VULN/vuln-cve
1
0 Fork 0
Code Pull Requests Actions Activity

CVE sync 2026-11-14T12:34:01Z

Browse Source
This commit is contained in:
Vulnerability Bot committed 2026-11-14 13:34:06 +01:00
1 parent dabad14a33
commit 6296a01627
15 files changed
+1337 -248
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

data/2026/124xxx/CVE-2026-124536.json
+96
View File
@@ -0,0 +1,96 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-124536",
"assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
"state": "PUBLISHED",
"assignerShortName": "CPANSec",
"dateReserved": "2026-11-08T12:31:51.297Z",
"datePublished": "2026-11-14T11:51:22.977Z",
"dateUpdated": "2026-11-14T11:51:22.977Z"
},
"containers": {
"cna": {
"affected": [
{
"collectionURL": "https://cpan.org/modules",
"defaultStatus": "unaffected",
"modules": [
"JSON::XS"
],
"packageName": "JSON-XS",
"packageURL": "pkg:cpan/JSON-XS",
"programFiles": [
"XS.xs"
],
"programRoutines": [
{
"name": "JSON::XS::incr_parse"
}
],
"repo": "https://cvs.schmorp.de/JSON-XS/",
"versions": [
{
"lessThan": "4.05",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "JSON::XS versions before 4.05 for Perl allow memory exhaustion by buffering incremental input past max_size after a NUL byte in incr_parse.\n\nThe parser appends each chunk to its buffer and compares max_size with how far it has progressed, not with the buffer length. It treats a NUL byte as the end of the input, so a NUL within the first max_size bytes keeps it short of the limit. The buffer keeps growing, and incr_skip cannot remove the NUL.\n\nA peer streaming data to an incr_parse consumer can exhaust process memory regardless of max_size."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "CWE-770 Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
"shortName": "CPANSec",
"dateUpdated": "2026-11-14T11:51:22.977Z"
},
"references": [
{
"tags": [
"release-notes"
],
"url": "https://metacpan.org/release/MLEHMANN/JSON-XS-4.05/changes"
}
],
"solutions": [
{
"lang": "en",
"value": "Upgrade to JSON-XS 4.05 or later."
}
],
"source": {
"discovery": "UNKNOWN"
},
"timeline": [
{
"lang": "en",
"time": "2026-11-13T00:00:00.000Z",
"value": "Version 4.05 released with fix."
}
],
"title": "JSON::XS versions before 4.05 for Perl allow memory exhaustion by buffering incremental input past max_size after a NUL byte in incr_parse",
"x_generator": {
"engine": "cpansec-cna-tool 0.1"
}
}
}
}
data/2026/124xxx/CVE-2026-124539.json
+96
View File
@@ -0,0 +1,96 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-124539",
"assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
"state": "PUBLISHED",
"assignerShortName": "CPANSec",
"dateReserved": "2026-11-08T12:32:19.890Z",
"datePublished": "2026-11-14T11:52:36.293Z",
"dateUpdated": "2026-11-14T11:52:36.293Z"
},
"containers": {
"cna": {
"affected": [
{
"collectionURL": "https://cpan.org/modules",
"defaultStatus": "unaffected",
"modules": [
"JSON::XS"
],
"packageName": "JSON-XS",
"packageURL": "pkg:cpan/JSON-XS",
"programFiles": [
"XS.xs"
],
"programRoutines": [
{
"name": "decode_hv"
}
],
"repo": "https://cvs.schmorp.de/JSON-XS/",
"versions": [
{
"lessThan": "4.05",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "JSON::XS versions before 4.05 for Perl leak the decoded key of an object rejected for a missing colon in decode_hv.\n\nUnless it is short plain ASCII, a quoted key is decoded into a new scalar. Nothing frees that scalar when the object is rejected for a missing ':' after the key.\n\nA process that keeps running after a failed decode retains one key per rejected document, with its size chosen by the sender. Repeated requests exhaust process memory."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-401",
"description": "CWE-401 Missing Release of Memory after Effective Lifetime",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
"shortName": "CPANSec",
"dateUpdated": "2026-11-14T11:52:36.293Z"
},
"references": [
{
"tags": [
"release-notes"
],
"url": "https://metacpan.org/release/MLEHMANN/JSON-XS-4.05/changes"
}
],
"solutions": [
{
"lang": "en",
"value": "Upgrade to JSON-XS 4.05 or later."
}
],
"source": {
"discovery": "UNKNOWN"
},
"timeline": [
{
"lang": "en",
"time": "2026-11-13T00:00:00.000Z",
"value": "Version 4.05 released with fix."
}
],
"title": "JSON::XS versions before 4.05 for Perl leak the decoded key of an object rejected for a missing colon in decode_hv",
"x_generator": {
"engine": "cpansec-cna-tool 0.1"
}
}
}
}
data/2026/124xxx/CVE-2026-124540.json
+96
View File
@@ -0,0 +1,96 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-124540",
"assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
"state": "PUBLISHED",
"assignerShortName": "CPANSec",
"dateReserved": "2026-11-08T12:32:29.226Z",
"datePublished": "2026-11-14T11:52:57.348Z",
"dateUpdated": "2026-11-14T11:52:57.348Z"
},
"containers": {
"cna": {
"affected": [
{
"collectionURL": "https://cpan.org/modules",
"defaultStatus": "unaffected",
"modules": [
"JSON::XS"
],
"packageName": "JSON-XS",
"packageURL": "pkg:cpan/JSON-XS",
"programFiles": [
"XS.xs"
],
"programRoutines": [
{
"name": "decode_tag"
}
],
"repo": "https://cvs.schmorp.de/JSON-XS/",
"versions": [
{
"lessThan": "4.05",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "JSON::XS versions before 4.05 for Perl allow stack exhaustion via nested tagged values under allow_tags in decode_tag.\n\nWith allow_tags, \"(\" starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is not counted against max_depth.\n\nA run of \"(\" bytes exhausts the C stack and triggers an uncatchable segmentation fault regardless of max_depth."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-674",
"description": "CWE-674 Uncontrolled Recursion",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
"shortName": "CPANSec",
"dateUpdated": "2026-11-14T11:52:57.348Z"
},
"references": [
{
"tags": [
"release-notes"
],
"url": "https://metacpan.org/release/MLEHMANN/JSON-XS-4.05/changes"
}
],
"solutions": [
{
"lang": "en",
"value": "Upgrade to JSON-XS 4.05 or later."
}
],
"source": {
"discovery": "UNKNOWN"
},
"timeline": [
{
"lang": "en",
"time": "2026-11-13T00:00:00.000Z",
"value": "Version 4.05 released with fix."
}
],
"title": "JSON::XS versions before 4.05 for Perl allow stack exhaustion via nested tagged values under allow_tags in decode_tag",
"x_generator": {
"engine": "cpansec-cna-tool 0.1"
}
}
}
}
data/2026/124xxx/CVE-2026-124541.json
+96
View File
@@ -0,0 +1,96 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-124541",
"assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
"state": "PUBLISHED",
"assignerShortName": "CPANSec",
"dateReserved": "2026-11-08T12:32:39.559Z",
"datePublished": "2026-11-14T11:53:12.301Z",
"dateUpdated": "2026-11-14T11:53:12.301Z"
},
"containers": {
"cna": {
"affected": [
{
"collectionURL": "https://cpan.org/modules",
"defaultStatus": "unaffected",
"modules": [
"JSON::XS"
],
"packageName": "JSON-XS",
"packageURL": "pkg:cpan/JSON-XS",
"programFiles": [
"XS.xs"
],
"programRoutines": [
{
"name": "decode_str"
}
],
"repo": "https://cvs.schmorp.de/JSON-XS/",
"versions": [
{
"lessThan": "4.05",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "JSON::XS versions before 4.05 for Perl leak the decoded part of a rejected long string in decode_str.\n\nA string is decoded through a fixed-size buffer (16 KiB in 4.04), and each time the buffer fills its contents move into a new scalar. Nothing frees that scalar when the string is then rejected for a control character, an invalid escape, malformed UTF-8 or the end of the input.\n\nA process that keeps running after a failed decode retains the decoded part of each rejected string, with its size chosen by the sender. Repeated requests exhaust process memory."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-401",
"description": "CWE-401 Missing Release of Memory after Effective Lifetime",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
"shortName": "CPANSec",
"dateUpdated": "2026-11-14T11:53:12.301Z"
},
"references": [
{
"tags": [
"release-notes"
],
"url": "https://metacpan.org/release/MLEHMANN/JSON-XS-4.05/changes"
}
],
"solutions": [
{
"lang": "en",
"value": "Upgrade to JSON-XS 4.05 or later."
}
],
"source": {
"discovery": "UNKNOWN"
},
"timeline": [
{
"lang": "en",
"time": "2026-11-13T00:00:00.000Z",
"value": "Version 4.05 released with fix."
}
],
"title": "JSON::XS versions before 4.05 for Perl leak the decoded part of a rejected long string in decode_str",
"x_generator": {
"engine": "cpansec-cna-tool 0.1"
}
}
}
}
data/2026/129xxx/CVE-2026-129113.json
+106
View File
@@ -0,0 +1,106 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-129113",
"assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
"state": "PUBLISHED",
"assignerShortName": "CPANSec",
"dateReserved": "2026-11-13T15:54:17.575Z",
"datePublished": "2026-11-14T11:53:37.474Z",
"dateUpdated": "2026-11-14T11:53:37.474Z"
},
"containers": {
"cna": {
"affected": [
{
"collectionURL": "https://cpan.org/modules",
"defaultStatus": "unaffected",
"modules": [
"JSON::XS"
],
"packageName": "JSON-XS",
"packageURL": "pkg:cpan/JSON-XS",
"programFiles": [
"XS.xs"
],
"programRoutines": [
{
"name": "JSON::XS::incr_parse"
},
{
"name": "JSON::XS::incr_skip"
}
],
"repo": "https://cvs.schmorp.de/JSON-XS/",
"versions": [
{
"lessThan": "4.05",
"status": "affected",
"version": "4.0_00",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Albert Gierlach (rivit)"
}
],
"descriptions": [
{
"lang": "en",
"value": "JSON::XS versions from 4.0_00 before 4.05 for Perl corrupt the incremental buffer length by chopping past its end in incr_skip after a top-level number.\n\nThe incremental parser scans any run of digits, signs, dots and exponent markers as one number, but the decoder stops at the end of a valid number, so the parser keeps an offset into bytes it has not decoded. It then empties the buffer without clearing those bytes, and a later incr_parse call without new input reads them again and moves the offset past the end of the buffer. incr_skip, the documented recovery after an error, removes that many bytes and the buffer length wraps.\n\nA peer sending input such as \"1-2\" to an incr_parse consumer can make the next read of incr_text exit the process through perl's uncatchable out-of-memory path."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-191",
"description": "CWE-191 Integer Underflow (Wrap or Wraparound)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
"shortName": "CPANSec",
"dateUpdated": "2026-11-14T11:53:37.474Z"
},
"references": [
{
"tags": [
"release-notes"
],
"url": "https://metacpan.org/release/MLEHMANN/JSON-XS-4.05/changes"
}
],
"solutions": [
{
"lang": "en",
"value": "Upgrade to JSON-XS 4.05 or later."
}
],
"source": {
"discovery": "UNKNOWN"
},
"timeline": [
{
"lang": "en",
"time": "2026-11-13T00:00:00.000Z",
"value": "Version 4.05 released with fix."
}
],
"title": "JSON::XS versions from 4.0_00 before 4.05 for Perl corrupt the incremental buffer length by chopping past its end in incr_skip after a top-level number",
"x_generator": {
"engine": "cpansec-cna-tool 0.1"
}
}
}
}
data/2026/129xxx/CVE-2026-129114.json
+113
View File
@@ -0,0 +1,113 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-129114",
"assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
"state": "PUBLISHED",
"assignerShortName": "CPANSec",
"dateReserved": "2026-11-13T15:54:30.291Z",
"datePublished": "2026-11-14T11:53:52.483Z",
"dateUpdated": "2026-11-14T11:53:52.483Z"
},
"containers": {
"cna": {
"affected": [
{
"collectionURL": "https://cpan.org/modules",
"defaultStatus": "unaffected",
"modules": [
"JSON::XS"
],
"packageName": "JSON-XS",
"packageURL": "pkg:cpan/JSON-XS",
"programFiles": [
"XS.xs"
],
"programRoutines": [
{
"name": "JSON::XS::incr_parse"
}
],
"repo": "https://cvs.schmorp.de/JSON-XS/",
"versions": [
{
"lessThan": "4.05",
"status": "affected",
"version": "3.04",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Albert Gierlach (rivit)"
}
],
"descriptions": [
{
"lang": "en",
"value": "JSON::XS versions from 3.04 before 4.05 for Perl write one byte past a heap buffer when appending a one-byte chunk in incr_parse.\n\nThe incremental buffer grows to one and a half times the length it must hold, with no room reserved for the terminating NUL. For an empty buffer and a one-byte chunk that request is one byte, which a buffer whose front was removed by earlier decodes can already have, so nothing is reallocated and the NUL lands one byte past the allocation.\n\nA peer streaming data to an incr_parse consumer, choosing how the input is split into reads, can cause a one-byte heap out-of-bounds write."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-193",
"description": "CWE-193 Off-by-one Error",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122 Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
"shortName": "CPANSec",
"dateUpdated": "2026-11-14T11:53:52.483Z"
},
"references": [
{
"tags": [
"release-notes"
],
"url": "https://metacpan.org/release/MLEHMANN/JSON-XS-4.05/changes"
}
],
"solutions": [
{
"lang": "en",
"value": "Upgrade to JSON-XS 4.05 or later."
}
],
"source": {
"discovery": "UNKNOWN"
},
"timeline": [
{
"lang": "en",
"time": "2026-11-13T00:00:00.000Z",
"value": "Version 4.05 released with fix."
}
],
"title": "JSON::XS versions from 3.04 before 4.05 for Perl write one byte past a heap buffer when appending a one-byte chunk in incr_parse",
"x_generator": {
"engine": "cpansec-cna-tool 0.1"
}
}
}
}
data/2026/129xxx/CVE-2026-129115.json
+103
View File
@@ -0,0 +1,103 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-129115",
"assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
"state": "PUBLISHED",
"assignerShortName": "CPANSec",
"dateReserved": "2026-11-13T15:54:37.501Z",
"datePublished": "2026-11-14T11:54:10.777Z",
"dateUpdated": "2026-11-14T11:54:10.777Z"
},
"containers": {
"cna": {
"affected": [
{
"collectionURL": "https://cpan.org/modules",
"defaultStatus": "unaffected",
"modules": [
"JSON::XS"
],
"packageName": "JSON-XS",
"packageURL": "pkg:cpan/JSON-XS",
"programFiles": [
"XS.xs"
],
"programRoutines": [
{
"name": "encode_rv"
}
],
"repo": "https://cvs.schmorp.de/JSON-XS/",
"versions": [
{
"lessThan": "4.05",
"status": "affected",
"version": "3.0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Albert Gierlach (rivit)"
}
],
"descriptions": [
{
"lang": "en",
"value": "JSON::XS versions from 3.0 before 4.05 for Perl read freed stack memory when a FREEZE result's serialisation grows the Perl stack under allow_tags in encode_rv.\n\nWith allow_tags, an object's FREEZE method is called in list context and each returned value is encoded through a saved Perl stack pointer. When encoding a returned value calls back into Perl, through TO_JSON under convert_blessed or another FREEZE, and that callback grows the stack, the stack is reallocated while the saved pointer still refers to the freed block.\n\nEncoding such objects reads freed memory, and encode can return undef without an error."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "CWE-416 Use After Free",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
"shortName": "CPANSec",
"dateUpdated": "2026-11-14T11:54:10.777Z"
},
"references": [
{
"tags": [
"release-notes"
],
"url": "https://metacpan.org/release/MLEHMANN/JSON-XS-4.05/changes"
}
],
"solutions": [
{
"lang": "en",
"value": "Upgrade to JSON-XS 4.05 or later."
}
],
"source": {
"discovery": "UNKNOWN"
},
"timeline": [
{
"lang": "en",
"time": "2026-11-13T00:00:00.000Z",
"value": "Version 4.05 released with fix."
}
],
"title": "JSON::XS versions from 3.0 before 4.05 for Perl read freed stack memory when a FREEZE result's serialisation grows the Perl stack under allow_tags in encode_rv",
"x_generator": {
"engine": "cpansec-cna-tool 0.1"
}
}
}
}
data/2026/129xxx/CVE-2026-129250.json
+169
View File
@@ -0,0 +1,169 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-129250",
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"state": "PUBLISHED",
"assignerShortName": "VulDB",
"dateReserved": "2026-11-13T19:30:43.866Z",
"datePublished": "2026-11-14T11:30:19.430Z",
"dateUpdated": "2026-11-14T11:30:19.430Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB",
"dateUpdated": "2026-11-14T11:30:19.430Z"
},
"title": "Edimax BR6478ACV2 webs formPPTPSetup buffer overflow",
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-120",
"lang": "en",
"description": "Buffer Overflow"
}
]
},
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-119",
"lang": "en",
"description": "Memory Corruption"
}
]
}
],
"affected": [
{
"vendor": "Edimax",
"product": "BR6478ACV2",
"versions": [
{
"version": "1.23",
"status": "affected"
}
],
"cpes": [
"cpe:2.3:a:edimax:br6478acv2:*:*:*:*:*:*:*:*"
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in Edimax BR6478ACV2 1.23. The impacted element is the function formPPTPSetup of the file webs. The manipulation of the argument pptpUserName leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"version": "4.0",
"baseScore": 9.4,
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
"baseSeverity": "CRITICAL"
}
},
{
"cvssV3_1": {
"version": "3.1",
"baseScore": 9.9,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C",
"baseSeverity": "CRITICAL"
}
},
{
"cvssV3_0": {
"version": "3.0",
"baseScore": 9.9,
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C",
"baseSeverity": "CRITICAL"
}
},
{
"cvssV2_0": {
"version": "2.0",
"baseScore": 9,
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:C"
}
}
],
"timeline": [
{
"time": "2026-11-13T00:00:00.000Z",
"lang": "en",
"value": "Advisory disclosed"
},
{
"time": "2026-11-13T01:00:00.000Z",
"lang": "en",
"value": "VulDB entry created"
},
{
"time": "2026-11-13T20:35:49.000Z",
"lang": "en",
"value": "VulDB entry last update"
}
],
"credits": [
{
"lang": "en",
"value": "wxhwxhwxh_mie (VulDB User)",
"type": "reporter"
},
{
"lang": "en",
"value": "VulDB CNA Team",
"type": "coordinator"
}
],
"references": [
{
"url": "https://vuldb.com/vuln/437280",
"name": "VDB-437280 | Edimax BR6478ACV2 webs formPPTPSetup buffer overflow",
"tags": [
"vdb-entry",
"technical-description"
]
},
{
"url": "https://vuldb.com/vuln/437280/cti",
"name": "VDB-437280 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
]
},
{
"url": "https://vuldb.com/cve/CVE-2026-129250",
"name": "CVE-2026-129250 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
]
},
{
"url": "https://vuldb.com/submit/1033650",
"name": "Submit #1033650 | Edimax BR6478ACV2 BR6478ACV2_v1.23 Buffer Overflow",
"tags": [
"third-party-advisory"
]
},
{
"url": "https://lavender-bicycle-a5a.notion.site/EDIMAX-BR6478ACV2-formPPTPSetup-3f953a41781f8017b959ec7b4df6b3ad?source=copy_link",
"tags": [
"exploit"
]
}
],
"x_generator": [
"VulDB PVTS v202611"
]
}
}
}
data/2026/129xxx/CVE-2026-129251.json
+170
View File
@@ -0,0 +1,170 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-129251",
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"state": "PUBLISHED",
"assignerShortName": "VulDB",
"dateReserved": "2026-11-13T19:31:40.026Z",
"datePublished": "2026-11-14T11:45:19.871Z",
"dateUpdated": "2026-11-14T11:45:19.871Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB",
"dateUpdated": "2026-11-14T11:45:19.871Z"
},
"title": "hrshadhin CloudSchool Event Description EventController.php cross site scripting",
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-79",
"lang": "en",
"description": "Cross Site Scripting"
}
]
},
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-94",
"lang": "en",
"description": "Code Injection"
}
]
}
],
"affected": [
{
"vendor": "hrshadhin",
"product": "CloudSchool",
"versions": [
{
"version": "3.0.0",
"status": "affected"
},
{
"version": "3.0.1",
"status": "affected"
}
],
"cpes": [
"cpe:2.3:a:hrshadhin:cloudschool:*:*:*:*:*:*:*:*"
],
"modules": [
"Event Description Handler"
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in hrshadhin CloudSchool up to 3.0.1. This affects an unknown function of the file app/Http/Controllers/Backend/EventController.php of the component Event Description Handler. The manipulation of the argument data results in cross site scripting. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"version": "4.0",
"baseScore": 4.8,
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
"baseSeverity": "MEDIUM"
}
},
{
"cvssV3_1": {
"version": "3.1",
"baseScore": 2.4,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C",
"baseSeverity": "LOW"
}
},
{
"cvssV3_0": {
"version": "3.0",
"baseScore": 2.4,
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C",
"baseSeverity": "LOW"
}
},
{
"cvssV2_0": {
"version": "2.0",
"baseScore": 3.3,
"vectorString": "AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:C"
}
}
],
"timeline": [
{
"time": "2026-11-13T00:00:00.000Z",
"lang": "en",
"value": "Advisory disclosed"
},
{
"time": "2026-11-13T01:00:00.000Z",
"lang": "en",
"value": "VulDB entry created"
},
{
"time": "2026-11-13T20:36:44.000Z",
"lang": "en",
"value": "VulDB entry last update"
}
],
"credits": [
{
"lang": "en",
"value": "ChetanPujari (VulDB User)",
"type": "reporter"
},
{
"lang": "en",
"value": "VulDB CNA Team",
"type": "coordinator"
}
],
"references": [
{
"url": "https://vuldb.com/vuln/437281",
"name": "VDB-437281 | hrshadhin CloudSchool Event Description EventController.php cross site scripting",
"tags": [
"vdb-entry",
"technical-description"
]
},
{
"url": "https://vuldb.com/vuln/437281/cti",
"name": "VDB-437281 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
]
},
{
"url": "https://vuldb.com/cve/CVE-2026-129251",
"name": "CVE-2026-129251 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
]
},
{
"url": "https://vuldb.com/submit/1042948",
"name": "Submit #1042948 | H.R. Shadhin / CloudSchool (GitHub: hrshadhin) CloudSchool v3.0.1 Stored Cross-Site Scripting (CWE-79)",
"tags": [
"third-party-advisory"
]
}
],
"x_generator": [
"VulDB PVTS v202611"
]
}
}
}
data/2026/129xxx/CVE-2026-129427.json
+142
View File
@@ -0,0 +1,142 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-129427",
"assignerOrgId": "772f0079-75c2-41ca-913e-d9072716578b",
"state": "PUBLISHED",
"assignerShortName": "Grayback",
"dateReserved": "2026-11-14T11:12:40.073Z",
"datePublished": "2026-11-14T11:19:54.038Z",
"dateUpdated": "2026-11-14T11:19:54.038Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "772f0079-75c2-41ca-913e-d9072716578b",
"shortName": "Grayback",
"dateUpdated": "2026-11-14T11:19:54.038Z"
},
"title": "Stored XSS via avatar upload chained with an authentication bypass in /Attachments leads to ATO",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-79",
"description": "CWE-79 Improper neutralization of input during web page generation ('cross-site scripting')",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "CervantesSec",
"product": "cervantes",
"versions": [
{
"status": "affected",
"version": "alpha 0.3",
"lessThanOrEqual": "1.3-beta",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "v.1.4.0-beta"
}
],
"defaultStatus": "unaffected"
}
],
"cpeApplicability": [
{
"operator": "OR",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cervantessec:cervantes:*:*:*:*:*:*:*:*",
"versionStartIncluding": "alpha_0.3",
"versionEndIncluding": "1.3-beta"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:a:cervantessec:cervantes:v.1.4.0-beta:*:*:*:*:*:*:*"
}
]
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Stored XSS via avatar upload chained with an authentication bypass in /Attachments leads to ATO\nin Cervantes version v1.3-beta could allow an attacker to execute arbitrary code in another user's browser with elevated privileges",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Stored XSS via avatar upload chained with an authentication bypass in /Attachments leads to ATO\nin Cervantes version v1.3-beta could allow an attacker to execute arbitrary code in another user's browser with elevated privileges"
}
]
}
],
"references": [
{
"url": "https://www.grayback.es/advisories",
"tags": [
"patch"
]
},
{
"url": "https://www.grayback.es/en/advisories",
"tags": [
"patch"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE",
"baseSeverity": "HIGH",
"baseScore": 8.7,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N"
}
}
],
"credits": [
{
"lang": "en",
"value": "Miguel Segovia Gil",
"type": "finder"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
data/2026/33xxx/CVE-2026-33818.json
+2 -2
View File
@@ -8,14 +8,14 @@
"assignerShortName": "Go",
"dateReserved": "2026-03-23T20:35:32.815Z",
"datePublished": "2026-08-13T21:58:52.821Z",
"dateUpdated": "2026-11-14T05:21:26.842Z"
"dateUpdated": "2026-11-14T11:17:03.725Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"shortName": "Go",
"dateUpdated": "2026-11-14T05:21:26.842Z"
"dateUpdated": "2026-11-14T11:17:03.725Z"
},
"title": "Enforce maximum recursion depth in encoding/asn1",
"descriptions": [
data/2026/42xxx/CVE-2026-42504.json
+2 -2
View File
@@ -8,14 +8,14 @@
"assignerShortName": "Go",
"dateReserved": "2026-04-28T00:21:12.792Z",
"datePublished": "2026-06-02T22:01:37.219Z",
"dateUpdated": "2026-11-14T05:21:25.299Z"
"dateUpdated": "2026-11-14T11:17:02.204Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"shortName": "Go",
"dateUpdated": "2026-11-14T05:21:25.299Z"
"dateUpdated": "2026-11-14T11:17:02.204Z"
},
"title": "Quadratic complexity in WordDecoder.DecodeHeader in mime",
"descriptions": [
data/delta.json
+30 -6
View File
@@ -1,12 +1,36 @@
{
"fetchTime": "2026-11-14T10:48:48.615Z",
"numberOfChanges": 1,
"fetchTime": "2026-11-14T11:58:44.202Z",
"numberOfChanges": 5,
"new": [
{
"cveId": "CVE-2026-129248",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129248",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129248.json",
"dateUpdated": "2026-11-14T10:45:18.570Z"
"cveId": "CVE-2026-124540",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124540",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124540.json",
"dateUpdated": "2026-11-14T11:52:57.348Z"
},
{
"cveId": "CVE-2026-124541",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124541",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124541.json",
"dateUpdated": "2026-11-14T11:53:12.301Z"
},
{
"cveId": "CVE-2026-129113",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129113",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129113.json",
"dateUpdated": "2026-11-14T11:53:37.474Z"
},
{
"cveId": "CVE-2026-129114",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129114",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129114.json",
"dateUpdated": "2026-11-14T11:53:52.483Z"
},
{
"cveId": "CVE-2026-129115",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129115",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129115.json",
"dateUpdated": "2026-11-14T11:54:10.777Z"
}
],
"updated": [],
data/deltaLog.json
+113 -235
View File
@@ -1,4 +1,117 @@
[
{
"fetchTime": "2026-11-14T11:58:44.202Z",
"numberOfChanges": 5,
"new": [
{
"cveId": "CVE-2026-124540",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124540",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124540.json",
"dateUpdated": "2026-11-14T11:52:57.348Z"
},
{
"cveId": "CVE-2026-124541",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124541",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124541.json",
"dateUpdated": "2026-11-14T11:53:12.301Z"
},
{
"cveId": "CVE-2026-129113",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129113",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129113.json",
"dateUpdated": "2026-11-14T11:53:37.474Z"
},
{
"cveId": "CVE-2026-129114",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129114",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129114.json",
"dateUpdated": "2026-11-14T11:53:52.483Z"
},
{
"cveId": "CVE-2026-129115",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129115",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129115.json",
"dateUpdated": "2026-11-14T11:54:10.777Z"
}
],
"updated": [],
"error": []
},
{
"fetchTime": "2026-11-14T11:52:57.694Z",
"numberOfChanges": 2,
"new": [
{
"cveId": "CVE-2026-124536",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124536",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124536.json",
"dateUpdated": "2026-11-14T11:51:22.977Z"
},
{
"cveId": "CVE-2026-124539",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124539",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124539.json",
"dateUpdated": "2026-11-14T11:52:36.293Z"
}
],
"updated": [],
"error": []
},
{
"fetchTime": "2026-11-14T11:47:09.815Z",
"numberOfChanges": 1,
"new": [
{
"cveId": "CVE-2026-129251",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129251",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129251.json",
"dateUpdated": "2026-11-14T11:45:19.871Z"
}
],
"updated": [],
"error": []
},
{
"fetchTime": "2026-11-14T11:35:21.683Z",
"numberOfChanges": 1,
"new": [
{
"cveId": "CVE-2026-129250",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129250",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129250.json",
"dateUpdated": "2026-11-14T11:30:19.430Z"
}
],
"updated": [],
"error": []
},
{
"fetchTime": "2026-11-14T11:22:54.114Z",
"numberOfChanges": 3,
"new": [
{
"cveId": "CVE-2026-129427",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129427",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129427.json",
"dateUpdated": "2026-11-14T11:19:54.038Z"
}
],
"updated": [
{
"cveId": "CVE-2026-33818",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33818.json",
"dateUpdated": "2026-11-14T11:17:03.725Z"
},
{
"cveId": "CVE-2026-42504",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42504.json",
"dateUpdated": "2026-11-14T11:17:02.204Z"
}
],
"error": []
},
{
"fetchTime": "2026-11-14T10:48:48.615Z",
"numberOfChanges": 1,
@@ -758645,240 +758758,5 @@
}
],
"error": []
},
{
"fetchTime": "2026-10-15T11:58:35.931Z",
"numberOfChanges": 1,
"new": [
{
"cveId": "CVE-2026-110726",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110726",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110726.json",
"dateUpdated": "2026-10-15T11:58:03.903Z"
}
],
"updated": [],
"error": []
},
{
"fetchTime": "2026-10-15T11:52:40.007Z",
"numberOfChanges": 3,
"new": [],
"updated": [
{
"cveId": "CVE-2026-110923",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110923",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110923.json",
"dateUpdated": "2026-10-15T11:48:58.318Z"
},
{
"cveId": "CVE-2026-110925",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110925",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110925.json",
"dateUpdated": "2026-10-15T11:49:02.005Z"
},
{
"cveId": "CVE-2026-110926",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110926",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110926.json",
"dateUpdated": "2026-10-15T11:49:03.737Z"
}
],
"error": []
},
{
"fetchTime": "2026-10-15T11:45:35.806Z",
"numberOfChanges": 2,
"new": [
{
"cveId": "CVE-2026-79836",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-79836",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/79xxx/CVE-2026-79836.json",
"dateUpdated": "2026-10-15T11:35:44.769Z"
}
],
"updated": [
{
"cveId": "CVE-2026-18662",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-18662",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18662.json",
"dateUpdated": "2026-10-15T11:35:32.815Z"
}
],
"error": []
},
{
"fetchTime": "2026-10-15T11:35:27.776Z",
"numberOfChanges": 3,
"new": [
{
"cveId": "CVE-2026-79835",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-79835",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/79xxx/CVE-2026-79835.json",
"dateUpdated": "2026-10-15T11:29:04.993Z"
},
{
"cveId": "CVE-2026-8145",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-8145",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/8xxx/CVE-2026-8145.json",
"dateUpdated": "2026-10-15T11:34:32.426Z"
}
],
"updated": [
{
"cveId": "CVE-2026-18659",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-18659",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18659.json",
"dateUpdated": "2026-10-15T11:34:12.686Z"
}
],
"error": []
},
{
"fetchTime": "2026-10-15T11:26:12.562Z",
"numberOfChanges": 1,
"new": [
{
"cveId": "CVE-2026-79834",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-79834",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/79xxx/CVE-2026-79834.json",
"dateUpdated": "2026-10-15T11:23:31.413Z"
}
],
"updated": [],
"error": []
},
{
"fetchTime": "2026-10-15T11:13:36.105Z",
"numberOfChanges": 16,
"new": [
{
"cveId": "CVE-2026-108491",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108491",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108491.json",
"dateUpdated": "2026-10-15T11:00:13.399Z"
},
{
"cveId": "CVE-2026-108497",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108497",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108497.json",
"dateUpdated": "2026-10-15T11:00:13.368Z"
},
{
"cveId": "CVE-2026-108498",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108498",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108498.json",
"dateUpdated": "2026-10-15T11:00:13.206Z"
},
{
"cveId": "CVE-2026-109694",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109694",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109694.json",
"dateUpdated": "2026-10-15T11:00:13.754Z"
},
{
"cveId": "CVE-2026-109695",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109695",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109695.json",
"dateUpdated": "2026-10-15T11:00:13.931Z"
},
{
"cveId": "CVE-2026-79833",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-79833",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/79xxx/CVE-2026-79833.json",
"dateUpdated": "2026-10-15T11:04:27.138Z"
}
],
"updated": [
{
"cveId": "CVE-2025-2586",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-2586",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/2xxx/CVE-2025-2586.json",
"dateUpdated": "2026-10-15T11:09:15.695Z"
},
{
"cveId": "CVE-2026-103304",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103304",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103304.json",
"dateUpdated": "2026-10-15T11:01:27.685Z"
},
{
"cveId": "CVE-2026-103324",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103324",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103324.json",
"dateUpdated": "2026-10-15T11:01:26.948Z"
},
{
"cveId": "CVE-2026-104643",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104643",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104643.json",
"dateUpdated": "2026-10-15T11:01:27.570Z"
},
{
"cveId": "CVE-2026-106031",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106031",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106031.json",
"dateUpdated": "2026-10-15T11:01:27.444Z"
},
{
"cveId": "CVE-2026-109145",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109145",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109145.json",
"dateUpdated": "2026-10-15T11:01:27.324Z"
},
{
"cveId": "CVE-2026-74920",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-74920",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74920.json",
"dateUpdated": "2026-10-15T11:01:27.195Z"
},
{
"cveId": "CVE-2026-92428",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92428",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92428.json",
"dateUpdated": "2026-10-15T11:01:26.816Z"
},
{
"cveId": "CVE-2026-92429",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92429",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92429.json",
"dateUpdated": "2026-10-15T11:01:26.695Z"
},
{
"cveId": "CVE-2026-96537",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96537",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96537.json",
"dateUpdated": "2026-10-15T11:01:27.071Z"
}
],
"error": []
},
{
"fetchTime": "2026-10-15T10:59:13.459Z",
"numberOfChanges": 1,
"new": [
{
"cveId": "CVE-2026-79832",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-79832",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/79xxx/CVE-2026-79832.json",
"dateUpdated": "2026-10-15T10:57:50.138Z"
}
],
"updated": [],
"error": []
},
{
"fetchTime": "2026-10-15T10:53:15.426Z",
"numberOfChanges": 1,
"new": [],
"updated": [
{
"cveId": "CVE-2026-48856",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-48856",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/48xxx/CVE-2026-48856.json",
"dateUpdated": "2026-10-15T10:50:06.903Z"
}
],
"error": []
}
]
state/sync.json
+3 -3
View File
@@ -1,7 +1,7 @@
{
"source": "https://github.com/CVEProject/cvelistV5.git",
"upstream_commit": "d05abc735ee1184ae314168551d04422533f7cfd",
"upstream_commit": "289c6e80157fa09b2573d00046216db1d71c7e23",
"since_year": 2017,
"records": 332574,
"synced_at_utc": "2026-11-14T11:25:51.362199+00:00"
"records": 332584,
"synced_at_utc": "2026-11-14T12:27:53.891269+00:00"
}