CVE sync 2026-11-12T12:33:34Z
This commit is contained in:
Vulnerability Bot committed
1 parent
249bc4cebe
commit
56ee118869
43 files changed
+3106
-441
No files matched your search
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.1",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2022-4329",
|
||||
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
|
||||
@@ -8,16 +8,16 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2022-12-07T10:27:27.756Z",
|
||||
"datePublished": "2023-01-02T21:49:38.479Z",
|
||||
"dateUpdated": "2025-04-10T17:56:43.192Z"
|
||||
"dateUpdated": "2026-11-12T11:52:48.759Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
|
||||
"shortName": "WPScan",
|
||||
"dateUpdated": "2023-01-10T09:09:04.462Z"
|
||||
"dateUpdated": "2026-11-12T11:52:48.759Z"
|
||||
},
|
||||
"title": "Product list Widget for Woocommerce <= 1.0 - Reflected XSS",
|
||||
"title": "Product list Widget for Woocommerce < 3.4.0 - Reflected XSS",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
@@ -38,17 +38,17 @@
|
||||
"status": "affected",
|
||||
"versionType": "custom",
|
||||
"version": "0",
|
||||
"lessThanOrEqual": "1.0"
|
||||
"lessThan": "3.4.0"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "affected",
|
||||
"defaultStatus": "unaffected",
|
||||
"collectionURL": "https://wordpress.org/plugins"
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The Product list Widget for Woocommerce WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against both unauthenticated and authenticated users (such as high privilege one like admin)."
|
||||
"value": "The Product list Widget for Woocommerce WordPress plugin before 3.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against both unauthenticated and authenticated users (such as high privilege one like admin)."
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-10-06T13:14:08.045Z",
|
||||
"datePublished": "2026-11-12T06:00:06.145Z",
|
||||
"dateUpdated": "2026-11-12T06:00:06.145Z"
|
||||
"dateUpdated": "2026-11-12T11:25:14.471Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -78,6 +78,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-862",
|
||||
"lang": "en",
|
||||
"description": "CWE-862 Missing Authorization"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 5.3,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
|
||||
"integrityImpact": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "NONE"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:19:44.825483Z",
|
||||
"id": "CVE-2026-106027",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:25:14.471Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-10-13T15:40:27.661Z",
|
||||
"datePublished": "2026-11-12T06:00:06.327Z",
|
||||
"dateUpdated": "2026-11-12T06:00:06.327Z"
|
||||
"dateUpdated": "2026-11-12T11:24:59.980Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -78,6 +78,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-639",
|
||||
"lang": "en",
|
||||
"description": "CWE-639 Authorization Bypass Through User-Controlled Key"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 3.8,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "LOW",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
|
||||
"integrityImpact": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"confidentialityImpact": "LOW"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:19:33.722954Z",
|
||||
"id": "CVE-2026-110041",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:24:59.980Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-10-13T15:54:22.141Z",
|
||||
"datePublished": "2026-11-12T06:00:06.497Z",
|
||||
"dateUpdated": "2026-11-12T06:00:06.497Z"
|
||||
"dateUpdated": "2026-11-12T11:24:45.544Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -78,6 +78,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-79",
|
||||
"lang": "en",
|
||||
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 6.8,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "REQUIRED",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:19:24.076204Z",
|
||||
"id": "CVE-2026-110072",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:24:45.544Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-10-15T09:31:25.187Z",
|
||||
"datePublished": "2026-11-12T06:00:06.674Z",
|
||||
"dateUpdated": "2026-11-12T06:00:06.674Z"
|
||||
"dateUpdated": "2026-11-12T11:24:31.088Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -78,6 +78,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-287",
|
||||
"lang": "en",
|
||||
"description": "CWE-287 Improper Authentication"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 9.8,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "CRITICAL",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:19:14.827348Z",
|
||||
"id": "CVE-2026-110959",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:24:31.088Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-10-28T04:42:38.158Z",
|
||||
"datePublished": "2026-11-12T06:00:06.857Z",
|
||||
"dateUpdated": "2026-11-12T06:00:06.857Z"
|
||||
"dateUpdated": "2026-11-12T11:24:16.612Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -78,6 +78,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-89",
|
||||
"lang": "en",
|
||||
"description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "CHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 6.8,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
|
||||
"integrityImpact": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:19:04.028123Z",
|
||||
"id": "CVE-2026-118421",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:24:16.612Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-10-28T15:32:14.950Z",
|
||||
"datePublished": "2026-11-12T06:00:07.049Z",
|
||||
"dateUpdated": "2026-11-12T06:00:07.049Z"
|
||||
"dateUpdated": "2026-11-12T11:24:02.133Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -78,6 +78,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-863",
|
||||
"lang": "en",
|
||||
"description": "CWE-863 Incorrect Authorization"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 3.1,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "LOW",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
|
||||
"integrityImpact": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "HIGH",
|
||||
"availabilityImpact": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"confidentialityImpact": "NONE"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:18:54.361931Z",
|
||||
"id": "CVE-2026-118531",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:24:02.133Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-10-29T11:41:45.920Z",
|
||||
"datePublished": "2026-11-12T06:00:07.223Z",
|
||||
"dateUpdated": "2026-11-12T06:00:07.223Z"
|
||||
"dateUpdated": "2026-11-12T11:23:47.612Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -78,6 +78,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-290",
|
||||
"lang": "en",
|
||||
"description": "CWE-290 Authentication Bypass by Spoofing"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 5.3,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
|
||||
"integrityImpact": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "LOW"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:18:41.340931Z",
|
||||
"id": "CVE-2026-119039",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:23:47.612Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-10-29T11:41:49.003Z",
|
||||
"datePublished": "2026-11-12T06:00:07.503Z",
|
||||
"dateUpdated": "2026-11-12T06:00:07.503Z"
|
||||
"dateUpdated": "2026-11-12T11:23:33.118Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -78,6 +78,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-287",
|
||||
"lang": "en",
|
||||
"description": "CWE-287 Improper Authentication"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 7.5,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:18:32.780839Z",
|
||||
"id": "CVE-2026-119040",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:23:33.118Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-11-03T14:12:58.909Z",
|
||||
"datePublished": "2026-11-12T06:00:07.678Z",
|
||||
"dateUpdated": "2026-11-12T06:00:07.678Z"
|
||||
"dateUpdated": "2026-11-12T11:23:18.635Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -78,6 +78,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-639",
|
||||
"lang": "en",
|
||||
"description": "CWE-639 Authorization Bypass Through User-Controlled Key"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 4.8,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
|
||||
"integrityImpact": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "HIGH",
|
||||
"availabilityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "LOW"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:18:22.948589Z",
|
||||
"id": "CVE-2026-121498",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:23:18.635Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-11-04T13:51:35.405Z",
|
||||
"datePublished": "2026-11-12T06:00:08.273Z",
|
||||
"dateUpdated": "2026-11-12T06:00:08.273Z"
|
||||
"dateUpdated": "2026-11-12T11:23:04.127Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -88,6 +88,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-352",
|
||||
"lang": "en",
|
||||
"description": "CWE-352 Cross-Site Request Forgery (CSRF)"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 8.8,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "REQUIRED",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:18:14.379783Z",
|
||||
"id": "CVE-2026-122003",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:23:04.127Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-11-05T08:34:47.607Z",
|
||||
"datePublished": "2026-11-12T06:00:08.453Z",
|
||||
"dateUpdated": "2026-11-12T06:00:08.453Z"
|
||||
"dateUpdated": "2026-11-12T11:22:49.706Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -88,6 +88,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-79",
|
||||
"lang": "en",
|
||||
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 7.5,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "REQUIRED",
|
||||
"attackComplexity": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:18:01.302086Z",
|
||||
"id": "CVE-2026-123044",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:22:49.706Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-11-05T12:04:41.951Z",
|
||||
"datePublished": "2026-11-12T06:00:08.632Z",
|
||||
"dateUpdated": "2026-11-12T06:00:08.632Z"
|
||||
"dateUpdated": "2026-11-12T11:22:35.225Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -78,6 +78,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-269",
|
||||
"lang": "en",
|
||||
"description": "CWE-269 Improper Privilege Management"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 7.5,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:17:52.382346Z",
|
||||
"id": "CVE-2026-123092",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:22:35.225Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "VulDB",
|
||||
"dateReserved": "2026-11-06T19:53:52.566Z",
|
||||
"datePublished": "2026-11-07T18:15:13.457Z",
|
||||
"dateUpdated": "2026-11-07T18:15:13.457Z"
|
||||
"dateUpdated": "2026-11-12T11:48:41.578Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -165,6 +165,40 @@
|
||||
"x_generator": [
|
||||
"VulDB PVTS v202611"
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:48:02.445409Z",
|
||||
"id": "CVE-2026-124058",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "poc"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:48:41.578Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-11-09T08:28:10.809Z",
|
||||
"datePublished": "2026-11-12T06:00:08.827Z",
|
||||
"dateUpdated": "2026-11-12T06:00:08.827Z"
|
||||
"dateUpdated": "2026-11-12T11:22:20.720Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -78,6 +78,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-89",
|
||||
"lang": "en",
|
||||
"description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "CHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 8.6,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
|
||||
"integrityImpact": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:17:42.462628Z",
|
||||
"id": "CVE-2026-124647",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:22:20.720Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-11-09T08:28:12.360Z",
|
||||
"datePublished": "2026-11-12T06:00:08.998Z",
|
||||
"dateUpdated": "2026-11-12T06:00:08.998Z"
|
||||
"dateUpdated": "2026-11-12T11:22:06.207Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -78,6 +78,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-863",
|
||||
"lang": "en",
|
||||
"description": "CWE-863 Incorrect Authorization"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 5.3,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
|
||||
"integrityImpact": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "NONE"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:17:31.449875Z",
|
||||
"id": "CVE-2026-124648",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:22:06.207Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-11-09T08:41:42.253Z",
|
||||
"datePublished": "2026-11-12T06:00:09.181Z",
|
||||
"dateUpdated": "2026-11-12T06:00:09.181Z"
|
||||
"dateUpdated": "2026-11-12T11:21:50.669Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -78,6 +78,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-639",
|
||||
"lang": "en",
|
||||
"description": "CWE-639 Authorization Bypass Through User-Controlled Key"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 4.3,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
|
||||
"integrityImpact": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"confidentialityImpact": "LOW"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:17:20.704845Z",
|
||||
"id": "CVE-2026-124652",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:21:50.669Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-11-09T08:42:32.870Z",
|
||||
"datePublished": "2026-11-12T06:00:09.357Z",
|
||||
"dateUpdated": "2026-11-12T06:00:09.357Z"
|
||||
"dateUpdated": "2026-11-12T11:21:36.228Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -78,6 +78,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-200",
|
||||
"lang": "en",
|
||||
"description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 6.5,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
|
||||
"integrityImpact": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "LOW"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:17:13.321729Z",
|
||||
"id": "CVE-2026-124653",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:21:36.228Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-11-09T09:26:56.575Z",
|
||||
"datePublished": "2026-11-12T06:00:09.578Z",
|
||||
"dateUpdated": "2026-11-12T06:00:09.578Z"
|
||||
"dateUpdated": "2026-11-12T11:21:21.739Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -78,6 +78,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-639",
|
||||
"lang": "en",
|
||||
"description": "CWE-639 Authorization Bypass Through User-Controlled Key"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 5.3,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
|
||||
"integrityImpact": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "LOW"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:17:05.348591Z",
|
||||
"id": "CVE-2026-124665",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:21:21.739Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,125 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-124705",
|
||||
"assignerOrgId": "f9fea0b6-671e-4eea-8fde-31911902ae05",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "ProgressSoftware",
|
||||
"dateReserved": "2026-11-09T10:41:43.933Z",
|
||||
"datePublished": "2026-11-12T11:59:34.996Z",
|
||||
"dateUpdated": "2026-11-12T11:59:34.996Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "f9fea0b6-671e-4eea-8fde-31911902ae05",
|
||||
"shortName": "ProgressSoftware",
|
||||
"dateUpdated": "2026-11-12T11:59:34.996Z"
|
||||
},
|
||||
"title": "URL Redirection to Untrusted Site in Progress Telerik UI for .NET MAUI",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-601",
|
||||
"description": "CWE-601 URL Redirection to Untrusted Site ('Open Redirect')",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"impacts": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Fake the Source of Data"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Progress Software",
|
||||
"product": "Telerik UI for .NET MAUI",
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "5.2.0",
|
||||
"lessThan": "16.0.0",
|
||||
"versionType": "custom"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unaffected"
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "In Progress® Telerik® UI for .NET MAUI prior to version 16.0.0, an untrusted URL redirection vulnerability in the RadRichTextEditor hyperlink handling and the RadPdfViewer link annotation handling allows an unauthenticated attacker to launch arbitrary operating system protocol handlers with attacker-controlled arguments via a crafted document or PDF link with a non-allowlisted URI scheme that the user opens.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "<p>In Progress® Telerik® UI for .NET MAUI prior to version 16.0.0, an untrusted URL redirection vulnerability in the RadRichTextEditor hyperlink handling and the RadPdfViewer link annotation handling allows an unauthenticated attacker to launch arbitrary operating system protocol handlers with attacker-controlled arguments via a crafted document or PDF link with a non-allowlisted URI scheme that the user opens.</p>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.telerik.com/maui-ui/documentation/knowledge-base/kb-security-untrusted-url-redirection-cve-2026-124705",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseSeverity": "HIGH",
|
||||
"baseScore": 7.8,
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
|
||||
}
|
||||
}
|
||||
],
|
||||
"workarounds": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "For RadPdfViewer, handle the LinkAnnotationTapped event, set Handled to true and launch only URIs with trusted schemes (http, https, mailto, tel). RadRichTextEditor has no equivalent event in the affected versions, so avoid loading documents from untrusted sources or upgrade to the fixed version.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "<div>For RadPdfViewer, handle the LinkAnnotationTapped event, set Handled to true and launch only URIs with trusted schemes (http, https, mailto, tel). RadRichTextEditor has no equivalent event in the affected versions, so avoid loading documents from untrusted sources or upgrade to the fixed version.</div>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "INTERNAL"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "Vulnogram 0.2.0"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-11-09T13:15:45.770Z",
|
||||
"datePublished": "2026-11-12T06:00:09.772Z",
|
||||
"dateUpdated": "2026-11-12T06:00:09.772Z"
|
||||
"dateUpdated": "2026-11-12T11:21:07.220Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -78,6 +78,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-434",
|
||||
"lang": "en",
|
||||
"description": "CWE-434 Unrestricted Upload of File with Dangerous Type"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 9.8,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "CRITICAL",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:16:35.357876Z",
|
||||
"id": "CVE-2026-124814",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:21:07.220Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-11-09T13:16:57.046Z",
|
||||
"datePublished": "2026-11-12T06:00:09.952Z",
|
||||
"dateUpdated": "2026-11-12T06:00:09.952Z"
|
||||
"dateUpdated": "2026-11-12T11:20:51.641Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -78,6 +78,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-89",
|
||||
"lang": "en",
|
||||
"description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "CHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 10,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "CRITICAL",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:16:19.302230Z",
|
||||
"id": "CVE-2026-124815",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:20:51.641Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-11-09T13:17:43.589Z",
|
||||
"datePublished": "2026-11-12T06:00:10.134Z",
|
||||
"dateUpdated": "2026-11-12T06:00:10.134Z"
|
||||
"dateUpdated": "2026-11-12T11:20:37.064Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -88,6 +88,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-284",
|
||||
"lang": "en",
|
||||
"description": "CWE-284 Improper Access Control"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 5.3,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "MEDIUM",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
|
||||
"integrityImpact": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "LOW",
|
||||
"availabilityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "NONE"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:16:04.157942Z",
|
||||
"id": "CVE-2026-124817",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:20:37.064Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,121 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-127036",
|
||||
"assignerOrgId": "4f830c72-39e4-45f6-a99f-78cc01ae04db",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "tibco",
|
||||
"dateReserved": "2026-11-12T11:10:34.166Z",
|
||||
"datePublished": "2026-11-12T11:34:16.443Z",
|
||||
"dateUpdated": "2026-11-12T11:34:16.443Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "4f830c72-39e4-45f6-a99f-78cc01ae04db",
|
||||
"shortName": "tibco",
|
||||
"dateUpdated": "2026-11-12T11:34:16.443Z"
|
||||
},
|
||||
"title": "ibi WebFOCUS - Reflected XSS & OS Command Injection Vulnerability",
|
||||
"datePublic": "2026-11-12T11:30:00.000Z",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-93",
|
||||
"description": "CWE-93 Improper neutralization of CRLF sequences ('CRLF injection')",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "ibi",
|
||||
"product": "WebFOCUS",
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "9.1",
|
||||
"versionType": "Patch"
|
||||
},
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "9.2",
|
||||
"lessThanOrEqual": "7",
|
||||
"versionType": "Patch"
|
||||
},
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "9.3",
|
||||
"lessThanOrEqual": "7",
|
||||
"versionType": "Hotfix"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "affected"
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in ibi WebFOCUS.\n\nThis issue affects WebFOCUS: 9.1, from 9.2 through 7, and from 9.3 through 7.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in ibi WebFOCUS.<p>This issue affects WebFOCUS: 9.1, from 9.2 through 7, and from 9.3 through 7.</p>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://community.tibco.com/advisories/ibi-security-advisory-november-12-2026-ibi-webfocus-cve-2026-127036-r230/"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV4_0": {
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"subIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "LOW",
|
||||
"subAvailabilityImpact": "LOW",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED",
|
||||
"version": "4.0",
|
||||
"baseSeverity": "HIGH",
|
||||
"baseScore": 8.6,
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L"
|
||||
}
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "Vulnogram 1.0.5"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,337 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-127046",
|
||||
"assignerOrgId": "5a6e4751-2f3f-4070-9419-94fb35b644e8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "CIRCL",
|
||||
"dateReserved": "2026-11-12T12:04:58.364Z",
|
||||
"datePublished": "2026-11-12T12:05:04.052Z",
|
||||
"dateUpdated": "2026-11-12T12:08:46.771Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The MISP Modules website component contains an information disclosure vulnerability in the external tools management interface. The /external_tools/list endpoint returned stored API keys (the api_key field) in its JSON response via the ExternalTools model serializer. Additionally, the browser-based edit form pre-populated the API key input field with the stored credential value, exposing it in the DOM.\n\nThe /external_tools/list endpoint is accessible without authentication (the regression tests verify the response for both authenticated and unauthenticated clients), meaning any network-reachable client could retrieve the API keys for all configured external tools. These keys are used by the server to authenticate submissions to external analysis or enrichment services, so their disclosure allows an attacker to impersonate the MISP instance or directly access those external services.\n\nThe vulnerability also affected the edit workflow: the change_config endpoint previously required the API key to be present and non-empty on every save, forcing the key to round-trip through the client. The browser JavaScript stored the key in a reactive state object and updated the in-memory tool list with the credential value, further increasing the window of exposure in client-side memory and network traffic.\n\nAffected component: the website sub-application of MISP Modules, specifically the external_tools module (serializer in models.py, list endpoint, and the external_tools_index.html template). The impact is limited to confidentiality of the stored API keys; no integrity or availability impact on the MISP Modules website itself is indicated by the patch."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"product": "misp-modules",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:misp:misp_modules:*:*:*:*:*:*:*:*"
|
||||
],
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"status": "affected",
|
||||
"lessThanOrEqual": "3.1.4",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"modules": [
|
||||
"website/app/external_tools",
|
||||
"website/app/models"
|
||||
],
|
||||
"programFiles": [
|
||||
"website/app/models/models.py",
|
||||
"website/app/external_tools/external_tools.py",
|
||||
"website/app/external_tools/external_tools_core.py",
|
||||
"website/app/templates/external_tools/external_tools_index.html"
|
||||
],
|
||||
"repo": "https://github.com/MISP/misp-modules",
|
||||
"vendor": "misp"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/MISP/misp-modules/commit/61c27893066cee80d9711649765ebc2bccd0e4af",
|
||||
"name": "Security patch",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
}
|
||||
],
|
||||
"x_gcve": [
|
||||
{
|
||||
"recordType": "advisory",
|
||||
"extensions": {
|
||||
"bcp-05-x-01": {
|
||||
"ai_annotations": [
|
||||
{
|
||||
"scope": "record",
|
||||
"gna_source": 1,
|
||||
"tags": [
|
||||
"ai-computer-assisted:llm-generated",
|
||||
"ai-computer-assisted:classification"
|
||||
],
|
||||
"description": "Draft vulnerability metadata was generated from a git-format patch using an Ollama-hosted language model. Human validation is required before publication.",
|
||||
"ai_level": "generated",
|
||||
"review_status": "none",
|
||||
"models": [
|
||||
{
|
||||
"name": "qwen3.8:27b",
|
||||
"gna_source": 1,
|
||||
"source": "ollama",
|
||||
"identifier": "qwen3.8:27b"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"bcp-05-x-02": {
|
||||
"x_patch2vuln": {
|
||||
"generator": "patch2vuln.py",
|
||||
"generatedAt": "2026-11-12T11:59:08.631868Z",
|
||||
"model": "qwen3.8:27b",
|
||||
"source": "https://github.com/MISP/misp-modules/commit/61c27893066cee80d9711649765ebc2bccd0e4af.patch",
|
||||
"patchSha256": "200a89910bce4823c08ee129545edc9fe7177cb0de9c5555925aa075155ca61b",
|
||||
"patchTruncated": false,
|
||||
"commit": "61c27893066cee80d9711649765ebc2bccd0e4af",
|
||||
"subject": "fix: [website] keep external tool API keys out of responses",
|
||||
"patches": [
|
||||
{
|
||||
"source": "https://github.com/MISP/misp-modules/commit/61c27893066cee80d9711649765ebc2bccd0e4af.patch",
|
||||
"sourceUrl": "https://github.com/MISP/misp-modules/commit/61c27893066cee80d9711649765ebc2bccd0e4af.patch",
|
||||
"patchSha256": "200a89910bce4823c08ee129545edc9fe7177cb0de9c5555925aa075155ca61b",
|
||||
"commit": "61c27893066cee80d9711649765ebc2bccd0e4af",
|
||||
"subject": "fix: [website] keep external tool API keys out of responses",
|
||||
"date": "Thu, 12 Nov 2026 09:37:45 +0100",
|
||||
"retrievedAt": "2026-11-12T11:58:13.406720Z"
|
||||
}
|
||||
],
|
||||
"confidence": "medium",
|
||||
"assumptions": [
|
||||
"The /external_tools/list endpoint is accessible without authentication based on regression tests that verify the response for both authenticated and unauthenticated clients; however, the README notes that management operations require ADMIN_PASSWORD, so the list endpoint's access control may vary by deployment configuration.",
|
||||
"CVSS SC:H assumes the exposed API keys grant meaningful access to external services; the actual scope of access depends on the specific external tools configured and is not specified in the patch.",
|
||||
"No specific product version or release boundary is identified in the patch; the affected version range is therefore marked as unspecified.",
|
||||
"CAPEC-126 is the closest available pattern but is not a perfect match; the vulnerability is more precisely an API response information disclosure than a session hijacking. No CAPEC pattern specifically covers 'sensitive credential in API JSON response' without a session framing.",
|
||||
"The commit references issue #816 but no reporter or finder is named in the patch metadata or commit message.",
|
||||
"The 60-character maximum length validation for API keys is a new constraint introduced by the patch; it is unclear whether keys longer than 60 characters were previously valid, which could affect deployments with longer keys."
|
||||
],
|
||||
"fixSummary": "The fix removes the api_key field from the ExternalTools.to_json() serializer so that /external_tools/list no longer returns credentials. The edit form is changed to a write-only pattern: the API key input starts empty, a blank or missing value on save retains the previously stored key, and a non-empty value replaces it. After a successful save the client clears the key field and does not propagate the credential into the in-memory tool list. Input validation is tightened to reject non-string or over-length key values. Server-side tool submissions continue to use the stored key from the database.",
|
||||
"patchSummary": "models.py: removed the api_key entry from ExternalTools.to_json(). external_tools.py (change_config endpoint): replaced the nested if-chain that required tool_api_key to be present and non-empty with a flat validation loop for tool_id/tool_name/tool_url, added a type-and-length check (string, max 60 chars) for tool_api_key when present, and made the field optional (write-only semantics). external_tools_core.py (change_config_core): changed tool.api_key assignment to be conditional on a truthy request_json.get('tool_api_key'). external_tools_index.html: initialized the form key field to empty string instead of tool.api_key, added placeholder and helper text, fixed a bug where the error-clearing selector referenced the wrong field, moved browser-state updates to after a successful HTTP response (res.ok check), and cleared the key input after save. README.md: documented the write-only key behavior. Tests: added browser-level (Playwright) and unit-level regression tests verifying the list endpoint omits api_key,空",
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Alexandre Dulaunoy",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"cvssRationale": "AV:N: the /external_tools/list endpoint is reachable over the network via HTTP. AC:L: exploitation requires only a single GET request with no special conditions. AT:N: no attack prerequisites such as race conditions or specific timing. PR:N: regression tests confirm the endpoint returns 200 and previously included api_key for both authenticated and unauthenticated clients, indicating no privilege is required. UI:N: no victim interaction is needed; the attacker simply reads the response. VC:H: the exposed data is API keys (credentials) for external services, representing high confidentiality loss. VI:N and VA:N: no integrity or availability impact on the MISP Modules website. SC:H: the stolen API keys can be used to authenticate to external analysis/enrichment services, representing high confidentiality impact on a subsequent component. SI:N and SA:N: no integrity or availability impact on subsequent components is indicated.",
|
||||
"ssvc": {
|
||||
"version": "2.0.3",
|
||||
"role": "Supplier",
|
||||
"timestamp": "2026-11-12T11:59:08Z",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknessRationale": [
|
||||
{
|
||||
"cweId": "CWE-200",
|
||||
"rationale": "The /external_tools/list endpoint returned stored API keys in its JSON response to any client (authenticated or not), exposing credentials to unauthorized parties. The browser form also pre-populated the key in the DOM."
|
||||
},
|
||||
{
|
||||
"cweId": "CWE-522",
|
||||
"rationale": "API keys used to authenticate to external services were stored and transmitted without adequate protection: they appeared in API responses and in client-side form state, violating the principle that credentials should be write-only from the client perspective."
|
||||
}
|
||||
],
|
||||
"capecRationale": [
|
||||
{
|
||||
"capecId": "CAPEC-126",
|
||||
"rationale": "The closest available CAPEC pattern. The attack involves an attacker obtaining credential material (API keys) from a web application response and using it to authenticate to a subsequent service. CAPEC-126 covers the theft of session/credential tokens from a web application. The mapping is imperfect because the keys are long-lived API credentials rather than short-lived session tokens, and the attack does not involve a session per se, but the underlying mechanism (reading a credential from an HTTP response and replaying it) is the same class of attack. No CAPEC pattern specifically covers 'sensitive data in API response' without a session-hijacking framing, so this is the best available match."
|
||||
}
|
||||
],
|
||||
"draft": false,
|
||||
"modelComparison": {
|
||||
"selectedModel": "qwen3.8:27b",
|
||||
"selectionMethod": "deterministic-consensus-v1",
|
||||
"selectionNotice": "The selected result is closest to model consensus; this heuristic does not establish factual correctness and human review remains required.",
|
||||
"rankings": [
|
||||
{
|
||||
"model": "qwen3.8:27b",
|
||||
"score": 6,
|
||||
"agreementScore": 11,
|
||||
"confidence": "medium",
|
||||
"assumptionCount": 6
|
||||
}
|
||||
],
|
||||
"potentialErrors": []
|
||||
}
|
||||
}
|
||||
},
|
||||
"bcp-05-x-03": {
|
||||
"x_timeline": {
|
||||
"events": [
|
||||
{
|
||||
"type": "fix-developed",
|
||||
"timestamp": "2026-11-12T08:37:45Z",
|
||||
"description": "Corrective change authored (61c27893066cee80d9711649765ebc2bccd0e4af): fix: [website] keep external tool API keys out of responses",
|
||||
"references": [
|
||||
"https://github.com/MISP/misp-modules/commit/61c27893066cee80d9711649765ebc2bccd0e4af.patch"
|
||||
],
|
||||
"id": "evt-fix-developed-1"
|
||||
},
|
||||
{
|
||||
"id": "evt-fix-available-1",
|
||||
"type": "fix-available",
|
||||
"timestamp": "2026-11-12T11:58:13.406720Z",
|
||||
"description": "Patch retrieved from the supplied URL; retrieval time is used as the default availability time.",
|
||||
"references": [
|
||||
"https://github.com/MISP/misp-modules/commit/61c27893066cee80d9711649765ebc2bccd0e4af.patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"vulnId": "gcve-1-2026-20141"
|
||||
}
|
||||
],
|
||||
"title": "MISP Modules Website Exposes External Tool API Keys in /external_tools/list Response",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-200",
|
||||
"description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-522",
|
||||
"description": "CWE-522 Insufficiently Protected Credentials",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N",
|
||||
"baseScore": 9.2,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "HIGH",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
},
|
||||
{
|
||||
"format": "SSVC",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"other": {
|
||||
"type": "SSVC",
|
||||
"content": {
|
||||
"version": "2.0.3",
|
||||
"role": "Supplier",
|
||||
"timestamp": "2026-11-12T11:59:08Z",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "yes"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The fix removes the api_key field from the ExternalTools.to_json() serializer so that /external_tools/list no longer returns credentials. The edit form is changed to a write-only pattern: the API key input starts empty, a blank or missing value on save retains the previously stored key, and a non-empty value replaces it. After a successful save the client clears the key field and does not propagate the credential into the in-memory tool list. Input validation is tightened to reject non-string or over-length key values. Server-side tool submissions continue to use the stored key from the database."
|
||||
}
|
||||
],
|
||||
"impacts": [
|
||||
{
|
||||
"capecId": "CAPEC-126",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CAPEC-126 Web Application Session Hijacking"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Alexandre Dulaunoy",
|
||||
"type": "remediation developer"
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:misp:misp-modules:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "0",
|
||||
"versionEndIncluding": "3.1.4"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "5a6e4751-2f3f-4070-9419-94fb35b644e8",
|
||||
"shortName": "CIRCL",
|
||||
"dateUpdated": "2026-11-12T12:08:46.771Z"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-06-29T14:42:33.339Z",
|
||||
"datePublished": "2026-08-31T19:23:18.741Z",
|
||||
"dateUpdated": "2026-11-12T11:14:04.702Z"
|
||||
"dateUpdated": "2026-11-12T11:38:48.189Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -140,6 +140,82 @@
|
||||
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "gdb",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:8.2-18.1.el8_6",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:rhel_aus:8.6::appstream",
|
||||
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "gdb",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:8.2-18.1.el8_6",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:rhel_aus:8.6::appstream",
|
||||
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "gdb",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:8.2-19.1.el8_8",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:rhel_e4s:8.8::appstream",
|
||||
"cpe:/a:redhat:rhel_tus:8.8::appstream"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "gdb",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:8.2-19.1.el8_8",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:rhel_e4s:8.8::appstream",
|
||||
"cpe:/a:redhat:rhel_tus:8.8::appstream"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 9",
|
||||
@@ -448,6 +524,22 @@
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:99596",
|
||||
"name": "RHSA-2026:99596",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:99597",
|
||||
"name": "RHSA-2026:99597",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2026-13732",
|
||||
"tags": [
|
||||
@@ -505,7 +597,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"shortName": "redhat",
|
||||
"dateUpdated": "2026-11-12T11:14:04.702Z"
|
||||
"dateUpdated": "2026-11-12T11:38:48.189Z"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
|
||||
@@ -0,0 +1,96 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-13764",
|
||||
"assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "Wordfence",
|
||||
"dateReserved": "2026-06-29T18:58:35.512Z",
|
||||
"datePublished": "2026-11-12T11:32:17.421Z",
|
||||
"dateUpdated": "2026-11-12T11:32:17.421Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
|
||||
"shortName": "Wordfence",
|
||||
"dateUpdated": "2026-11-12T11:32:17.421Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "StylemixThemes",
|
||||
"product": "Masterstudy - Education WordPress Theme",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"status": "affected",
|
||||
"lessThanOrEqual": "4.8.151",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unaffected"
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The Masterstudy - Education WordPress Theme theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.151. This is due to missing authorization and nonce validation on the `masterstudy_ms_stm_set_discard_transient` AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to Administrator by setting the `stm_developer_access_token` transient and using the developer access auto-login flow to obtain administrator session cookies."
|
||||
}
|
||||
],
|
||||
"title": "Masterstudy - Education WordPress Theme <= 4.8.151 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation",
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ec898f73-d275-4624-911b-89d9a945ff92?source=cve"
|
||||
},
|
||||
{
|
||||
"url": "https://themeforest.net/item/masterstudy-education-center-wordpress-theme/12170274"
|
||||
},
|
||||
{
|
||||
"url": "https://docs.stylemixthemes.com/masterstudy-theme-documentation/extra-materials/changelog"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "CWE-862 Missing Authorization",
|
||||
"cweId": "CWE-862",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 8.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "finder",
|
||||
"value": "lhking"
|
||||
}
|
||||
],
|
||||
"timeline": [
|
||||
{
|
||||
"time": "2026-07-08T15:20:08.000Z",
|
||||
"lang": "en",
|
||||
"value": "Vendor Notified"
|
||||
},
|
||||
{
|
||||
"time": "2026-11-11T22:29:23.000Z",
|
||||
"lang": "en",
|
||||
"value": "Disclosed"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,93 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-15309",
|
||||
"assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "Wordfence",
|
||||
"dateReserved": "2026-07-09T17:22:09.551Z",
|
||||
"datePublished": "2026-11-12T11:32:16.143Z",
|
||||
"dateUpdated": "2026-11-12T11:32:16.143Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
|
||||
"shortName": "Wordfence",
|
||||
"dateUpdated": "2026-11-12T11:32:16.143Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "WishList Member",
|
||||
"product": "CourseCure Courses",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"status": "affected",
|
||||
"lessThanOrEqual": "1.5.1",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unaffected"
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The CourseCure Courses plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.1. This is due to a missing capability check in the ajax_save_settings() function, which accepts arbitrary POST parameters and calls update_option() with attacker-controlled keys and values without any authorization verification. This makes it possible for authenticated attackers, with subscriber-level access and above, to elevate their privileges to administrator by setting the default_role WordPress option to 'administrator' and users_can_register to '1', then registering a new account that is automatically granted full administrator access."
|
||||
}
|
||||
],
|
||||
"title": "CourseCure Courses <= 1.5.1 - Authenticated (Subscriber+) Privilege Escalation to 'ajax_save_settings' Endpoint",
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2d754689-0d64-4cb8-9c73-7dd6d4fb0c72?source=cve"
|
||||
},
|
||||
{
|
||||
"url": "https://my.wishlistmember.com/changelog/coursecure-courses-1-5-3/"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "CWE-269 Improper Privilege Management",
|
||||
"cweId": "CWE-269",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 8.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "finder",
|
||||
"value": "Austin Ginder"
|
||||
}
|
||||
],
|
||||
"timeline": [
|
||||
{
|
||||
"time": "2026-08-28T18:05:23.000Z",
|
||||
"lang": "en",
|
||||
"value": "Vendor Notified"
|
||||
},
|
||||
{
|
||||
"time": "2026-11-11T22:31:15.000Z",
|
||||
"lang": "en",
|
||||
"value": "Disclosed"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,93 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-16135",
|
||||
"assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "Wordfence",
|
||||
"dateReserved": "2026-07-17T16:34:09.465Z",
|
||||
"datePublished": "2026-11-12T11:32:17.038Z",
|
||||
"dateUpdated": "2026-11-12T11:32:17.038Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
|
||||
"shortName": "Wordfence",
|
||||
"dateUpdated": "2026-11-12T11:32:17.038Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "VibeThemes",
|
||||
"product": "VibeBP",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"status": "affected",
|
||||
"lessThanOrEqual": "1.9.9.8.1",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unaffected"
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The VibeBP plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.9.8.1. This is due to the plugin allowing arbitrary user meta updates through the set_email_notification_settings() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to grant themselves administrator privileges by updating their own 'wp_capabilities' user meta value."
|
||||
}
|
||||
],
|
||||
"title": "VibeBP <= 1.9.9.8.1 - Authenticated (Subscriber+) Privilege Escalation in set_email_notification_settings()",
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d726543c-9ce2-4359-978d-c72a451296a2?source=cve"
|
||||
},
|
||||
{
|
||||
"url": "https://themeforest.net/item/wplms-learning-management-system/6780226"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "CWE-269 Improper Privilege Management",
|
||||
"cweId": "CWE-269",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 8.8,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "finder",
|
||||
"value": "d.v4n_s3c"
|
||||
}
|
||||
],
|
||||
"timeline": [
|
||||
{
|
||||
"time": "2026-07-21T16:40:48.000Z",
|
||||
"lang": "en",
|
||||
"value": "Vendor Notified"
|
||||
},
|
||||
{
|
||||
"time": "2026-11-11T22:33:53.000Z",
|
||||
"lang": "en",
|
||||
"value": "Disclosed"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,129 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-19421",
|
||||
"assignerOrgId": "0fc0942c-577d-436f-ae8e-945763c79b02",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "Zohocorp",
|
||||
"dateReserved": "2026-08-10T10:54:20.575Z",
|
||||
"datePublished": "2026-11-12T12:07:53.861Z",
|
||||
"dateUpdated": "2026-11-12T12:07:53.861Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "0fc0942c-577d-436f-ae8e-945763c79b02",
|
||||
"shortName": "Zohocorp",
|
||||
"dateUpdated": "2026-11-12T12:07:53.861Z"
|
||||
},
|
||||
"title": "Authenticated Injection",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-78",
|
||||
"description": "CWE-78 – Improper Neutralization of Special Elements used in an OS Command",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"impacts": [
|
||||
{
|
||||
"capecId": "CAPEC-88",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CAPEC-88 – OS Command Injection"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Zohocorp",
|
||||
"product": "DDI Central",
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "0",
|
||||
"lessThan": "6301",
|
||||
"versionType": "custom"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:zohocorp:ddi_central:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "0",
|
||||
"versionEndExcluding": "6301"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Zohocorp ManageEngine DDI Central versions below 6301 is affected by a PowerShell injection vulnerability due to insufficient validation of user-supplied TXT record values in Windows DNS operations.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "<span>Zohocorp ManageEngine </span>DDI Central<span> versions below </span>6301<span> is affected by </span>a PowerShell injection vulnerability due to insufficient validation of user-supplied TXT record values in Windows DNS operations."
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.manageengine.com/dns-dhcp-ipam/security-updates/cve-2026-19421.html"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseSeverity": "HIGH",
|
||||
"baseScore": 8.8,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
|
||||
}
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "Vulnogram 1.0.5"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,93 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-2982",
|
||||
"assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "Wordfence",
|
||||
"dateReserved": "2026-02-22T16:37:45.602Z",
|
||||
"datePublished": "2026-11-12T11:32:16.664Z",
|
||||
"dateUpdated": "2026-11-12T11:32:16.664Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
|
||||
"shortName": "Wordfence",
|
||||
"dateUpdated": "2026-11-12T11:32:16.664Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "wptb",
|
||||
"product": "WP Table Builder – Drag & Drop Table Builder",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"status": "affected",
|
||||
"lessThanOrEqual": "2.1.7",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unaffected"
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The WP Table Builder – Drag & Drop Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter in versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation by lower-privileged users requires an administrator to explicitly allow those roles in plugin settings. While it is possible to assign subscriber-level roles with the ability to create tables, such privileges are usually assigned to the more appropriate contributor, author, or editor level roles."
|
||||
}
|
||||
],
|
||||
"title": "WP Table Builder – Drag & Drop Table Builder <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'url'",
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d07a08ad-c9b7-44fe-a199-fa8bb7f3eea2?source=cve"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/changeset/3469639/wp-table-builder"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation",
|
||||
"cweId": "CWE-79",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
|
||||
"baseScore": 5.4,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "finder",
|
||||
"value": "lord willmore"
|
||||
}
|
||||
],
|
||||
"timeline": [
|
||||
{
|
||||
"time": "2026-02-22T16:53:59.000Z",
|
||||
"lang": "en",
|
||||
"value": "Vendor Notified"
|
||||
},
|
||||
{
|
||||
"time": "2026-11-11T22:23:53.000Z",
|
||||
"lang": "en",
|
||||
"value": "Disclosed"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -8,14 +8,14 @@
|
||||
"assignerShortName": "Go",
|
||||
"dateReserved": "2026-03-23T20:35:32.815Z",
|
||||
"datePublished": "2026-08-13T21:58:52.821Z",
|
||||
"dateUpdated": "2026-11-12T05:21:59.095Z"
|
||||
"dateUpdated": "2026-11-12T11:21:12.992Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
|
||||
"shortName": "Go",
|
||||
"dateUpdated": "2026-11-12T05:21:59.095Z"
|
||||
"dateUpdated": "2026-11-12T11:21:12.992Z"
|
||||
},
|
||||
"title": "Enforce maximum recursion depth in encoding/asn1",
|
||||
"descriptions": [
|
||||
|
||||
@@ -8,14 +8,14 @@
|
||||
"assignerShortName": "Go",
|
||||
"dateReserved": "2026-04-28T00:21:12.792Z",
|
||||
"datePublished": "2026-06-02T22:01:37.219Z",
|
||||
"dateUpdated": "2026-11-12T05:21:57.482Z"
|
||||
"dateUpdated": "2026-11-12T11:21:11.471Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
|
||||
"shortName": "Go",
|
||||
"dateUpdated": "2026-11-12T05:21:57.482Z"
|
||||
"dateUpdated": "2026-11-12T11:21:11.471Z"
|
||||
},
|
||||
"title": "Quadratic complexity in WordDecoder.DecodeHeader in mime",
|
||||
"descriptions": [
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "WPScan",
|
||||
"dateReserved": "2026-08-19T17:55:44.197Z",
|
||||
"datePublished": "2026-11-12T06:00:10.307Z",
|
||||
"dateUpdated": "2026-11-12T06:00:10.307Z"
|
||||
"dateUpdated": "2026-11-12T11:20:22.063Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -78,6 +78,68 @@
|
||||
"x_generator": {
|
||||
"engine": "WPScan CVE Generator"
|
||||
}
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-287",
|
||||
"lang": "en",
|
||||
"description": "CWE-287 Improper Authentication"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"scope": "UNCHANGED",
|
||||
"version": "3.1",
|
||||
"baseScore": 8.1,
|
||||
"attackVector": "NETWORK",
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"integrityImpact": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"attackComplexity": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"confidentialityImpact": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-12T11:15:47.190627Z",
|
||||
"id": "CVE-2026-76792",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-12T11:20:22.063Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-08-24T12:52:02.839Z",
|
||||
"datePublished": "2026-08-24T13:48:52.103Z",
|
||||
"dateUpdated": "2026-11-06T07:44:59.903Z"
|
||||
"dateUpdated": "2026-11-12T11:55:33.044Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -48,6 +48,24 @@
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 10",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "rpm",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:4.19.1.1-29.el10_3",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/o:redhat:enterprise_linux:10.3"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Hardened Images",
|
||||
@@ -66,16 +84,6 @@
|
||||
"cpe:/a:redhat:hummingbird:1"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 10",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "rpm",
|
||||
"defaultStatus": "affected",
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:enterprise_linux:10"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 6",
|
||||
@@ -446,6 +454,14 @@
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:99595",
|
||||
"name": "RHSA-2026:99595",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2026-78367",
|
||||
"tags": [
|
||||
@@ -506,7 +522,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"shortName": "redhat",
|
||||
"dateUpdated": "2026-11-06T07:44:59.903Z"
|
||||
"dateUpdated": "2026-11-12T11:55:33.044Z"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-09-01T12:20:02.226Z",
|
||||
"datePublished": "2026-09-01T14:53:45.586Z",
|
||||
"dateUpdated": "2026-11-06T01:05:47.372Z"
|
||||
"dateUpdated": "2026-11-12T11:55:33.075Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -48,6 +48,24 @@
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 10",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "rpm",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:4.19.1.1-29.el10_3",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/o:redhat:enterprise_linux:10.3"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Hardened Images",
|
||||
@@ -66,16 +84,6 @@
|
||||
"cpe:/a:redhat:hummingbird:1"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 10",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "rpm",
|
||||
"defaultStatus": "affected",
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:enterprise_linux:10"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 6",
|
||||
@@ -126,6 +134,14 @@
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:99595",
|
||||
"name": "RHSA-2026:99595",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2026-84233",
|
||||
"tags": [
|
||||
@@ -183,7 +199,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"shortName": "redhat",
|
||||
"dateUpdated": "2026-11-06T01:05:47.372Z"
|
||||
"dateUpdated": "2026-11-12T11:55:33.075Z"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-09-02T11:56:41.213Z",
|
||||
"datePublished": "2026-09-02T15:12:58.497Z",
|
||||
"dateUpdated": "2026-11-06T07:45:23.212Z"
|
||||
"dateUpdated": "2026-11-12T11:55:33.092Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -48,6 +48,24 @@
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 10",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "rpm",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:4.19.1.1-29.el10_3",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/o:redhat:enterprise_linux:10.3"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Hardened Images",
|
||||
@@ -66,16 +84,6 @@
|
||||
"cpe:/a:redhat:hummingbird:1"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 10",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "rpm",
|
||||
"defaultStatus": "affected",
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:enterprise_linux:10"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 6",
|
||||
@@ -446,6 +454,14 @@
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:99595",
|
||||
"name": "RHSA-2026:99595",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2026-84837",
|
||||
"tags": [
|
||||
@@ -503,7 +519,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"shortName": "redhat",
|
||||
"dateUpdated": "2026-11-06T07:45:23.212Z"
|
||||
"dateUpdated": "2026-11-12T11:55:33.092Z"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-09-02T11:56:41.213Z",
|
||||
"datePublished": "2026-09-02T15:13:02.577Z",
|
||||
"dateUpdated": "2026-11-06T01:07:34.973Z"
|
||||
"dateUpdated": "2026-11-12T11:55:45.638Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -48,6 +48,24 @@
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 10",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "rpm",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:4.19.1.1-29.el10_3",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/o:redhat:enterprise_linux:10.3"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Hardened Images",
|
||||
@@ -66,16 +84,6 @@
|
||||
"cpe:/a:redhat:hummingbird:1"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 10",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "rpm",
|
||||
"defaultStatus": "affected",
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:enterprise_linux:10"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 6",
|
||||
@@ -126,6 +134,14 @@
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:99595",
|
||||
"name": "RHSA-2026:99595",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2026-84838",
|
||||
"tags": [
|
||||
@@ -183,7 +199,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"shortName": "redhat",
|
||||
"dateUpdated": "2026-11-06T01:07:34.973Z"
|
||||
"dateUpdated": "2026-11-12T11:55:45.638Z"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-09-14T20:36:53.441Z",
|
||||
"datePublished": "2026-11-11T18:38:12.565Z",
|
||||
"dateUpdated": "2026-11-11T18:38:12.565Z"
|
||||
"dateUpdated": "2026-11-12T11:45:09.204Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,8 +54,34 @@
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "cockpit",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:366.1.1-1.el10_3",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:enterprise_linux:10"
|
||||
"cpe:/o:redhat:enterprise_linux:10.3"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 8",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "cockpit",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:310.10.2-1.el8_10",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/o:redhat:enterprise_linux:8::baseos"
|
||||
]
|
||||
},
|
||||
{
|
||||
@@ -68,16 +94,6 @@
|
||||
"cpe:/o:redhat:rhel_els:7"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 8",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "cockpit",
|
||||
"defaultStatus": "affected",
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:enterprise_linux:8"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 9",
|
||||
@@ -120,6 +136,22 @@
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:99600",
|
||||
"name": "RHSA-2026:99600",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:99603",
|
||||
"name": "RHSA-2026:99603",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2026-91150",
|
||||
"tags": [
|
||||
@@ -177,7 +209,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"shortName": "redhat",
|
||||
"dateUpdated": "2026-11-11T18:38:12.565Z"
|
||||
"dateUpdated": "2026-11-12T11:45:09.204Z"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-09-14T20:37:18.522Z",
|
||||
"datePublished": "2026-11-11T19:46:14.718Z",
|
||||
"dateUpdated": "2026-11-11T19:46:14.718Z"
|
||||
"dateUpdated": "2026-11-12T11:45:09.245Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -54,8 +54,34 @@
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "cockpit",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:366.1.1-1.el10_3",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:enterprise_linux:10"
|
||||
"cpe:/o:redhat:enterprise_linux:10.3"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 8",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "cockpit",
|
||||
"defaultStatus": "affected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:310.10.2-1.el8_10",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:/o:redhat:enterprise_linux:8::baseos"
|
||||
]
|
||||
},
|
||||
{
|
||||
@@ -68,16 +94,6 @@
|
||||
"cpe:/o:redhat:rhel_els:7"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 8",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "cockpit",
|
||||
"defaultStatus": "affected",
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:enterprise_linux:8"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 9",
|
||||
@@ -120,6 +136,22 @@
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:99600",
|
||||
"name": "RHSA-2026:99600",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2026:99603",
|
||||
"name": "RHSA-2026:99603",
|
||||
"tags": [
|
||||
"vendor-advisory",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2026-91151",
|
||||
"tags": [
|
||||
@@ -177,7 +209,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"shortName": "redhat",
|
||||
"dateUpdated": "2026-11-11T19:46:14.718Z"
|
||||
"dateUpdated": "2026-11-12T11:45:09.245Z"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
|
||||
+19
-38
@@ -1,45 +1,26 @@
|
||||
{
|
||||
"fetchTime": "2026-11-12T11:15:45.095Z",
|
||||
"numberOfChanges": 6,
|
||||
"fetchTime": "2026-11-12T12:08:57.966Z",
|
||||
"numberOfChanges": 3,
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-114369",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114369",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114369.json",
|
||||
"dateUpdated": "2026-11-12T11:09:29.857Z"
|
||||
}
|
||||
],
|
||||
"updated": [
|
||||
{
|
||||
"cveId": "CVE-2025-66365",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-66365",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/66xxx/CVE-2025-66365.json",
|
||||
"dateUpdated": "2026-11-12T11:13:47.820Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-118494",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118494",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118494.json",
|
||||
"dateUpdated": "2026-11-12T11:12:57.005Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-124023",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124023",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124023.json",
|
||||
"dateUpdated": "2026-11-12T11:08:29.565Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-13732",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-13732",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13732.json",
|
||||
"dateUpdated": "2026-11-12T11:14:04.702Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-59599",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59599",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59599.json",
|
||||
"dateUpdated": "2026-11-12T11:15:37.859Z"
|
||||
"cveId": "CVE-2026-124705",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124705",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124705.json",
|
||||
"dateUpdated": "2026-11-12T11:59:34.996Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-127046",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127046",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127046.json",
|
||||
"dateUpdated": "2026-11-12T12:08:46.771Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-19421",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19421",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19421.json",
|
||||
"dateUpdated": "2026-11-12T12:07:53.861Z"
|
||||
}
|
||||
],
|
||||
"updated": [],
|
||||
"error": []
|
||||
}
|
||||
+310
-269
@@ -1,4 +1,314 @@
|
||||
[
|
||||
{
|
||||
"fetchTime": "2026-11-12T12:08:57.966Z",
|
||||
"numberOfChanges": 3,
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-124705",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124705",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124705.json",
|
||||
"dateUpdated": "2026-11-12T11:59:34.996Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-127046",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127046",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127046.json",
|
||||
"dateUpdated": "2026-11-12T12:08:46.771Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-19421",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19421",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19421.json",
|
||||
"dateUpdated": "2026-11-12T12:07:53.861Z"
|
||||
}
|
||||
],
|
||||
"updated": [],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-11-12T11:58:21.304Z",
|
||||
"numberOfChanges": 5,
|
||||
"new": [],
|
||||
"updated": [
|
||||
{
|
||||
"cveId": "CVE-2022-4329",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-4329",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/4xxx/CVE-2022-4329.json",
|
||||
"dateUpdated": "2026-11-12T11:52:48.759Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-78367",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-78367",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/78xxx/CVE-2026-78367.json",
|
||||
"dateUpdated": "2026-11-12T11:55:33.044Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-84233",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84233",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84233.json",
|
||||
"dateUpdated": "2026-11-12T11:55:33.075Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-84837",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84837",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84837.json",
|
||||
"dateUpdated": "2026-11-12T11:55:33.092Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-84838",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84838",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84838.json",
|
||||
"dateUpdated": "2026-11-12T11:55:45.638Z"
|
||||
}
|
||||
],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-11-12T11:52:11.627Z",
|
||||
"numberOfChanges": 1,
|
||||
"new": [],
|
||||
"updated": [
|
||||
{
|
||||
"cveId": "CVE-2026-124058",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124058",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124058.json",
|
||||
"dateUpdated": "2026-11-12T11:48:41.578Z"
|
||||
}
|
||||
],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-11-12T11:46:33.169Z",
|
||||
"numberOfChanges": 2,
|
||||
"new": [],
|
||||
"updated": [
|
||||
{
|
||||
"cveId": "CVE-2026-91150",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-91150",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/91xxx/CVE-2026-91150.json",
|
||||
"dateUpdated": "2026-11-12T11:45:09.204Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-91151",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-91151",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/91xxx/CVE-2026-91151.json",
|
||||
"dateUpdated": "2026-11-12T11:45:09.245Z"
|
||||
}
|
||||
],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-11-12T11:40:45.114Z",
|
||||
"numberOfChanges": 1,
|
||||
"new": [],
|
||||
"updated": [
|
||||
{
|
||||
"cveId": "CVE-2026-13732",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-13732",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13732.json",
|
||||
"dateUpdated": "2026-11-12T11:38:48.189Z"
|
||||
}
|
||||
],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-11-12T11:34:51.547Z",
|
||||
"numberOfChanges": 5,
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-127036",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127036",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127036.json",
|
||||
"dateUpdated": "2026-11-12T11:34:16.443Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-13764",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-13764",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13764.json",
|
||||
"dateUpdated": "2026-11-12T11:32:17.421Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-15309",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-15309",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15309.json",
|
||||
"dateUpdated": "2026-11-12T11:32:16.143Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-16135",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16135",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16135.json",
|
||||
"dateUpdated": "2026-11-12T11:32:17.038Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-2982",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-2982",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/2xxx/CVE-2026-2982.json",
|
||||
"dateUpdated": "2026-11-12T11:32:16.664Z"
|
||||
}
|
||||
],
|
||||
"updated": [],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-11-12T11:28:05.801Z",
|
||||
"numberOfChanges": 14,
|
||||
"new": [],
|
||||
"updated": [
|
||||
{
|
||||
"cveId": "CVE-2026-106027",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106027",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106027.json",
|
||||
"dateUpdated": "2026-11-12T11:25:14.471Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-110041",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110041",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110041.json",
|
||||
"dateUpdated": "2026-11-12T11:24:59.980Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-110072",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110072",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110072.json",
|
||||
"dateUpdated": "2026-11-12T11:24:45.544Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-110959",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110959",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110959.json",
|
||||
"dateUpdated": "2026-11-12T11:24:31.088Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-118421",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118421",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118421.json",
|
||||
"dateUpdated": "2026-11-12T11:24:16.612Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-118531",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118531",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118531.json",
|
||||
"dateUpdated": "2026-11-12T11:24:02.133Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-119039",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119039",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119039.json",
|
||||
"dateUpdated": "2026-11-12T11:23:47.612Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-119040",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119040",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119040.json",
|
||||
"dateUpdated": "2026-11-12T11:23:33.118Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-121498",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121498",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121498.json",
|
||||
"dateUpdated": "2026-11-12T11:23:18.635Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-122003",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122003",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122003.json",
|
||||
"dateUpdated": "2026-11-12T11:23:04.127Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-123044",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123044",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123044.json",
|
||||
"dateUpdated": "2026-11-12T11:22:49.706Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-123092",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123092",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123092.json",
|
||||
"dateUpdated": "2026-11-12T11:22:35.225Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-124647",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124647",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124647.json",
|
||||
"dateUpdated": "2026-11-12T11:22:20.720Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-13732",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-13732",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13732.json",
|
||||
"dateUpdated": "2026-11-12T11:22:29.800Z"
|
||||
}
|
||||
],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-11-12T11:22:09.479Z",
|
||||
"numberOfChanges": 10,
|
||||
"new": [],
|
||||
"updated": [
|
||||
{
|
||||
"cveId": "CVE-2026-124648",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124648",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124648.json",
|
||||
"dateUpdated": "2026-11-12T11:22:06.207Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-124652",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124652",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124652.json",
|
||||
"dateUpdated": "2026-11-12T11:21:50.669Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-124653",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124653",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124653.json",
|
||||
"dateUpdated": "2026-11-12T11:21:36.228Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-124665",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124665",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124665.json",
|
||||
"dateUpdated": "2026-11-12T11:21:21.739Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-124814",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124814",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124814.json",
|
||||
"dateUpdated": "2026-11-12T11:21:07.220Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-124815",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124815",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124815.json",
|
||||
"dateUpdated": "2026-11-12T11:20:51.641Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-124817",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124817",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124817.json",
|
||||
"dateUpdated": "2026-11-12T11:20:37.064Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-33818",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33818.json",
|
||||
"dateUpdated": "2026-11-12T11:21:12.992Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-42504",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42504.json",
|
||||
"dateUpdated": "2026-11-12T11:21:11.471Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-76792",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-76792",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76792.json",
|
||||
"dateUpdated": "2026-11-12T11:20:22.063Z"
|
||||
}
|
||||
],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-11-12T11:15:45.095Z",
|
||||
"numberOfChanges": 6,
|
||||
@@ -848076,274 +848386,5 @@
|
||||
}
|
||||
],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-10-13T11:58:04.166Z",
|
||||
"numberOfChanges": 14,
|
||||
"new": [],
|
||||
"updated": [
|
||||
{
|
||||
"cveId": "CVE-2026-103903",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103903",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103903.json",
|
||||
"dateUpdated": "2026-10-13T11:57:50.805Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-105464",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105464",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105464.json",
|
||||
"dateUpdated": "2026-10-13T11:57:50.126Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-105465",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105465",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105465.json",
|
||||
"dateUpdated": "2026-10-13T11:57:50.538Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-108604",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108604",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108604.json",
|
||||
"dateUpdated": "2026-10-13T11:49:10.959Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-108609",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108609",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108609.json",
|
||||
"dateUpdated": "2026-10-13T11:57:03.841Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-78404",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-78404",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/78xxx/CVE-2026-78404.json",
|
||||
"dateUpdated": "2026-10-13T11:57:50.683Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-89269",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89269",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89269.json",
|
||||
"dateUpdated": "2026-10-13T11:54:09.173Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-89271",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89271",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89271.json",
|
||||
"dateUpdated": "2026-10-13T11:55:07.951Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-96012",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96012",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96012.json",
|
||||
"dateUpdated": "2026-10-13T11:57:50.005Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-96262",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96262",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96262.json",
|
||||
"dateUpdated": "2026-10-13T11:57:49.401Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-96263",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96263",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96263.json",
|
||||
"dateUpdated": "2026-10-13T11:57:49.528Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-96264",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96264",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96264.json",
|
||||
"dateUpdated": "2026-10-13T11:57:49.645Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-96265",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96265",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96265.json",
|
||||
"dateUpdated": "2026-10-13T11:57:49.766Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-96266",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96266",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96266.json",
|
||||
"dateUpdated": "2026-10-13T11:57:49.892Z"
|
||||
}
|
||||
],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-10-13T11:49:05.803Z",
|
||||
"numberOfChanges": 7,
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-109402",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109402",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109402.json",
|
||||
"dateUpdated": "2026-10-13T11:45:14.983Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-109832",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109832",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109832.json",
|
||||
"dateUpdated": "2026-10-13T11:36:13.397Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-94410",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94410",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94410.json",
|
||||
"dateUpdated": "2026-10-13T11:37:32.500Z"
|
||||
}
|
||||
],
|
||||
"updated": [
|
||||
{
|
||||
"cveId": "CVE-2026-108549",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108549",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108549.json",
|
||||
"dateUpdated": "2026-10-13T11:36:36.083Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-108555",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108555",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108555.json",
|
||||
"dateUpdated": "2026-10-13T11:37:21.958Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-108593",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108593",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108593.json",
|
||||
"dateUpdated": "2026-10-13T11:38:18.277Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-108598",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108598",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108598.json",
|
||||
"dateUpdated": "2026-10-13T11:41:41.376Z"
|
||||
}
|
||||
],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-10-13T11:35:56.595Z",
|
||||
"numberOfChanges": 7,
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-109190",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109190",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109190.json",
|
||||
"dateUpdated": "2026-10-13T11:30:18.246Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-89279",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89279",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89279.json",
|
||||
"dateUpdated": "2026-10-13T11:23:40.069Z"
|
||||
}
|
||||
],
|
||||
"updated": [
|
||||
{
|
||||
"cveId": "CVE-2026-108115",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108115",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108115.json",
|
||||
"dateUpdated": "2026-10-13T11:34:51.645Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-108162",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108162",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108162.json",
|
||||
"dateUpdated": "2026-10-13T11:32:31.911Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-108261",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108261",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108261.json",
|
||||
"dateUpdated": "2026-10-13T11:24:15.591Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-108265",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108265",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108265.json",
|
||||
"dateUpdated": "2026-10-13T11:28:12.950Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-108268",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108268",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108268.json",
|
||||
"dateUpdated": "2026-10-13T11:31:04.583Z"
|
||||
}
|
||||
],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-10-13T11:22:07.981Z",
|
||||
"numberOfChanges": 11,
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-109189",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109189",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109189.json",
|
||||
"dateUpdated": "2026-10-13T11:15:17.290Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-63316",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63316",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63316.json",
|
||||
"dateUpdated": "2026-10-13T11:05:09.403Z"
|
||||
}
|
||||
],
|
||||
"updated": [
|
||||
{
|
||||
"cveId": "CVE-2026-104057",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104057",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104057.json",
|
||||
"dateUpdated": "2026-10-13T11:20:52.409Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-104058",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104058",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104058.json",
|
||||
"dateUpdated": "2026-10-13T11:20:53.067Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-104059",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104059",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104059.json",
|
||||
"dateUpdated": "2026-10-13T11:20:53.724Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-107848",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107848",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107848.json",
|
||||
"dateUpdated": "2026-10-13T11:20:32.388Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-107856",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107856",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107856.json",
|
||||
"dateUpdated": "2026-10-13T11:21:50.989Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-109564",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109564",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109564.json",
|
||||
"dateUpdated": "2026-10-13T11:20:54.402Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-12780",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-12780",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12780.json",
|
||||
"dateUpdated": "2026-10-13T11:08:17.634Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-26227",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-26227",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/26xxx/CVE-2026-26227.json",
|
||||
"dateUpdated": "2026-10-13T11:20:55.043Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-26228",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-26228",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/26xxx/CVE-2026-26228.json",
|
||||
"dateUpdated": "2026-10-13T11:20:55.663Z"
|
||||
}
|
||||
],
|
||||
"error": []
|
||||
}
|
||||
]
|
||||
+3
-3
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"source": "https://github.com/CVEProject/cvelistV5.git",
|
||||
"upstream_commit": "d3c7deca2d8e58daaf026dfe02d68a1b80353902",
|
||||
"upstream_commit": "aae981a544f3ef85d76221c38b743ef53c23e8a4",
|
||||
"since_year": 2017,
|
||||
"records": 331513,
|
||||
"synced_at_utc": "2026-11-12T11:26:01.222485+00:00"
|
||||
"records": 331521,
|
||||
"synced_at_utc": "2026-11-12T12:28:00.845048+00:00"
|
||||
}
|
||||
Reference in new issue
Block a user