In Progress® Telerik® UI for .NET MAUI prior to version 16.0.0, an untrusted URL redirection vulnerability in the RadRichTextEditor hyperlink handling and the RadPdfViewer link annotation handling allows an unauthenticated attacker to launch arbitrary operating system protocol handlers with attacker-controlled arguments via a crafted document or PDF link with a non-allowlisted URI scheme that the user opens.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.telerik.com/maui-ui/documentation/knowledge-base/kb-security-untrusted-url-redirection-cve-2026-124705", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + } + ], + "workarounds": [ + { + "lang": "en", + "value": "For RadPdfViewer, handle the LinkAnnotationTapped event, set Handled to true and launch only URIs with trusted schemes (http, https, mailto, tel). RadRichTextEditor has no equivalent event in the affected versions, so avoid loading documents from untrusted sources or upgrade to the fixed version.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "This issue affects WebFOCUS: 9.1, from 9.2 through 7, and from 9.3 through 7.
" + } + ] + } + ], + "references": [ + { + "url": "https://community.tibco.com/advisories/ibi-security-advisory-november-12-2026-ibi-webfocus-cve-2026-127036-r230/" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subAvailabilityImpact": "LOW", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 8.6, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/127xxx/CVE-2026-127046.json b/data/2026/127xxx/CVE-2026-127046.json new file mode 100644 index 0000000000..629760e4a7 --- /dev/null +++ b/data/2026/127xxx/CVE-2026-127046.json @@ -0,0 +1,337 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-127046", + "assignerOrgId": "5a6e4751-2f3f-4070-9419-94fb35b644e8", + "state": "PUBLISHED", + "assignerShortName": "CIRCL", + "dateReserved": "2026-11-12T12:04:58.364Z", + "datePublished": "2026-11-12T12:05:04.052Z", + "dateUpdated": "2026-11-12T12:08:46.771Z" + }, + "containers": { + "cna": { + "descriptions": [ + { + "lang": "en", + "value": "The MISP Modules website component contains an information disclosure vulnerability in the external tools management interface. The /external_tools/list endpoint returned stored API keys (the api_key field) in its JSON response via the ExternalTools model serializer. Additionally, the browser-based edit form pre-populated the API key input field with the stored credential value, exposing it in the DOM.\n\nThe /external_tools/list endpoint is accessible without authentication (the regression tests verify the response for both authenticated and unauthenticated clients), meaning any network-reachable client could retrieve the API keys for all configured external tools. These keys are used by the server to authenticate submissions to external analysis or enrichment services, so their disclosure allows an attacker to impersonate the MISP instance or directly access those external services.\n\nThe vulnerability also affected the edit workflow: the change_config endpoint previously required the API key to be present and non-empty on every save, forcing the key to round-trip through the client. The browser JavaScript stored the key in a reactive state object and updated the in-memory tool list with the credential value, further increasing the window of exposure in client-side memory and network traffic.\n\nAffected component: the website sub-application of MISP Modules, specifically the external_tools module (serializer in models.py, list endpoint, and the external_tools_index.html template). The impact is limited to confidentiality of the stored API keys; no integrity or availability impact on the MISP Modules website itself is indicated by the patch." + } + ], + "affected": [ + { + "product": "misp-modules", + "cpes": [ + "cpe:2.3:a:misp:misp_modules:*:*:*:*:*:*:*:*" + ], + "versions": [ + { + "version": "0", + "status": "affected", + "lessThanOrEqual": "3.1.4", + "versionType": "semver" + } + ], + "modules": [ + "website/app/external_tools", + "website/app/models" + ], + "programFiles": [ + "website/app/models/models.py", + "website/app/external_tools/external_tools.py", + "website/app/external_tools/external_tools_core.py", + "website/app/templates/external_tools/external_tools_index.html" + ], + "repo": "https://github.com/MISP/misp-modules", + "vendor": "misp" + } + ], + "references": [ + { + "url": "https://github.com/MISP/misp-modules/commit/61c27893066cee80d9711649765ebc2bccd0e4af", + "name": "Security patch", + "tags": [ + "patch" + ] + } + ], + "x_gcve": [ + { + "recordType": "advisory", + "extensions": { + "bcp-05-x-01": { + "ai_annotations": [ + { + "scope": "record", + "gna_source": 1, + "tags": [ + "ai-computer-assisted:llm-generated", + "ai-computer-assisted:classification" + ], + "description": "Draft vulnerability metadata was generated from a git-format patch using an Ollama-hosted language model. Human validation is required before publication.", + "ai_level": "generated", + "review_status": "none", + "models": [ + { + "name": "qwen3.8:27b", + "gna_source": 1, + "source": "ollama", + "identifier": "qwen3.8:27b" + } + ] + } + ] + }, + "bcp-05-x-02": { + "x_patch2vuln": { + "generator": "patch2vuln.py", + "generatedAt": "2026-11-12T11:59:08.631868Z", + "model": "qwen3.8:27b", + "source": "https://github.com/MISP/misp-modules/commit/61c27893066cee80d9711649765ebc2bccd0e4af.patch", + "patchSha256": "200a89910bce4823c08ee129545edc9fe7177cb0de9c5555925aa075155ca61b", + "patchTruncated": false, + "commit": "61c27893066cee80d9711649765ebc2bccd0e4af", + "subject": "fix: [website] keep external tool API keys out of responses", + "patches": [ + { + "source": "https://github.com/MISP/misp-modules/commit/61c27893066cee80d9711649765ebc2bccd0e4af.patch", + "sourceUrl": "https://github.com/MISP/misp-modules/commit/61c27893066cee80d9711649765ebc2bccd0e4af.patch", + "patchSha256": "200a89910bce4823c08ee129545edc9fe7177cb0de9c5555925aa075155ca61b", + "commit": "61c27893066cee80d9711649765ebc2bccd0e4af", + "subject": "fix: [website] keep external tool API keys out of responses", + "date": "Thu, 12 Nov 2026 09:37:45 +0100", + "retrievedAt": "2026-11-12T11:58:13.406720Z" + } + ], + "confidence": "medium", + "assumptions": [ + "The /external_tools/list endpoint is accessible without authentication based on regression tests that verify the response for both authenticated and unauthenticated clients; however, the README notes that management operations require ADMIN_PASSWORD, so the list endpoint's access control may vary by deployment configuration.", + "CVSS SC:H assumes the exposed API keys grant meaningful access to external services; the actual scope of access depends on the specific external tools configured and is not specified in the patch.", + "No specific product version or release boundary is identified in the patch; the affected version range is therefore marked as unspecified.", + "CAPEC-126 is the closest available pattern but is not a perfect match; the vulnerability is more precisely an API response information disclosure than a session hijacking. No CAPEC pattern specifically covers 'sensitive credential in API JSON response' without a session framing.", + "The commit references issue #816 but no reporter or finder is named in the patch metadata or commit message.", + "The 60-character maximum length validation for API keys is a new constraint introduced by the patch; it is unclear whether keys longer than 60 characters were previously valid, which could affect deployments with longer keys." + ], + "fixSummary": "The fix removes the api_key field from the ExternalTools.to_json() serializer so that /external_tools/list no longer returns credentials. The edit form is changed to a write-only pattern: the API key input starts empty, a blank or missing value on save retains the previously stored key, and a non-empty value replaces it. After a successful save the client clears the key field and does not propagate the credential into the in-memory tool list. Input validation is tightened to reject non-string or over-length key values. Server-side tool submissions continue to use the stored key from the database.", + "patchSummary": "models.py: removed the api_key entry from ExternalTools.to_json(). external_tools.py (change_config endpoint): replaced the nested if-chain that required tool_api_key to be present and non-empty with a flat validation loop for tool_id/tool_name/tool_url, added a type-and-length check (string, max 60 chars) for tool_api_key when present, and made the field optional (write-only semantics). external_tools_core.py (change_config_core): changed tool.api_key assignment to be conditional on a truthy request_json.get('tool_api_key'). external_tools_index.html: initialized the form key field to empty string instead of tool.api_key, added placeholder and helper text, fixed a bug where the error-clearing selector referenced the wrong field, moved browser-state updates to after a successful HTTP response (res.ok check), and cleared the key input after save. README.md: documented the write-only key behavior. Tests: added browser-level (Playwright) and unit-level regression tests verifying the list endpoint omits api_key,空", + "credits": [ + { + "lang": "en", + "value": "Alexandre Dulaunoy", + "type": "remediation developer" + } + ], + "cvssRationale": "AV:N: the /external_tools/list endpoint is reachable over the network via HTTP. AC:L: exploitation requires only a single GET request with no special conditions. AT:N: no attack prerequisites such as race conditions or specific timing. PR:N: regression tests confirm the endpoint returns 200 and previously included api_key for both authenticated and unauthenticated clients, indicating no privilege is required. UI:N: no victim interaction is needed; the attacker simply reads the response. VC:H: the exposed data is API keys (credentials) for external services, representing high confidentiality loss. VI:N and VA:N: no integrity or availability impact on the MISP Modules website. SC:H: the stolen API keys can be used to authenticate to external analysis/enrichment services, representing high confidentiality impact on a subsequent component. SI:N and SA:N: no integrity or availability impact on subsequent components is indicated.", + "ssvc": { + "version": "2.0.3", + "role": "Supplier", + "timestamp": "2026-11-12T11:59:08Z", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ] + }, + "weaknessRationale": [ + { + "cweId": "CWE-200", + "rationale": "The /external_tools/list endpoint returned stored API keys in its JSON response to any client (authenticated or not), exposing credentials to unauthorized parties. The browser form also pre-populated the key in the DOM." + }, + { + "cweId": "CWE-522", + "rationale": "API keys used to authenticate to external services were stored and transmitted without adequate protection: they appeared in API responses and in client-side form state, violating the principle that credentials should be write-only from the client perspective." + } + ], + "capecRationale": [ + { + "capecId": "CAPEC-126", + "rationale": "The closest available CAPEC pattern. The attack involves an attacker obtaining credential material (API keys) from a web application response and using it to authenticate to a subsequent service. CAPEC-126 covers the theft of session/credential tokens from a web application. The mapping is imperfect because the keys are long-lived API credentials rather than short-lived session tokens, and the attack does not involve a session per se, but the underlying mechanism (reading a credential from an HTTP response and replaying it) is the same class of attack. No CAPEC pattern specifically covers 'sensitive data in API response' without a session-hijacking framing, so this is the best available match." + } + ], + "draft": false, + "modelComparison": { + "selectedModel": "qwen3.8:27b", + "selectionMethod": "deterministic-consensus-v1", + "selectionNotice": "The selected result is closest to model consensus; this heuristic does not establish factual correctness and human review remains required.", + "rankings": [ + { + "model": "qwen3.8:27b", + "score": 6, + "agreementScore": 11, + "confidence": "medium", + "assumptionCount": 6 + } + ], + "potentialErrors": [] + } + } + }, + "bcp-05-x-03": { + "x_timeline": { + "events": [ + { + "type": "fix-developed", + "timestamp": "2026-11-12T08:37:45Z", + "description": "Corrective change authored (61c27893066cee80d9711649765ebc2bccd0e4af): fix: [website] keep external tool API keys out of responses", + "references": [ + "https://github.com/MISP/misp-modules/commit/61c27893066cee80d9711649765ebc2bccd0e4af.patch" + ], + "id": "evt-fix-developed-1" + }, + { + "id": "evt-fix-available-1", + "type": "fix-available", + "timestamp": "2026-11-12T11:58:13.406720Z", + "description": "Patch retrieved from the supplied URL; retrieval time is used as the default availability time.", + "references": [ + "https://github.com/MISP/misp-modules/commit/61c27893066cee80d9711649765ebc2bccd0e4af.patch" + ] + } + ] + } + } + }, + "vulnId": "gcve-1-2026-20141" + } + ], + "title": "MISP Modules Website Exposes External Tool API Keys in /external_tools/list Response", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-200", + "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-522", + "description": "CWE-522 Insufficiently Protected Credentials", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N", + "baseScore": 9.2, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + }, + { + "format": "SSVC", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "other": { + "type": "SSVC", + "content": { + "version": "2.0.3", + "role": "Supplier", + "timestamp": "2026-11-12T11:59:08Z", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ] + } + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "The fix removes the api_key field from the ExternalTools.to_json() serializer so that /external_tools/list no longer returns credentials. The edit form is changed to a write-only pattern: the API key input starts empty, a blank or missing value on save retains the previously stored key, and a non-empty value replaces it. After a successful save the client clears the key field and does not propagate the credential into the in-memory tool list. Input validation is tightened to reject non-string or over-length key values. Server-side tool submissions continue to use the stored key from the database." + } + ], + "impacts": [ + { + "capecId": "CAPEC-126", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-126 Web Application Session Hijacking" + } + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Alexandre Dulaunoy", + "type": "remediation developer" + } + ], + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:misp:misp-modules:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndIncluding": "3.1.4" + } + ] + } + ] + } + ], + "providerMetadata": { + "orgId": "5a6e4751-2f3f-4070-9419-94fb35b644e8", + "shortName": "CIRCL", + "dateUpdated": "2026-11-12T12:08:46.771Z" + } + } + } +} \ No newline at end of file diff --git a/data/2026/13xxx/CVE-2026-13732.json b/data/2026/13xxx/CVE-2026-13732.json index a0a5c77104..e3b6546bad 100644 --- a/data/2026/13xxx/CVE-2026-13732.json +++ b/data/2026/13xxx/CVE-2026-13732.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-06-29T14:42:33.339Z", "datePublished": "2026-08-31T19:23:18.741Z", - "dateUpdated": "2026-11-12T11:14:04.702Z" + "dateUpdated": "2026-11-12T11:38:48.189Z" }, "containers": { "cna": { @@ -140,6 +140,82 @@ "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "gdb", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:8.2-18.1.el8_6", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:rhel_aus:8.6::appstream", + "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "gdb", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:8.2-18.1.el8_6", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:rhel_aus:8.6::appstream", + "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "gdb", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:8.2-19.1.el8_8", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:rhel_e4s:8.8::appstream", + "cpe:/a:redhat:rhel_tus:8.8::appstream" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "gdb", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:8.2-19.1.el8_8", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:rhel_e4s:8.8::appstream", + "cpe:/a:redhat:rhel_tus:8.8::appstream" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", @@ -448,6 +524,22 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99596", + "name": "RHSA-2026:99596", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99597", + "name": "RHSA-2026:99597", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-13732", "tags": [ @@ -505,7 +597,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-12T11:14:04.702Z" + "dateUpdated": "2026-11-12T11:38:48.189Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/13xxx/CVE-2026-13764.json b/data/2026/13xxx/CVE-2026-13764.json new file mode 100644 index 0000000000..39f78baa50 --- /dev/null +++ b/data/2026/13xxx/CVE-2026-13764.json @@ -0,0 +1,96 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-13764", + "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "state": "PUBLISHED", + "assignerShortName": "Wordfence", + "dateReserved": "2026-06-29T18:58:35.512Z", + "datePublished": "2026-11-12T11:32:17.421Z", + "dateUpdated": "2026-11-12T11:32:17.421Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "shortName": "Wordfence", + "dateUpdated": "2026-11-12T11:32:17.421Z" + }, + "affected": [ + { + "vendor": "StylemixThemes", + "product": "Masterstudy - Education WordPress Theme", + "versions": [ + { + "version": "0", + "status": "affected", + "lessThanOrEqual": "4.8.151", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The Masterstudy - Education WordPress Theme theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.151. This is due to missing authorization and nonce validation on the `masterstudy_ms_stm_set_discard_transient` AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to Administrator by setting the `stm_developer_access_token` transient and using the developer access auto-login flow to obtain administrator session cookies." + } + ], + "title": "Masterstudy - Education WordPress Theme <= 4.8.151 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation", + "references": [ + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ec898f73-d275-4624-911b-89d9a945ff92?source=cve" + }, + { + "url": "https://themeforest.net/item/masterstudy-education-center-wordpress-theme/12170274" + }, + { + "url": "https://docs.stylemixthemes.com/masterstudy-theme-documentation/extra-materials/changelog" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "CWE-862 Missing Authorization", + "cweId": "CWE-862", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH" + } + } + ], + "credits": [ + { + "lang": "en", + "type": "finder", + "value": "lhking" + } + ], + "timeline": [ + { + "time": "2026-07-08T15:20:08.000Z", + "lang": "en", + "value": "Vendor Notified" + }, + { + "time": "2026-11-11T22:29:23.000Z", + "lang": "en", + "value": "Disclosed" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/15xxx/CVE-2026-15309.json b/data/2026/15xxx/CVE-2026-15309.json new file mode 100644 index 0000000000..d4cf2b4bc5 --- /dev/null +++ b/data/2026/15xxx/CVE-2026-15309.json @@ -0,0 +1,93 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-15309", + "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "state": "PUBLISHED", + "assignerShortName": "Wordfence", + "dateReserved": "2026-07-09T17:22:09.551Z", + "datePublished": "2026-11-12T11:32:16.143Z", + "dateUpdated": "2026-11-12T11:32:16.143Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "shortName": "Wordfence", + "dateUpdated": "2026-11-12T11:32:16.143Z" + }, + "affected": [ + { + "vendor": "WishList Member", + "product": "CourseCure Courses", + "versions": [ + { + "version": "0", + "status": "affected", + "lessThanOrEqual": "1.5.1", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The CourseCure Courses plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.1. This is due to a missing capability check in the ajax_save_settings() function, which accepts arbitrary POST parameters and calls update_option() with attacker-controlled keys and values without any authorization verification. This makes it possible for authenticated attackers, with subscriber-level access and above, to elevate their privileges to administrator by setting the default_role WordPress option to 'administrator' and users_can_register to '1', then registering a new account that is automatically granted full administrator access." + } + ], + "title": "CourseCure Courses <= 1.5.1 - Authenticated (Subscriber+) Privilege Escalation to 'ajax_save_settings' Endpoint", + "references": [ + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2d754689-0d64-4cb8-9c73-7dd6d4fb0c72?source=cve" + }, + { + "url": "https://my.wishlistmember.com/changelog/coursecure-courses-1-5-3/" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "CWE-269 Improper Privilege Management", + "cweId": "CWE-269", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH" + } + } + ], + "credits": [ + { + "lang": "en", + "type": "finder", + "value": "Austin Ginder" + } + ], + "timeline": [ + { + "time": "2026-08-28T18:05:23.000Z", + "lang": "en", + "value": "Vendor Notified" + }, + { + "time": "2026-11-11T22:31:15.000Z", + "lang": "en", + "value": "Disclosed" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/16xxx/CVE-2026-16135.json b/data/2026/16xxx/CVE-2026-16135.json new file mode 100644 index 0000000000..31c20f2868 --- /dev/null +++ b/data/2026/16xxx/CVE-2026-16135.json @@ -0,0 +1,93 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-16135", + "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "state": "PUBLISHED", + "assignerShortName": "Wordfence", + "dateReserved": "2026-07-17T16:34:09.465Z", + "datePublished": "2026-11-12T11:32:17.038Z", + "dateUpdated": "2026-11-12T11:32:17.038Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "shortName": "Wordfence", + "dateUpdated": "2026-11-12T11:32:17.038Z" + }, + "affected": [ + { + "vendor": "VibeThemes", + "product": "VibeBP", + "versions": [ + { + "version": "0", + "status": "affected", + "lessThanOrEqual": "1.9.9.8.1", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The VibeBP plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.9.8.1. This is due to the plugin allowing arbitrary user meta updates through the set_email_notification_settings() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to grant themselves administrator privileges by updating their own 'wp_capabilities' user meta value." + } + ], + "title": "VibeBP <= 1.9.9.8.1 - Authenticated (Subscriber+) Privilege Escalation in set_email_notification_settings()", + "references": [ + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d726543c-9ce2-4359-978d-c72a451296a2?source=cve" + }, + { + "url": "https://themeforest.net/item/wplms-learning-management-system/6780226" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "CWE-269 Improper Privilege Management", + "cweId": "CWE-269", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH" + } + } + ], + "credits": [ + { + "lang": "en", + "type": "finder", + "value": "d.v4n_s3c" + } + ], + "timeline": [ + { + "time": "2026-07-21T16:40:48.000Z", + "lang": "en", + "value": "Vendor Notified" + }, + { + "time": "2026-11-11T22:33:53.000Z", + "lang": "en", + "value": "Disclosed" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/19xxx/CVE-2026-19421.json b/data/2026/19xxx/CVE-2026-19421.json new file mode 100644 index 0000000000..6224e1752e --- /dev/null +++ b/data/2026/19xxx/CVE-2026-19421.json @@ -0,0 +1,129 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-19421", + "assignerOrgId": "0fc0942c-577d-436f-ae8e-945763c79b02", + "state": "PUBLISHED", + "assignerShortName": "Zohocorp", + "dateReserved": "2026-08-10T10:54:20.575Z", + "datePublished": "2026-11-12T12:07:53.861Z", + "dateUpdated": "2026-11-12T12:07:53.861Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "0fc0942c-577d-436f-ae8e-945763c79b02", + "shortName": "Zohocorp", + "dateUpdated": "2026-11-12T12:07:53.861Z" + }, + "title": "Authenticated Injection", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-78", + "description": "CWE-78 – Improper Neutralization of Special Elements used in an OS Command", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-88", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-88 – OS Command Injection" + } + ] + } + ], + "affected": [ + { + "vendor": "Zohocorp", + "product": "DDI Central", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "6301", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "cpeApplicability": [ + { + "operator": "OR", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zohocorp:ddi_central:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "6301" + } + ] + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Zohocorp ManageEngine DDI Central versions below 6301 is affected by a PowerShell injection vulnerability due to insufficient validation of user-supplied TXT record values in Windows DNS operations.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Zohocorp ManageEngine DDI Central versions below 6301 is affected by a PowerShell injection vulnerability due to insufficient validation of user-supplied TXT record values in Windows DNS operations." + } + ] + } + ], + "references": [ + { + "url": "https://www.manageengine.com/dns-dhcp-ipam/security-updates/cve-2026-19421.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/2xxx/CVE-2026-2982.json b/data/2026/2xxx/CVE-2026-2982.json new file mode 100644 index 0000000000..f0b9d335b1 --- /dev/null +++ b/data/2026/2xxx/CVE-2026-2982.json @@ -0,0 +1,93 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-2982", + "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "state": "PUBLISHED", + "assignerShortName": "Wordfence", + "dateReserved": "2026-02-22T16:37:45.602Z", + "datePublished": "2026-11-12T11:32:16.664Z", + "dateUpdated": "2026-11-12T11:32:16.664Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", + "shortName": "Wordfence", + "dateUpdated": "2026-11-12T11:32:16.664Z" + }, + "affected": [ + { + "vendor": "wptb", + "product": "WP Table Builder – Drag & Drop Table Builder", + "versions": [ + { + "version": "0", + "status": "affected", + "lessThanOrEqual": "2.1.7", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The WP Table Builder – Drag & Drop Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter in versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation by lower-privileged users requires an administrator to explicitly allow those roles in plugin settings. While it is possible to assign subscriber-level roles with the ability to create tables, such privileges are usually assigned to the more appropriate contributor, author, or editor level roles." + } + ], + "title": "WP Table Builder – Drag & Drop Table Builder <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'url'", + "references": [ + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d07a08ad-c9b7-44fe-a199-fa8bb7f3eea2?source=cve" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset/3469639/wp-table-builder" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "CWE-79 Improper Neutralization of Input During Web Page Generation", + "cweId": "CWE-79", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM" + } + } + ], + "credits": [ + { + "lang": "en", + "type": "finder", + "value": "lord willmore" + } + ], + "timeline": [ + { + "time": "2026-02-22T16:53:59.000Z", + "lang": "en", + "value": "Vendor Notified" + }, + { + "time": "2026-11-11T22:23:53.000Z", + "lang": "en", + "value": "Disclosed" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/33xxx/CVE-2026-33818.json b/data/2026/33xxx/CVE-2026-33818.json index d0c2fd4ec5..d7094510f7 100644 --- a/data/2026/33xxx/CVE-2026-33818.json +++ b/data/2026/33xxx/CVE-2026-33818.json @@ -8,14 +8,14 @@ "assignerShortName": "Go", "dateReserved": "2026-03-23T20:35:32.815Z", "datePublished": "2026-08-13T21:58:52.821Z", - "dateUpdated": "2026-11-12T05:21:59.095Z" + "dateUpdated": "2026-11-12T11:21:12.992Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", - "dateUpdated": "2026-11-12T05:21:59.095Z" + "dateUpdated": "2026-11-12T11:21:12.992Z" }, "title": "Enforce maximum recursion depth in encoding/asn1", "descriptions": [ diff --git a/data/2026/42xxx/CVE-2026-42504.json b/data/2026/42xxx/CVE-2026-42504.json index f06f749647..e20ed1190b 100644 --- a/data/2026/42xxx/CVE-2026-42504.json +++ b/data/2026/42xxx/CVE-2026-42504.json @@ -8,14 +8,14 @@ "assignerShortName": "Go", "dateReserved": "2026-04-28T00:21:12.792Z", "datePublished": "2026-06-02T22:01:37.219Z", - "dateUpdated": "2026-11-12T05:21:57.482Z" + "dateUpdated": "2026-11-12T11:21:11.471Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", - "dateUpdated": "2026-11-12T05:21:57.482Z" + "dateUpdated": "2026-11-12T11:21:11.471Z" }, "title": "Quadratic complexity in WordDecoder.DecodeHeader in mime", "descriptions": [ diff --git a/data/2026/76xxx/CVE-2026-76792.json b/data/2026/76xxx/CVE-2026-76792.json index 96377e9254..7bfca7ca81 100644 --- a/data/2026/76xxx/CVE-2026-76792.json +++ b/data/2026/76xxx/CVE-2026-76792.json @@ -8,7 +8,7 @@ "assignerShortName": "WPScan", "dateReserved": "2026-08-19T17:55:44.197Z", "datePublished": "2026-11-12T06:00:10.307Z", - "dateUpdated": "2026-11-12T06:00:10.307Z" + "dateUpdated": "2026-11-12T11:20:22.063Z" }, "containers": { "cna": { @@ -78,6 +78,68 @@ "x_generator": { "engine": "WPScan CVE Generator" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-287", + "lang": "en", + "description": "CWE-287 Improper Authentication" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.1, + "attackVector": "NETWORK", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "HIGH", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T11:15:47.190627Z", + "id": "CVE-2026-76792", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-12T11:20:22.063Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/78xxx/CVE-2026-78367.json b/data/2026/78xxx/CVE-2026-78367.json index 3a1e9737ec..a778885852 100644 --- a/data/2026/78xxx/CVE-2026-78367.json +++ b/data/2026/78xxx/CVE-2026-78367.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-08-24T12:52:02.839Z", "datePublished": "2026-08-24T13:48:52.103Z", - "dateUpdated": "2026-11-06T07:44:59.903Z" + "dateUpdated": "2026-11-12T11:55:33.044Z" }, "containers": { "cna": { @@ -48,6 +48,24 @@ } ], "affected": [ + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "rpm", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:4.19.1.1-29.el10_3", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux:10.3" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Hardened Images", @@ -66,16 +84,6 @@ "cpe:/a:redhat:hummingbird:1" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Enterprise Linux 10", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "rpm", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:enterprise_linux:10" - ] - }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -446,6 +454,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99595", + "name": "RHSA-2026:99595", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-78367", "tags": [ @@ -506,7 +522,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-06T07:44:59.903Z" + "dateUpdated": "2026-11-12T11:55:33.044Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/84xxx/CVE-2026-84233.json b/data/2026/84xxx/CVE-2026-84233.json index 3b050d1b95..93e826f4f1 100644 --- a/data/2026/84xxx/CVE-2026-84233.json +++ b/data/2026/84xxx/CVE-2026-84233.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-09-01T12:20:02.226Z", "datePublished": "2026-09-01T14:53:45.586Z", - "dateUpdated": "2026-11-06T01:05:47.372Z" + "dateUpdated": "2026-11-12T11:55:33.075Z" }, "containers": { "cna": { @@ -48,6 +48,24 @@ } ], "affected": [ + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "rpm", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:4.19.1.1-29.el10_3", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux:10.3" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Hardened Images", @@ -66,16 +84,6 @@ "cpe:/a:redhat:hummingbird:1" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Enterprise Linux 10", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "rpm", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:enterprise_linux:10" - ] - }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -126,6 +134,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99595", + "name": "RHSA-2026:99595", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-84233", "tags": [ @@ -183,7 +199,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-06T01:05:47.372Z" + "dateUpdated": "2026-11-12T11:55:33.075Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/84xxx/CVE-2026-84837.json b/data/2026/84xxx/CVE-2026-84837.json index b75cec6511..2f70dcaa24 100644 --- a/data/2026/84xxx/CVE-2026-84837.json +++ b/data/2026/84xxx/CVE-2026-84837.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-09-02T11:56:41.213Z", "datePublished": "2026-09-02T15:12:58.497Z", - "dateUpdated": "2026-11-06T07:45:23.212Z" + "dateUpdated": "2026-11-12T11:55:33.092Z" }, "containers": { "cna": { @@ -48,6 +48,24 @@ } ], "affected": [ + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "rpm", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:4.19.1.1-29.el10_3", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux:10.3" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Hardened Images", @@ -66,16 +84,6 @@ "cpe:/a:redhat:hummingbird:1" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Enterprise Linux 10", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "rpm", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:enterprise_linux:10" - ] - }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -446,6 +454,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99595", + "name": "RHSA-2026:99595", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-84837", "tags": [ @@ -503,7 +519,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-06T07:45:23.212Z" + "dateUpdated": "2026-11-12T11:55:33.092Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/84xxx/CVE-2026-84838.json b/data/2026/84xxx/CVE-2026-84838.json index 8eb1a0c777..74e5c862e0 100644 --- a/data/2026/84xxx/CVE-2026-84838.json +++ b/data/2026/84xxx/CVE-2026-84838.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-09-02T11:56:41.213Z", "datePublished": "2026-09-02T15:13:02.577Z", - "dateUpdated": "2026-11-06T01:07:34.973Z" + "dateUpdated": "2026-11-12T11:55:45.638Z" }, "containers": { "cna": { @@ -48,6 +48,24 @@ } ], "affected": [ + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 10", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "rpm", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:4.19.1.1-29.el10_3", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux:10.3" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Hardened Images", @@ -66,16 +84,6 @@ "cpe:/a:redhat:hummingbird:1" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Enterprise Linux 10", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "rpm", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:enterprise_linux:10" - ] - }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -126,6 +134,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99595", + "name": "RHSA-2026:99595", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-84838", "tags": [ @@ -183,7 +199,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-06T01:07:34.973Z" + "dateUpdated": "2026-11-12T11:55:45.638Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/91xxx/CVE-2026-91150.json b/data/2026/91xxx/CVE-2026-91150.json index 7c191860af..34da26e8b3 100644 --- a/data/2026/91xxx/CVE-2026-91150.json +++ b/data/2026/91xxx/CVE-2026-91150.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-09-14T20:36:53.441Z", "datePublished": "2026-11-11T18:38:12.565Z", - "dateUpdated": "2026-11-11T18:38:12.565Z" + "dateUpdated": "2026-11-12T11:45:09.204Z" }, "containers": { "cna": { @@ -54,8 +54,34 @@ "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "cockpit", "defaultStatus": "affected", + "versions": [ + { + "version": "0:366.1.1-1.el10_3", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], "cpes": [ - "cpe:/a:redhat:enterprise_linux:10" + "cpe:/o:redhat:enterprise_linux:10.3" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 8", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "cockpit", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:310.10.2-1.el8_10", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux:8::baseos" ] }, { @@ -68,16 +94,6 @@ "cpe:/o:redhat:rhel_els:7" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Enterprise Linux 8", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "cockpit", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:enterprise_linux:8" - ] - }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", @@ -120,6 +136,22 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:99600", + "name": "RHSA-2026:99600", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99603", + "name": "RHSA-2026:99603", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-91150", "tags": [ @@ -177,7 +209,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-11T18:38:12.565Z" + "dateUpdated": "2026-11-12T11:45:09.204Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/91xxx/CVE-2026-91151.json b/data/2026/91xxx/CVE-2026-91151.json index 9b570ea290..c30eff7d2d 100644 --- a/data/2026/91xxx/CVE-2026-91151.json +++ b/data/2026/91xxx/CVE-2026-91151.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-09-14T20:37:18.522Z", "datePublished": "2026-11-11T19:46:14.718Z", - "dateUpdated": "2026-11-11T19:46:14.718Z" + "dateUpdated": "2026-11-12T11:45:09.245Z" }, "containers": { "cna": { @@ -54,8 +54,34 @@ "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "cockpit", "defaultStatus": "affected", + "versions": [ + { + "version": "0:366.1.1-1.el10_3", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], "cpes": [ - "cpe:/a:redhat:enterprise_linux:10" + "cpe:/o:redhat:enterprise_linux:10.3" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 8", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "cockpit", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:310.10.2-1.el8_10", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/o:redhat:enterprise_linux:8::baseos" ] }, { @@ -68,16 +94,6 @@ "cpe:/o:redhat:rhel_els:7" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Enterprise Linux 8", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "cockpit", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:enterprise_linux:8" - ] - }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", @@ -120,6 +136,22 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:99600", + "name": "RHSA-2026:99600", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99603", + "name": "RHSA-2026:99603", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-91151", "tags": [ @@ -177,7 +209,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-11T19:46:14.718Z" + "dateUpdated": "2026-11-12T11:45:09.245Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/delta.json b/data/delta.json index 1f318ce42a..7238e2b0f4 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,45 +1,26 @@ { - "fetchTime": "2026-11-12T11:15:45.095Z", - "numberOfChanges": 6, + "fetchTime": "2026-11-12T12:08:57.966Z", + "numberOfChanges": 3, "new": [ { - "cveId": "CVE-2026-114369", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114369", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114369.json", - "dateUpdated": "2026-11-12T11:09:29.857Z" - } - ], - "updated": [ - { - "cveId": "CVE-2025-66365", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-66365", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/66xxx/CVE-2025-66365.json", - "dateUpdated": "2026-11-12T11:13:47.820Z" - }, - { - "cveId": "CVE-2026-118494", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118494", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118494.json", - "dateUpdated": "2026-11-12T11:12:57.005Z" - }, - { - "cveId": "CVE-2026-124023", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124023", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124023.json", - "dateUpdated": "2026-11-12T11:08:29.565Z" - }, - { - "cveId": "CVE-2026-13732", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-13732", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13732.json", - "dateUpdated": "2026-11-12T11:14:04.702Z" - }, - { - "cveId": "CVE-2026-59599", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59599", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59599.json", - "dateUpdated": "2026-11-12T11:15:37.859Z" + "cveId": "CVE-2026-124705", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124705", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124705.json", + "dateUpdated": "2026-11-12T11:59:34.996Z" + }, + { + "cveId": "CVE-2026-127046", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127046", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127046.json", + "dateUpdated": "2026-11-12T12:08:46.771Z" + }, + { + "cveId": "CVE-2026-19421", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19421", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19421.json", + "dateUpdated": "2026-11-12T12:07:53.861Z" } ], + "updated": [], "error": [] } \ No newline at end of file diff --git a/data/deltaLog.json b/data/deltaLog.json index ef3be24a1b..bcdde6ec4d 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,314 @@ [ + { + "fetchTime": "2026-11-12T12:08:57.966Z", + "numberOfChanges": 3, + "new": [ + { + "cveId": "CVE-2026-124705", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124705", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124705.json", + "dateUpdated": "2026-11-12T11:59:34.996Z" + }, + { + "cveId": "CVE-2026-127046", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127046", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127046.json", + "dateUpdated": "2026-11-12T12:08:46.771Z" + }, + { + "cveId": "CVE-2026-19421", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19421", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19421.json", + "dateUpdated": "2026-11-12T12:07:53.861Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-12T11:58:21.304Z", + "numberOfChanges": 5, + "new": [], + "updated": [ + { + "cveId": "CVE-2022-4329", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-4329", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/4xxx/CVE-2022-4329.json", + "dateUpdated": "2026-11-12T11:52:48.759Z" + }, + { + "cveId": "CVE-2026-78367", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-78367", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/78xxx/CVE-2026-78367.json", + "dateUpdated": "2026-11-12T11:55:33.044Z" + }, + { + "cveId": "CVE-2026-84233", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84233", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84233.json", + "dateUpdated": "2026-11-12T11:55:33.075Z" + }, + { + "cveId": "CVE-2026-84837", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84837", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84837.json", + "dateUpdated": "2026-11-12T11:55:33.092Z" + }, + { + "cveId": "CVE-2026-84838", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84838", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84838.json", + "dateUpdated": "2026-11-12T11:55:45.638Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T11:52:11.627Z", + "numberOfChanges": 1, + "new": [], + "updated": [ + { + "cveId": "CVE-2026-124058", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124058", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124058.json", + "dateUpdated": "2026-11-12T11:48:41.578Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T11:46:33.169Z", + "numberOfChanges": 2, + "new": [], + "updated": [ + { + "cveId": "CVE-2026-91150", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-91150", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/91xxx/CVE-2026-91150.json", + "dateUpdated": "2026-11-12T11:45:09.204Z" + }, + { + "cveId": "CVE-2026-91151", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-91151", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/91xxx/CVE-2026-91151.json", + "dateUpdated": "2026-11-12T11:45:09.245Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T11:40:45.114Z", + "numberOfChanges": 1, + "new": [], + "updated": [ + { + "cveId": "CVE-2026-13732", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-13732", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13732.json", + "dateUpdated": "2026-11-12T11:38:48.189Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T11:34:51.547Z", + "numberOfChanges": 5, + "new": [ + { + "cveId": "CVE-2026-127036", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127036", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127036.json", + "dateUpdated": "2026-11-12T11:34:16.443Z" + }, + { + "cveId": "CVE-2026-13764", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-13764", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13764.json", + "dateUpdated": "2026-11-12T11:32:17.421Z" + }, + { + "cveId": "CVE-2026-15309", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-15309", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15309.json", + "dateUpdated": "2026-11-12T11:32:16.143Z" + }, + { + "cveId": "CVE-2026-16135", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16135", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16135.json", + "dateUpdated": "2026-11-12T11:32:17.038Z" + }, + { + "cveId": "CVE-2026-2982", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-2982", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/2xxx/CVE-2026-2982.json", + "dateUpdated": "2026-11-12T11:32:16.664Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-12T11:28:05.801Z", + "numberOfChanges": 14, + "new": [], + "updated": [ + { + "cveId": "CVE-2026-106027", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106027", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106027.json", + "dateUpdated": "2026-11-12T11:25:14.471Z" + }, + { + "cveId": "CVE-2026-110041", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110041", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110041.json", + "dateUpdated": "2026-11-12T11:24:59.980Z" + }, + { + "cveId": "CVE-2026-110072", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110072", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110072.json", + "dateUpdated": "2026-11-12T11:24:45.544Z" + }, + { + "cveId": "CVE-2026-110959", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110959", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110959.json", + "dateUpdated": "2026-11-12T11:24:31.088Z" + }, + { + "cveId": "CVE-2026-118421", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118421", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118421.json", + "dateUpdated": "2026-11-12T11:24:16.612Z" + }, + { + "cveId": "CVE-2026-118531", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118531", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118531.json", + "dateUpdated": "2026-11-12T11:24:02.133Z" + }, + { + "cveId": "CVE-2026-119039", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119039", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119039.json", + "dateUpdated": "2026-11-12T11:23:47.612Z" + }, + { + "cveId": "CVE-2026-119040", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119040", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119040.json", + "dateUpdated": "2026-11-12T11:23:33.118Z" + }, + { + "cveId": "CVE-2026-121498", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121498", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121498.json", + "dateUpdated": "2026-11-12T11:23:18.635Z" + }, + { + "cveId": "CVE-2026-122003", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122003", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122003.json", + "dateUpdated": "2026-11-12T11:23:04.127Z" + }, + { + "cveId": "CVE-2026-123044", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123044", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123044.json", + "dateUpdated": "2026-11-12T11:22:49.706Z" + }, + { + "cveId": "CVE-2026-123092", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123092", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123092.json", + "dateUpdated": "2026-11-12T11:22:35.225Z" + }, + { + "cveId": "CVE-2026-124647", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124647", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124647.json", + "dateUpdated": "2026-11-12T11:22:20.720Z" + }, + { + "cveId": "CVE-2026-13732", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-13732", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13732.json", + "dateUpdated": "2026-11-12T11:22:29.800Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-12T11:22:09.479Z", + "numberOfChanges": 10, + "new": [], + "updated": [ + { + "cveId": "CVE-2026-124648", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124648", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124648.json", + "dateUpdated": "2026-11-12T11:22:06.207Z" + }, + { + "cveId": "CVE-2026-124652", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124652", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124652.json", + "dateUpdated": "2026-11-12T11:21:50.669Z" + }, + { + "cveId": "CVE-2026-124653", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124653", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124653.json", + "dateUpdated": "2026-11-12T11:21:36.228Z" + }, + { + "cveId": "CVE-2026-124665", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124665", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124665.json", + "dateUpdated": "2026-11-12T11:21:21.739Z" + }, + { + "cveId": "CVE-2026-124814", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124814", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124814.json", + "dateUpdated": "2026-11-12T11:21:07.220Z" + }, + { + "cveId": "CVE-2026-124815", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124815", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124815.json", + "dateUpdated": "2026-11-12T11:20:51.641Z" + }, + { + "cveId": "CVE-2026-124817", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124817", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124817.json", + "dateUpdated": "2026-11-12T11:20:37.064Z" + }, + { + "cveId": "CVE-2026-33818", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-33818", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33818.json", + "dateUpdated": "2026-11-12T11:21:12.992Z" + }, + { + "cveId": "CVE-2026-42504", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42504", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42504.json", + "dateUpdated": "2026-11-12T11:21:11.471Z" + }, + { + "cveId": "CVE-2026-76792", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-76792", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76792.json", + "dateUpdated": "2026-11-12T11:20:22.063Z" + } + ], + "error": [] + }, { "fetchTime": "2026-11-12T11:15:45.095Z", "numberOfChanges": 6, @@ -848076,274 +848386,5 @@ } ], "error": [] - }, - { - "fetchTime": "2026-10-13T11:58:04.166Z", - "numberOfChanges": 14, - "new": [], - "updated": [ - { - "cveId": "CVE-2026-103903", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103903", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103903.json", - "dateUpdated": "2026-10-13T11:57:50.805Z" - }, - { - "cveId": "CVE-2026-105464", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105464", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105464.json", - "dateUpdated": "2026-10-13T11:57:50.126Z" - }, - { - "cveId": "CVE-2026-105465", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105465", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105465.json", - "dateUpdated": "2026-10-13T11:57:50.538Z" - }, - { - "cveId": "CVE-2026-108604", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108604", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108604.json", - "dateUpdated": "2026-10-13T11:49:10.959Z" - }, - { - "cveId": "CVE-2026-108609", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108609", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108609.json", - "dateUpdated": "2026-10-13T11:57:03.841Z" - }, - { - "cveId": "CVE-2026-78404", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-78404", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/78xxx/CVE-2026-78404.json", - "dateUpdated": "2026-10-13T11:57:50.683Z" - }, - { - "cveId": "CVE-2026-89269", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89269", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89269.json", - "dateUpdated": "2026-10-13T11:54:09.173Z" - }, - { - "cveId": "CVE-2026-89271", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89271", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89271.json", - "dateUpdated": "2026-10-13T11:55:07.951Z" - }, - { - "cveId": "CVE-2026-96012", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96012", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96012.json", - "dateUpdated": "2026-10-13T11:57:50.005Z" - }, - { - "cveId": "CVE-2026-96262", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96262", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96262.json", - "dateUpdated": "2026-10-13T11:57:49.401Z" - }, - { - "cveId": "CVE-2026-96263", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96263", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96263.json", - "dateUpdated": "2026-10-13T11:57:49.528Z" - }, - { - "cveId": "CVE-2026-96264", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96264", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96264.json", - "dateUpdated": "2026-10-13T11:57:49.645Z" - }, - { - "cveId": "CVE-2026-96265", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96265", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96265.json", - "dateUpdated": "2026-10-13T11:57:49.766Z" - }, - { - "cveId": "CVE-2026-96266", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96266", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96266.json", - "dateUpdated": "2026-10-13T11:57:49.892Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-13T11:49:05.803Z", - "numberOfChanges": 7, - "new": [ - { - "cveId": "CVE-2026-109402", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109402", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109402.json", - "dateUpdated": "2026-10-13T11:45:14.983Z" - }, - { - "cveId": "CVE-2026-109832", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109832", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109832.json", - "dateUpdated": "2026-10-13T11:36:13.397Z" - }, - { - "cveId": "CVE-2026-94410", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94410", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94410.json", - "dateUpdated": "2026-10-13T11:37:32.500Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-108549", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108549", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108549.json", - "dateUpdated": "2026-10-13T11:36:36.083Z" - }, - { - "cveId": "CVE-2026-108555", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108555", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108555.json", - "dateUpdated": "2026-10-13T11:37:21.958Z" - }, - { - "cveId": "CVE-2026-108593", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108593", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108593.json", - "dateUpdated": "2026-10-13T11:38:18.277Z" - }, - { - "cveId": "CVE-2026-108598", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108598", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108598.json", - "dateUpdated": "2026-10-13T11:41:41.376Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-13T11:35:56.595Z", - "numberOfChanges": 7, - "new": [ - { - "cveId": "CVE-2026-109190", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109190", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109190.json", - "dateUpdated": "2026-10-13T11:30:18.246Z" - }, - { - "cveId": "CVE-2026-89279", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89279", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89279.json", - "dateUpdated": "2026-10-13T11:23:40.069Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-108115", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108115", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108115.json", - "dateUpdated": "2026-10-13T11:34:51.645Z" - }, - { - "cveId": "CVE-2026-108162", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108162", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108162.json", - "dateUpdated": "2026-10-13T11:32:31.911Z" - }, - { - "cveId": "CVE-2026-108261", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108261", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108261.json", - "dateUpdated": "2026-10-13T11:24:15.591Z" - }, - { - "cveId": "CVE-2026-108265", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108265", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108265.json", - "dateUpdated": "2026-10-13T11:28:12.950Z" - }, - { - "cveId": "CVE-2026-108268", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108268", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108268.json", - "dateUpdated": "2026-10-13T11:31:04.583Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-13T11:22:07.981Z", - "numberOfChanges": 11, - "new": [ - { - "cveId": "CVE-2026-109189", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109189", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109189.json", - "dateUpdated": "2026-10-13T11:15:17.290Z" - }, - { - "cveId": "CVE-2026-63316", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63316", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63316.json", - "dateUpdated": "2026-10-13T11:05:09.403Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-104057", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104057", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104057.json", - "dateUpdated": "2026-10-13T11:20:52.409Z" - }, - { - "cveId": "CVE-2026-104058", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104058", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104058.json", - "dateUpdated": "2026-10-13T11:20:53.067Z" - }, - { - "cveId": "CVE-2026-104059", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104059", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104059.json", - "dateUpdated": "2026-10-13T11:20:53.724Z" - }, - { - "cveId": "CVE-2026-107848", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107848", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107848.json", - "dateUpdated": "2026-10-13T11:20:32.388Z" - }, - { - "cveId": "CVE-2026-107856", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107856", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107856.json", - "dateUpdated": "2026-10-13T11:21:50.989Z" - }, - { - "cveId": "CVE-2026-109564", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109564", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109564.json", - "dateUpdated": "2026-10-13T11:20:54.402Z" - }, - { - "cveId": "CVE-2026-12780", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-12780", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12780.json", - "dateUpdated": "2026-10-13T11:08:17.634Z" - }, - { - "cveId": "CVE-2026-26227", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-26227", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/26xxx/CVE-2026-26227.json", - "dateUpdated": "2026-10-13T11:20:55.043Z" - }, - { - "cveId": "CVE-2026-26228", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-26228", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/26xxx/CVE-2026-26228.json", - "dateUpdated": "2026-10-13T11:20:55.663Z" - } - ], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index cd5a56f89f..87cf272dd4 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "d3c7deca2d8e58daaf026dfe02d68a1b80353902", + "upstream_commit": "aae981a544f3ef85d76221c38b743ef53c23e8a4", "since_year": 2017, - "records": 331513, - "synced_at_utc": "2026-11-12T11:26:01.222485+00:00" + "records": 331521, + "synced_at_utc": "2026-11-12T12:28:00.845048+00:00" }