CVE sync 2026-11-12T03:30:52Z
This commit is contained in:
Vulnerability Bot
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2023-08-25T09:21:36.645Z",
|
||||
"datePublished": "2023-10-05T18:55:26.876Z",
|
||||
"dateUpdated": "2026-01-22T15:42:35.970Z"
|
||||
"dateUpdated": "2026-11-12T03:04:48.838Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -76,8 +76,8 @@
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:enterprise_linux:9::crb",
|
||||
"cpe:/a:redhat:enterprise_linux:9::appstream"
|
||||
"cpe:/a:redhat:enterprise_linux:9::appstream",
|
||||
"cpe:/a:redhat:enterprise_linux:9::crb"
|
||||
]
|
||||
},
|
||||
{
|
||||
@@ -87,7 +87,7 @@
|
||||
"packageName": "libtiff",
|
||||
"defaultStatus": "unknown",
|
||||
"cpes": [
|
||||
"cpe:/o:redhat:enterprise_linux:6"
|
||||
"cpe:/o:redhat:rhel_els:6"
|
||||
]
|
||||
},
|
||||
{
|
||||
@@ -97,7 +97,7 @@
|
||||
"packageName": "compact-libtiff",
|
||||
"defaultStatus": "unknown",
|
||||
"cpes": [
|
||||
"cpe:/o:redhat:enterprise_linux:7"
|
||||
"cpe:/o:redhat:rhel_els:7"
|
||||
]
|
||||
},
|
||||
{
|
||||
@@ -107,7 +107,7 @@
|
||||
"packageName": "libtiff",
|
||||
"defaultStatus": "unknown",
|
||||
"cpes": [
|
||||
"cpe:/o:redhat:enterprise_linux:7"
|
||||
"cpe:/o:redhat:rhel_els:7"
|
||||
]
|
||||
},
|
||||
{
|
||||
@@ -117,7 +117,7 @@
|
||||
"packageName": "compat-libtiff3",
|
||||
"defaultStatus": "affected",
|
||||
"cpes": [
|
||||
"cpe:/o:redhat:enterprise_linux:8"
|
||||
"cpe:/a:redhat:enterprise_linux:8"
|
||||
]
|
||||
},
|
||||
{
|
||||
@@ -127,7 +127,7 @@
|
||||
"packageName": "libtiff",
|
||||
"defaultStatus": "affected",
|
||||
"cpes": [
|
||||
"cpe:/o:redhat:enterprise_linux:8"
|
||||
"cpe:/a:redhat:enterprise_linux:8"
|
||||
]
|
||||
},
|
||||
{
|
||||
@@ -137,7 +137,7 @@
|
||||
"packageName": "mingw-libtiff",
|
||||
"defaultStatus": "affected",
|
||||
"cpes": [
|
||||
"cpe:/o:redhat:enterprise_linux:8"
|
||||
"cpe:/a:redhat:enterprise_linux:8"
|
||||
]
|
||||
}
|
||||
],
|
||||
@@ -201,7 +201,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"shortName": "redhat",
|
||||
"dateUpdated": "2026-01-22T15:42:35.970Z"
|
||||
"dateUpdated": "2026-11-12T03:04:48.838Z"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
|
||||
@@ -0,0 +1,80 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2025-10935",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2025-09-24T20:52:31.185Z",
|
||||
"datePublished": "2026-11-12T02:47:24.255Z",
|
||||
"dateUpdated": "2026-11-12T02:47:24.255Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:47:24.255Z"
|
||||
},
|
||||
"title": "libilbm ILBM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "libilbm ILBM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libilbm. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of ILBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27792."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "libilbm",
|
||||
"product": "libilbm",
|
||||
"versions": [
|
||||
{
|
||||
"version": "3.0.4",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-122",
|
||||
"description": "CWE-122: Heap-based Buffer Overflow",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-887/",
|
||||
"name": "ZDI-26-887",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2025-09-24T20:52:31.230Z",
|
||||
"datePublic": "2026-11-06T22:15:13.436Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "MICHAEL RANDRIANANTENAINA [https://elkamika.blogspot.com/]"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,80 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-114556",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-10-21T17:11:55.356Z",
|
||||
"datePublished": "2026-11-12T02:55:13.755Z",
|
||||
"dateUpdated": "2026-11-12T02:55:13.755Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:55:13.755Z"
|
||||
},
|
||||
"title": "MailEnable Save Directory Traversal Arbitrary File Creation Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "MailEnable Save Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of MailEnable. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the implementation of the Save method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of SYSTEM. Was ZDI-CAN-29161."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "MailEnable",
|
||||
"product": "MailEnable",
|
||||
"versions": [
|
||||
{
|
||||
"version": "10.59",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-22",
|
||||
"description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-869/",
|
||||
"name": "ZDI-26-869",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-10-21T17:11:55.385Z",
|
||||
"datePublic": "2026-11-04T13:47:08.595Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "Nicolas Chatelain"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
|
||||
"baseScore": 7.4,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,87 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-114558",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-10-21T17:13:32.105Z",
|
||||
"datePublished": "2026-11-12T02:54:26.892Z",
|
||||
"dateUpdated": "2026-11-12T02:54:26.892Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:54:26.892Z"
|
||||
},
|
||||
"title": "OriginLab Origin Viewer OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "OriginLab Origin Viewer OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OPJU files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30738."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OriginLab",
|
||||
"product": "Origin Viewer",
|
||||
"versions": [
|
||||
{
|
||||
"version": "9.9.5",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-787",
|
||||
"description": "CWE-787: Out-of-bounds Write",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-886/",
|
||||
"name": "ZDI-26-886",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://docs.originlab.com/cve/CVE-2026-114558",
|
||||
"name": "vendor-provided URL",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-10-21T17:13:32.132Z",
|
||||
"datePublic": "2026-11-06T22:09:28.130Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "rgod"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,87 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-114559",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-10-21T17:13:35.477Z",
|
||||
"datePublished": "2026-11-12T02:53:38.237Z",
|
||||
"dateUpdated": "2026-11-12T02:53:38.237Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:53:38.237Z"
|
||||
},
|
||||
"title": "OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OGG files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30431."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OriginLab",
|
||||
"product": "Origin Viewer",
|
||||
"versions": [
|
||||
{
|
||||
"version": "9.9.5",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-787",
|
||||
"description": "CWE-787: Out-of-bounds Write",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-876/",
|
||||
"name": "ZDI-26-876",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://docs.originlab.com/cve/CVE-2026-114559",
|
||||
"name": "vendor-provided URL",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-10-21T17:13:35.505Z",
|
||||
"datePublic": "2026-11-06T22:08:28.407Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "rgod"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,87 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-114560",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-10-21T17:13:39.478Z",
|
||||
"datePublished": "2026-11-12T02:53:44.212Z",
|
||||
"dateUpdated": "2026-11-12T02:53:44.212Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:53:44.212Z"
|
||||
},
|
||||
"title": "OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OPJ files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30432."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OriginLab",
|
||||
"product": "Origin Viewer",
|
||||
"versions": [
|
||||
{
|
||||
"version": "9.9.5",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-787",
|
||||
"description": "CWE-787: Out-of-bounds Write",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-877/",
|
||||
"name": "ZDI-26-877",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://docs.originlab.com/cve/CVE-2026-114560",
|
||||
"name": "vendor-provided URL",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-10-21T17:13:39.506Z",
|
||||
"datePublic": "2026-11-06T22:08:33.612Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "rgod"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,87 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-114561",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-10-21T17:13:42.705Z",
|
||||
"datePublished": "2026-11-12T02:53:48.980Z",
|
||||
"dateUpdated": "2026-11-12T02:53:48.980Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:53:48.980Z"
|
||||
},
|
||||
"title": "OriginLab Origin Viewer OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "OriginLab Origin Viewer OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OPJU files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30433."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OriginLab",
|
||||
"product": "Origin Viewer",
|
||||
"versions": [
|
||||
{
|
||||
"version": "9.9.5",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-787",
|
||||
"description": "CWE-787: Out-of-bounds Write",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-878/",
|
||||
"name": "ZDI-26-878",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://docs.originlab.com/cve/CVE-2026-114561",
|
||||
"name": "vendor-provided URL",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-10-21T17:13:42.733Z",
|
||||
"datePublic": "2026-11-06T22:08:38.956Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "rgod"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,87 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-114562",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-10-21T17:13:46.223Z",
|
||||
"datePublished": "2026-11-12T02:53:54.134Z",
|
||||
"dateUpdated": "2026-11-12T02:53:54.134Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:53:54.134Z"
|
||||
},
|
||||
"title": "OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OGWU files. The issue results from the lack of proper validation of user-supplied data, which can result in a write before the start of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30736."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OriginLab",
|
||||
"product": "Origin Viewer",
|
||||
"versions": [
|
||||
{
|
||||
"version": "9.9.5",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-787",
|
||||
"description": "CWE-787: Out-of-bounds Write",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-879/",
|
||||
"name": "ZDI-26-879",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://docs.originlab.com/cve/CVE-2026-114562",
|
||||
"name": "vendor-provided URL",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-10-21T17:13:46.252Z",
|
||||
"datePublic": "2026-11-06T22:08:45.303Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "rgod"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,87 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-114563",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-10-21T17:13:49.634Z",
|
||||
"datePublished": "2026-11-12T02:53:59.330Z",
|
||||
"dateUpdated": "2026-11-12T02:53:59.330Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:53:59.330Z"
|
||||
},
|
||||
"title": "OriginLab Origin Viewer OGWU File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "OriginLab Origin Viewer OGWU File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OGWU files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30737."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OriginLab",
|
||||
"product": "Origin Viewer",
|
||||
"versions": [
|
||||
{
|
||||
"version": "9.9.5",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-121",
|
||||
"description": "CWE-121: Stack-based Buffer Overflow",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-880/",
|
||||
"name": "ZDI-26-880",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://docs.originlab.com/cve/CVE-2026-114563",
|
||||
"name": "vendor-provided URL",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-10-21T17:13:49.663Z",
|
||||
"datePublic": "2026-11-06T22:08:50.978Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "rgod"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,87 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-114564",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-10-21T17:13:53.597Z",
|
||||
"datePublished": "2026-11-12T02:54:03.414Z",
|
||||
"dateUpdated": "2026-11-12T02:54:03.414Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:54:03.414Z"
|
||||
},
|
||||
"title": "OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OGG files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30768."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OriginLab",
|
||||
"product": "Origin Viewer",
|
||||
"versions": [
|
||||
{
|
||||
"version": "9.9.5",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-787",
|
||||
"description": "CWE-787: Out-of-bounds Write",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-881/",
|
||||
"name": "ZDI-26-881",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://docs.originlab.com/cve/CVE-2026-114564",
|
||||
"name": "vendor-provided URL",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-10-21T17:13:53.624Z",
|
||||
"datePublic": "2026-11-06T22:08:56.245Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "rgod"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,87 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-114565",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-10-21T17:13:56.961Z",
|
||||
"datePublished": "2026-11-12T02:54:08.039Z",
|
||||
"dateUpdated": "2026-11-12T02:54:08.039Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:54:08.039Z"
|
||||
},
|
||||
"title": "OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OGG files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30769."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OriginLab",
|
||||
"product": "Origin Viewer",
|
||||
"versions": [
|
||||
{
|
||||
"version": "9.9.5",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-787",
|
||||
"description": "CWE-787: Out-of-bounds Write",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-882/",
|
||||
"name": "ZDI-26-882",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://docs.originlab.com/cve/CVE-2026-114565",
|
||||
"name": "vendor-provided URL",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-10-21T17:13:57.011Z",
|
||||
"datePublic": "2026-11-06T22:09:02.736Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "rgod"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,87 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-114566",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-10-21T17:14:00.073Z",
|
||||
"datePublished": "2026-11-12T02:54:12.381Z",
|
||||
"dateUpdated": "2026-11-12T02:54:12.381Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:54:12.381Z"
|
||||
},
|
||||
"title": "OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OGM files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30770."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OriginLab",
|
||||
"product": "Origin Viewer",
|
||||
"versions": [
|
||||
{
|
||||
"version": "9.9.5",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-119",
|
||||
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-883/",
|
||||
"name": "ZDI-26-883",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://docs.originlab.com/cve/CVE-2026-114566",
|
||||
"name": "vendor-provided URL",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-10-21T17:14:00.101Z",
|
||||
"datePublic": "2026-11-06T22:09:11.109Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "rgod"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,87 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-114567",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-10-21T17:14:04.229Z",
|
||||
"datePublished": "2026-11-12T02:54:17.236Z",
|
||||
"dateUpdated": "2026-11-12T02:54:17.236Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:54:17.236Z"
|
||||
},
|
||||
"title": "OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OGWU files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30771."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OriginLab",
|
||||
"product": "Origin Viewer",
|
||||
"versions": [
|
||||
{
|
||||
"version": "9.9.5",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-787",
|
||||
"description": "CWE-787: Out-of-bounds Write",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-884/",
|
||||
"name": "ZDI-26-884",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://docs.originlab.com/cve/CVE-2026-114567",
|
||||
"name": "vendor-provided URL",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-10-21T17:14:04.260Z",
|
||||
"datePublic": "2026-11-06T22:09:17.050Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "rgod"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,87 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-114568",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-10-21T17:14:08.316Z",
|
||||
"datePublished": "2026-11-12T02:54:21.432Z",
|
||||
"dateUpdated": "2026-11-12T02:54:21.432Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:54:21.432Z"
|
||||
},
|
||||
"title": "OriginLab Origin Viewer OPJ File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "OriginLab Origin Viewer OPJ File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OPJ files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-31587."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OriginLab",
|
||||
"product": "Origin Viewer",
|
||||
"versions": [
|
||||
{
|
||||
"version": "9.9.5",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-122",
|
||||
"description": "CWE-122: Heap-based Buffer Overflow",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-885/",
|
||||
"name": "ZDI-26-885",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://docs.originlab.com/cve/CVE-2026-114568",
|
||||
"name": "vendor-provided URL",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-10-21T17:14:08.346Z",
|
||||
"datePublic": "2026-11-06T22:09:22.706Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "chwrld (@chwrld24)"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,87 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-114569",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-10-21T17:14:57.893Z",
|
||||
"datePublished": "2026-11-12T02:53:34.115Z",
|
||||
"dateUpdated": "2026-11-12T02:53:34.115Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:53:34.115Z"
|
||||
},
|
||||
"title": "OriginLab Origin Viewer OGWU File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "OriginLab Origin Viewer OGWU File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OGWU files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30430."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "OriginLab",
|
||||
"product": "Origin Viewer",
|
||||
"versions": [
|
||||
{
|
||||
"version": "9.9.5",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-122",
|
||||
"description": "CWE-122: Heap-based Buffer Overflow",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-875/",
|
||||
"name": "ZDI-26-875",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://docs.originlab.com/cve/CVE-2026-114569",
|
||||
"name": "vendor-provided URL",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-10-21T17:14:57.922Z",
|
||||
"datePublic": "2026-11-06T22:08:23.246Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "rgod"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,163 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-117687",
|
||||
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "jpcert",
|
||||
"dateReserved": "2026-11-06T06:33:18.178Z",
|
||||
"datePublished": "2026-11-12T03:03:24.510Z",
|
||||
"dateUpdated": "2026-11-12T03:03:24.510Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Six Apart Ltd.",
|
||||
"product": "Movable Type",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.8.0",
|
||||
"status": "affected",
|
||||
"versionType": "semver",
|
||||
"lessThanOrEqual": "8.8.6"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Six Apart Ltd.",
|
||||
"product": "Movable Type Advanced",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.8.0",
|
||||
"status": "affected",
|
||||
"versionType": "semver",
|
||||
"lessThanOrEqual": "8.8.6"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Six Apart Ltd.",
|
||||
"product": "Movable Type",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected",
|
||||
"versionType": "semver",
|
||||
"lessThanOrEqual": "8.0.13"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Six Apart Ltd.",
|
||||
"product": "Movable Type Advanced",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected",
|
||||
"versionType": "semver",
|
||||
"lessThanOrEqual": "8.0.13"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Six Apart Ltd.",
|
||||
"product": "Movable Type Premium",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "2.00",
|
||||
"status": "affected",
|
||||
"versionType": "semver",
|
||||
"lessThanOrEqual": "2.18"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Six Apart Ltd.",
|
||||
"product": "Movable Type Premium Advanced Edition",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "2.00",
|
||||
"status": "affected",
|
||||
"versionType": "semver",
|
||||
"lessThanOrEqual": "2.18"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Movable Type provided by Six Apart Ltd. contains a code injection vulnerability in its Dynamic Publishing functionality. By sending a specially crafted request that is processed by the Dynamic Publishing, an attacker may be able to execute arbitrary PHP code on the affected product."
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"description": "Code injection",
|
||||
"lang": "en-US",
|
||||
"cweId": "CWE-94",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://movabletype.org/news/2026/11/mt-887-released.html"
|
||||
},
|
||||
{
|
||||
"url": "https://www.sixapart.jp/movabletype/news/2026/11/11-1100.html"
|
||||
},
|
||||
{
|
||||
"url": "https://jvn.jp/en/jp/JVN11786640/"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en-US",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"baseSeverity": "HIGH",
|
||||
"baseScore": 7.3,
|
||||
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en-US",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"baseScore": 6.9,
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"
|
||||
}
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
|
||||
"shortName": "jpcert",
|
||||
"dateUpdated": "2026-11-12T03:03:24.510Z"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,80 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-118631",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-10-28T16:58:46.034Z",
|
||||
"datePublished": "2026-11-12T02:52:04.600Z",
|
||||
"dateUpdated": "2026-11-12T02:52:04.600Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:52:04.600Z"
|
||||
},
|
||||
"title": "Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability. This vulnerability allows local attackers to modify files on affected installations of Philips Hue Bridge Pro. An attacker must first obtain the ability to execute low-privileged code within a container on the target system, in order to exploit this vulnerability.\n\nThe specific flaw exists within the factory data service, which listens on TCP port 5001 by default. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to modify files in the context of the service account. Was ZDI-CAN-33090."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Philips",
|
||||
"product": "Hue Bridge Pro",
|
||||
"versions": [
|
||||
{
|
||||
"version": "2071026000",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-88",
|
||||
"description": "CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-890/",
|
||||
"name": "ZDI-26-890",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-10-28T16:58:46.061Z",
|
||||
"datePublic": "2026-11-06T22:17:21.881Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "Connor Ford @ByteInsight of TrendAI Zero Day Initiative"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
|
||||
"baseScore": 3.8,
|
||||
"baseSeverity": "LOW"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,80 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-118632",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-10-28T16:58:58.973Z",
|
||||
"datePublished": "2026-11-12T02:52:15.303Z",
|
||||
"dateUpdated": "2026-11-12T02:52:15.303Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:52:15.303Z"
|
||||
},
|
||||
"title": "Philips Hue Bridge Pro SQL Injection Remote Code Execution Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Philips Hue Bridge Pro SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge Pro. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.\n\nThe specific flaw exists within the HTTP service, which listens on TCP port 443 by default. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-33089."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Philips",
|
||||
"product": "Hue Bridge Pro",
|
||||
"versions": [
|
||||
{
|
||||
"version": "2071026000",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-89",
|
||||
"description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-891/",
|
||||
"name": "ZDI-26-891",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-10-28T16:58:59.001Z",
|
||||
"datePublic": "2026-11-06T22:17:28.151Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "Connor Ford @ByteInsight of TrendAI Zero Day Initiative"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,80 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-121741",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-11-03T23:32:33.395Z",
|
||||
"datePublished": "2026-11-12T02:47:47.217Z",
|
||||
"dateUpdated": "2026-11-12T02:47:47.217Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:47:47.217Z"
|
||||
},
|
||||
"title": "Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30421."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Trimble",
|
||||
"product": "SketchUp",
|
||||
"versions": [
|
||||
{
|
||||
"version": "26.1.252",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-416",
|
||||
"description": "CWE-416: Use After Free",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-893/",
|
||||
"name": "ZDI-26-893",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-11-03T23:32:33.485Z",
|
||||
"datePublic": "2026-11-06T22:17:51.461Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "r1ngz3ro"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,80 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-121742",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-11-03T23:33:29.237Z",
|
||||
"datePublished": "2026-11-12T02:51:00.165Z",
|
||||
"dateUpdated": "2026-11-12T02:51:00.165Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:51:00.165Z"
|
||||
},
|
||||
"title": "Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of XE files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28757."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Ashlar-Vellum",
|
||||
"product": "Cobalt",
|
||||
"versions": [
|
||||
{
|
||||
"version": "1204.209",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-416",
|
||||
"description": "CWE-416: Use After Free",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-874/",
|
||||
"name": "ZDI-26-874",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-11-03T23:33:29.266Z",
|
||||
"datePublic": "2026-11-04T14:17:14.071Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,80 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-121743",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-11-03T23:34:02.743Z",
|
||||
"datePublished": "2026-11-12T02:51:12.304Z",
|
||||
"dateUpdated": "2026-11-12T02:51:12.304Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:51:12.304Z"
|
||||
},
|
||||
"title": "Ashlar-Vellum Cobalt AR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Ashlar-Vellum Cobalt AR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of AR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28675."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Ashlar-Vellum",
|
||||
"product": "Cobalt",
|
||||
"versions": [
|
||||
{
|
||||
"version": "1204.209",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-122",
|
||||
"description": "CWE-122: Heap-based Buffer Overflow",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-873/",
|
||||
"name": "ZDI-26-873",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-11-03T23:34:02.774Z",
|
||||
"datePublic": "2026-11-04T14:17:06.832Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,80 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-121744",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-11-03T23:34:11.116Z",
|
||||
"datePublished": "2026-11-12T02:51:21.092Z",
|
||||
"dateUpdated": "2026-11-12T02:51:21.092Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:51:21.092Z"
|
||||
},
|
||||
"title": "Ashlar-Vellum Cobalt XE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Ashlar-Vellum Cobalt XE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of XE files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28172."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Ashlar-Vellum",
|
||||
"product": "Cobalt",
|
||||
"versions": [
|
||||
{
|
||||
"version": "1204.204",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-121",
|
||||
"description": "CWE-121: Stack-based Buffer Overflow",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-870/",
|
||||
"name": "ZDI-26-870",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-11-03T23:34:11.148Z",
|
||||
"datePublic": "2026-11-04T14:16:44.030Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,80 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-121752",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-11-03T23:40:18.321Z",
|
||||
"datePublished": "2026-11-12T02:51:29.957Z",
|
||||
"dateUpdated": "2026-11-12T02:51:29.957Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:51:29.957Z"
|
||||
},
|
||||
"title": "Ashlar-Vellum Cobalt LI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Ashlar-Vellum Cobalt LI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of LI files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28447."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Ashlar-Vellum",
|
||||
"product": "Cobalt",
|
||||
"versions": [
|
||||
{
|
||||
"version": "1204.207",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-122",
|
||||
"description": "CWE-122: Heap-based Buffer Overflow",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-871/",
|
||||
"name": "ZDI-26-871",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-11-03T23:40:18.369Z",
|
||||
"datePublic": "2026-11-04T14:16:52.045Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,80 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-121753",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-11-03T23:40:27.234Z",
|
||||
"datePublished": "2026-11-12T02:51:44.534Z",
|
||||
"dateUpdated": "2026-11-12T02:51:44.534Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:51:44.534Z"
|
||||
},
|
||||
"title": "Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of XE files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28587."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Ashlar-Vellum",
|
||||
"product": "Cobalt",
|
||||
"versions": [
|
||||
{
|
||||
"version": "1204.207",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-416",
|
||||
"description": "CWE-416: Use After Free",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-872/",
|
||||
"name": "ZDI-26-872",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-11-03T23:40:27.266Z",
|
||||
"datePublic": "2026-11-04T14:16:59.382Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,80 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-122044",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-11-04T15:32:47.497Z",
|
||||
"datePublished": "2026-11-12T02:52:26.244Z",
|
||||
"dateUpdated": "2026-11-12T02:52:26.244Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:52:26.244Z"
|
||||
},
|
||||
"title": "Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge Pro. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the HTTP service, which listens on TCP port 443 by default. The issue results from the failure to apply a protection mechanism. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-33086."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Philips",
|
||||
"product": "Hue Bridge Pro",
|
||||
"versions": [
|
||||
{
|
||||
"version": "2071026000",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-693",
|
||||
"description": "CWE-693: Protection Mechanism Failure",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-892/",
|
||||
"name": "ZDI-26-892",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-11-04T15:32:47.588Z",
|
||||
"datePublic": "2026-11-06T22:17:35.605Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "Connor Ford @ByteInsight of TrendAI Zero Day Initiative"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 8.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-11-10T10:24:52.013Z",
|
||||
"datePublished": "2026-11-10T10:43:20.844Z",
|
||||
"dateUpdated": "2026-11-11T19:00:58.688Z"
|
||||
"dateUpdated": "2026-11-12T03:10:26.660Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -66,6 +66,24 @@
|
||||
"cpe:/a:redhat:enterprise_linux:8::appstream"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 9",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "gstreamer1",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:1.22.12-3.el9_9.1",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:enterprise_linux:9::appstream"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 10",
|
||||
@@ -85,16 +103,6 @@
|
||||
"cpes": [
|
||||
"cpe:/o:redhat:rhel_els:7"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 9",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "gstreamer1",
|
||||
"defaultStatus": "affected",
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:enterprise_linux:9"
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
@@ -106,6 +114,14 @@
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:99228",
|
||||
"name": "RHSA-2026:99228",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2026-125704",
|
||||
"tags": [
|
||||
@@ -163,7 +179,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"shortName": "redhat",
|
||||
"dateUpdated": "2026-11-11T19:00:58.688Z"
|
||||
"dateUpdated": "2026-11-12T03:10:26.660Z"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
|
||||
@@ -0,0 +1,147 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126957",
|
||||
"assignerOrgId": "e2e69745-5e70-4e92-8431-deb5529a81ad",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zephyr",
|
||||
"dateReserved": "2026-11-12T02:06:20.541Z",
|
||||
"datePublished": "2026-11-12T02:23:44.385Z",
|
||||
"dateUpdated": "2026-11-12T02:23:44.385Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "unaffected",
|
||||
"packageName": "Zephyr",
|
||||
"product": "Zephyr",
|
||||
"repo": "https://github.com/zephyrproject-rtos/zephyr",
|
||||
"vendor": "zephyrproject-rtos",
|
||||
"versions": [
|
||||
{
|
||||
"lessThanOrEqual": "4.4.0",
|
||||
"status": "affected",
|
||||
"version": "*",
|
||||
"versionType": "git"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "ICMPv4 Record Route / Timestamp option: stack OOB read via ptr underflow in icmpv4.c"
|
||||
}
|
||||
],
|
||||
"value": "An integer underflow in Zephyr's IPv4 option handling allows a remote, unauthenticated attacker to read stack memory. When replying to an ICMP Echo Request that carries an IPv4 Record Route or Timestamp option, icmpv4_update_record_route() and icmpv4_update_time_stamp() in subsys/net/ip/icmpv4.c compute the length of the already recorded data as ptr - ptr_offset in uint8_t arithmetic. The attacker-controlled Pointer field is checked against the option length but not against the RFC 791 minimum (4 for Record Route, 5 for Timestamp), so a smaller value wraps the length to up to 252 bytes. net_pkt_write() then reads past the 40-byte opt_data stack buffer and up to 213 bytes of stack memory, which can include stack and heap pointers, are returned in the ICMP Echo Reply. A single packet triggers the leak and the device does not crash, so it can be repeated. Devices built with CONFIG_NET_IPV4_HDR_OPTIONS, which CONFIG_NET_IPV4_IGMP selects, are affected."
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 5.3,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
|
||||
"version": "3.1"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"attackVector": "NETWORK",
|
||||
"baseScore": 6.9,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"privilegesRequired": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
|
||||
"version": "4.0",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "NONE"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-125",
|
||||
"description": "Out-of-bounds Read",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-191",
|
||||
"description": "Integer Underflow (Wrap or Wraparound)",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-200",
|
||||
"description": "Exposure of Sensitive Information to an Unauthorized Actor",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "e2e69745-5e70-4e92-8431-deb5529a81ad",
|
||||
"shortName": "zephyr",
|
||||
"dateUpdated": "2026-11-12T02:23:44.385Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-cvv6-5f6x-87qf"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "EXTERNAL"
|
||||
},
|
||||
"title": "ICMPv4 Record Route / Timestamp option: stack OOB read via ptr underflow in icmpv4.c",
|
||||
"x_generator": {
|
||||
"engine": "swg-tools/create-cve-info"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,80 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-13269",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-06-24T21:23:19.396Z",
|
||||
"datePublished": "2026-11-12T02:49:48.851Z",
|
||||
"dateUpdated": "2026-11-12T02:49:48.851Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:49:48.851Z"
|
||||
},
|
||||
"title": "Quest NetVault Backup StnzCreateKey Numeric Truncation Error Denial-of-Service Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Quest NetVault Backup StnzCreateKey Numeric Truncation Error Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the StnzCreateKey function. The issue results from the lack of proper validation of user-supplied data, which can result in a numeric truncation error before allocating a buffer. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-28743."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Quest",
|
||||
"product": "NetVault Backup",
|
||||
"versions": [
|
||||
{
|
||||
"version": "14.0.2.4",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-197",
|
||||
"description": "CWE-197: Numeric Truncation Error",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-888/",
|
||||
"name": "ZDI-26-888",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-06-24T21:23:19.422Z",
|
||||
"datePublic": "2026-11-06T22:17:07.172Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "06fe5fd2bc53027c4a3b7e395af0b850e7b8a044"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,80 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-13270",
|
||||
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "zdi",
|
||||
"dateReserved": "2026-06-24T21:23:28.760Z",
|
||||
"datePublished": "2026-11-12T02:49:34.234Z",
|
||||
"dateUpdated": "2026-11-12T02:49:34.234Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
|
||||
"shortName": "zdi",
|
||||
"dateUpdated": "2026-11-12T02:49:34.234Z"
|
||||
},
|
||||
"title": "Quest NetVault Backup nvpmgr Integer Underflow Denial-of-Service Vulnerability",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Quest NetVault Backup nvpmgr Integer Underflow Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the nvpmgr service, which listens on UDP port 20031 by default. The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before allocating a buffer. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-28744."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Quest",
|
||||
"product": "NetVault Backup",
|
||||
"versions": [
|
||||
{
|
||||
"version": "14.0.2.4",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unknown"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-191",
|
||||
"description": "CWE-191: Integer Underflow (Wrap or Wraparound)",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-889/",
|
||||
"name": "ZDI-26-889",
|
||||
"tags": [
|
||||
"x_research-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"dateAssigned": "2026-06-24T21:23:28.783Z",
|
||||
"datePublic": "2026-11-06T22:17:13.546Z",
|
||||
"source": {
|
||||
"lang": "en",
|
||||
"value": "06fe5fd2bc53027c4a3b7e395af0b850e7b8a044"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
+20
-7
@@ -1,14 +1,27 @@
|
||||
{
|
||||
"fetchTime": "2026-11-12T02:16:30.555Z",
|
||||
"numberOfChanges": 1,
|
||||
"fetchTime": "2026-11-12T03:17:12.952Z",
|
||||
"numberOfChanges": 3,
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-126795",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126795",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126795.json",
|
||||
"dateUpdated": "2026-11-12T02:15:29.492Z"
|
||||
"cveId": "CVE-2026-117687",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-117687",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/117xxx/CVE-2026-117687.json",
|
||||
"dateUpdated": "2026-11-12T03:03:24.510Z"
|
||||
}
|
||||
],
|
||||
"updated": [
|
||||
{
|
||||
"cveId": "CVE-2023-41175",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-41175",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41175.json",
|
||||
"dateUpdated": "2026-11-12T03:04:48.838Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-125704",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125704",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125704.json",
|
||||
"dateUpdated": "2026-11-12T03:10:26.660Z"
|
||||
}
|
||||
],
|
||||
"updated": [],
|
||||
"error": []
|
||||
}
|
||||
+207
-114
@@ -1,4 +1,211 @@
|
||||
[
|
||||
{
|
||||
"fetchTime": "2026-11-12T03:17:12.952Z",
|
||||
"numberOfChanges": 3,
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-117687",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-117687",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/117xxx/CVE-2026-117687.json",
|
||||
"dateUpdated": "2026-11-12T03:03:24.510Z"
|
||||
}
|
||||
],
|
||||
"updated": [
|
||||
{
|
||||
"cveId": "CVE-2023-41175",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-41175",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/41xxx/CVE-2023-41175.json",
|
||||
"dateUpdated": "2026-11-12T03:04:48.838Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-125704",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125704",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125704.json",
|
||||
"dateUpdated": "2026-11-12T03:10:26.660Z"
|
||||
}
|
||||
],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-11-12T02:56:31.310Z",
|
||||
"numberOfChanges": 21,
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-114556",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114556",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114556.json",
|
||||
"dateUpdated": "2026-11-12T02:55:13.755Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-114558",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114558",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114558.json",
|
||||
"dateUpdated": "2026-11-12T02:54:26.892Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-114559",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114559",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114559.json",
|
||||
"dateUpdated": "2026-11-12T02:53:38.237Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-114560",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114560",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114560.json",
|
||||
"dateUpdated": "2026-11-12T02:53:44.212Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-114561",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114561",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114561.json",
|
||||
"dateUpdated": "2026-11-12T02:53:48.980Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-114562",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114562",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114562.json",
|
||||
"dateUpdated": "2026-11-12T02:53:54.134Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-114563",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114563",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114563.json",
|
||||
"dateUpdated": "2026-11-12T02:53:59.330Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-114564",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114564",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114564.json",
|
||||
"dateUpdated": "2026-11-12T02:54:03.414Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-114565",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114565",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114565.json",
|
||||
"dateUpdated": "2026-11-12T02:54:08.039Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-114566",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114566",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114566.json",
|
||||
"dateUpdated": "2026-11-12T02:54:12.381Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-114567",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114567",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114567.json",
|
||||
"dateUpdated": "2026-11-12T02:54:17.236Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-114568",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114568",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114568.json",
|
||||
"dateUpdated": "2026-11-12T02:54:21.432Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-114569",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114569",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114569.json",
|
||||
"dateUpdated": "2026-11-12T02:53:34.115Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-118631",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118631",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118631.json",
|
||||
"dateUpdated": "2026-11-12T02:52:04.600Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-118632",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118632",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118632.json",
|
||||
"dateUpdated": "2026-11-12T02:52:15.303Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-121742",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121742",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121742.json",
|
||||
"dateUpdated": "2026-11-12T02:51:00.165Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-121743",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121743",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121743.json",
|
||||
"dateUpdated": "2026-11-12T02:51:12.304Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-121744",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121744",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121744.json",
|
||||
"dateUpdated": "2026-11-12T02:51:21.092Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-121752",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121752",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121752.json",
|
||||
"dateUpdated": "2026-11-12T02:51:29.957Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-121753",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121753",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121753.json",
|
||||
"dateUpdated": "2026-11-12T02:51:44.534Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-122044",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122044",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122044.json",
|
||||
"dateUpdated": "2026-11-12T02:52:26.244Z"
|
||||
}
|
||||
],
|
||||
"updated": [],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-11-12T02:50:36.023Z",
|
||||
"numberOfChanges": 4,
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2025-10935",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-10935",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10935.json",
|
||||
"dateUpdated": "2026-11-12T02:47:24.255Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-121741",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121741",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121741.json",
|
||||
"dateUpdated": "2026-11-12T02:47:47.217Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-13269",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-13269",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13269.json",
|
||||
"dateUpdated": "2026-11-12T02:49:48.851Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-13270",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-13270",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13270.json",
|
||||
"dateUpdated": "2026-11-12T02:49:34.234Z"
|
||||
}
|
||||
],
|
||||
"updated": [],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-11-12T02:26:15.641Z",
|
||||
"numberOfChanges": 1,
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-126957",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126957",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126957.json",
|
||||
"dateUpdated": "2026-11-12T02:23:44.385Z"
|
||||
}
|
||||
],
|
||||
"updated": [],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-11-12T02:16:30.555Z",
|
||||
"numberOfChanges": 1,
|
||||
@@ -848144,119 +848351,5 @@
|
||||
],
|
||||
"updated": [],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-10-13T03:04:11.159Z",
|
||||
"numberOfChanges": 7,
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-108959",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108959",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108959.json",
|
||||
"dateUpdated": "2026-10-13T02:45:15.576Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-108960",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108960",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108960.json",
|
||||
"dateUpdated": "2026-10-13T03:00:18.429Z"
|
||||
}
|
||||
],
|
||||
"updated": [
|
||||
{
|
||||
"cveId": "CVE-2024-0874",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-0874",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/0xxx/CVE-2024-0874.json",
|
||||
"dateUpdated": "2026-10-13T02:42:52.805Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2024-3727",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-3727",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3727.json",
|
||||
"dateUpdated": "2026-10-13T02:55:17.646Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2024-8676",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-8676",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8676.json",
|
||||
"dateUpdated": "2026-10-13T03:02:38.269Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2024-9341",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-9341",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9341.json",
|
||||
"dateUpdated": "2026-10-13T02:56:15.476Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2024-9407",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-9407",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9407.json",
|
||||
"dateUpdated": "2026-10-13T02:56:01.312Z"
|
||||
}
|
||||
],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-10-13T02:42:26.926Z",
|
||||
"numberOfChanges": 9,
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-108957",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108957",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108957.json",
|
||||
"dateUpdated": "2026-10-13T02:15:16.103Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-108958",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108958",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108958.json",
|
||||
"dateUpdated": "2026-10-13T02:30:16.903Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-109786",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109786",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109786.json",
|
||||
"dateUpdated": "2026-10-13T02:40:13.899Z"
|
||||
}
|
||||
],
|
||||
"updated": [
|
||||
{
|
||||
"cveId": "CVE-2024-10963",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-10963",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/10xxx/CVE-2024-10963.json",
|
||||
"dateUpdated": "2026-10-13T02:17:22.807Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2024-11218",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-11218",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11218.json",
|
||||
"dateUpdated": "2026-10-13T02:20:56.585Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2024-12085",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-12085",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/12xxx/CVE-2024-12085.json",
|
||||
"dateUpdated": "2026-10-13T02:17:29.455Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2025-0624",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-0624",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/0xxx/CVE-2025-0624.json",
|
||||
"dateUpdated": "2026-10-13T02:21:07.416Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-89111",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89111",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89111.json",
|
||||
"dateUpdated": "2026-10-13T02:26:32.201Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-89112",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89112",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89112.json",
|
||||
"dateUpdated": "2026-10-13T02:28:02.627Z"
|
||||
}
|
||||
],
|
||||
"error": []
|
||||
}
|
||||
]
|
||||
Reference in New Issue
Block a user