diff --git a/data/2025/13xxx/CVE-2025-13327.json b/data/2025/13xxx/CVE-2025-13327.json index 50c8117f72..df56f9f17e 100644 --- a/data/2025/13xxx/CVE-2025-13327.json +++ b/data/2025/13xxx/CVE-2025-13327.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2025-11-17T17:35:36.702Z", "datePublished": "2026-02-27T07:30:20.131Z", - "dateUpdated": "2026-11-04T05:49:02.527Z" + "dateUpdated": "2026-11-13T13:03:37.676Z" }, "containers": { "cna": { @@ -63,6 +63,60 @@ "collectionURL": "https://github.com/astral-sh/uv", "defaultStatus": "unaffected" }, + { + "vendor": "Red Hat", + "product": "Red Hat AI Inference Server 3.2", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhaiis/vllm-rocm-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793961846", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:ai_inference_server:3.2::el9" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat AI Inference Server 3.2", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhaiis/model-opt-cuda-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793962303", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:ai_inference_server:3.2::el9" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat AI Inference Server 3.2", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhaiis/vllm-cuda-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793961309", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:ai_inference_server:3.2::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat OpenShift AI 3.0", @@ -183,16 +237,6 @@ "cpe:/a:redhat:ai_inference_server:3" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat AI Inference Server", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "rhaiis/model-opt-cuda-rhel9", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:ai_inference_server:3" - ] - }, { "vendor": "Red Hat", "product": "Red Hat AI Inference Server", @@ -203,26 +247,6 @@ "cpe:/a:redhat:ai_inference_server:3" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat AI Inference Server", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "rhaiis/vllm-cuda-rhel9", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:ai_inference_server:3" - ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat AI Inference Server", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "rhaiis/vllm-rocm-rhel9", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:ai_inference_server:3" - ] - }, { "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", @@ -465,6 +489,30 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:96400", + "name": "RHSA-2026:96400", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:96403", + "name": "RHSA-2026:96403", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:96406", + "name": "RHSA-2026:96406", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-13327", "tags": [ @@ -525,7 +573,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-04T05:49:02.527Z" + "dateUpdated": "2026-11-13T13:03:37.676Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2025/41xxx/CVE-2025-41725.json b/data/2025/41xxx/CVE-2025-41725.json new file mode 100644 index 0000000000..c9b133ce8f --- /dev/null +++ b/data/2025/41xxx/CVE-2025-41725.json @@ -0,0 +1,120 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2025-41725", + "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", + "state": "PUBLISHED", + "assignerShortName": "CERTVDE", + "dateReserved": "2025-04-16T11:17:48.318Z", + "datePublished": "2026-11-13T12:59:24.549Z", + "dateUpdated": "2026-11-13T12:59:24.549Z" + }, + "containers": { + "cna": { + "affected": [ + { + "defaultStatus": "unaffected", + "product": "Flip 4", + "vendor": "Harman International", + "versions": [ + { + "lessThan": "4.1.0", + "status": "affected", + "version": "0.0.0", + "versionType": "semver" + } + ] + } + ], + "credits": [ + { + "lang": "en", + "type": "finder", + "value": "Justus W. Perlwitz from JWP Consulting" + } + ], + "descriptions": [ + { + "lang": "en", + "supportingMedia": [ + { + "base64": false, + "type": "text/html", + "value": "

Affected devices running firmware versions prior to 4.1.0 may crash and become unavailable when receiving specific malformed Bluetooth messages from an unauthenticated attacker.

" + } + ], + "value": "Affected devices running firmware versions prior to 4.1.0 may crash and become unavailable when receiving specific malformed Bluetooth messages from an unauthenticated attacker." + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "ADJACENT_NETWORK", + "availabilityImpact": "HIGH", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "privilegesRequired": "NONE", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "version": "3.1" + }, + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ] + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-923", + "description": "CWE-923 Improper Restriction of Communication Channel to Intended Endpoints", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "providerMetadata": { + "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", + "shortName": "CERTVDE", + "dateUpdated": "2026-11-13T12:59:24.549Z" + }, + "references": [ + { + "tags": [ + "x_csaf", + "vendor-advisory" + ], + "url": "https://harman.csaf-tp.certvde.com/.well-known/csaf/white/2026/hbsa-2025-0003.json" + }, + { + "tags": [ + "vendor-advisory" + ], + "url": "https://certvde.com/en/advisories/VDE-2025-090/" + } + ], + "source": { + "advisory": "VDE-2025-090", + "defect": [ + "TODO" + ], + "discovery": "UNKNOWN" + }, + "title": "DoS vulnerability in JBL Flip 4", + "x_generator": { + "engine": "Vulnogram 0.4.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105880.json b/data/2026/105xxx/CVE-2026-105880.json new file mode 100644 index 0000000000..631efc8f54 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105880.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105880", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-10-06T00:18:26.656Z", + "datePublished": "2026-11-13T13:04:40.200Z", + "dateUpdated": "2026-11-13T13:04:40.595Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T13:04:40.595Z" + }, + "title": "WordPress WebinarIgnition plugin <= 4.27.125 - Insecure Direct Object References (IDOR) vulnerability", + "datePublic": "2026-11-13T13:04:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Authorization Bypass Through User-Controlled Key vulnerability in Tobias WebinarIgnition webinar-ignition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarIgnition: from n/a through 4.27.125.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Authorization Bypass Through User-Controlled Key vulnerability in Tobias WebinarIgnition webinar-ignition allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects WebinarIgnition: from n/a through 4.27.125.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Tobias", + "product": "WebinarIgnition", + "packageName": "webinar-ignition", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "4.27.125", + "changes": [ + { + "at": "4.27.136", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/webinar-ignition/vulnerability/wordpress-webinarignition-plugin-4-27-125-insecure-direct-object-references-idor-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Zac Lou | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-639", + "description": "Authorization Bypass Through User-Controlled Key", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-180", + "descriptions": [ + { + "lang": "en", + "value": "Exploiting Incorrectly Configured Access Control Security Levels" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress WebinarIgnition plugin to the latest available version (at least 4.27.136).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress WebinarIgnition plugin to the latest available version (at least 4.27.136)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/107xxx/CVE-2026-107174.json b/data/2026/107xxx/CVE-2026-107174.json index 74178b52c7..f20170149e 100644 --- a/data/2026/107xxx/CVE-2026-107174.json +++ b/data/2026/107xxx/CVE-2026-107174.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-07T12:26:30.460Z", "datePublished": "2026-10-07T14:34:51.439Z", - "dateUpdated": "2026-10-07T16:17:28.174Z" + "dateUpdated": "2026-11-13T12:46:13.745Z" }, "containers": { "cna": { @@ -48,6 +48,19 @@ } ], "affected": [ + { + "versions": [ + { + "status": "affected", + "version": "0", + "versionType": "semver", + "lessThanOrEqual": "1.6.4" + } + ], + "packageName": "source-to-image", + "collectionURL": "https://github.com/openshift/source-to-image", + "defaultStatus": "unaffected" + }, { "vendor": "Red Hat", "product": "OpenShift Serverless", @@ -118,6 +131,16 @@ "cpe:/a:redhat:openshift:4" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift Container Platform 5", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "openshift5/ose-docker-builder-rhel9", + "defaultStatus": "affected", + "cpes": [ + "cpe:/a:redhat:openshift:5" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Web Terminal", @@ -187,7 +210,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-10-07T14:34:51.439Z" + "dateUpdated": "2026-11-13T12:46:13.745Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/107xxx/CVE-2026-107525.json b/data/2026/107xxx/CVE-2026-107525.json new file mode 100644 index 0000000000..9f8cc5b381 --- /dev/null +++ b/data/2026/107xxx/CVE-2026-107525.json @@ -0,0 +1,284 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-107525", + "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "state": "PUBLISHED", + "assignerShortName": "dell", + "dateReserved": "2026-10-08T10:04:10.615Z", + "datePublished": "2026-11-13T13:08:18.837Z", + "dateUpdated": "2026-11-13T13:08:18.837Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "shortName": "dell", + "dateUpdated": "2026-11-13T13:08:18.837Z" + }, + "datePublic": "2026-10-30T06:30:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-200", + "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Dell", + "product": "PowerStore 500T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dwll", + "product": "PowerStore 7000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Dell PowerStore contains an information disclosure vulnerability. An unauthenticated attacker could exploit this vulnerability to obtain service metadata useful for further attacks.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Dell PowerStore contains an information disclosure vulnerability. An unauthenticated attacker could exploit this vulnerability to obtain service metadata useful for further attacks." + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/107xxx/CVE-2026-107526.json b/data/2026/107xxx/CVE-2026-107526.json new file mode 100644 index 0000000000..b18cfe6fb1 --- /dev/null +++ b/data/2026/107xxx/CVE-2026-107526.json @@ -0,0 +1,284 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-107526", + "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "state": "PUBLISHED", + "assignerShortName": "dell", + "dateReserved": "2026-10-08T10:04:10.615Z", + "datePublished": "2026-11-13T12:50:39.786Z", + "dateUpdated": "2026-11-13T12:50:39.786Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "shortName": "dell", + "dateUpdated": "2026-11-13T12:50:39.786Z" + }, + "datePublic": "2026-10-30T06:30:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-20", + "description": "CWE-20: Improper Input Validation", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Dell", + "product": "PowerStore 500T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 7000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Dell PowerStore contains an improper input validation vulnerability. An authenticated low-privileged attacker could exploit this vulnerability, potentially leading to stored cross-site scripting in the management interface.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Dell PowerStore contains an improper input validation vulnerability. An authenticated low-privileged attacker could exploit this vulnerability, potentially leading to stored cross-site scripting in the management interface." + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseSeverity": "MEDIUM", + "baseScore": 4.6, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/10xxx/CVE-2026-10609.json b/data/2026/10xxx/CVE-2026-10609.json index 7fb931844f..4d6318c501 100644 --- a/data/2026/10xxx/CVE-2026-10609.json +++ b/data/2026/10xxx/CVE-2026-10609.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-06-02T11:48:09.073Z", "datePublished": "2026-06-23T13:26:43.454Z", - "dateUpdated": "2026-06-23T13:58:28.816Z" + "dateUpdated": "2026-11-13T12:37:12.286Z" }, "containers": { "cna": { @@ -50,16 +50,32 @@ "affected": [ { "vendor": "Red Hat", - "product": "Logging Subsystem for Red Hat OpenShift", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "product": "Logging Subsystem for Red Hat OpenShift 6.5", + "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "openshift-logging/cluster-logging-rhel9-operator", "defaultStatus": "affected", + "versions": [ + { + "version": "1794255956", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], "cpes": [ - "cpe:/a:redhat:logging:6" + "cpe:/a:redhat:logging:6.5::el9" ] } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:99823", + "name": "RHSA-2026:99823", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-10609", "tags": [ @@ -117,7 +133,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-06-23T13:26:43.454Z" + "dateUpdated": "2026-11-13T12:37:12.286Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/112xxx/CVE-2026-112315.json b/data/2026/112xxx/CVE-2026-112315.json index 0d3bafbcf3..e74b496b0b 100644 --- a/data/2026/112xxx/CVE-2026-112315.json +++ b/data/2026/112xxx/CVE-2026-112315.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-19T14:23:58.679Z", "datePublished": "2026-11-09T19:07:47.557Z", - "dateUpdated": "2026-11-12T23:01:04.402Z" + "dateUpdated": "2026-11-13T12:37:36.409Z" }, "containers": { "cna": { @@ -141,6 +141,24 @@ "cpe:/o:redhat:rhel_eus:9.8::baseos" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "krb5-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "1.22.3-0.1.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -170,19 +188,17 @@ "cpes": [ "cpe:/a:redhat:enterprise_linux:8" ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "krb5", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:97811", + "name": "RHSA-2026:97811", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/errata/RHSA-2026:99624", "name": "RHSA-2026:99624", @@ -272,7 +288,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T23:01:04.402Z" + "dateUpdated": "2026-11-13T12:37:36.409Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/112xxx/CVE-2026-112316.json b/data/2026/112xxx/CVE-2026-112316.json index 4506b0ecb7..13bcd065a4 100644 --- a/data/2026/112xxx/CVE-2026-112316.json +++ b/data/2026/112xxx/CVE-2026-112316.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-19T14:24:50.360Z", "datePublished": "2026-11-09T19:08:00.263Z", - "dateUpdated": "2026-11-12T23:01:04.627Z" + "dateUpdated": "2026-11-13T12:37:38.733Z" }, "containers": { "cna": { @@ -141,6 +141,24 @@ "cpe:/o:redhat:rhel_eus:9.8::baseos" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "krb5-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "1.22.3-0.1.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -170,19 +188,17 @@ "cpes": [ "cpe:/a:redhat:enterprise_linux:8" ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "krb5", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:97811", + "name": "RHSA-2026:97811", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/errata/RHSA-2026:99624", "name": "RHSA-2026:99624", @@ -272,7 +288,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T23:01:04.627Z" + "dateUpdated": "2026-11-13T12:37:38.733Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/112xxx/CVE-2026-112317.json b/data/2026/112xxx/CVE-2026-112317.json index 5cbe079518..f1a6826c74 100644 --- a/data/2026/112xxx/CVE-2026-112317.json +++ b/data/2026/112xxx/CVE-2026-112317.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-19T14:25:20.662Z", "datePublished": "2026-11-09T19:07:58.372Z", - "dateUpdated": "2026-11-12T23:01:09.061Z" + "dateUpdated": "2026-11-13T12:37:41.981Z" }, "containers": { "cna": { @@ -141,6 +141,24 @@ "cpe:/o:redhat:rhel_eus:9.8::baseos" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "krb5-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "1.22.3-0.1.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -170,19 +188,17 @@ "cpes": [ "cpe:/a:redhat:enterprise_linux:8" ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "krb5", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:97811", + "name": "RHSA-2026:97811", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/errata/RHSA-2026:99624", "name": "RHSA-2026:99624", @@ -272,7 +288,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T23:01:09.061Z" + "dateUpdated": "2026-11-13T12:37:41.981Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/112xxx/CVE-2026-112318.json b/data/2026/112xxx/CVE-2026-112318.json index 1269036250..dbfe5104ed 100644 --- a/data/2026/112xxx/CVE-2026-112318.json +++ b/data/2026/112xxx/CVE-2026-112318.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-19T14:25:59.007Z", "datePublished": "2026-11-09T19:08:02.661Z", - "dateUpdated": "2026-11-12T23:01:11.090Z" + "dateUpdated": "2026-11-13T12:37:39.525Z" }, "containers": { "cna": { @@ -141,6 +141,24 @@ "cpe:/o:redhat:rhel_eus:9.8::baseos" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "krb5-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "1.22.3-0.1.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -170,19 +188,17 @@ "cpes": [ "cpe:/a:redhat:enterprise_linux:8" ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "krb5", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:97811", + "name": "RHSA-2026:97811", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/errata/RHSA-2026:99624", "name": "RHSA-2026:99624", @@ -272,7 +288,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T23:01:11.090Z" + "dateUpdated": "2026-11-13T12:37:39.525Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/112xxx/CVE-2026-112319.json b/data/2026/112xxx/CVE-2026-112319.json index d33d4ee3ab..285829a6f3 100644 --- a/data/2026/112xxx/CVE-2026-112319.json +++ b/data/2026/112xxx/CVE-2026-112319.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-19T14:26:25.093Z", "datePublished": "2026-11-09T19:08:05.007Z", - "dateUpdated": "2026-11-12T23:01:14.760Z" + "dateUpdated": "2026-11-13T12:37:44.885Z" }, "containers": { "cna": { @@ -141,6 +141,24 @@ "cpe:/o:redhat:rhel_eus:9.8::baseos" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "krb5-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "1.22.3-0.1.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -170,19 +188,17 @@ "cpes": [ "cpe:/a:redhat:enterprise_linux:8" ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "krb5", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:97811", + "name": "RHSA-2026:97811", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/errata/RHSA-2026:99624", "name": "RHSA-2026:99624", @@ -272,7 +288,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T23:01:14.760Z" + "dateUpdated": "2026-11-13T12:37:44.885Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/112xxx/CVE-2026-112320.json b/data/2026/112xxx/CVE-2026-112320.json index cac398018c..a98b4f4075 100644 --- a/data/2026/112xxx/CVE-2026-112320.json +++ b/data/2026/112xxx/CVE-2026-112320.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-19T14:26:51.377Z", "datePublished": "2026-11-09T19:08:07.434Z", - "dateUpdated": "2026-11-12T23:01:17.259Z" + "dateUpdated": "2026-11-13T12:37:47.748Z" }, "containers": { "cna": { @@ -141,6 +141,24 @@ "cpe:/o:redhat:rhel_eus:9.8::baseos" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "krb5-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "1.22.3-0.1.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -170,19 +188,17 @@ "cpes": [ "cpe:/a:redhat:enterprise_linux:8" ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "krb5", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:97811", + "name": "RHSA-2026:97811", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/errata/RHSA-2026:99624", "name": "RHSA-2026:99624", @@ -272,7 +288,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T23:01:17.259Z" + "dateUpdated": "2026-11-13T12:37:47.748Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/112xxx/CVE-2026-112321.json b/data/2026/112xxx/CVE-2026-112321.json index 01616dd5a9..1d99f3c4ea 100644 --- a/data/2026/112xxx/CVE-2026-112321.json +++ b/data/2026/112xxx/CVE-2026-112321.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-19T14:27:17.372Z", "datePublished": "2026-11-09T19:08:10.347Z", - "dateUpdated": "2026-11-12T23:01:19.403Z" + "dateUpdated": "2026-11-13T12:37:49.703Z" }, "containers": { "cna": { @@ -141,6 +141,24 @@ "cpe:/o:redhat:rhel_eus:9.8::baseos" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "krb5-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "1.22.3-0.1.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -170,19 +188,17 @@ "cpes": [ "cpe:/a:redhat:enterprise_linux:8" ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "krb5", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:97811", + "name": "RHSA-2026:97811", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/errata/RHSA-2026:99624", "name": "RHSA-2026:99624", @@ -272,7 +288,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T23:01:19.403Z" + "dateUpdated": "2026-11-13T12:37:49.703Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/112xxx/CVE-2026-112322.json b/data/2026/112xxx/CVE-2026-112322.json index 46bc33cec8..a06204afab 100644 --- a/data/2026/112xxx/CVE-2026-112322.json +++ b/data/2026/112xxx/CVE-2026-112322.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-19T14:27:47.648Z", "datePublished": "2026-11-09T18:43:23.841Z", - "dateUpdated": "2026-11-12T23:01:23.481Z" + "dateUpdated": "2026-11-13T12:37:51.566Z" }, "containers": { "cna": { @@ -141,6 +141,24 @@ "cpe:/o:redhat:rhel_eus:9.8::baseos" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "krb5-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "1.22.3-0.1.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -170,19 +188,17 @@ "cpes": [ "cpe:/a:redhat:enterprise_linux:8" ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "krb5", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:97811", + "name": "RHSA-2026:97811", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/errata/RHSA-2026:99624", "name": "RHSA-2026:99624", @@ -272,7 +288,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T23:01:23.481Z" + "dateUpdated": "2026-11-13T12:37:51.566Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/112xxx/CVE-2026-112323.json b/data/2026/112xxx/CVE-2026-112323.json index 5f7391bfa1..12b2b2fb16 100644 --- a/data/2026/112xxx/CVE-2026-112323.json +++ b/data/2026/112xxx/CVE-2026-112323.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-19T14:29:07.369Z", "datePublished": "2026-11-09T18:43:29.636Z", - "dateUpdated": "2026-11-12T23:01:25.182Z" + "dateUpdated": "2026-11-13T12:37:50.260Z" }, "containers": { "cna": { @@ -141,6 +141,24 @@ "cpe:/o:redhat:rhel_eus:9.8::baseos" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "krb5-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "1.22.3-0.1.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -170,19 +188,17 @@ "cpes": [ "cpe:/a:redhat:enterprise_linux:8" ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "krb5", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:97811", + "name": "RHSA-2026:97811", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/errata/RHSA-2026:99624", "name": "RHSA-2026:99624", @@ -272,7 +288,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T23:01:25.182Z" + "dateUpdated": "2026-11-13T12:37:50.260Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/112xxx/CVE-2026-112830.json b/data/2026/112xxx/CVE-2026-112830.json new file mode 100644 index 0000000000..11af32bbe7 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112830.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112830", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-10-19T19:23:59.818Z", + "datePublished": "2026-11-13T13:04:13.573Z", + "dateUpdated": "2026-11-13T13:05:15.375Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T13:05:15.375Z" + }, + "title": "WordPress Brizy plugin <= 2.8.25 - Broken Access Control vulnerability", + "datePublic": "2026-11-13T13:03:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Brizy Brizy brizy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy: from n/a through 2.8.25.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Missing Authorization vulnerability in Brizy Brizy brizy allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Brizy: from n/a through 2.8.25.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Brizy", + "product": "Brizy", + "packageName": "brizy", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "2.8.25", + "changes": [ + { + "at": "2.8.26", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/brizy/vulnerability/wordpress-brizy-plugin-2-8-25-broken-access-control-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Charles Vosburgh | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-862", + "description": "Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-180", + "descriptions": [ + { + "lang": "en", + "value": "Exploiting Incorrectly Configured Access Control Security Levels" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Brizy plugin to the latest available version (at least 2.8.26).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Brizy plugin to the latest available version (at least 2.8.26)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114406.json b/data/2026/114xxx/CVE-2026-114406.json index 317160165f..891f599609 100644 --- a/data/2026/114xxx/CVE-2026-114406.json +++ b/data/2026/114xxx/CVE-2026-114406.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-21T11:57:07.758Z", "datePublished": "2026-10-21T20:56:26.866Z", - "dateUpdated": "2026-11-13T12:11:21.329Z" + "dateUpdated": "2026-11-13T12:22:07.495Z" }, "containers": { "cna": { @@ -790,6 +790,24 @@ "cpe:/a:redhat:advanced_cluster_security:4.10::el8" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat AI Inference Server 3.2", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhaiis/vllm-rocm-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793961846", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:ai_inference_server:3.2::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat AI Inference Server 3.2", @@ -1078,6 +1096,132 @@ "cpe:/a:redhat:discovery:2::el9" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux AI 3.5", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhelai3/disk-image-cuda-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793995863", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:enterprise_linux_ai:3.5::el9" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux AI 3.5", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhelai3/bootc-aws-cuda-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793973314", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:enterprise_linux_ai:3.5::el9" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux AI 3.5", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhelai3/bootc-azure-cuda-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793973314", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:enterprise_linux_ai:3.5::el9" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux AI 3.5", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhelai3/bootc-azure-rocm-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793973314", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:enterprise_linux_ai:3.5::el9" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux AI 3.5", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhelai3/bootc-cuda-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793914518", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:enterprise_linux_ai:3.5::el9" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux AI 3.5", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhelai3/bootc-gcp-cuda-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793973312", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:enterprise_linux_ai:3.5::el9" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux AI 3.5", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhelai3/bootc-rocm-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793914504", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:enterprise_linux_ai:3.5::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Hardened Images", @@ -4844,46 +4988,6 @@ "cpe:/a:redhat:rhdh:2" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Enterprise Linux AI (RHEL AI) 3", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "rhelai3/bootc-aws-cuda-rhel9", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:enterprise_linux_ai:3" - ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat Enterprise Linux AI (RHEL AI) 3", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "rhelai3/bootc-azure-cuda-rhel9", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:enterprise_linux_ai:3" - ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat Enterprise Linux AI (RHEL AI) 3", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "rhelai3/bootc-azure-rocm-rhel9", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:enterprise_linux_ai:3" - ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat Enterprise Linux AI (RHEL AI) 3", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "rhelai3/bootc-cuda-rhel9", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:enterprise_linux_ai:3" - ] - }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux AI (RHEL AI) 3", @@ -4894,26 +4998,6 @@ "cpe:/a:redhat:enterprise_linux_ai:3" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Enterprise Linux AI (RHEL AI) 3", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "rhelai3/bootc-gcp-cuda-rhel9", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:enterprise_linux_ai:3" - ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat Enterprise Linux AI (RHEL AI) 3", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "rhelai3/bootc-rocm-rhel9", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:enterprise_linux_ai:3" - ] - }, { "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", @@ -6090,6 +6174,22 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:96323", + "name": "RHSA-2026:96323", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:96333", + "name": "RHSA-2026:96333", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/errata/RHSA-2026:96400", "name": "RHSA-2026:96400", @@ -6213,7 +6313,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-13T12:11:21.329Z" + "dateUpdated": "2026-11-13T12:22:07.495Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/114xxx/CVE-2026-114690.json b/data/2026/114xxx/CVE-2026-114690.json index bdd2c6e572..b410c76b16 100644 --- a/data/2026/114xxx/CVE-2026-114690.json +++ b/data/2026/114xxx/CVE-2026-114690.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-21T22:14:31.928Z", "datePublished": "2026-10-30T07:13:04.008Z", - "dateUpdated": "2026-11-13T04:06:08.847Z" + "dateUpdated": "2026-11-13T13:07:49.006Z" }, "containers": { "cna": { @@ -254,6 +254,24 @@ "cpe:/a:redhat:hummingbird:1" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "gcc13-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "13.5.0-0.5.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", @@ -394,16 +412,6 @@ "cpe:/a:redhat:enterprise_linux:9" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "gcc13", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] - }, { "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", @@ -764,6 +772,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:95981", + "name": "RHSA-2026:95981", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/errata/RHSA-2026:98115", "name": "RHSA-2026:98115", @@ -885,7 +901,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-13T04:06:08.847Z" + "dateUpdated": "2026-11-13T13:07:49.006Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/114xxx/CVE-2026-114691.json b/data/2026/114xxx/CVE-2026-114691.json index 2388df25cb..0e093da56d 100644 --- a/data/2026/114xxx/CVE-2026-114691.json +++ b/data/2026/114xxx/CVE-2026-114691.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-21T22:16:10.067Z", "datePublished": "2026-10-30T07:13:05.891Z", - "dateUpdated": "2026-11-13T04:06:11.463Z" + "dateUpdated": "2026-11-13T13:07:50.251Z" }, "containers": { "cna": { @@ -254,6 +254,24 @@ "cpe:/a:redhat:hummingbird:1" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "gcc13-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "13.5.0-0.5.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", @@ -394,16 +412,6 @@ "cpe:/a:redhat:enterprise_linux:9" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "gcc13", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] - }, { "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", @@ -764,6 +772,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:95981", + "name": "RHSA-2026:95981", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/errata/RHSA-2026:98115", "name": "RHSA-2026:98115", @@ -885,7 +901,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-13T04:06:11.463Z" + "dateUpdated": "2026-11-13T13:07:50.251Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/119xxx/CVE-2026-119079.json b/data/2026/119xxx/CVE-2026-119079.json index e0deb25fcc..ca11df94d7 100644 --- a/data/2026/119xxx/CVE-2026-119079.json +++ b/data/2026/119xxx/CVE-2026-119079.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-29T13:10:23.375Z", "datePublished": "2026-11-09T18:43:39.044Z", - "dateUpdated": "2026-11-12T23:01:31.643Z" + "dateUpdated": "2026-11-13T12:38:56.963Z" }, "containers": { "cna": { @@ -141,6 +141,24 @@ "cpe:/o:redhat:rhel_eus:9.8::baseos" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Hardened Images", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "krb5-main", + "defaultStatus": "affected", + "versions": [ + { + "version": "1.22.3-0.1.hum1", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:hummingbird:1" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -170,19 +188,17 @@ "cpes": [ "cpe:/a:redhat:enterprise_linux:8" ] - }, - { - "vendor": "Red Hat", - "product": "Red Hat Hardened Images", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "krb5", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:hummingbird:1" - ] } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:97811", + "name": "RHSA-2026:97811", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/errata/RHSA-2026:99624", "name": "RHSA-2026:99624", @@ -272,11 +288,53 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T23:01:31.643Z" + "dateUpdated": "2026-11-13T12:37:56.873Z" }, "x_generator": { "engine": "cvelib 1.8.0" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479231", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T12:37:56.550556Z", + "id": "CVE-2026-119079", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T12:38:56.963Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119518.json b/data/2026/119xxx/CVE-2026-119518.json new file mode 100644 index 0000000000..15361ef124 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119518.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119518", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-10-30T09:20:18.657Z", + "datePublished": "2026-11-13T13:03:21.131Z", + "dateUpdated": "2026-11-13T13:04:21.225Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T13:04:21.225Z" + }, + "title": "WordPress Royal Elementor Addons plugin <= 1.7.1070 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-13T13:03:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Stored XSS.This issue affects Royal Elementor Addons: from n/a through 1.7.1070.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Stored XSS.

This issue affects Royal Elementor Addons: from n/a through 1.7.1070.

" + } + ] + } + ], + "affected": [ + { + "vendor": "WProyal", + "product": "Royal Elementor Addons", + "packageName": "royal-elementor-addons", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "1.7.1070", + "changes": [ + { + "at": "1.7.1071", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/royal-elementor-addons/vulnerability/wordpress-royal-elementor-addons-plugin-1-7-1070-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Ihsan Saddan | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-592", + "descriptions": [ + { + "lang": "en", + "value": "Stored XSS" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Royal Elementor Addons plugin to the latest available version (at least 1.7.1071).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Royal Elementor Addons plugin to the latest available version (at least 1.7.1071)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121721.json b/data/2026/121xxx/CVE-2026-121721.json new file mode 100644 index 0000000000..49bffce3a2 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121721.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121721", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-03T21:24:31.789Z", + "datePublished": "2026-11-13T13:00:24.994Z", + "dateUpdated": "2026-11-13T13:01:26.322Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T13:01:26.322Z" + }, + "title": "WordPress Gutenberg Blocks plugin <= 3.7.6 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-13T13:00:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Stored XSS.This issue affects Gutenberg Blocks: from n/a through 3.7.6.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Stored XSS.

This issue affects Gutenberg Blocks: from n/a through 3.7.6.

" + } + ] + } + ], + "affected": [ + { + "vendor": "PublishPress", + "product": "Gutenberg Blocks", + "packageName": "advanced-gutenberg", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "3.7.6", + "changes": [ + { + "at": "3.7.7", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/advanced-gutenberg/vulnerability/wordpress-gutenberg-blocks-plugin-3-7-6-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "mroccon | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-592", + "descriptions": [ + { + "lang": "en", + "value": "Stored XSS" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Gutenberg Blocks plugin to the latest available version (at least 3.7.7).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Gutenberg Blocks plugin to the latest available version (at least 3.7.7)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121771.json b/data/2026/121xxx/CVE-2026-121771.json new file mode 100644 index 0000000000..9c23618014 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121771.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121771", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-04T00:24:30.154Z", + "datePublished": "2026-11-13T12:50:57.155Z", + "dateUpdated": "2026-11-13T12:51:57.678Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T12:51:57.678Z" + }, + "title": "WordPress Gutenberg Blocks plugin <= 3.7.6 - Sensitive Data Exposure vulnerability", + "datePublic": "2026-11-13T12:50:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Retrieve Embedded Sensitive Data.This issue affects Gutenberg Blocks: from n/a through 3.7.6.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Retrieve Embedded Sensitive Data.

This issue affects Gutenberg Blocks: from n/a through 3.7.6.

" + } + ] + } + ], + "affected": [ + { + "vendor": "PublishPress", + "product": "Gutenberg Blocks", + "packageName": "advanced-gutenberg", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "3.7.6", + "changes": [ + { + "at": "3.7.7", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/advanced-gutenberg/vulnerability/wordpress-gutenberg-blocks-plugin-3-7-6-sensitive-data-exposure-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Malvin Valerian Gultom | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-201", + "description": "Insertion of Sensitive Information Into Sent Data", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-37", + "descriptions": [ + { + "lang": "en", + "value": "Retrieve Embedded Sensitive Data" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Gutenberg Blocks plugin to the latest available version (at least 3.7.7).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Gutenberg Blocks plugin to the latest available version (at least 3.7.7)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122056.json b/data/2026/122xxx/CVE-2026-122056.json index 799664f6c0..61f1d99358 100644 --- a/data/2026/122xxx/CVE-2026-122056.json +++ b/data/2026/122xxx/CVE-2026-122056.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-11-04T16:34:16.396Z", "datePublished": "2026-11-09T20:33:16.401Z", - "dateUpdated": "2026-11-11T20:59:28.541Z" + "dateUpdated": "2026-11-13T13:11:15.067Z" }, "containers": { "cna": { @@ -169,6 +169,48 @@ "x_generator": { "engine": "cvelib 1.8.0" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/OpenSCAP/openscap/security/advisories/GHSA-5h6x-q65w-wxvf", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:10:55.708342Z", + "id": "CVE-2026-122056", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:11:15.067Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123368.json b/data/2026/123xxx/CVE-2026-123368.json index e732c995f8..02384b293b 100644 --- a/data/2026/123xxx/CVE-2026-123368.json +++ b/data/2026/123xxx/CVE-2026-123368.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-11-05T20:43:10.420Z", "datePublished": "2026-11-09T17:25:15.559Z", - "dateUpdated": "2026-11-09T17:25:15.559Z" + "dateUpdated": "2026-11-13T12:26:26.248Z" }, "containers": { "cna": { @@ -113,6 +113,40 @@ "advisory": "GHSA-6wcv-rj3c-mhv3", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T12:23:23.996544Z", + "id": "CVE-2026-123368", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T12:26:26.248Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123372.json b/data/2026/123xxx/CVE-2026-123372.json index c068230db5..5383e0aea4 100644 --- a/data/2026/123xxx/CVE-2026-123372.json +++ b/data/2026/123xxx/CVE-2026-123372.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-11-05T20:43:10.420Z", "datePublished": "2026-11-09T17:38:24.683Z", - "dateUpdated": "2026-11-09T17:39:27.049Z" + "dateUpdated": "2026-11-13T12:29:34.320Z" }, "containers": { "cna": { @@ -113,6 +113,48 @@ "advisory": "GHSA-jf3h-8jvx-vcrg", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/tmatens/compose-lint/security/advisories/GHSA-jf3h-8jvx-vcrg", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T12:28:46.518093Z", + "id": "CVE-2026-123372", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T12:29:34.320Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123798.json b/data/2026/123xxx/CVE-2026-123798.json index d3618dde47..8fa3fee4c5 100644 --- a/data/2026/123xxx/CVE-2026-123798.json +++ b/data/2026/123xxx/CVE-2026-123798.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-11-06T15:27:56.225Z", "datePublished": "2026-11-09T18:04:20.419Z", - "dateUpdated": "2026-11-09T18:04:20.419Z" + "dateUpdated": "2026-11-13T12:32:19.420Z" }, "containers": { "cna": { @@ -139,6 +139,40 @@ "advisory": "GHSA-gvx2-mwmj-wwvj", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T12:32:00.758813Z", + "id": "CVE-2026-123798", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T12:32:19.420Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123802.json b/data/2026/123xxx/CVE-2026-123802.json index fca952710e..e44069191e 100644 --- a/data/2026/123xxx/CVE-2026-123802.json +++ b/data/2026/123xxx/CVE-2026-123802.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-11-06T15:27:56.226Z", "datePublished": "2026-11-09T18:23:40.216Z", - "dateUpdated": "2026-11-09T18:23:40.216Z" + "dateUpdated": "2026-11-13T12:35:15.061Z" }, "containers": { "cna": { @@ -238,6 +238,40 @@ "advisory": "GHSA-wfg2-vqfg-rqh6", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T12:34:58.126841Z", + "id": "CVE-2026-123802", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T12:35:15.061Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123806.json b/data/2026/123xxx/CVE-2026-123806.json index 7c544b1853..4d2e91ed55 100644 --- a/data/2026/123xxx/CVE-2026-123806.json +++ b/data/2026/123xxx/CVE-2026-123806.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-11-06T15:27:56.226Z", "datePublished": "2026-11-09T20:18:45.481Z", - "dateUpdated": "2026-11-09T20:18:45.481Z" + "dateUpdated": "2026-11-13T13:09:54.700Z" }, "containers": { "cna": { @@ -93,6 +93,40 @@ "advisory": "GHSA-qp9x-wp8f-qgjj", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:09:37.342304Z", + "id": "CVE-2026-123806", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:09:54.700Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124987.json b/data/2026/124xxx/CVE-2026-124987.json index 71caf5754c..596107d2d0 100644 --- a/data/2026/124xxx/CVE-2026-124987.json +++ b/data/2026/124xxx/CVE-2026-124987.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-09T15:26:38.906Z", "datePublished": "2026-11-09T19:45:15.712Z", - "dateUpdated": "2026-11-09T19:45:15.712Z" + "dateUpdated": "2026-11-13T13:08:28.986Z" }, "containers": { "cna": { @@ -189,6 +189,48 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "references": [ + { + "url": "https://vuldb.com/submit/1040562", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:07:47.641186Z", + "id": "CVE-2026-124987", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:08:28.986Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125097.json b/data/2026/125xxx/CVE-2026-125097.json index 72a241e1a7..90f202e7ae 100644 --- a/data/2026/125xxx/CVE-2026-125097.json +++ b/data/2026/125xxx/CVE-2026-125097.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T17:44:23.868Z", "datePublished": "2026-11-09T19:10:53.582Z", - "dateUpdated": "2026-11-09T19:10:53.582Z" + "dateUpdated": "2026-11-13T12:42:11.540Z" }, "containers": { "cna": { @@ -159,6 +159,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T12:41:14.186810Z", + "id": "CVE-2026-125097", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T12:42:11.540Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125101.json b/data/2026/125xxx/CVE-2026-125101.json index 231052e1ec..3d98fb3d6a 100644 --- a/data/2026/125xxx/CVE-2026-125101.json +++ b/data/2026/125xxx/CVE-2026-125101.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T17:44:25.282Z", "datePublished": "2026-11-09T19:10:56.303Z", - "dateUpdated": "2026-11-09T19:10:56.303Z" + "dateUpdated": "2026-11-13T12:44:03.612Z" }, "containers": { "cna": { @@ -159,6 +159,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T12:42:42.178920Z", + "id": "CVE-2026-125101", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T12:44:03.612Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125170.json b/data/2026/125xxx/CVE-2026-125170.json index 0cee7191f7..93da893db9 100644 --- a/data/2026/125xxx/CVE-2026-125170.json +++ b/data/2026/125xxx/CVE-2026-125170.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T18:15:02.150Z", "datePublished": "2026-11-09T19:10:59.118Z", - "dateUpdated": "2026-11-09T19:10:59.118Z" + "dateUpdated": "2026-11-13T12:44:56.916Z" }, "containers": { "cna": { @@ -164,6 +164,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T12:44:35.291503Z", + "id": "CVE-2026-125170", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T12:44:56.916Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125178.json b/data/2026/125xxx/CVE-2026-125178.json index 796c0d9906..81101480fb 100644 --- a/data/2026/125xxx/CVE-2026-125178.json +++ b/data/2026/125xxx/CVE-2026-125178.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T18:15:04.842Z", "datePublished": "2026-11-09T19:11:04.895Z", - "dateUpdated": "2026-11-09T19:11:04.895Z" + "dateUpdated": "2026-11-13T12:46:47.404Z" }, "containers": { "cna": { @@ -164,6 +164,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T12:45:50.456037Z", + "id": "CVE-2026-125178", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T12:46:47.404Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125182.json b/data/2026/125xxx/CVE-2026-125182.json index 63f5d43cc8..96694c9731 100644 --- a/data/2026/125xxx/CVE-2026-125182.json +++ b/data/2026/125xxx/CVE-2026-125182.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T18:15:06.141Z", "datePublished": "2026-11-09T19:11:07.513Z", - "dateUpdated": "2026-11-09T19:11:07.513Z" + "dateUpdated": "2026-11-13T12:48:34.942Z" }, "containers": { "cna": { @@ -164,6 +164,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T12:48:19.971028Z", + "id": "CVE-2026-125182", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T12:48:34.942Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125190.json b/data/2026/125xxx/CVE-2026-125190.json index 4a3230ae4c..818801d3b9 100644 --- a/data/2026/125xxx/CVE-2026-125190.json +++ b/data/2026/125xxx/CVE-2026-125190.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T18:15:08.687Z", "datePublished": "2026-11-09T19:11:13.086Z", - "dateUpdated": "2026-11-09T19:11:13.086Z" + "dateUpdated": "2026-11-13T12:49:25.088Z" }, "containers": { "cna": { @@ -159,6 +159,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T12:49:11.107692Z", + "id": "CVE-2026-125190", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T12:49:25.088Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125198.json b/data/2026/125xxx/CVE-2026-125198.json index 5116020d1e..838377c360 100644 --- a/data/2026/125xxx/CVE-2026-125198.json +++ b/data/2026/125xxx/CVE-2026-125198.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T18:15:11.265Z", "datePublished": "2026-11-09T19:11:18.674Z", - "dateUpdated": "2026-11-09T19:11:18.674Z" + "dateUpdated": "2026-11-13T12:50:17.888Z" }, "containers": { "cna": { @@ -159,6 +159,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T12:49:58.228422Z", + "id": "CVE-2026-125198", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T12:50:17.888Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125202.json b/data/2026/125xxx/CVE-2026-125202.json index 0d464f9857..0d56c3502c 100644 --- a/data/2026/125xxx/CVE-2026-125202.json +++ b/data/2026/125xxx/CVE-2026-125202.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T18:15:12.554Z", "datePublished": "2026-11-09T19:11:21.451Z", - "dateUpdated": "2026-11-09T19:11:21.451Z" + "dateUpdated": "2026-11-13T12:51:26.300Z" }, "containers": { "cna": { @@ -152,6 +152,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T12:51:13.680872Z", + "id": "CVE-2026-125202", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T12:51:26.300Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125206.json b/data/2026/125xxx/CVE-2026-125206.json index e8abd47ea7..a74bee3546 100644 --- a/data/2026/125xxx/CVE-2026-125206.json +++ b/data/2026/125xxx/CVE-2026-125206.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T18:15:13.992Z", "datePublished": "2026-11-09T19:11:24.279Z", - "dateUpdated": "2026-11-09T19:11:24.279Z" + "dateUpdated": "2026-11-13T12:53:52.593Z" }, "containers": { "cna": { @@ -164,6 +164,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T12:52:10.335319Z", + "id": "CVE-2026-125206", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T12:53:52.593Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125210.json b/data/2026/125xxx/CVE-2026-125210.json index 09c9eebf87..5006ed9857 100644 --- a/data/2026/125xxx/CVE-2026-125210.json +++ b/data/2026/125xxx/CVE-2026-125210.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T18:15:15.655Z", "datePublished": "2026-11-09T19:11:27.398Z", - "dateUpdated": "2026-11-09T19:11:27.398Z" + "dateUpdated": "2026-11-13T12:57:01.428Z" }, "containers": { "cna": { @@ -159,6 +159,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T12:56:08.496327Z", + "id": "CVE-2026-125210", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T12:57:01.428Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125218.json b/data/2026/125xxx/CVE-2026-125218.json index af05ff60cd..07da644e66 100644 --- a/data/2026/125xxx/CVE-2026-125218.json +++ b/data/2026/125xxx/CVE-2026-125218.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T18:15:18.394Z", "datePublished": "2026-11-09T19:11:33.101Z", - "dateUpdated": "2026-11-09T19:11:33.101Z" + "dateUpdated": "2026-11-13T12:58:34.472Z" }, "containers": { "cna": { @@ -159,6 +159,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T12:58:09.950771Z", + "id": "CVE-2026-125218", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T12:58:34.472Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125222.json b/data/2026/125xxx/CVE-2026-125222.json index befec2bbaa..0f13cd2b28 100644 --- a/data/2026/125xxx/CVE-2026-125222.json +++ b/data/2026/125xxx/CVE-2026-125222.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T18:15:19.944Z", "datePublished": "2026-11-09T19:11:35.913Z", - "dateUpdated": "2026-11-09T19:11:35.913Z" + "dateUpdated": "2026-11-13T13:00:30.446Z" }, "containers": { "cna": { @@ -159,6 +159,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T12:59:49.973837Z", + "id": "CVE-2026-125222", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:00:30.446Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125250.json b/data/2026/125xxx/CVE-2026-125250.json index 1e974fe6f7..d5d46763ba 100644 --- a/data/2026/125xxx/CVE-2026-125250.json +++ b/data/2026/125xxx/CVE-2026-125250.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T18:15:30.040Z", "datePublished": "2026-11-09T19:11:56.203Z", - "dateUpdated": "2026-11-09T19:11:56.203Z" + "dateUpdated": "2026-11-13T13:03:18.783Z" }, "containers": { "cna": { @@ -159,6 +159,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:01:25.891447Z", + "id": "CVE-2026-125250", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:03:18.783Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125262.json b/data/2026/125xxx/CVE-2026-125262.json index 3c06a9682b..9f4dbf85d7 100644 --- a/data/2026/125xxx/CVE-2026-125262.json +++ b/data/2026/125xxx/CVE-2026-125262.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T18:15:34.069Z", "datePublished": "2026-11-09T19:12:04.655Z", - "dateUpdated": "2026-11-09T19:12:04.655Z" + "dateUpdated": "2026-11-13T13:04:17.272Z" }, "containers": { "cna": { @@ -165,6 +165,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:03:56.587861Z", + "id": "CVE-2026-125262", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:04:17.272Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125266.json b/data/2026/125xxx/CVE-2026-125266.json index a516584514..2eb6fd0907 100644 --- a/data/2026/125xxx/CVE-2026-125266.json +++ b/data/2026/125xxx/CVE-2026-125266.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T18:15:35.487Z", "datePublished": "2026-11-09T19:12:07.485Z", - "dateUpdated": "2026-11-09T19:12:07.485Z" + "dateUpdated": "2026-11-13T13:05:41.464Z" }, "containers": { "cna": { @@ -160,6 +160,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:04:56.423362Z", + "id": "CVE-2026-125266", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:05:41.464Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125270.json b/data/2026/125xxx/CVE-2026-125270.json index 14bebe2233..e73c2d3f8a 100644 --- a/data/2026/125xxx/CVE-2026-125270.json +++ b/data/2026/125xxx/CVE-2026-125270.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T18:15:36.772Z", "datePublished": "2026-11-09T19:12:10.299Z", - "dateUpdated": "2026-11-09T19:12:10.299Z" + "dateUpdated": "2026-11-13T13:06:56.300Z" }, "containers": { "cna": { @@ -159,6 +159,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:06:34.484660Z", + "id": "CVE-2026-125270", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:06:56.300Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125801.json b/data/2026/125xxx/CVE-2026-125801.json new file mode 100644 index 0000000000..3de14d0994 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125801.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125801", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.986Z", + "datePublished": "2026-11-13T13:05:08.445Z", + "dateUpdated": "2026-11-13T13:05:33.407Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T13:05:33.407Z" + }, + "title": "WordPress WooCommerce plugin 11.0.0-11.2.2 - Race Condition vulnerability", + "datePublic": "2026-11-13T13:04:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Automattic WooCommerce woocommerce allows Leveraging Race Conditions.This issue affects WooCommerce: from 11.0.0 through 11.2.2.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Automattic WooCommerce woocommerce allows Leveraging Race Conditions.

This issue affects WooCommerce: from 11.0.0 through 11.2.2.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Automattic", + "product": "WooCommerce", + "packageName": "woocommerce", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "11.0.0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "11.2.2", + "changes": [ + { + "at": "11.3.0", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/woocommerce/vulnerability/wordpress-woocommerce-plugin-11-0-0-11-2-2-race-condition-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Ananda Dhakal (Patchstack)", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-362", + "description": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-26", + "descriptions": [ + { + "lang": "en", + "value": "Leveraging Race Conditions" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress WooCommerce plugin to the latest available version (at least 11.3.0).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress WooCommerce plugin to the latest available version (at least 11.3.0)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125814.json b/data/2026/125xxx/CVE-2026-125814.json new file mode 100644 index 0000000000..6e0e167670 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125814.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125814", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.988Z", + "datePublished": "2026-11-13T12:58:27.612Z", + "dateUpdated": "2026-11-13T12:59:27.837Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T12:59:27.837Z" + }, + "title": "WordPress Product Feed PRO for WooCommerce plugin <= 13.5.8 - Content Injection vulnerability", + "datePublic": "2026-11-13T12:59:27.673Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Rymera Web Co Product Feed PRO for WooCommerce woo-product-feed-pro allows Code Injection.This issue affects Product Feed PRO for WooCommerce: from n/a through 13.5.8.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Rymera Web Co Product Feed PRO for WooCommerce woo-product-feed-pro allows Code Injection.

This issue affects Product Feed PRO for WooCommerce: from n/a through 13.5.8.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Rymera Web Co", + "product": "Product Feed PRO for WooCommerce", + "packageName": "woo-product-feed-pro", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "13.5.8", + "changes": [ + { + "at": "13.5.9", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/woo-product-feed-pro/vulnerability/wordpress-product-feed-pro-for-woocommerce-plugin-13-5-8-content-injection-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "dzaku | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-80", + "description": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-242", + "descriptions": [ + { + "lang": "en", + "value": "Code Injection" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Product Feed PRO for WooCommerce plugin to the latest available version (at least 13.5.9).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Product Feed PRO for WooCommerce plugin to the latest available version (at least 13.5.9)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125815.json b/data/2026/125xxx/CVE-2026-125815.json new file mode 100644 index 0000000000..2c53a49366 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125815.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125815", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.989Z", + "datePublished": "2026-11-13T12:50:11.828Z", + "dateUpdated": "2026-11-13T12:51:11.675Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T12:51:11.675Z" + }, + "title": "WordPress We’re Open! plugin <= 2.8 - Content Injection vulnerability", + "datePublic": "2026-11-13T12:49:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Noah Hearle We’re Open! opening-hours allows Code Injection.This issue affects We’re Open!: from n/a through 2.8.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Noah Hearle We’re Open! opening-hours allows Code Injection.

This issue affects We’re Open!: from n/a through 2.8.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Noah Hearle", + "product": "We’re Open!", + "packageName": "opening-hours", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "2.8", + "changes": [ + { + "at": "2.9", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/opening-hours/vulnerability/wordpress-we-re-open-plugin-2-8-content-injection-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "leon figueira | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-80", + "description": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-242", + "descriptions": [ + { + "lang": "en", + "value": "Code Injection" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress We’re Open! plugin to the latest available version (at least 2.9).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress We’re Open! plugin to the latest available version (at least 2.9)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125816.json b/data/2026/125xxx/CVE-2026-125816.json new file mode 100644 index 0000000000..b2000d9602 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125816.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125816", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.989Z", + "datePublished": "2026-11-13T13:03:44.155Z", + "dateUpdated": "2026-11-13T13:04:43.817Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T13:04:43.817Z" + }, + "title": "WordPress MapSVG plugin <= 9.0.4 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-13T13:03:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Stored XSS.This issue affects MapSVG: from n/a through 9.0.4.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Stored XSS.

This issue affects MapSVG: from n/a through 9.0.4.

" + } + ] + } + ], + "affected": [ + { + "vendor": "PT Norther Lights Production", + "product": "MapSVG", + "packageName": "mapsvg-lite-interactive-vector-maps", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "9.0.4", + "changes": [ + { + "at": "9.0.5", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/mapsvg-lite-interactive-vector-maps/vulnerability/wordpress-mapsvg-plugin-9-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "V1T | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-592", + "descriptions": [ + { + "lang": "en", + "value": "Stored XSS" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress MapSVG plugin to the latest available version (at least 9.0.5).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress MapSVG plugin to the latest available version (at least 9.0.5)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125833.json b/data/2026/125xxx/CVE-2026-125833.json new file mode 100644 index 0000000000..171b4bd98f --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125833.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125833", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.991Z", + "datePublished": "2026-11-13T12:56:11.234Z", + "dateUpdated": "2026-11-13T12:57:11.726Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T12:57:11.726Z" + }, + "title": "WordPress YITH WooCommerce Ajax Product Filter plugin <= 5.24.0 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-13T12:55:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooCommerce Ajax Product Filter yith-woocommerce-ajax-navigation allows Stored XSS.This issue affects YITH WooCommerce Ajax Product Filter: from n/a through 5.24.0.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooCommerce Ajax Product Filter yith-woocommerce-ajax-navigation allows Stored XSS.

This issue affects YITH WooCommerce Ajax Product Filter: from n/a through 5.24.0.

" + } + ] + } + ], + "affected": [ + { + "vendor": "YITH", + "product": "YITH WooCommerce Ajax Product Filter", + "packageName": "yith-woocommerce-ajax-navigation", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "5.24.0", + "changes": [ + { + "at": "5.25.0", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/yith-woocommerce-ajax-navigation/vulnerability/wordpress-yith-woocommerce-ajax-product-filter-plugin-5-24-0-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "dzaku | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-592", + "descriptions": [ + { + "lang": "en", + "value": "Stored XSS" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress YITH WooCommerce Ajax Product Filter plugin to the latest available version (at least 5.25.0).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress YITH WooCommerce Ajax Product Filter plugin to the latest available version (at least 5.25.0)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126317.json b/data/2026/126xxx/CVE-2026-126317.json index d58f77b84b..38ae5b4ce9 100644 --- a/data/2026/126xxx/CVE-2026-126317.json +++ b/data/2026/126xxx/CVE-2026-126317.json @@ -8,30 +8,24 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-10T20:18:40.992Z", "datePublished": "2026-11-13T09:36:14.050Z", - "dateUpdated": "2026-11-13T09:36:14.050Z" + "dateUpdated": "2026-11-13T12:41:16.348Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", - "dateUpdated": "2026-11-13T09:36:14.050Z" + "dateUpdated": "2026-11-13T12:41:16.348Z" }, - "datePublic": "2026-10-26T00:00:00.000Z", "title": "Frappe HRMS 16.0.0 before 16.20.1 Missing Authorization in Company Details Endpoint", - "descriptions": [ - { - "lang": "en", - "value": "Frappe HRMS from 16.0.0 before 16.20.1 contains a missing authorization vulnerability that allows authenticated users to read company details outside their permissions due to a missing permission check. Any logged-in user, including Employee role users, can query the affected endpoint to list every company on the site along with its default currency." - } - ], + "datePublic": "2026-10-26T00:00:00.000Z", "problemTypes": [ { "descriptions": [ { "lang": "en", - "description": "Missing Authorization", "cweId": "CWE-862", + "description": "CWE-862 Missing Authorization", "type": "CWE" } ] @@ -41,82 +35,107 @@ { "vendor": "frappe", "product": "hrms", - "defaultStatus": "unaffected", "versions": [ { - "version": "16.0.0", "status": "affected", - "versionType": "semver", - "lessThan": "16.20.1" + "version": "16.0.0", + "lessThan": "16.20.1", + "versionType": "semver" }, { - "version": "16.20.1", "status": "unaffected", + "version": "16.20.1", "versionType": "semver" } - ] + ], + "defaultStatus": "unaffected" } ], - "metrics": [ + "descriptions": [ { - "cvssV4_0": { - "Automatable": "NOT_DEFINED", - "Recovery": "NOT_DEFINED", - "Safety": "NOT_DEFINED", - "attackComplexity": "LOW", - "attackRequirements": "NONE", - "attackVector": "NETWORK", - "baseScore": 8.7, - "baseSeverity": "HIGH", - "exploitMaturity": "NOT_DEFINED", - "privilegesRequired": "LOW", - "providerUrgency": "NOT_DEFINED", - "subAvailabilityImpact": "NONE", - "subConfidentialityImpact": "NONE", - "subIntegrityImpact": "NONE", - "userInteraction": "NONE", - "valueDensity": "NOT_DEFINED", - "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", - "version": "4.0", - "vulnAvailabilityImpact": "HIGH", - "vulnConfidentialityImpact": "HIGH", - "vulnIntegrityImpact": "HIGH", - "vulnerabilityResponseEffort": "NOT_DEFINED" - }, - "format": "CVSS" - }, - { - "cvssV3_1": { - "attackComplexity": "LOW", - "attackVector": "NETWORK", - "availabilityImpact": "HIGH", - "baseScore": 8.8, - "baseSeverity": "HIGH", - "confidentialityImpact": "HIGH", - "integrityImpact": "HIGH", - "privilegesRequired": "LOW", - "scope": "UNCHANGED", - "userInteraction": "NONE", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", - "version": "3.1" - }, - "format": "CVSS" + "lang": "en", + "value": "Frappe HRMS from 16.0.0 before 16.20.1 contains a missing authorization vulnerability that allows authenticated users to read company details outside their permissions due to a missing permission check. Any logged-in user, including Employee role users, can query the affected endpoint to list every company on the site along with its default currency.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Frappe HRMS from 16.0.0 before 16.20.1 contains a missing authorization vulnerability that allows authenticated users to read company details outside their permissions due to a missing permission check. Any logged-in user, including Employee role users, can query the affected endpoint to list every company on the site along with its default currency.

" + } + ] } ], "references": [ { "url": "https://github.com/frappe/hrms/security/advisories/GHSA-v72r-rg45-x9rh", + "name": "GitHub Security Advisory (GHSA-v72r-rg45-x9rh)", "tags": [ "vendor-advisory" - ], - "name": "GitHub Security Advisory (GHSA-v72r-rg45-x9rh)" + ] }, { + "url": "https://www.vulncheck.com/advisories/frappe-hrms-16.0.0-before-16.20.1-missing-authorization-in-company-details-endpoint", "name": "VulnCheck Advisory: Frappe HRMS 16.0.0 before 16.20.1 Missing Authorization in Company Details Endpoint", "tags": [ "third-party-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } ], - "url": "https://www.vulncheck.com/advisories/frappe-hrms-16.0.0-before-16.20.1-missing-authorization-in-company-details-endpoint" + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 8.7, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" + } + }, + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } } ], "credits": [ @@ -131,8 +150,11 @@ "type": "remediation developer" } ], + "source": { + "discovery": "UNKNOWN" + }, "x_generator": { - "engine": "vulncheck-endgame" + "engine": "vulncheck-one-hundred-kay" } } } diff --git a/data/2026/128xxx/CVE-2026-128834.json b/data/2026/128xxx/CVE-2026-128834.json new file mode 100644 index 0000000000..7154fd8627 --- /dev/null +++ b/data/2026/128xxx/CVE-2026-128834.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-128834", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-13T08:40:03.311Z", + "datePublished": "2026-11-13T12:51:51.572Z", + "dateUpdated": "2026-11-13T12:52:52.166Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T12:52:52.166Z" + }, + "title": "WordPress Spectra plugin <= 2.20.5 - Broken Access Control vulnerability", + "datePublic": "2026-11-13T12:51:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from n/a through 2.20.5.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Spectra: from n/a through 2.20.5.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Brainstorm Force", + "product": "Spectra", + "packageName": "ultimate-addons-for-gutenberg", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "2.20.5", + "changes": [ + { + "at": "2.20.6", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/ultimate-addons-for-gutenberg/vulnerability/wordpress-spectra-plugin-2-20-5-broken-access-control-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Malvin Valerian Gultom | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-862", + "description": "Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-180", + "descriptions": [ + { + "lang": "en", + "value": "Exploiting Incorrectly Configured Access Control Security Levels" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Spectra plugin to the latest available version (at least 2.20.6).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Spectra plugin to the latest available version (at least 2.20.6)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/13xxx/CVE-2026-13732.json b/data/2026/13xxx/CVE-2026-13732.json index 5d62a9aa35..402e48b917 100644 --- a/data/2026/13xxx/CVE-2026-13732.json +++ b/data/2026/13xxx/CVE-2026-13732.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-06-29T14:42:33.339Z", "datePublished": "2026-08-31T19:23:18.741Z", - "dateUpdated": "2026-11-13T12:11:47.854Z" + "dateUpdated": "2026-11-13T12:22:59.561Z" }, "containers": { "cna": { @@ -324,6 +324,60 @@ "cpe:/a:redhat:hummingbird:1" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift AI 3.0", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhai/base-image-rocm-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1794259031", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift_ai:3.0::el9" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift AI 3.0", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhai/base-image-tpu-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1794259119", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift_ai:3.0::el9" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift AI 3.0", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhai/base-image-spyre-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1794259034", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift_ai:3.0::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat OpenShift AI 3.0", @@ -396,6 +450,24 @@ "cpe:/a:redhat:openshift_ai:3.4::el9" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift AI 3.4", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhai/base-image-gaudi-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1794259570", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift_ai:3.4::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat OpenShift AI 3.4", @@ -432,6 +504,42 @@ "cpe:/a:redhat:openshift_ai:3.4::el9" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift AI 3.4", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhai/base-image-spyre-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1794260191", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift_ai:3.4::el9" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift AI 3.4", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhai/base-image-cuda-13.0-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1794259182", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift_ai:3.4::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat OpenShift AI 3.4", @@ -486,6 +594,24 @@ "cpe:/a:redhat:openshift_ai:3.5::el9" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift AI 3.5", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhai/base-image-neuron-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1794259318", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift_ai:3.5::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat OpenShift AI 3.5", @@ -504,6 +630,24 @@ "cpe:/a:redhat:openshift_ai:3.5::el9" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift AI 3.5", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhai/base-image-rubin-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1794259862", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift_ai:3.5::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat OpenShift AI 3.5", @@ -558,6 +702,24 @@ "cpe:/a:redhat:openshift_ai:3.5::el9" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift AI 3.5", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhai/base-image-cuda-12.9-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1794259456", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift_ai:3.5::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat OpenShift AI 3.5", @@ -1033,7 +1195,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-13T12:11:47.854Z" + "dateUpdated": "2026-11-13T12:22:59.561Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/49xxx/CVE-2026-49329.json b/data/2026/49xxx/CVE-2026-49329.json index 8e13307795..256c565ba8 100644 --- a/data/2026/49xxx/CVE-2026-49329.json +++ b/data/2026/49xxx/CVE-2026-49329.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-05-29T13:24:26.096Z", "datePublished": "2026-09-01T15:30:57.749Z", - "dateUpdated": "2026-10-30T04:24:15.709Z" + "dateUpdated": "2026-11-13T13:13:15.481Z" }, "containers": { "cna": { @@ -48,6 +48,24 @@ } ], "affected": [ + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift Container Platform 4.13", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "openshift4/ose-oauth-server-rhel8", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793823075", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift:4.13::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.14", @@ -102,6 +120,24 @@ "cpe:/a:redhat:openshift:4.16::el9" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift Container Platform 4.17", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "openshift4/ose-oauth-server-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793907184", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift:4.17::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.18", @@ -268,6 +304,22 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:95746", + "name": "RHSA-2026:95746", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:96283", + "name": "RHSA-2026:96283", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-49329", "tags": [ @@ -325,7 +377,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-10-30T04:24:15.709Z" + "dateUpdated": "2026-11-13T13:13:15.481Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/63xxx/CVE-2026-63497.json b/data/2026/63xxx/CVE-2026-63497.json index d90a094417..3af8986f5c 100644 --- a/data/2026/63xxx/CVE-2026-63497.json +++ b/data/2026/63xxx/CVE-2026-63497.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-07-16T21:49:52.069Z", "datePublished": "2026-11-09T20:52:52.375Z", - "dateUpdated": "2026-11-09T20:52:52.375Z" + "dateUpdated": "2026-11-13T13:13:15.881Z" }, "containers": { "cna": { @@ -82,6 +82,48 @@ "advisory": "GHSA-cphv-qx83-x397", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/titraio/titra/security/advisories/GHSA-cphv-qx83-x397", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T13:12:50.857656Z", + "id": "CVE-2026-63497", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T13:13:15.881Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/70xxx/CVE-2026-70555.json b/data/2026/70xxx/CVE-2026-70555.json index 47cb27ac8a..e55edb1d12 100644 --- a/data/2026/70xxx/CVE-2026-70555.json +++ b/data/2026/70xxx/CVE-2026-70555.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-08-04T19:19:05.906Z", "datePublished": "2026-11-09T18:24:45.645Z", - "dateUpdated": "2026-11-09T18:24:45.645Z" + "dateUpdated": "2026-11-13T12:36:52.904Z" }, "containers": { "cna": { @@ -166,6 +166,40 @@ "x_generator": { "engine": "vulncheck" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T12:36:20.813880Z", + "id": "CVE-2026-70555", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T12:36:52.904Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/75xxx/CVE-2026-75888.json b/data/2026/75xxx/CVE-2026-75888.json index b4c6eca847..71c0f043a8 100644 --- a/data/2026/75xxx/CVE-2026-75888.json +++ b/data/2026/75xxx/CVE-2026-75888.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-08-18T13:44:59.078Z", "datePublished": "2026-10-12T16:36:04.006Z", - "dateUpdated": "2026-11-02T05:14:57.812Z" + "dateUpdated": "2026-11-13T13:13:24.487Z" }, "containers": { "cna": { @@ -66,6 +66,24 @@ "cpe:/a:redhat:openshift:4.12::el9" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift Container Platform 4.13", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "openshift4/ose-console", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793823578", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift:4.13::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.14", @@ -120,6 +138,24 @@ "cpe:/a:redhat:openshift:4.16::el9" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift Container Platform 4.17", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "openshift4/ose-console-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793877536", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift:4.17::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.18", @@ -294,6 +330,22 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:95746", + "name": "RHSA-2026:95746", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:96283", + "name": "RHSA-2026:96283", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-75888", "tags": [ @@ -345,7 +397,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-02T05:14:57.812Z" + "dateUpdated": "2026-11-13T13:13:24.487Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/83xxx/CVE-2026-83589.json b/data/2026/83xxx/CVE-2026-83589.json index 40ef2135e1..ab365db479 100644 --- a/data/2026/83xxx/CVE-2026-83589.json +++ b/data/2026/83xxx/CVE-2026-83589.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-08-31T19:18:43.003Z", "datePublished": "2026-10-01T09:17:43.584Z", - "dateUpdated": "2026-11-10T11:22:56.140Z" + "dateUpdated": "2026-11-13T13:13:31.185Z" }, "containers": { "cna": { @@ -66,6 +66,24 @@ "cpe:/a:redhat:openshift:4.12::el9" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift Container Platform 4.13", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "openshift4/ose-oauth-proxy", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793822494", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift:4.13::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.14", @@ -120,6 +138,24 @@ "cpe:/a:redhat:openshift:4.16::el9" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat OpenShift Container Platform 4.17", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "openshift4/ose-oauth-proxy-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793876755", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:openshift:4.17::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.18", @@ -294,6 +330,22 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:95746", + "name": "RHSA-2026:95746", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:96283", + "name": "RHSA-2026:96283", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-83589", "tags": [ @@ -345,7 +397,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-10T11:22:56.140Z" + "dateUpdated": "2026-11-13T13:13:31.185Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/84xxx/CVE-2026-84503.json b/data/2026/84xxx/CVE-2026-84503.json index 2b5b6911e1..d6c8bb6679 100644 --- a/data/2026/84xxx/CVE-2026-84503.json +++ b/data/2026/84xxx/CVE-2026-84503.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-09-01T21:05:02.720Z", "datePublished": "2026-11-09T17:57:01.391Z", - "dateUpdated": "2026-11-13T00:17:38.504Z" + "dateUpdated": "2026-11-13T12:30:51.118Z" }, "containers": { "cna": { @@ -928,6 +928,40 @@ "x_generator": { "engine": "cvelib 1.8.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T12:30:14.416545Z", + "id": "CVE-2026-84503", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T12:30:51.118Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/86xxx/CVE-2026-86355.json b/data/2026/86xxx/CVE-2026-86355.json new file mode 100644 index 0000000000..e210ee2b72 --- /dev/null +++ b/data/2026/86xxx/CVE-2026-86355.json @@ -0,0 +1,284 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-86355", + "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "state": "PUBLISHED", + "assignerShortName": "dell", + "dateReserved": "2026-09-07T10:04:28.180Z", + "datePublished": "2026-11-13T12:31:37.762Z", + "dateUpdated": "2026-11-13T12:31:37.762Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "shortName": "dell", + "dateUpdated": "2026-11-13T12:31:37.762Z" + }, + "datePublic": "2026-10-30T06:30:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-73", + "description": "CWE-73: External Control of File Name or Path", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Dell", + "product": "PowerStore 500T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or late", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 7000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or late", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Dell PowerStore contains an External Control of File Name or Path vulnerability. A remote authenticated attacker could exploit this vulnerability, potentially leading to privilege escalation on the appliance.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Dell PowerStore contains an External Control of File Name or Path vulnerability. A remote authenticated attacker could exploit this vulnerability, potentially leading to privilege escalation on the appliance." + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "LOW", + "baseSeverity": "HIGH", + "baseScore": 8.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/86xxx/CVE-2026-86356.json b/data/2026/86xxx/CVE-2026-86356.json new file mode 100644 index 0000000000..8e7d314c81 --- /dev/null +++ b/data/2026/86xxx/CVE-2026-86356.json @@ -0,0 +1,284 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-86356", + "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "state": "PUBLISHED", + "assignerShortName": "dell", + "dateReserved": "2026-09-07T10:04:28.181Z", + "datePublished": "2026-11-13T12:20:53.059Z", + "dateUpdated": "2026-11-13T12:59:08.905Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "shortName": "dell", + "dateUpdated": "2026-11-13T12:59:08.905Z" + }, + "datePublic": "2026-10-30T06:30:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-863", + "description": "CWE-863: Incorrect Authorization", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Dell", + "product": "PowerStore 500T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 7000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Dell PowerStore contains an authorization-bypass vulnerability that could lead to elevation of privilege to administrator.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Dell PowerStore contains an authorization-bypass vulnerability that could lead to elevation of privilege to administrator." + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/92xxx/CVE-2026-92615.json b/data/2026/92xxx/CVE-2026-92615.json index e9e340b142..222364e17c 100644 --- a/data/2026/92xxx/CVE-2026-92615.json +++ b/data/2026/92xxx/CVE-2026-92615.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-09-16T14:27:41.693Z", "datePublished": "2026-09-16T15:20:50.013Z", - "dateUpdated": "2026-11-04T05:43:56.297Z" + "dateUpdated": "2026-11-13T12:27:57.394Z" }, "containers": { "cna": { @@ -122,6 +122,78 @@ "cpe:/a:redhat:edge_manager:1.2::el9" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Edge Manager 1.3", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhem/flightctl-periodic-rhel10", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793975984", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:edge_manager:1.3::el10" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Edge Manager 1.3", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhem/flightctl-worker-rhel10", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793976378", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:edge_manager:1.3::el10" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Edge Manager 1.3", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhem/flightctl-periodic-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793976255", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:edge_manager:1.3::el9" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Edge Manager 1.3", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhem/flightctl-worker-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1793976043", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:edge_manager:1.3::el9" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", @@ -158,6 +230,22 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:96291", + "name": "RHSA-2026:96291", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:96293", + "name": "RHSA-2026:96293", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-92615", "tags": [ @@ -209,7 +297,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-04T05:43:56.297Z" + "dateUpdated": "2026-11-13T12:27:57.394Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/95xxx/CVE-2026-95518.json b/data/2026/95xxx/CVE-2026-95518.json new file mode 100644 index 0000000000..23cd478a81 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95518.json @@ -0,0 +1,125 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95518", + "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", + "state": "PUBLISHED", + "assignerShortName": "TR-CERT", + "dateReserved": "2026-09-22T08:35:44.823Z", + "datePublished": "2026-11-13T12:54:44.462Z", + "dateUpdated": "2026-11-13T12:54:44.462Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", + "shortName": "TR-CERT", + "dateUpdated": "2026-11-13T12:54:44.462Z" + }, + "title": "TOCTOU Race Condition in TÜBİTAK BİLGEM's Pardus Package Installer", + "datePublic": "2026-11-13T12:49:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-367", + "description": "CWE-367 Time-of-check time-of-use (TOCTOU) race condition", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-29", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions" + } + ] + } + ], + "affected": [ + { + "vendor": "TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü", + "product": "Pardus Package Installer", + "versions": [ + { + "status": "affected", + "version": "0.7.0", + "lessThan": "0.7.1", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Time-of-check time-of-use (TOCTOU) race condition vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü Pardus Package Installer allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions.\n\nThis issue affects Pardus Package Installer: from 0.7.0 before 0.7.1.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Time-of-check time-of-use (TOCTOU) race condition vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü Pardus Package Installer allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions.

This issue affects Pardus Package Installer: from 0.7.0 before 0.7.1.

" + } + ] + } + ], + "references": [ + { + "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1539", + "tags": [ + "government-resource" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Özcan Ersan", + "type": "finder" + } + ], + "source": { + "defect": [ + "TR-26-1539" + ], + "advisory": "TR-26-1539", + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/delta.json b/data/delta.json index 95d21625d5..08a9d436da 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,31 +1,128 @@ { - "fetchTime": "2026-11-13T12:19:36.692Z", - "numberOfChanges": 4, - "new": [], + "fetchTime": "2026-11-13T13:13:46.303Z", + "numberOfChanges": 20, + "new": [ + { + "cveId": "CVE-2026-105880", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105880", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105880.json", + "dateUpdated": "2026-11-13T13:04:40.595Z" + }, + { + "cveId": "CVE-2026-107525", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107525", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107525.json", + "dateUpdated": "2026-11-13T13:08:18.837Z" + }, + { + "cveId": "CVE-2026-112830", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112830", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112830.json", + "dateUpdated": "2026-11-13T13:05:15.375Z" + }, + { + "cveId": "CVE-2026-119518", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119518", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119518.json", + "dateUpdated": "2026-11-13T13:04:21.225Z" + }, + { + "cveId": "CVE-2026-125801", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125801", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125801.json", + "dateUpdated": "2026-11-13T13:05:33.407Z" + }, + { + "cveId": "CVE-2026-125816", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125816", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125816.json", + "dateUpdated": "2026-11-13T13:04:43.817Z" + } + ], "updated": [ { - "cveId": "CVE-2026-114406", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114406", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114406.json", - "dateUpdated": "2026-11-13T12:11:21.329Z" + "cveId": "CVE-2025-13327", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-13327", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/13xxx/CVE-2025-13327.json", + "dateUpdated": "2026-11-13T13:03:37.676Z" }, { - "cveId": "CVE-2026-119743", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119743", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119743.json", - "dateUpdated": "2026-11-13T12:07:25.919Z" + "cveId": "CVE-2026-114690", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114690", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114690.json", + "dateUpdated": "2026-11-13T13:07:49.006Z" }, { - "cveId": "CVE-2026-124625", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124625", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124625.json", - "dateUpdated": "2026-11-13T12:08:16.709Z" + "cveId": "CVE-2026-114691", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114691", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114691.json", + "dateUpdated": "2026-11-13T13:07:50.251Z" }, { - "cveId": "CVE-2026-13732", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-13732", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13732.json", - "dateUpdated": "2026-11-13T12:11:47.854Z" + "cveId": "CVE-2026-122056", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122056", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122056.json", + "dateUpdated": "2026-11-13T13:11:15.067Z" + }, + { + "cveId": "CVE-2026-123806", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123806", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123806.json", + "dateUpdated": "2026-11-13T13:09:54.700Z" + }, + { + "cveId": "CVE-2026-124987", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124987", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124987.json", + "dateUpdated": "2026-11-13T13:08:28.986Z" + }, + { + "cveId": "CVE-2026-125250", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125250", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125250.json", + "dateUpdated": "2026-11-13T13:03:18.783Z" + }, + { + "cveId": "CVE-2026-125262", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125262", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125262.json", + "dateUpdated": "2026-11-13T13:04:17.272Z" + }, + { + "cveId": "CVE-2026-125266", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125266", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125266.json", + "dateUpdated": "2026-11-13T13:05:41.464Z" + }, + { + "cveId": "CVE-2026-125270", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125270", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125270.json", + "dateUpdated": "2026-11-13T13:06:56.300Z" + }, + { + "cveId": "CVE-2026-49329", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-49329", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/49xxx/CVE-2026-49329.json", + "dateUpdated": "2026-11-13T13:13:15.481Z" + }, + { + "cveId": "CVE-2026-63497", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63497", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63497.json", + "dateUpdated": "2026-11-13T13:13:15.881Z" + }, + { + "cveId": "CVE-2026-75888", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-75888", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75888.json", + "dateUpdated": "2026-11-13T13:13:24.487Z" + }, + { + "cveId": "CVE-2026-83589", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-83589", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/83xxx/CVE-2026-83589.json", + "dateUpdated": "2026-11-13T13:13:31.185Z" } ], "error": [] diff --git a/data/deltaLog.json b/data/deltaLog.json index afab0df49d..491a3d23cf 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,461 @@ [ + { + "fetchTime": "2026-11-13T13:13:46.303Z", + "numberOfChanges": 20, + "new": [ + { + "cveId": "CVE-2026-105880", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105880", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105880.json", + "dateUpdated": "2026-11-13T13:04:40.595Z" + }, + { + "cveId": "CVE-2026-107525", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107525", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107525.json", + "dateUpdated": "2026-11-13T13:08:18.837Z" + }, + { + "cveId": "CVE-2026-112830", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112830", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112830.json", + "dateUpdated": "2026-11-13T13:05:15.375Z" + }, + { + "cveId": "CVE-2026-119518", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119518", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119518.json", + "dateUpdated": "2026-11-13T13:04:21.225Z" + }, + { + "cveId": "CVE-2026-125801", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125801", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125801.json", + "dateUpdated": "2026-11-13T13:05:33.407Z" + }, + { + "cveId": "CVE-2026-125816", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125816", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125816.json", + "dateUpdated": "2026-11-13T13:04:43.817Z" + } + ], + "updated": [ + { + "cveId": "CVE-2025-13327", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-13327", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/13xxx/CVE-2025-13327.json", + "dateUpdated": "2026-11-13T13:03:37.676Z" + }, + { + "cveId": "CVE-2026-114690", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114690", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114690.json", + "dateUpdated": "2026-11-13T13:07:49.006Z" + }, + { + "cveId": "CVE-2026-114691", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114691", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114691.json", + "dateUpdated": "2026-11-13T13:07:50.251Z" + }, + { + "cveId": "CVE-2026-122056", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122056", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122056.json", + "dateUpdated": "2026-11-13T13:11:15.067Z" + }, + { + "cveId": "CVE-2026-123806", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123806", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123806.json", + "dateUpdated": "2026-11-13T13:09:54.700Z" + }, + { + "cveId": "CVE-2026-124987", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124987", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124987.json", + "dateUpdated": "2026-11-13T13:08:28.986Z" + }, + { + "cveId": "CVE-2026-125250", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125250", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125250.json", + "dateUpdated": "2026-11-13T13:03:18.783Z" + }, + { + "cveId": "CVE-2026-125262", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125262", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125262.json", + "dateUpdated": "2026-11-13T13:04:17.272Z" + }, + { + "cveId": "CVE-2026-125266", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125266", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125266.json", + "dateUpdated": "2026-11-13T13:05:41.464Z" + }, + { + "cveId": "CVE-2026-125270", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125270", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125270.json", + "dateUpdated": "2026-11-13T13:06:56.300Z" + }, + { + "cveId": "CVE-2026-49329", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-49329", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/49xxx/CVE-2026-49329.json", + "dateUpdated": "2026-11-13T13:13:15.481Z" + }, + { + "cveId": "CVE-2026-63497", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63497", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63497.json", + "dateUpdated": "2026-11-13T13:13:15.881Z" + }, + { + "cveId": "CVE-2026-75888", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-75888", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75888.json", + "dateUpdated": "2026-11-13T13:13:24.487Z" + }, + { + "cveId": "CVE-2026-83589", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-83589", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/83xxx/CVE-2026-83589.json", + "dateUpdated": "2026-11-13T13:13:31.185Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T13:01:59.279Z", + "numberOfChanges": 8, + "new": [ + { + "cveId": "CVE-2025-41725", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-41725", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/41xxx/CVE-2025-41725.json", + "dateUpdated": "2026-11-13T12:59:24.549Z" + }, + { + "cveId": "CVE-2026-121721", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121721", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121721.json", + "dateUpdated": "2026-11-13T13:01:26.322Z" + }, + { + "cveId": "CVE-2026-125814", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125814", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125814.json", + "dateUpdated": "2026-11-13T12:59:27.837Z" + }, + { + "cveId": "CVE-2026-125833", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125833", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125833.json", + "dateUpdated": "2026-11-13T12:57:11.726Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-125210", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125210", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125210.json", + "dateUpdated": "2026-11-13T12:57:01.428Z" + }, + { + "cveId": "CVE-2026-125218", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125218", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125218.json", + "dateUpdated": "2026-11-13T12:58:34.472Z" + }, + { + "cveId": "CVE-2026-125222", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125222", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125222.json", + "dateUpdated": "2026-11-13T13:00:30.446Z" + }, + { + "cveId": "CVE-2026-86356", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-86356", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86356.json", + "dateUpdated": "2026-11-13T12:59:08.905Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T12:56:01.598Z", + "numberOfChanges": 8, + "new": [ + { + "cveId": "CVE-2026-107526", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107526", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107526.json", + "dateUpdated": "2026-11-13T12:50:39.786Z" + }, + { + "cveId": "CVE-2026-121771", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121771", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121771.json", + "dateUpdated": "2026-11-13T12:51:57.678Z" + }, + { + "cveId": "CVE-2026-125815", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125815", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125815.json", + "dateUpdated": "2026-11-13T12:51:11.675Z" + }, + { + "cveId": "CVE-2026-128834", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128834", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128834.json", + "dateUpdated": "2026-11-13T12:52:52.166Z" + }, + { + "cveId": "CVE-2026-95518", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95518", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95518.json", + "dateUpdated": "2026-11-13T12:54:44.462Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-125198", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125198", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125198.json", + "dateUpdated": "2026-11-13T12:50:17.888Z" + }, + { + "cveId": "CVE-2026-125202", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125202", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125202.json", + "dateUpdated": "2026-11-13T12:51:26.300Z" + }, + { + "cveId": "CVE-2026-125206", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125206", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125206.json", + "dateUpdated": "2026-11-13T12:53:52.593Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T12:49:59.576Z", + "numberOfChanges": 6, + "new": [], + "updated": [ + { + "cveId": "CVE-2026-107174", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107174", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107174.json", + "dateUpdated": "2026-11-13T12:46:13.745Z" + }, + { + "cveId": "CVE-2026-125101", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125101", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125101.json", + "dateUpdated": "2026-11-13T12:44:03.612Z" + }, + { + "cveId": "CVE-2026-125170", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125170", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125170.json", + "dateUpdated": "2026-11-13T12:44:56.916Z" + }, + { + "cveId": "CVE-2026-125178", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125178", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125178.json", + "dateUpdated": "2026-11-13T12:46:47.404Z" + }, + { + "cveId": "CVE-2026-125182", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125182", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125182.json", + "dateUpdated": "2026-11-13T12:48:34.942Z" + }, + { + "cveId": "CVE-2026-125190", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125190", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125190.json", + "dateUpdated": "2026-11-13T12:49:25.088Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T12:44:03.525Z", + "numberOfChanges": 9, + "new": [], + "updated": [ + { + "cveId": "CVE-2026-112317", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112317", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112317.json", + "dateUpdated": "2026-11-13T12:37:41.981Z" + }, + { + "cveId": "CVE-2026-112319", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112319", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112319.json", + "dateUpdated": "2026-11-13T12:37:44.885Z" + }, + { + "cveId": "CVE-2026-112320", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112320", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112320.json", + "dateUpdated": "2026-11-13T12:37:47.748Z" + }, + { + "cveId": "CVE-2026-112321", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112321", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112321.json", + "dateUpdated": "2026-11-13T12:37:49.703Z" + }, + { + "cveId": "CVE-2026-112322", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112322", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112322.json", + "dateUpdated": "2026-11-13T12:37:51.566Z" + }, + { + "cveId": "CVE-2026-112323", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112323", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112323.json", + "dateUpdated": "2026-11-13T12:37:50.260Z" + }, + { + "cveId": "CVE-2026-119079", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119079", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119079.json", + "dateUpdated": "2026-11-13T12:38:56.963Z" + }, + { + "cveId": "CVE-2026-125097", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125097", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125097.json", + "dateUpdated": "2026-11-13T12:42:11.540Z" + }, + { + "cveId": "CVE-2026-126317", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126317", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126317.json", + "dateUpdated": "2026-11-13T12:41:16.348Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T12:37:41.806Z", + "numberOfChanges": 9, + "new": [ + { + "cveId": "CVE-2026-86355", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-86355", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86355.json", + "dateUpdated": "2026-11-13T12:31:37.762Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-10609", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-10609", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/10xxx/CVE-2026-10609.json", + "dateUpdated": "2026-11-13T12:37:12.286Z" + }, + { + "cveId": "CVE-2026-112315", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112315", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112315.json", + "dateUpdated": "2026-11-13T12:37:36.409Z" + }, + { + "cveId": "CVE-2026-112316", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112316", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112316.json", + "dateUpdated": "2026-11-13T12:37:38.733Z" + }, + { + "cveId": "CVE-2026-112318", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112318", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112318.json", + "dateUpdated": "2026-11-13T12:37:39.525Z" + }, + { + "cveId": "CVE-2026-123798", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123798", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123798.json", + "dateUpdated": "2026-11-13T12:32:19.420Z" + }, + { + "cveId": "CVE-2026-123802", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123802", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123802.json", + "dateUpdated": "2026-11-13T12:35:15.061Z" + }, + { + "cveId": "CVE-2026-70555", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-70555", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/70xxx/CVE-2026-70555.json", + "dateUpdated": "2026-11-13T12:36:52.904Z" + }, + { + "cveId": "CVE-2026-84503", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84503", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84503.json", + "dateUpdated": "2026-11-13T12:30:51.118Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T12:30:06.470Z", + "numberOfChanges": 6, + "new": [ + { + "cveId": "CVE-2026-86356", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-86356", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/86xxx/CVE-2026-86356.json", + "dateUpdated": "2026-11-13T12:20:53.059Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-114406", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114406", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114406.json", + "dateUpdated": "2026-11-13T12:22:07.495Z" + }, + { + "cveId": "CVE-2026-123368", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123368", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123368.json", + "dateUpdated": "2026-11-13T12:26:26.248Z" + }, + { + "cveId": "CVE-2026-123372", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123372", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123372.json", + "dateUpdated": "2026-11-13T12:29:34.320Z" + }, + { + "cveId": "CVE-2026-13732", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-13732", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13732.json", + "dateUpdated": "2026-11-13T12:22:59.561Z" + }, + { + "cveId": "CVE-2026-92615", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92615", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92615.json", + "dateUpdated": "2026-11-13T12:27:57.394Z" + } + ], + "error": [] + }, { "fetchTime": "2026-11-13T12:19:36.692Z", "numberOfChanges": 4, @@ -807733,455 +808190,5 @@ } ], "error": [] - }, - { - "fetchTime": "2026-10-14T13:10:20.481Z", - "numberOfChanges": 8, - "new": [ - { - "cveId": "CVE-2026-107417", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107417", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107417.json", - "dateUpdated": "2026-10-14T13:00:15.564Z" - }, - { - "cveId": "CVE-2026-107426", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107426", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107426.json", - "dateUpdated": "2026-10-14T13:00:15.455Z" - } - ], - "updated": [ - { - "cveId": "CVE-2022-2097", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-2097", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2097.json", - "dateUpdated": "2026-10-14T13:07:00.762Z" - }, - { - "cveId": "CVE-2022-2153", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-2153", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2153.json", - "dateUpdated": "2026-10-14T13:07:01.983Z" - }, - { - "cveId": "CVE-2022-2274", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-2274", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2274.json", - "dateUpdated": "2026-10-14T13:07:03.764Z" - }, - { - "cveId": "CVE-2022-2327", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-2327", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2327.json", - "dateUpdated": "2026-10-14T13:07:04.948Z" - }, - { - "cveId": "CVE-2022-2503", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-2503", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2503.json", - "dateUpdated": "2026-10-14T13:07:06.101Z" - }, - { - "cveId": "CVE-2022-2509", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-2509", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2509.json", - "dateUpdated": "2026-10-14T13:07:07.646Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T12:58:26.549Z", - "numberOfChanges": 11, - "new": [ - { - "cveId": "CVE-2026-109968", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109968", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109968.json", - "dateUpdated": "2026-10-14T12:50:33.873Z" - }, - { - "cveId": "CVE-2026-16740", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16740", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16740.json", - "dateUpdated": "2026-10-14T12:50:50.848Z" - } - ], - "updated": [ - { - "cveId": "CVE-2022-1473", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-1473", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/1xxx/CVE-2022-1473.json", - "dateUpdated": "2026-10-14T12:48:33.841Z" - }, - { - "cveId": "CVE-2022-1679", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-1679", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/1xxx/CVE-2022-1679.json", - "dateUpdated": "2026-10-14T12:48:35.070Z" - }, - { - "cveId": "CVE-2022-1852", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-1852", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/1xxx/CVE-2022-1852.json", - "dateUpdated": "2026-10-14T12:48:36.240Z" - }, - { - "cveId": "CVE-2022-1882", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-1882", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/1xxx/CVE-2022-1882.json", - "dateUpdated": "2026-10-14T12:53:06.030Z" - }, - { - "cveId": "CVE-2022-2068", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-2068", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2068.json", - "dateUpdated": "2026-10-14T12:57:37.880Z" - }, - { - "cveId": "CVE-2022-2078", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-2078", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2078.json", - "dateUpdated": "2026-10-14T12:57:39.248Z" - }, - { - "cveId": "CVE-2026-108940", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108940", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108940.json", - "dateUpdated": "2026-10-14T12:47:29.916Z" - }, - { - "cveId": "CVE-2026-16741", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16741", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16741.json", - "dateUpdated": "2026-10-14T12:53:57.251Z" - }, - { - "cveId": "CVE-2026-37107", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-37107", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/37xxx/CVE-2026-37107.json", - "dateUpdated": "2026-10-14T12:55:08.230Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T12:47:24.661Z", - "numberOfChanges": 14, - "new": [ - { - "cveId": "CVE-2026-16741", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16741", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16741.json", - "dateUpdated": "2026-10-14T12:42:25.647Z" - }, - { - "cveId": "CVE-2026-82026", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82026", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82026.json", - "dateUpdated": "2026-10-14T12:37:18.610Z" - } - ], - "updated": [ - { - "cveId": "CVE-2022-1292", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-1292", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/1xxx/CVE-2022-1292.json", - "dateUpdated": "2026-10-14T12:34:52.675Z" - }, - { - "cveId": "CVE-2022-1304", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-1304", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/1xxx/CVE-2022-1304.json", - "dateUpdated": "2026-10-14T12:39:25.374Z" - }, - { - "cveId": "CVE-2022-1343", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-1343", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/1xxx/CVE-2022-1343.json", - "dateUpdated": "2026-10-14T12:43:58.077Z" - }, - { - "cveId": "CVE-2022-1434", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-1434", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/1xxx/CVE-2022-1434.json", - "dateUpdated": "2026-10-14T12:43:59.638Z" - }, - { - "cveId": "CVE-2022-1462", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-1462", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/1xxx/CVE-2022-1462.json", - "dateUpdated": "2026-10-14T12:44:00.781Z" - }, - { - "cveId": "CVE-2026-106366", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106366", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106366.json", - "dateUpdated": "2026-10-14T12:37:10.446Z" - }, - { - "cveId": "CVE-2026-108936", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108936", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108936.json", - "dateUpdated": "2026-10-14T12:43:57.632Z" - }, - { - "cveId": "CVE-2026-109647", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109647", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109647.json", - "dateUpdated": "2026-10-14T12:28:45.233Z" - }, - { - "cveId": "CVE-2026-109652", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109652", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109652.json", - "dateUpdated": "2026-10-14T12:34:25.896Z" - }, - { - "cveId": "CVE-2026-109657", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109657", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109657.json", - "dateUpdated": "2026-10-14T12:36:34.692Z" - }, - { - "cveId": "CVE-2026-109662", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109662", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109662.json", - "dateUpdated": "2026-10-14T12:37:39.019Z" - }, - { - "cveId": "CVE-2026-109667", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109667", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109667.json", - "dateUpdated": "2026-10-14T12:41:30.868Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T12:28:38.116Z", - "numberOfChanges": 36, - "new": [ - { - "cveId": "CVE-2026-105874", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105874", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105874.json", - "dateUpdated": "2026-10-14T12:08:27.142Z" - }, - { - "cveId": "CVE-2026-106599", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106599", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106599.json", - "dateUpdated": "2026-10-14T12:08:27.048Z" - }, - { - "cveId": "CVE-2026-107421", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107421", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107421.json", - "dateUpdated": "2026-10-14T12:08:27.906Z" - }, - { - "cveId": "CVE-2026-107422", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107422", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107422.json", - "dateUpdated": "2026-10-14T12:08:27.530Z" - }, - { - "cveId": "CVE-2026-107424", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107424", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107424.json", - "dateUpdated": "2026-10-14T12:08:27.612Z" - }, - { - "cveId": "CVE-2026-107425", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107425", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107425.json", - "dateUpdated": "2026-10-14T12:08:28.323Z" - }, - { - "cveId": "CVE-2026-107433", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107433", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107433.json", - "dateUpdated": "2026-10-14T12:08:26.612Z" - }, - { - "cveId": "CVE-2026-107867", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107867", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107867.json", - "dateUpdated": "2026-10-14T12:08:28.020Z" - }, - { - "cveId": "CVE-2026-108291", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108291", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108291.json", - "dateUpdated": "2026-10-14T12:08:28.433Z" - }, - { - "cveId": "CVE-2026-97278", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97278", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97278.json", - "dateUpdated": "2026-10-14T12:08:26.651Z" - } - ], - "updated": [ - { - "cveId": "CVE-2021-45960", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2021-45960", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/45xxx/CVE-2021-45960.json", - "dateUpdated": "2026-10-14T12:03:11.369Z" - }, - { - "cveId": "CVE-2021-46143", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2021-46143", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/46xxx/CVE-2021-46143.json", - "dateUpdated": "2026-10-14T12:07:44.909Z" - }, - { - "cveId": "CVE-2021-46195", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2021-46195", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/46xxx/CVE-2021-46195.json", - "dateUpdated": "2026-10-14T12:07:46.481Z" - }, - { - "cveId": "CVE-2021-46828", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2021-46828", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/46xxx/CVE-2021-46828.json", - "dateUpdated": "2026-10-14T12:12:14.520Z" - }, - { - "cveId": "CVE-2021-46848", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2021-46848", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/46xxx/CVE-2021-46848.json", - "dateUpdated": "2026-10-14T12:12:15.924Z" - }, - { - "cveId": "CVE-2021-47002", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2021-47002", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/47xxx/CVE-2021-47002.json", - "dateUpdated": "2026-10-14T12:12:17.126Z" - }, - { - "cveId": "CVE-2021-47107", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2021-47107", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/47xxx/CVE-2021-47107.json", - "dateUpdated": "2026-10-14T12:12:18.480Z" - }, - { - "cveId": "CVE-2021-47316", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2021-47316", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/47xxx/CVE-2021-47316.json", - "dateUpdated": "2026-10-14T12:12:28.202Z" - }, - { - "cveId": "CVE-2022-0171", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-0171", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0171.json", - "dateUpdated": "2026-10-14T12:12:29.379Z" - }, - { - "cveId": "CVE-2022-0391", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-0391", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0391.json", - "dateUpdated": "2026-10-14T12:12:30.872Z" - }, - { - "cveId": "CVE-2022-0563", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-0563", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0563.json", - "dateUpdated": "2026-10-14T12:12:32.435Z" - }, - { - "cveId": "CVE-2022-0778", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-0778", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/0xxx/CVE-2022-0778.json", - "dateUpdated": "2026-10-14T12:12:36.346Z" - }, - { - "cveId": "CVE-2022-1012", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-1012", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/1xxx/CVE-2022-1012.json", - "dateUpdated": "2026-10-14T12:16:58.216Z" - }, - { - "cveId": "CVE-2022-1015", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-1015", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/1xxx/CVE-2022-1015.json", - "dateUpdated": "2026-10-14T12:25:48.859Z" - }, - { - "cveId": "CVE-2022-1184", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-1184", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/1xxx/CVE-2022-1184.json", - "dateUpdated": "2026-10-14T12:25:50.020Z" - }, - { - "cveId": "CVE-2022-1271", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-1271", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/1xxx/CVE-2022-1271.json", - "dateUpdated": "2026-10-14T12:25:51.618Z" - }, - { - "cveId": "CVE-2025-71432", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-71432", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/71xxx/CVE-2025-71432.json", - "dateUpdated": "2026-10-14T12:02:32.981Z" - }, - { - "cveId": "CVE-2026-109596", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109596", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109596.json", - "dateUpdated": "2026-10-14T12:07:23.109Z" - }, - { - "cveId": "CVE-2026-109601", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109601", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109601.json", - "dateUpdated": "2026-10-14T12:09:15.734Z" - }, - { - "cveId": "CVE-2026-109609", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109609", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109609.json", - "dateUpdated": "2026-10-14T12:09:51.248Z" - }, - { - "cveId": "CVE-2026-109622", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109622", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109622.json", - "dateUpdated": "2026-10-14T12:10:49.163Z" - }, - { - "cveId": "CVE-2026-109627", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109627", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109627.json", - "dateUpdated": "2026-10-14T12:17:17.002Z" - }, - { - "cveId": "CVE-2026-109632", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109632", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109632.json", - "dateUpdated": "2026-10-14T12:19:21.264Z" - }, - { - "cveId": "CVE-2026-109637", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109637", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109637.json", - "dateUpdated": "2026-10-14T12:22:52.648Z" - }, - { - "cveId": "CVE-2026-109642", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109642", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109642.json", - "dateUpdated": "2026-10-14T12:25:51.676Z" - }, - { - "cveId": "CVE-2026-62040", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62040", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62040.json", - "dateUpdated": "2026-10-14T12:23:44.503Z" - } - ], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index 962d163e05..91cacace3e 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "ad05fba55c96523af92e800fbb4d073074d23bbe", + "upstream_commit": "5697f0202b86659fbe59c05044ddd8f17377f553", "since_year": 2017, - "records": 332216, - "synced_at_utc": "2026-11-13T12:33:38.584005+00:00" + "records": 332233, + "synced_at_utc": "2026-11-13T13:26:10.443113+00:00" }