From 4dfed0da9ad30cb24386bb89d368cf5e0d6f56da Mon Sep 17 00:00:00 2001 From: Vulnerability Bot Date: Sun, 15 Nov 2026 09:29:11 +0100 Subject: [PATCH] CVE sync 2026-11-15T08:29:06Z --- data/2026/124xxx/CVE-2026-124684.json | 14 +-- data/2026/125xxx/CVE-2026-125715.json | 8 +- data/2026/129xxx/CVE-2026-129443.json | 174 ++++++++++++++++++++++++++ data/delta.json | 14 +-- data/deltaLog.json | 103 +++++---------- state/sync.json | 6 +- 6 files changed, 229 insertions(+), 90 deletions(-) create mode 100644 data/2026/129xxx/CVE-2026-129443.json diff --git a/data/2026/124xxx/CVE-2026-124684.json b/data/2026/124xxx/CVE-2026-124684.json index 39a0515e87..27a84b13cf 100644 --- a/data/2026/124xxx/CVE-2026-124684.json +++ b/data/2026/124xxx/CVE-2026-124684.json @@ -8,14 +8,14 @@ "assignerShortName": "samsung.tv_appliance", "dateReserved": "2026-11-09T10:38:42.218Z", "datePublished": "2026-11-09T11:28:07.068Z", - "dateUpdated": "2026-11-12T15:45:09.958Z" + "dateUpdated": "2026-11-15T07:18:50.327Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "ca193ba2-0cff-4e34-b04e-1ea07103c6fe", "shortName": "samsung.tv_appliance", - "dateUpdated": "2026-11-10T10:30:58.804Z" + "dateUpdated": "2026-11-15T07:18:50.327Z" }, "problemTypes": [ { @@ -47,12 +47,12 @@ "descriptions": [ { "lang": "en", - "value": "This issue can cause a heap-use-after-free when an embedder unloads a ReloadableString buffer while a previously returned raw character pointer remains in use. Successful triggering may cause the Escargot-based process to crash, resulting in a denial of service.", + "value": "A use-after-free vulnerability exists in Samsung Escargot 5.0.2 in the buffer-access paths for ReloadableString and CompressibleString. Internal raw character accessors and the public StringRef::stringBufferAccessData() API did not preserve the lifetime of the underlying buffer while it remained in use. As a result, idle unloading or garbage-collection compression could release the buffer and leave a stale pointer. Subsequent access may cause the process to crash or, under allocation-dependent conditions, expose limited contents of another heap allocation. The issue was addressed by adding buffer-lifetime reference tracking and removing unsafe raw character accessors.", "supportingMedia": [ { "type": "text/html", "base64": false, - "value": " This issue can cause a heap-use-after-free when an embedder unloads a ReloadableString buffer while a previously returned raw character pointer remains in use. Successful triggering may cause the Escargot-based process to crash, resulting in a denial of service.  " + "value": "A use-after-free vulnerability exists in Samsung Escargot 5.0.2 in the buffer-access paths for ReloadableString and CompressibleString. Internal raw character accessors and the public StringRef::stringBufferAccessData() API did not preserve the lifetime of the underlying buffer while it remained in use. As a result, idle unloading or garbage-collection compression could release the buffer and leave a stale pointer. Subsequent access may cause the process to crash or, under allocation-dependent conditions, expose limited contents of another heap allocation. The issue was addressed by adding buffer-lifetime reference tracking and removing unsafe raw character accessors.  " } ] } @@ -78,12 +78,12 @@ "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", - "confidentialityImpact": "NONE", + "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", - "baseScore": 5.1, - "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + "baseScore": 5.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" } } ], diff --git a/data/2026/125xxx/CVE-2026-125715.json b/data/2026/125xxx/CVE-2026-125715.json index eab8ea52eb..c15fb13650 100644 --- a/data/2026/125xxx/CVE-2026-125715.json +++ b/data/2026/125xxx/CVE-2026-125715.json @@ -8,14 +8,14 @@ "assignerShortName": "samsung.tv_appliance", "dateReserved": "2026-11-10T11:05:13.190Z", "datePublished": "2026-11-10T11:21:20.300Z", - "dateUpdated": "2026-11-15T07:13:39.598Z" + "dateUpdated": "2026-11-15T07:17:13.762Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "ca193ba2-0cff-4e34-b04e-1ea07103c6fe", "shortName": "samsung.tv_appliance", - "dateUpdated": "2026-11-15T07:13:39.598Z" + "dateUpdated": "2026-11-15T07:17:13.762Z" }, "affected": [ { @@ -33,12 +33,12 @@ "descriptions": [ { "lang": "en", - "value": "A use-after-free vulnerability exists in Samsung Escargot 5.0.2 in the buffer-access paths for ReloadableString and CompressibleString. Internal raw character accessors and the public StringRef::stringBufferAccessData() API did not preserve the lifetime of the underlying buffer while it remained in use. As a result, idle unloading or garbage-collection compression could release the buffer and leave a stale pointer. Subsequent access may cause the process to crash or, under allocation-dependent conditions, expose limited contents of another heap allocation. The issue was addressed by adding buffer-lifetime reference tracking and removing unsafe raw character accessors.", + "value": "Samsung mTower lacks access control for TA sessions, allowing a Normal World application to open TA sessions and invoke their commands, or use a close existing sessions if thier identifiers are known, The impact depends on the affected TA.", "supportingMedia": [ { "type": "text/html", "base64": false, - "value": "
A use-after-free vulnerability exists in Samsung Escargot 5.0.2 in the buffer-access paths for ReloadableString and CompressibleString. Internal raw character accessors and the public StringRef::stringBufferAccessData() API did not preserve the lifetime of the underlying buffer while it remained in use. As a result, idle unloading or garbage-collection compression could release the buffer and leave a stale pointer. Subsequent access may cause the process to crash or, under allocation-dependent conditions, expose limited contents of another heap allocation. The issue was addressed by adding buffer-lifetime reference tracking and removing unsafe raw character accessors.
" + "value": "
Samsung mTower lacks access control for TA sessions, allowing a Normal World application to open TA sessions and invoke their commands, or use a close existing sessions if thier identifiers are known, The impact depends on the affected TA.
" } ] } diff --git a/data/2026/129xxx/CVE-2026-129443.json b/data/2026/129xxx/CVE-2026-129443.json new file mode 100644 index 0000000000..2a91bbe399 --- /dev/null +++ b/data/2026/129xxx/CVE-2026-129443.json @@ -0,0 +1,174 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-129443", + "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", + "state": "PUBLISHED", + "assignerShortName": "VulDB", + "dateReserved": "2026-11-14T16:55:35.094Z", + "datePublished": "2026-11-15T07:45:19.106Z", + "dateUpdated": "2026-11-15T07:45:19.106Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", + "shortName": "VulDB", + "dateUpdated": "2026-11-15T07:45:19.106Z" + }, + "title": "itsourcecode Airline Reservation System manage_user.php sql injection", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-89", + "lang": "en", + "description": "SQL Injection" + } + ] + }, + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-74", + "lang": "en", + "description": "Injection" + } + ] + } + ], + "affected": [ + { + "vendor": "itsourcecode", + "product": "Airline Reservation System", + "versions": [ + { + "version": "1.0", + "status": "affected" + } + ], + "cpes": [ + "cpe:2.3:a:itsourcecode:airline_reservation_system:*:*:*:*:*:*:*:*" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was determined in itsourcecode Airline Reservation System 1.0. The impacted element is an unknown function of the file /admin/manage_user.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized." + } + ], + "metrics": [ + { + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.3, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", + "baseSeverity": "MEDIUM" + } + }, + { + "cvssV3_1": { + "version": "3.1", + "baseScore": 6.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C", + "baseSeverity": "MEDIUM" + } + }, + { + "cvssV3_0": { + "version": "3.0", + "baseScore": 6.3, + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C", + "baseSeverity": "MEDIUM" + } + }, + { + "cvssV2_0": { + "version": "2.0", + "baseScore": 6.5, + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C" + } + } + ], + "timeline": [ + { + "time": "2026-11-14T00:00:00.000Z", + "lang": "en", + "value": "Advisory disclosed" + }, + { + "time": "2026-11-14T01:00:00.000Z", + "lang": "en", + "value": "VulDB entry created" + }, + { + "time": "2026-11-14T18:00:40.000Z", + "lang": "en", + "value": "VulDB entry last update" + } + ], + "credits": [ + { + "lang": "en", + "value": "Sakuyume (VulDB User)", + "type": "reporter" + } + ], + "references": [ + { + "url": "https://vuldb.com/vuln/437456", + "name": "VDB-437456 | itsourcecode Airline Reservation System manage_user.php sql injection", + "tags": [ + "vdb-entry", + "technical-description" + ] + }, + { + "url": "https://vuldb.com/vuln/437456/cti", + "name": "VDB-437456 | CTI Indicators (IOB, IOC, TTP, IOA)", + "tags": [ + "signature", + "permissions-required" + ] + }, + { + "url": "https://vuldb.com/cve/CVE-2026-129443", + "name": "CVE-2026-129443 | CVE Analysis and Report", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://vuldb.com/submit/1044608", + "name": "Submit #1044608 | itsourcecode Airline Reservation System V1.0 SQL Injection", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://github.com/huverse/submit/issues/1", + "tags": [ + "exploit", + "issue-tracking" + ] + }, + { + "url": "https://itsourcecode.com/", + "tags": [ + "product" + ] + } + ], + "tags": [ + "x_freeware" + ], + "x_generator": [ + "VulDB PVTS v202611" + ] + } + } +} \ No newline at end of file diff --git a/data/delta.json b/data/delta.json index 8b5105ee89..14d7d679d9 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,14 +1,14 @@ { - "fetchTime": "2026-11-15T07:15:51.387Z", + "fetchTime": "2026-11-15T07:46:11.823Z", "numberOfChanges": 1, - "new": [], - "updated": [ + "new": [ { - "cveId": "CVE-2026-125715", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125715", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125715.json", - "dateUpdated": "2026-11-15T07:13:39.598Z" + "cveId": "CVE-2026-129443", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129443", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129443.json", + "dateUpdated": "2026-11-15T07:45:19.106Z" } ], + "updated": [], "error": [] } \ No newline at end of file diff --git a/data/deltaLog.json b/data/deltaLog.json index 06f1a1214b..1d83496157 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,38 @@ [ + { + "fetchTime": "2026-11-15T07:46:11.823Z", + "numberOfChanges": 1, + "new": [ + { + "cveId": "CVE-2026-129443", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129443", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129443.json", + "dateUpdated": "2026-11-15T07:45:19.106Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-15T07:22:09.646Z", + "numberOfChanges": 2, + "new": [], + "updated": [ + { + "cveId": "CVE-2026-124684", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124684", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124684.json", + "dateUpdated": "2026-11-15T07:18:50.327Z" + }, + { + "cveId": "CVE-2026-125715", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125715", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125715.json", + "dateUpdated": "2026-11-15T07:17:13.762Z" + } + ], + "error": [] + }, { "fetchTime": "2026-11-15T07:15:51.387Z", "numberOfChanges": 1, @@ -718587,74 +718621,5 @@ ], "updated": [], "error": [] - }, - { - "fetchTime": "2026-10-16T07:26:00.880Z", - "numberOfChanges": 10, - "new": [ - { - "cveId": "CVE-2026-16251", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16251", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16251.json", - "dateUpdated": "2026-10-16T07:14:59.296Z" - }, - { - "cveId": "CVE-2026-16453", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16453", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16453.json", - "dateUpdated": "2026-10-16T07:08:48.627Z" - }, - { - "cveId": "CVE-2026-18223", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-18223", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18223.json", - "dateUpdated": "2026-10-16T07:12:39.911Z" - }, - { - "cveId": "CVE-2026-18256", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-18256", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18256.json", - "dateUpdated": "2026-10-16T07:13:43.684Z" - }, - { - "cveId": "CVE-2026-18560", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-18560", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18560.json", - "dateUpdated": "2026-10-16T07:10:12.870Z" - }, - { - "cveId": "CVE-2026-18799", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-18799", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18799.json", - "dateUpdated": "2026-10-16T07:16:19.062Z" - }, - { - "cveId": "CVE-2026-19076", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19076", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19076.json", - "dateUpdated": "2026-10-16T07:11:29.552Z" - }, - { - "cveId": "CVE-2026-19600", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19600", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19600.json", - "dateUpdated": "2026-10-16T07:07:17.899Z" - }, - { - "cveId": "CVE-2026-19621", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19621", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19621.json", - "dateUpdated": "2026-10-16T07:06:00.580Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-104396", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104396", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104396.json", - "dateUpdated": "2026-10-16T07:13:51.113Z" - } - ], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index 4aa01b9387..74209deb0a 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "a0f3e0fb82872e38c2332027a0d65c85849df1c1", + "upstream_commit": "f90cde7f9bfb5f815dbd0af5e992ace8ca743772", "since_year": 2017, - "records": 332637, - "synced_at_utc": "2026-11-15T07:25:23.746584+00:00" + "records": 332638, + "synced_at_utc": "2026-11-15T08:24:29.690826+00:00" }