CVE sync 2026-11-13T09:30:22Z

This commit is contained in:
Vulnerability Bot committed 2026-11-13 10:30:26 +01:00
1 parent a25f29aada
commit 71a8a15037
26 files changed
+2457 -290

No files matched your search

+2 -12
View File
@@ -8,7 +8,7 @@
"assignerShortName": "redhat",
"dateReserved": "2026-10-14T14:10:16.450Z",
"datePublished": "2026-11-11T17:06:13.261Z",
"dateUpdated": "2026-11-13T00:21:54.016Z"
"dateUpdated": "2026-11-13T09:13:00.690Z"
},
"containers": {
"cna": {
@@ -249,16 +249,6 @@
"cpe:/a:redhat:quay:3.9::el8"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Update Service",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-update-service/openshift-update-service-rhel8",
"defaultStatus": "unaffected",
"cpes": [
"cpe:/a:redhat:openshift_update_service:5"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Quay 5",
@@ -395,7 +385,7 @@
"providerMetadata": {
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat",
"dateUpdated": "2026-11-13T00:21:54.016Z"
"dateUpdated": "2026-11-13T09:13:00.690Z"
},
"x_generator": {
"engine": "cvelib 1.8.0"
+3 -9
View File
@@ -8,16 +8,17 @@
"assignerShortName": "CERT-PL",
"dateReserved": "2026-10-19T10:05:51.861Z",
"datePublished": "2026-11-09T12:48:56.104Z",
"dateUpdated": "2026-11-09T17:34:42.359Z"
"dateUpdated": "2026-11-13T09:02:44.683Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6",
"shortName": "CERT-PL",
"dateUpdated": "2026-11-09T12:48:56.104Z"
"dateUpdated": "2026-11-13T09:02:44.683Z"
},
"title": "Reflected XSS in WidzialniCMS",
"datePublic": "2026-11-09T00:00:00.000Z",
"problemTypes": [
{
"descriptions": [
@@ -140,13 +141,6 @@
}
}
],
"credits": [
{
"lang": "en",
"value": "Mikołaj Matuszewski (CERT.PL)",
"type": "finder"
}
],
"source": {
"discovery": "INTERNAL"
},
+3 -9
View File
@@ -8,16 +8,17 @@
"assignerShortName": "CERT-PL",
"dateReserved": "2026-10-19T10:05:51.861Z",
"datePublished": "2026-11-09T12:49:45.808Z",
"dateUpdated": "2026-11-09T17:34:42.224Z"
"dateUpdated": "2026-11-13T09:03:13.688Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6",
"shortName": "CERT-PL",
"dateUpdated": "2026-11-09T12:49:45.808Z"
"dateUpdated": "2026-11-13T09:03:13.688Z"
},
"title": "Bruteforce Protection Bypass in WidzialniCMS",
"datePublic": "2026-11-09T00:00:00.000Z",
"problemTypes": [
{
"descriptions": [
@@ -137,13 +138,6 @@
}
}
],
"credits": [
{
"lang": "en",
"value": "Mikołaj Matuszewski (CERT.PL)",
"type": "finder"
}
],
"source": {
"discovery": "INTERNAL"
},
+102
View File
@@ -0,0 +1,102 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-116417",
"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"state": "PUBLISHED",
"assignerShortName": "dell",
"dateReserved": "2026-10-26T10:04:27.243Z",
"datePublished": "2026-11-13T08:52:08.142Z",
"dateUpdated": "2026-11-13T08:52:08.142Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"shortName": "dell",
"dateUpdated": "2026-11-13T08:52:08.142Z"
},
"datePublic": "2026-11-03T06:30:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-521",
"description": "CWE-521: Weak Password Requirements",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Dell",
"product": "PowerScale InsightIQ",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.4.1 or later",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains a Weak Password Requirements vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Unauthorized access.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains a Weak Password Requirements vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Unauthorized access."
}
]
}
],
"references": [
{
"url": "https://www.dell.com/support/kbdoc/en-gb/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities",
"tags": [
"vendor-advisory"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE",
"baseSeverity": "HIGH",
"baseScore": 8.1,
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
+102
View File
@@ -0,0 +1,102 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-116419",
"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"state": "PUBLISHED",
"assignerShortName": "dell",
"dateReserved": "2026-10-26T10:04:27.243Z",
"datePublished": "2026-11-13T08:42:10.650Z",
"dateUpdated": "2026-11-13T08:42:10.650Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"shortName": "dell",
"dateUpdated": "2026-11-13T08:42:10.650Z"
},
"datePublic": "2026-11-03T06:30:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-532",
"description": "CWE-532: Insertion of Sensitive Information into Log File",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Dell",
"product": "PowerScale InsightIQ",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.4.1 or later",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, containsan Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, containsan Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure."
}
]
}
],
"references": [
{
"url": "https://www.dell.com/support/kbdoc/en-gb/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities",
"tags": [
"vendor-advisory"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseSeverity": "MEDIUM",
"baseScore": 6.4,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
+102
View File
@@ -0,0 +1,102 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-116420",
"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"state": "PUBLISHED",
"assignerShortName": "dell",
"dateReserved": "2026-10-26T10:04:27.243Z",
"datePublished": "2026-11-13T09:08:33.704Z",
"dateUpdated": "2026-11-13T09:08:33.704Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"shortName": "dell",
"dateUpdated": "2026-11-13T09:08:33.704Z"
},
"datePublic": "2026-11-03T06:30:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-532",
"description": "CWE-532: Insertion of Sensitive Information into Log File",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Dell",
"product": "PowerScale InsightIQ",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.4.1 or later",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, containsan Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, containsan Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure."
}
]
}
],
"references": [
{
"url": "https://www.dell.com/support/kbdoc/en-gb/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities",
"tags": [
"vendor-advisory"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseSeverity": "MEDIUM",
"baseScore": 6.4,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
+102
View File
@@ -0,0 +1,102 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-116421",
"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"state": "PUBLISHED",
"assignerShortName": "dell",
"dateReserved": "2026-10-26T10:04:27.243Z",
"datePublished": "2026-11-13T08:29:36.626Z",
"dateUpdated": "2026-11-13T08:29:36.626Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"shortName": "dell",
"dateUpdated": "2026-11-13T08:29:36.626Z"
},
"datePublic": "2026-11-03T06:30:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-532",
"description": "CWE-532: Insertion of Sensitive Information into Log File",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Dell",
"product": "PowerScale InsightIQ",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.4.1 or later",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure."
}
]
}
],
"references": [
{
"url": "https://www.dell.com/support/kbdoc/en-gb/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities",
"tags": [
"vendor-advisory"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseSeverity": "MEDIUM",
"baseScore": 6.4,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
+102
View File
@@ -0,0 +1,102 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-116422",
"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"state": "PUBLISHED",
"assignerShortName": "dell",
"dateReserved": "2026-10-26T10:04:27.243Z",
"datePublished": "2026-11-13T08:48:51.501Z",
"dateUpdated": "2026-11-13T08:48:51.501Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"shortName": "dell",
"dateUpdated": "2026-11-13T08:48:51.501Z"
},
"datePublic": "2026-11-03T06:30:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-532",
"description": "CWE-532: Insertion of Sensitive Information into Log File",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Dell",
"product": "PowerScale InsightIQ",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.4.1 or later",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Information exposure.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Information exposure."
}
]
}
],
"references": [
{
"url": "https://www.dell.com/support/kbdoc/en-gb/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities",
"tags": [
"vendor-advisory"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW",
"baseSeverity": "MEDIUM",
"baseScore": 6.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
+102
View File
@@ -0,0 +1,102 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-116423",
"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"state": "PUBLISHED",
"assignerShortName": "dell",
"dateReserved": "2026-10-26T10:04:27.243Z",
"datePublished": "2026-11-13T08:39:13.728Z",
"dateUpdated": "2026-11-13T08:39:13.728Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"shortName": "dell",
"dateUpdated": "2026-11-13T08:39:13.728Z"
},
"datePublic": "2026-11-03T06:30:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-347",
"description": "CWE-347: Improper Verification of Cryptographic Signature",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Dell",
"product": "PowerScale InsightIQ",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.4.1 or later",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Improper Verification of Cryptographic Signature vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Information tampering.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Improper Verification of Cryptographic Signature vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Information tampering."
}
]
}
],
"references": [
{
"url": "https://www.dell.com/support/kbdoc/en-gb/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities",
"tags": [
"vendor-advisory"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "LOW",
"baseSeverity": "MEDIUM",
"baseScore": 5.4,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
+102
View File
@@ -0,0 +1,102 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-116424",
"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"state": "PUBLISHED",
"assignerShortName": "dell",
"dateReserved": "2026-10-26T10:04:27.243Z",
"datePublished": "2026-11-13T08:58:42.690Z",
"dateUpdated": "2026-11-13T08:58:42.690Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"shortName": "dell",
"dateUpdated": "2026-11-13T08:58:42.690Z"
},
"datePublic": "2026-11-03T06:30:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-862",
"description": "CWE-862",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Dell",
"product": "PowerScale InsightIQ",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.4.1 or later",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains Unauthorized access vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains Unauthorized access vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access."
}
]
}
],
"references": [
{
"url": "https://www.dell.com/support/kbdoc/en-gb/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities",
"tags": [
"vendor-advisory"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "LOW",
"baseSeverity": "MEDIUM",
"baseScore": 5.4,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
+102
View File
@@ -0,0 +1,102 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-116425",
"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"state": "PUBLISHED",
"assignerShortName": "dell",
"dateReserved": "2026-10-26T10:04:27.243Z",
"datePublished": "2026-11-13T09:12:08.116Z",
"dateUpdated": "2026-11-13T09:12:08.116Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"shortName": "dell",
"dateUpdated": "2026-11-13T09:12:08.116Z"
},
"datePublic": "2026-11-03T06:30:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-862",
"description": "CWE : CWE-862",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Dell",
"product": "PowerScale InsightIQ",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.4.1 or later",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains unauthorized access vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains unauthorized access vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access."
}
]
}
],
"references": [
{
"url": "https://www.dell.com/support/kbdoc/en-gb/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities",
"tags": [
"vendor-advisory"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "LOW",
"baseSeverity": "MEDIUM",
"baseScore": 5.4,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
+102
View File
@@ -0,0 +1,102 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-116426",
"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"state": "PUBLISHED",
"assignerShortName": "dell",
"dateReserved": "2026-10-26T10:04:27.244Z",
"datePublished": "2026-11-13T08:36:05.678Z",
"dateUpdated": "2026-11-13T08:36:05.678Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"shortName": "dell",
"dateUpdated": "2026-11-13T08:36:05.678Z"
},
"datePublic": "2026-11-03T06:30:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-532",
"description": "CWE-532: Insertion of Sensitive Information into Log File",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Dell",
"product": "PowerScale InsightIQ",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.4.1 or later",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure."
}
]
}
],
"references": [
{
"url": "https://www.dell.com/support/kbdoc/en-gb/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities",
"tags": [
"vendor-advisory"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseSeverity": "MEDIUM",
"baseScore": 4.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
+102
View File
@@ -0,0 +1,102 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-116427",
"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"state": "PUBLISHED",
"assignerShortName": "dell",
"dateReserved": "2026-10-26T10:04:27.244Z",
"datePublished": "2026-11-13T08:15:39.193Z",
"dateUpdated": "2026-11-13T08:15:39.193Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"shortName": "dell",
"dateUpdated": "2026-11-13T08:15:39.193Z"
},
"datePublic": "2026-11-03T06:30:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-862",
"description": "CWE-862: Missing Authorization",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Dell",
"product": "PowerScale InsightIQ",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.4.1 or later",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges."
}
]
}
],
"references": [
{
"url": "https://www.dell.com/support/kbdoc/en-gb/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities",
"tags": [
"vendor-advisory"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseSeverity": "MEDIUM",
"baseScore": 5.4,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
+102
View File
@@ -0,0 +1,102 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-116430",
"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"state": "PUBLISHED",
"assignerShortName": "dell",
"dateReserved": "2026-10-26T10:04:27.244Z",
"datePublished": "2026-11-13T09:02:22.496Z",
"dateUpdated": "2026-11-13T09:02:22.496Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"shortName": "dell",
"dateUpdated": "2026-11-13T09:02:22.496Z"
},
"datePublic": "2026-11-03T06:30:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-345",
"description": "CWE-345: Insufficient Verification of Data Authenticity",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Dell",
"product": "PowerScale InsightIQ",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.4.1 or later",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Dell PowerScale InsightIQ, Version 6.4.0, contain an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Dell PowerScale InsightIQ, Version 6.4.0, contain an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering."
}
]
}
],
"references": [
{
"url": "https://www.dell.com/support/kbdoc/en-gb/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities",
"tags": [
"vendor-advisory"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseSeverity": "MEDIUM",
"baseScore": 4.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
+102
View File
@@ -0,0 +1,102 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-116431",
"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"state": "PUBLISHED",
"assignerShortName": "dell",
"dateReserved": "2026-10-26T10:04:27.244Z",
"datePublished": "2026-11-13T09:05:36.362Z",
"dateUpdated": "2026-11-13T09:05:36.362Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"shortName": "dell",
"dateUpdated": "2026-11-13T09:05:36.362Z"
},
"datePublic": "2026-11-03T06:30:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-312",
"description": "CWE-312: Cleartext Storage of Sensitive Information",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Dell",
"product": "PowerScale InsightIQ",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.4.1 or later",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Cleartext Storage of Sensitive Information vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Cleartext Storage of Sensitive Information vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure."
}
]
}
],
"references": [
{
"url": "https://www.dell.com/support/kbdoc/en-gb/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities",
"tags": [
"vendor-advisory"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseSeverity": "MEDIUM",
"baseScore": 4.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
+102
View File
@@ -0,0 +1,102 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-116436",
"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"state": "PUBLISHED",
"assignerShortName": "dell",
"dateReserved": "2026-10-26T10:04:27.245Z",
"datePublished": "2026-11-13T08:12:16.483Z",
"dateUpdated": "2026-11-13T08:12:16.483Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"shortName": "dell",
"dateUpdated": "2026-11-13T08:12:16.483Z"
},
"datePublic": "2026-11-03T06:30:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-532",
"description": "CWE-532: Insertion of Sensitive Information into Log File",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Dell",
"product": "PowerScale InsightIQ",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.4.1 or later",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access."
}
]
}
],
"references": [
{
"url": "https://www.dell.com/support/kbdoc/en-gb/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities",
"tags": [
"vendor-advisory"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseSeverity": "MEDIUM",
"baseScore": 4.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
+102
View File
@@ -0,0 +1,102 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-116438",
"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"state": "PUBLISHED",
"assignerShortName": "dell",
"dateReserved": "2026-10-26T10:04:27.245Z",
"datePublished": "2026-11-13T08:32:58.575Z",
"dateUpdated": "2026-11-13T08:32:58.575Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"shortName": "dell",
"dateUpdated": "2026-11-13T08:32:58.575Z"
},
"datePublic": "2026-11-03T06:30:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-862",
"description": "CWE-862: Missing Authorization",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Dell",
"product": "PowerScale InsightIQ",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.4.1 or later",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0 , contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0 , contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service."
}
]
}
],
"references": [
{
"url": "https://www.dell.com/support/kbdoc/en-gb/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities",
"tags": [
"vendor-advisory"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "LOW",
"baseSeverity": "MEDIUM",
"baseScore": 5.4,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
+102
View File
@@ -0,0 +1,102 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-116453",
"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"state": "PUBLISHED",
"assignerShortName": "dell",
"dateReserved": "2026-10-26T10:04:27.247Z",
"datePublished": "2026-11-13T08:45:39.033Z",
"dateUpdated": "2026-11-13T08:45:39.033Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
"shortName": "dell",
"dateUpdated": "2026-11-13T08:45:39.033Z"
},
"datePublic": "2026-11-03T06:30:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-862",
"description": "CWE-862: Missing Authorization",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Dell",
"product": "PowerScale InsightIQ",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.4.1 or later",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access."
}
]
}
],
"references": [
{
"url": "https://www.dell.com/support/kbdoc/en-gb/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities",
"tags": [
"vendor-advisory"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "LOW",
"baseSeverity": "MEDIUM",
"baseScore": 5.4,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
+135
View File
@@ -0,0 +1,135 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-120864",
"assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
"state": "PUBLISHED",
"assignerShortName": "NetScaler",
"dateReserved": "2026-11-03T00:53:55.696Z",
"datePublished": "2026-11-13T08:10:07.476Z",
"dateUpdated": "2026-11-13T08:10:07.476Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
"shortName": "NetScaler",
"dateUpdated": "2026-11-13T08:10:07.476Z"
},
"title": "Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway",
"datePublic": "2026-11-12T23:05:00.000Z",
"affected": [
{
"vendor": "Citrix",
"product": "NetScaler ADC",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "14.1-73.57",
"versionType": "patch"
},
{
"status": "affected",
"version": "0",
"lessThan": "13.1-64.39",
"versionType": "patch"
},
{
"status": "affected",
"version": "0",
"lessThan": "14.1-73.58 FIPS",
"versionType": "patch"
},
{
"status": "affected",
"version": "0",
"lessThan": "13.1-37.293 FIPs and NDcPP",
"versionType": "patch"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Citrix",
"product": "NetScaler Gateway",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "14.1-73.57",
"versionType": "patch"
},
{
"status": "affected",
"version": "0",
"lessThan": "13.1-64.39",
"versionType": "patch"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway."
}
]
}
],
"references": [
{
"url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305"
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV4_0": {
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"subIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED",
"version": "4.0",
"baseSeverity": "CRITICAL",
"baseScore": 9.3,
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
+135
View File
@@ -0,0 +1,135 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-120865",
"assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
"state": "PUBLISHED",
"assignerShortName": "NetScaler",
"dateReserved": "2026-11-03T00:53:55.696Z",
"datePublished": "2026-11-13T08:11:19.158Z",
"dateUpdated": "2026-11-13T08:11:19.158Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
"shortName": "NetScaler",
"dateUpdated": "2026-11-13T08:11:19.158Z"
},
"title": "Memory overflow in HTTP/3 (QUIC) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway",
"datePublic": "2026-11-12T23:05:00.000Z",
"affected": [
{
"vendor": "Citrix",
"product": "NetScaler ADC",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "14.1-73.57",
"versionType": "patch"
},
{
"status": "affected",
"version": "0",
"lessThan": "13.1-64.39",
"versionType": "patch"
},
{
"status": "affected",
"version": "0",
"lessThan": "14.1-73.58 FIPS",
"versionType": "patch"
},
{
"status": "affected",
"version": "0",
"lessThan": "13.1-37.293 FIPs and NDcPP",
"versionType": "patch"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Citrix",
"product": "NetScaler Gateway",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "14.1-73.57",
"versionType": "patch"
},
{
"status": "affected",
"version": "0",
"lessThan": "13.1-64.39",
"versionType": "patch"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Memory overflow in HTTP/3 (QUIC) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Memory overflow in HTTP/3 (QUIC) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway."
}
]
}
],
"references": [
{
"url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305"
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV4_0": {
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"subIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "HIGH",
"subAvailabilityImpact": "LOW",
"exploitMaturity": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED",
"version": "4.0",
"baseSeverity": "HIGH",
"baseScore": 8.7,
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:L/SA:L"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
+135
View File
@@ -0,0 +1,135 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-120866",
"assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
"state": "PUBLISHED",
"assignerShortName": "NetScaler",
"dateReserved": "2026-11-03T00:53:55.696Z",
"datePublished": "2026-11-13T08:12:50.443Z",
"dateUpdated": "2026-11-13T08:12:50.443Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
"shortName": "NetScaler",
"dateUpdated": "2026-11-13T08:12:50.443Z"
},
"title": "Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway",
"datePublic": "2026-11-12T23:05:00.000Z",
"affected": [
{
"vendor": "Citrix",
"product": "NetScaler ADC",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "14.1-73.57",
"versionType": "patch"
},
{
"status": "affected",
"version": "0",
"lessThan": "13.1-64.39",
"versionType": "patch"
},
{
"status": "affected",
"version": "0",
"lessThan": "14.1-73.58 FIPS",
"versionType": "patch"
},
{
"status": "affected",
"version": "0",
"lessThan": "13.1-37.293 FIPs and NDcPP",
"versionType": "patch"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Citrix",
"product": "NetScaler Gateway",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "14.1-73.57",
"versionType": "patch"
},
{
"status": "affected",
"version": "0",
"lessThan": "13.1-64.39",
"versionType": "patch"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway."
}
]
}
],
"references": [
{
"url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305"
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV4_0": {
"attackVector": "ADJACENT",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"subConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "HIGH",
"subIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "HIGH",
"subAvailabilityImpact": "LOW",
"exploitMaturity": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED",
"version": "4.0",
"baseSeverity": "HIGH",
"baseScore": 7.7,
"vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
+135
View File
@@ -0,0 +1,135 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-120867",
"assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
"state": "PUBLISHED",
"assignerShortName": "NetScaler",
"dateReserved": "2026-11-03T00:53:55.696Z",
"datePublished": "2026-11-13T08:14:51.280Z",
"dateUpdated": "2026-11-13T08:14:51.280Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5",
"shortName": "NetScaler",
"dateUpdated": "2026-11-13T08:14:51.280Z"
},
"title": "Memory overflow in SSL/TLS/DTLS can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway",
"datePublic": "2026-11-12T23:05:00.000Z",
"affected": [
{
"vendor": "Citrix",
"product": "NetScaler ADC",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "14.1-73.57",
"versionType": "patch"
},
{
"status": "affected",
"version": "0",
"lessThan": "13.1-64.39",
"versionType": "patch"
},
{
"status": "affected",
"version": "0",
"lessThan": "14.1-73.58 FIPS",
"versionType": "patch"
},
{
"status": "affected",
"version": "0",
"lessThan": "13.1-37.293 FIPs and NDcPP",
"versionType": "patch"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Citrix",
"product": "NetScaler Gateway",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "14.1-73.57",
"versionType": "patch"
},
{
"status": "affected",
"version": "0",
"lessThan": "13.1-64.39",
"versionType": "patch"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Memory overflow in SSL/TLS/DTLS can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Memory overflow in SSL/TLS/DTLS can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway."
}
]
}
],
"references": [
{
"url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305"
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV4_0": {
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"subIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "HIGH",
"subAvailabilityImpact": "LOW",
"exploitMaturity": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED",
"version": "4.0",
"baseSeverity": "HIGH",
"baseScore": 8.7,
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:L/SA:L"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
}
}
+137
View File
@@ -0,0 +1,137 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-128824",
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"state": "PUBLISHED",
"assignerShortName": "redhat",
"dateReserved": "2026-11-13T08:23:08.787Z",
"datePublished": "2026-11-13T09:00:23.537Z",
"dateUpdated": "2026-11-13T09:00:23.537Z"
},
"containers": {
"cna": {
"title": "Quay: quay: reflected xss via image_id in v1 registry error responses",
"metrics": [
{
"other": {
"content": {
"value": "Moderate",
"namespace": "https://access.redhat.com/security/updates/classification/"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in Red Hat Quay. The v1 registry API error handler reflects the attacker-supplied image_id path segment in a response served as text/html, allowing a reflected cross-site scripting (XSS) attack. By tricking a user into visiting a specially crafted URL, a remote attacker can execute arbitrary JavaScript in the victim's browser within the Quay origin, potentially compromising the user's session."
}
],
"affected": [
{
"vendor": "Red Hat",
"product": "mirror registry for Red Hat OpenShift 2",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift/mirror-registry-rhel8",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:mirror_registry:2"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Quay 3",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "quay/quay-rhel9",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:quay:3"
]
}
],
"references": [
{
"url": "https://access.redhat.com/security/cve/CVE-2026-128824",
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
]
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2572952",
"name": "RHBZ#2572952",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
]
}
],
"datePublic": "2026-11-13T08:13:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "Improper Neutralization of Input During Web Page Generation",
"lang": "en",
"type": "CWE"
}
]
}
],
"x_redhatCweChain": "CWE-79: Improper Neutralization of Input During Web Page Generation",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-04T00:00:00.000Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-11-13T08:13:00.000Z",
"value": "Made public."
}
],
"credits": [
{
"lang": "en",
"value": "Red Hat would like to thank Zachariah Mithani (AploSec) for reporting this issue."
}
],
"providerMetadata": {
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat",
"dateUpdated": "2026-11-13T09:00:23.537Z"
},
"x_generator": {
"engine": "cvelib 1.8.0"
}
}
}
}
+44 -19
View File
@@ -1,32 +1,57 @@
{
"fetchTime": "2026-11-13T08:09:17.038Z",
"numberOfChanges": 4,
"fetchTime": "2026-11-13T09:13:39.579Z",
"numberOfChanges": 8,
"new": [
{
"cveId": "CVE-2026-116432",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116432",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116432.json",
"dateUpdated": "2026-11-13T08:02:42.850Z"
"cveId": "CVE-2026-116420",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116420",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116420.json",
"dateUpdated": "2026-11-13T09:08:33.704Z"
},
{
"cveId": "CVE-2026-120861",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120861",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120861.json",
"dateUpdated": "2026-11-13T07:58:38.809Z"
"cveId": "CVE-2026-116425",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116425",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116425.json",
"dateUpdated": "2026-11-13T09:12:08.116Z"
},
{
"cveId": "CVE-2026-120862",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120862",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120862.json",
"dateUpdated": "2026-11-13T08:02:05.170Z"
"cveId": "CVE-2026-116430",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116430",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116430.json",
"dateUpdated": "2026-11-13T09:02:22.496Z"
},
{
"cveId": "CVE-2026-120863",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120863",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120863.json",
"dateUpdated": "2026-11-13T08:03:43.365Z"
"cveId": "CVE-2026-116431",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116431",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116431.json",
"dateUpdated": "2026-11-13T09:05:36.362Z"
},
{
"cveId": "CVE-2026-128824",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128824",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128824.json",
"dateUpdated": "2026-11-13T09:00:23.537Z"
}
],
"updated": [
{
"cveId": "CVE-2026-110697",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110697",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110697.json",
"dateUpdated": "2026-11-13T09:13:00.690Z"
},
{
"cveId": "CVE-2026-112204",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112204",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112204.json",
"dateUpdated": "2026-11-13T09:02:44.683Z"
},
{
"cveId": "CVE-2026-112205",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112205",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112205.json",
"dateUpdated": "2026-11-13T09:03:13.688Z"
}
],
"updated": [],
"error": []
}
+195 -238
View File
@@ -1,4 +1,199 @@
[
{
"fetchTime": "2026-11-13T09:13:39.579Z",
"numberOfChanges": 8,
"new": [
{
"cveId": "CVE-2026-116420",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116420",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116420.json",
"dateUpdated": "2026-11-13T09:08:33.704Z"
},
{
"cveId": "CVE-2026-116425",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116425",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116425.json",
"dateUpdated": "2026-11-13T09:12:08.116Z"
},
{
"cveId": "CVE-2026-116430",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116430",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116430.json",
"dateUpdated": "2026-11-13T09:02:22.496Z"
},
{
"cveId": "CVE-2026-116431",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116431",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116431.json",
"dateUpdated": "2026-11-13T09:05:36.362Z"
},
{
"cveId": "CVE-2026-128824",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128824",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128824.json",
"dateUpdated": "2026-11-13T09:00:23.537Z"
}
],
"updated": [
{
"cveId": "CVE-2026-110697",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110697",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110697.json",
"dateUpdated": "2026-11-13T09:13:00.690Z"
},
{
"cveId": "CVE-2026-112204",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112204",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112204.json",
"dateUpdated": "2026-11-13T09:02:44.683Z"
},
{
"cveId": "CVE-2026-112205",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112205",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112205.json",
"dateUpdated": "2026-11-13T09:03:13.688Z"
}
],
"error": []
},
{
"fetchTime": "2026-11-13T08:59:37.750Z",
"numberOfChanges": 1,
"new": [
{
"cveId": "CVE-2026-116424",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116424",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116424.json",
"dateUpdated": "2026-11-13T08:58:42.690Z"
}
],
"updated": [],
"error": []
},
{
"fetchTime": "2026-11-13T08:53:58.470Z",
"numberOfChanges": 2,
"new": [
{
"cveId": "CVE-2026-116417",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116417",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116417.json",
"dateUpdated": "2026-11-13T08:52:08.142Z"
},
{
"cveId": "CVE-2026-116422",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116422",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116422.json",
"dateUpdated": "2026-11-13T08:48:51.501Z"
}
],
"updated": [],
"error": []
},
{
"fetchTime": "2026-11-13T08:47:50.363Z",
"numberOfChanges": 2,
"new": [
{
"cveId": "CVE-2026-116419",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116419",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116419.json",
"dateUpdated": "2026-11-13T08:42:10.650Z"
},
{
"cveId": "CVE-2026-116453",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116453",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116453.json",
"dateUpdated": "2026-11-13T08:45:39.033Z"
}
],
"updated": [],
"error": []
},
{
"fetchTime": "2026-11-13T08:41:58.665Z",
"numberOfChanges": 2,
"new": [
{
"cveId": "CVE-2026-116423",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116423",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116423.json",
"dateUpdated": "2026-11-13T08:39:13.728Z"
},
{
"cveId": "CVE-2026-116426",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116426",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116426.json",
"dateUpdated": "2026-11-13T08:36:05.678Z"
}
],
"updated": [],
"error": []
},
{
"fetchTime": "2026-11-13T08:36:04.784Z",
"numberOfChanges": 2,
"new": [
{
"cveId": "CVE-2026-116421",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116421",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116421.json",
"dateUpdated": "2026-11-13T08:29:36.626Z"
},
{
"cveId": "CVE-2026-116438",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116438",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116438.json",
"dateUpdated": "2026-11-13T08:32:58.575Z"
}
],
"updated": [],
"error": []
},
{
"fetchTime": "2026-11-13T08:21:21.111Z",
"numberOfChanges": 6,
"new": [
{
"cveId": "CVE-2026-116427",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116427",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116427.json",
"dateUpdated": "2026-11-13T08:15:39.193Z"
},
{
"cveId": "CVE-2026-116436",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116436",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116436.json",
"dateUpdated": "2026-11-13T08:12:16.483Z"
},
{
"cveId": "CVE-2026-120864",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120864",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120864.json",
"dateUpdated": "2026-11-13T08:10:07.476Z"
},
{
"cveId": "CVE-2026-120865",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120865",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120865.json",
"dateUpdated": "2026-11-13T08:11:19.158Z"
},
{
"cveId": "CVE-2026-120866",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120866",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120866.json",
"dateUpdated": "2026-11-13T08:12:50.443Z"
},
{
"cveId": "CVE-2026-120867",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120867",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120867.json",
"dateUpdated": "2026-11-13T08:14:51.280Z"
}
],
"updated": [],
"error": []
},
{
"fetchTime": "2026-11-13T08:09:17.038Z",
"numberOfChanges": 4,
@@ -807392,243 +807587,5 @@
}
],
"error": []
},
{
"fetchTime": "2026-10-14T09:03:26.006Z",
"numberOfChanges": 2,
"new": [],
"updated": [
{
"cveId": "CVE-2020-11655",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-11655",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/11xxx/CVE-2020-11655.json",
"dateUpdated": "2026-10-14T09:00:48.635Z"
},
{
"cveId": "CVE-2026-109162",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109162",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109162.json",
"dateUpdated": "2026-10-14T08:56:40.570Z"
}
],
"error": []
},
{
"fetchTime": "2026-10-14T08:56:31.084Z",
"numberOfChanges": 8,
"new": [],
"updated": [
{
"cveId": "CVE-2020-10029",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-10029",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/10xxx/CVE-2020-10029.json",
"dateUpdated": "2026-10-14T08:50:29.371Z"
},
{
"cveId": "CVE-2020-10531",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-10531",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/10xxx/CVE-2020-10531.json",
"dateUpdated": "2026-10-14T08:50:30.957Z"
},
{
"cveId": "CVE-2020-10543",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-10543",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/10xxx/CVE-2020-10543.json",
"dateUpdated": "2026-10-14T08:50:34.325Z"
},
{
"cveId": "CVE-2020-10735",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-10735",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/10xxx/CVE-2020-10735.json",
"dateUpdated": "2026-10-14T08:55:09.442Z"
},
{
"cveId": "CVE-2020-10878",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-10878",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/10xxx/CVE-2020-10878.json",
"dateUpdated": "2026-10-14T08:55:11.381Z"
},
{
"cveId": "CVE-2020-11501",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-11501",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/11xxx/CVE-2020-11501.json",
"dateUpdated": "2026-10-14T08:55:12.970Z"
},
{
"cveId": "CVE-2020-12811",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-12811",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/12xxx/CVE-2020-12811.json",
"dateUpdated": "2026-10-14T08:54:33.389Z"
},
{
"cveId": "CVE-2020-9327",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-9327",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/9xxx/CVE-2020-9327.json",
"dateUpdated": "2026-10-14T08:45:59.541Z"
}
],
"error": []
},
{
"fetchTime": "2026-10-14T08:44:44.306Z",
"numberOfChanges": 7,
"new": [
{
"cveId": "CVE-2026-73790",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73790",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73790.json",
"dateUpdated": "2026-10-14T08:43:12.289Z"
}
],
"updated": [
{
"cveId": "CVE-2020-12811",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-12811",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/12xxx/CVE-2020-12811.json",
"dateUpdated": "2026-10-14T08:41:25.050Z"
},
{
"cveId": "CVE-2020-8284",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-8284",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/8xxx/CVE-2020-8284.json",
"dateUpdated": "2026-10-14T08:29:14.659Z"
},
{
"cveId": "CVE-2020-8285",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-8285",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/8xxx/CVE-2020-8285.json",
"dateUpdated": "2026-10-14T08:34:48.026Z"
},
{
"cveId": "CVE-2020-8286",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-8286",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/8xxx/CVE-2020-8286.json",
"dateUpdated": "2026-10-14T08:40:21.594Z"
},
{
"cveId": "CVE-2020-8315",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-8315",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/8xxx/CVE-2020-8315.json",
"dateUpdated": "2026-10-14T08:40:23.162Z"
},
{
"cveId": "CVE-2020-8492",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-8492",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/8xxx/CVE-2020-8492.json",
"dateUpdated": "2026-10-14T08:40:24.670Z"
}
],
"error": []
},
{
"fetchTime": "2026-10-14T08:28:21.203Z",
"numberOfChanges": 17,
"new": [
{
"cveId": "CVE-2026-103671",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103671",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103671.json",
"dateUpdated": "2026-10-14T08:12:13.594Z"
},
{
"cveId": "CVE-2026-107428",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107428",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107428.json",
"dateUpdated": "2026-10-14T08:00:25.216Z"
},
{
"cveId": "CVE-2026-14851",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-14851",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14851.json",
"dateUpdated": "2026-10-14T08:23:26.615Z"
}
],
"updated": [
{
"cveId": "CVE-2019-1010022",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-1010022",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1010xxx/CVE-2019-1010022.json",
"dateUpdated": "2026-10-14T08:01:58.323Z"
},
{
"cveId": "CVE-2019-1010023",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-1010023",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1010xxx/CVE-2019-1010023.json",
"dateUpdated": "2026-10-14T08:01:59.767Z"
},
{
"cveId": "CVE-2019-1010024",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-1010024",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1010xxx/CVE-2019-1010024.json",
"dateUpdated": "2026-10-14T08:02:01.378Z"
},
{
"cveId": "CVE-2019-1010025",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-1010025",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1010xxx/CVE-2019-1010025.json",
"dateUpdated": "2026-10-14T08:02:04.966Z"
},
{
"cveId": "CVE-2019-1010180",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-1010180",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/1010xxx/CVE-2019-1010180.json",
"dateUpdated": "2026-10-14T08:02:06.580Z"
},
{
"cveId": "CVE-2019-25013",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-25013",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/25xxx/CVE-2019-25013.json",
"dateUpdated": "2026-10-14T08:01:56.616Z"
},
{
"cveId": "CVE-2020-1712",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-1712",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1712.json",
"dateUpdated": "2026-10-14T08:02:08.054Z"
},
{
"cveId": "CVE-2020-1751",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-1751",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1751.json",
"dateUpdated": "2026-10-14T08:02:09.581Z"
},
{
"cveId": "CVE-2020-1752",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-1752",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/1xxx/CVE-2020-1752.json",
"dateUpdated": "2026-10-14T08:06:57.950Z"
},
{
"cveId": "CVE-2020-6096",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-6096",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/6xxx/CVE-2020-6096.json",
"dateUpdated": "2026-10-14T08:06:59.641Z"
},
{
"cveId": "CVE-2020-7595",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-7595",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/7xxx/CVE-2020-7595.json",
"dateUpdated": "2026-10-14T08:07:01.149Z"
},
{
"cveId": "CVE-2020-8169",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-8169",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/8xxx/CVE-2020-8169.json",
"dateUpdated": "2026-10-14T08:12:38.278Z"
},
{
"cveId": "CVE-2020-8177",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-8177",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/8xxx/CVE-2020-8177.json",
"dateUpdated": "2026-10-14T08:18:09.238Z"
},
{
"cveId": "CVE-2020-8231",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-8231",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/8xxx/CVE-2020-8231.json",
"dateUpdated": "2026-10-14T08:23:41.326Z"
}
],
"error": []
}
]
+3 -3
View File
@@ -1,7 +1,7 @@
{
"source": "https://github.com/CVEProject/cvelistV5.git",
"upstream_commit": "1509a79ca35b8766255ad5f49b3e4fc492757df0",
"upstream_commit": "463a9f6b37ab4df4633a5d44d07561f143000550",
"since_year": 2017,
"records": 331857,
"synced_at_utc": "2026-11-13T08:25:58.465979+00:00"
"records": 331877,
"synced_at_utc": "2026-11-13T09:25:29.122353+00:00"
}