c75d3c0 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,211 @@ [ + { + "fetchTime": "2026-11-12T03:17:12.952Z", + "numberOfChanges": 3, + "new": [ + { + "cveId": "CVE-2026-117687", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-117687", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/117xxx/CVE-2026-117687.json", + "dateUpdated": "2026-11-12T03:03:24.510Z" + } + ], + "updated": [ + { + "cveId": "CVE-2023-41175", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-41175", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41175.json", + "dateUpdated": "2026-11-12T03:04:48.838Z" + }, + { + "cveId": "CVE-2026-125704", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125704", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125704.json", + "dateUpdated": "2026-11-12T03:10:26.660Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T02:56:31.310Z", + "numberOfChanges": 21, + "new": [ + { + "cveId": "CVE-2026-114556", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114556", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114556.json", + "dateUpdated": "2026-11-12T02:55:13.755Z" + }, + { + "cveId": "CVE-2026-114558", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114558", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114558.json", + "dateUpdated": "2026-11-12T02:54:26.892Z" + }, + { + "cveId": "CVE-2026-114559", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114559", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114559.json", + "dateUpdated": "2026-11-12T02:53:38.237Z" + }, + { + "cveId": "CVE-2026-114560", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114560", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114560.json", + "dateUpdated": "2026-11-12T02:53:44.212Z" + }, + { + "cveId": "CVE-2026-114561", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114561", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114561.json", + "dateUpdated": "2026-11-12T02:53:48.980Z" + }, + { + "cveId": "CVE-2026-114562", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114562", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114562.json", + "dateUpdated": "2026-11-12T02:53:54.134Z" + }, + { + "cveId": "CVE-2026-114563", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114563", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114563.json", + "dateUpdated": "2026-11-12T02:53:59.330Z" + }, + { + "cveId": "CVE-2026-114564", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114564", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114564.json", + "dateUpdated": "2026-11-12T02:54:03.414Z" + }, + { + "cveId": "CVE-2026-114565", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114565", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114565.json", + "dateUpdated": "2026-11-12T02:54:08.039Z" + }, + { + "cveId": "CVE-2026-114566", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114566", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114566.json", + "dateUpdated": "2026-11-12T02:54:12.381Z" + }, + { + "cveId": "CVE-2026-114567", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114567", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114567.json", + "dateUpdated": "2026-11-12T02:54:17.236Z" + }, + { + "cveId": "CVE-2026-114568", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114568", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114568.json", + "dateUpdated": "2026-11-12T02:54:21.432Z" + }, + { + "cveId": "CVE-2026-114569", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114569", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114569.json", + "dateUpdated": "2026-11-12T02:53:34.115Z" + }, + { + "cveId": "CVE-2026-118631", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118631", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118631.json", + "dateUpdated": "2026-11-12T02:52:04.600Z" + }, + { + "cveId": "CVE-2026-118632", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118632", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118632.json", + "dateUpdated": "2026-11-12T02:52:15.303Z" + }, + { + "cveId": "CVE-2026-121742", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121742", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121742.json", + "dateUpdated": "2026-11-12T02:51:00.165Z" + }, + { + "cveId": "CVE-2026-121743", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121743", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121743.json", + "dateUpdated": "2026-11-12T02:51:12.304Z" + }, + { + "cveId": "CVE-2026-121744", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121744", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121744.json", + "dateUpdated": "2026-11-12T02:51:21.092Z" + }, + { + "cveId": "CVE-2026-121752", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121752", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121752.json", + "dateUpdated": "2026-11-12T02:51:29.957Z" + }, + { + "cveId": "CVE-2026-121753", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121753", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121753.json", + "dateUpdated": "2026-11-12T02:51:44.534Z" + }, + { + "cveId": "CVE-2026-122044", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122044", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122044.json", + "dateUpdated": "2026-11-12T02:52:26.244Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-12T02:50:36.023Z", + "numberOfChanges": 4, + "new": [ + { + "cveId": "CVE-2025-10935", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-10935", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10935.json", + "dateUpdated": "2026-11-12T02:47:24.255Z" + }, + { + "cveId": "CVE-2026-121741", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121741", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121741.json", + "dateUpdated": "2026-11-12T02:47:47.217Z" + }, + { + "cveId": "CVE-2026-13269", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-13269", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13269.json", + "dateUpdated": "2026-11-12T02:49:48.851Z" + }, + { + "cveId": "CVE-2026-13270", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-13270", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13270.json", + "dateUpdated": "2026-11-12T02:49:34.234Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-12T02:26:15.641Z", + "numberOfChanges": 1, + "new": [ + { + "cveId": "CVE-2026-126957", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126957", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126957.json", + "dateUpdated": "2026-11-12T02:23:44.385Z" + } + ], + "updated": [], + "error": [] + }, { "fetchTime": "2026-11-12T02:16:30.555Z", "numberOfChanges": 1, @@ -848144,119 +848351,5 @@ ], "updated": [], "error": [] - }, - { - "fetchTime": "2026-10-13T03:04:11.159Z", - "numberOfChanges": 7, - "new": [ - { - "cveId": "CVE-2026-108959", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108959", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108959.json", - "dateUpdated": "2026-10-13T02:45:15.576Z" - }, - { - "cveId": "CVE-2026-108960", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108960", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108960.json", - "dateUpdated": "2026-10-13T03:00:18.429Z" - } - ], - "updated": [ - { - "cveId": "CVE-2024-0874", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-0874", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/0xxx/CVE-2024-0874.json", - "dateUpdated": "2026-10-13T02:42:52.805Z" - }, - { - "cveId": "CVE-2024-3727", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-3727", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3727.json", - "dateUpdated": "2026-10-13T02:55:17.646Z" - }, - { - "cveId": "CVE-2024-8676", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-8676", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8676.json", - "dateUpdated": "2026-10-13T03:02:38.269Z" - }, - { - "cveId": "CVE-2024-9341", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-9341", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9341.json", - "dateUpdated": "2026-10-13T02:56:15.476Z" - }, - { - "cveId": "CVE-2024-9407", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-9407", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9407.json", - "dateUpdated": "2026-10-13T02:56:01.312Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-13T02:42:26.926Z", - "numberOfChanges": 9, - "new": [ - { - "cveId": "CVE-2026-108957", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108957", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108957.json", - "dateUpdated": "2026-10-13T02:15:16.103Z" - }, - { - "cveId": "CVE-2026-108958", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108958", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108958.json", - "dateUpdated": "2026-10-13T02:30:16.903Z" - }, - { - "cveId": "CVE-2026-109786", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109786", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109786.json", - "dateUpdated": "2026-10-13T02:40:13.899Z" - } - ], - "updated": [ - { - "cveId": "CVE-2024-10963", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-10963", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/10xxx/CVE-2024-10963.json", - "dateUpdated": "2026-10-13T02:17:22.807Z" - }, - { - "cveId": "CVE-2024-11218", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-11218", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11218.json", - "dateUpdated": "2026-10-13T02:20:56.585Z" - }, - { - "cveId": "CVE-2024-12085", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-12085", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/12xxx/CVE-2024-12085.json", - "dateUpdated": "2026-10-13T02:17:29.455Z" - }, - { - "cveId": "CVE-2025-0624", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-0624", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/0xxx/CVE-2025-0624.json", - "dateUpdated": "2026-10-13T02:21:07.416Z" - }, - { - "cveId": "CVE-2026-89111", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89111", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89111.json", - "dateUpdated": "2026-10-13T02:26:32.201Z" - }, - { - "cveId": "CVE-2026-89112", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89112", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89112.json", - "dateUpdated": "2026-10-13T02:28:02.627Z" - } - ], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index 4f38cecc04..1741c77a36 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "f122cb96b22f7905f97c87d1ab4c1922cf0a6845", + "upstream_commit": "ca666234d2b3ca06e261d562efc6637e1e839199", "since_year": 2017, - "records": 331397, - "synced_at_utc": "2026-11-12T02:25:26.635290+00:00" + "records": 331424, + "synced_at_utc": "2026-11-12T03:25:28.193043+00:00" }