CVE sync 2026-11-11T10:38:33Z
This commit is contained in:
Vulnerability Bot
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2025-01-20T11:35:33.280Z",
|
||||
"datePublished": "2025-01-22T14:34:45.923Z",
|
||||
"dateUpdated": "2026-10-13T21:11:46.377Z"
|
||||
"dateUpdated": "2026-11-11T09:35:54.710Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -130,6 +130,16 @@
|
||||
"cpe:/a:redhat:build_keycloak:26.0::el9"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Build of Keycloak",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "keycloak-ldap-federation",
|
||||
"defaultStatus": "affected",
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:build_keycloak:"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Single Sign-On 7",
|
||||
@@ -215,7 +225,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"shortName": "redhat",
|
||||
"dateUpdated": "2026-10-13T21:11:46.377Z"
|
||||
"dateUpdated": "2026-11-11T09:35:54.710Z"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
|
||||
@@ -0,0 +1,145 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-112174",
|
||||
"assignerOrgId": "0cbda920-cd7f-484a-8e76-bf7f4b7f4516",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "INCIBE",
|
||||
"dateReserved": "2026-10-19T08:26:43.703Z",
|
||||
"datePublished": "2026-11-11T09:47:40.067Z",
|
||||
"dateUpdated": "2026-11-11T09:47:40.067Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "0cbda920-cd7f-484a-8e76-bf7f4b7f4516",
|
||||
"shortName": "INCIBE",
|
||||
"dateUpdated": "2026-11-11T09:47:40.067Z"
|
||||
},
|
||||
"title": "Privilege escalation in Enter’s Iperius Backup",
|
||||
"datePublic": "2026-11-11T09:35:00.000Z",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-250",
|
||||
"description": "CWE-250 Execution with unnecessary privileges",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Enter",
|
||||
"product": "Iperius Backup",
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "8.8.3 for Windows"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:enter:iperius_backup:8.8.3_for_windows:*:*:*:*:*:*:*"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Local privilege escalation vulnerability in Iperius Backup 8.8.3, due to insufficient separation between the graphical user interface running with elevated privileges and local users with low privileges. When the backup service is configured to run persistently with Administrator privileges, a local attacker with low privileges can use the native Windows dialogues exposed by the application to run programmes that inherit its elevated context. This allows commands to be executed with SYSTEM or Administrator privileges, depending on the application’s context, and compromises the affected Windows system.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "Local privilege escalation vulnerability in Iperius Backup 8.8.3, due to insufficient separation between the graphical user interface running with elevated privileges and local users with low privileges. When the backup service is configured to run persistently with Administrator privileges, a local attacker with low privileges can use the native Windows dialogues exposed by the application to run programmes that inherit its elevated context. This allows commands to be executed with SYSTEM or Administrator privileges, depending on the application’s context, and compromises the affected Windows system."
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/privilege-escalation-enters-iperius-backup"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV4_0": {
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"subIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subAvailabilityImpact": "HIGH",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED",
|
||||
"version": "4.0",
|
||||
"baseSeverity": "CRITICAL",
|
||||
"baseScore": 9.3,
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Update to Iperius Backup 8.8.9. According to the manufacturer, this version includes restrictive permissions by default that prevent the vulnerability. When the service is installed, it applies these permissions to the configuration folders and prevents non-administrator users from creating, modifying or running backup jobs.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "Update to Iperius Backup 8.8.9. According to the manufacturer, this version includes restrictive permissions by default that prevent the vulnerability. When the service is installed, it applies these permissions to the configuration folders and prevents non-administrator users from creating, modifying or running backup jobs."
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Jonas Fernández",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "EXTERNAL"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "Vulnogram 1.0.5"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,139 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-124250",
|
||||
"assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "Patchstack",
|
||||
"dateReserved": "2026-11-07T00:30:09.634Z",
|
||||
"datePublished": "2026-11-11T10:00:10.232Z",
|
||||
"dateUpdated": "2026-11-11T10:00:10.232Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "21595511-bba5-4825-b968-b78d1f9984a3",
|
||||
"shortName": "Patchstack",
|
||||
"dateUpdated": "2026-11-11T10:00:10.232Z"
|
||||
},
|
||||
"title": "WordPress GeoDirectory plugin <= 2.8.202 - Cross Site Scripting (XSS) vulnerability",
|
||||
"datePublic": "2026-11-09T09:52:33.000Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AyeCode Ltd GeoDirectory geodirectory allows Reflected XSS.This issue affects GeoDirectory: from n/a through 2.8.202.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AyeCode Ltd GeoDirectory geodirectory allows Reflected XSS.<p>This issue affects GeoDirectory: from n/a through 2.8.202.</p>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "AyeCode Ltd",
|
||||
"product": "GeoDirectory",
|
||||
"packageName": "geodirectory",
|
||||
"collectionURL": "https://wordpress.org/plugins",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"versionType": "custom",
|
||||
"status": "affected",
|
||||
"lessThanOrEqual": "2.8.202",
|
||||
"changes": [
|
||||
{
|
||||
"at": "2.8.203",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://patchstack.com/database/wordpress/plugin/geodirectory/vulnerability/wordpress-geodirectory-plugin-2-8-202-cross-site-scripting-xss-vulnerability?_s_id=cve",
|
||||
"tags": [
|
||||
"vdb-entry"
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "AndrewN | Patchstack Bug Bounty Program",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
|
||||
"baseScore": 7.1,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "LOW"
|
||||
}
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-79",
|
||||
"description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"impacts": [
|
||||
{
|
||||
"capecId": "CAPEC-591",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Reflected XSS"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Update the WordPress GeoDirectory plugin to the latest available version (at least 2.8.203).",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "Update the WordPress GeoDirectory plugin to the latest available version (at least 2.8.203)."
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"tags": [
|
||||
"x_open-source"
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,139 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-124256",
|
||||
"assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "Patchstack",
|
||||
"dateReserved": "2026-11-07T00:30:09.635Z",
|
||||
"datePublished": "2026-11-11T10:00:11.299Z",
|
||||
"dateUpdated": "2026-11-11T10:00:11.299Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "21595511-bba5-4825-b968-b78d1f9984a3",
|
||||
"shortName": "Patchstack",
|
||||
"dateUpdated": "2026-11-11T10:00:11.299Z"
|
||||
},
|
||||
"title": "WordPress Delivery & Pickup Date Time for WooCommerce plugin <= 1.3.90 - Cross Site Scripting (XSS) vulnerability",
|
||||
"datePublic": "2026-11-09T09:54:04.000Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeRockz Delivery & Pickup Date Time for WooCommerce woo-delivery allows Stored XSS.This issue affects Delivery & Pickup Date Time for WooCommerce: from n/a through 1.3.90.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeRockz Delivery & Pickup Date Time for WooCommerce woo-delivery allows Stored XSS.<p>This issue affects Delivery & Pickup Date Time for WooCommerce: from n/a through 1.3.90.</p>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "CodeRockz",
|
||||
"product": "Delivery & Pickup Date Time for WooCommerce",
|
||||
"packageName": "woo-delivery",
|
||||
"collectionURL": "https://wordpress.org/plugins",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"versionType": "custom",
|
||||
"status": "affected",
|
||||
"lessThanOrEqual": "1.3.90",
|
||||
"changes": [
|
||||
{
|
||||
"at": "1.3.91",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://patchstack.com/database/wordpress/plugin/woo-delivery/vulnerability/wordpress-delivery-pickup-date-time-for-woocommerce-plugin-1-3-90-cross-site-scripting-xss-vulnerability?_s_id=cve",
|
||||
"tags": [
|
||||
"vdb-entry"
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "leon figueira | Patchstack Bug Bounty Program",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
|
||||
"baseScore": 6.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "LOW"
|
||||
}
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-79",
|
||||
"description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"impacts": [
|
||||
{
|
||||
"capecId": "CAPEC-592",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Stored XSS"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Update the WordPress Delivery & Pickup Date Time for WooCommerce plugin to the latest available version (at least 1.3.91).",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "Update the WordPress Delivery & Pickup Date Time for WooCommerce plugin to the latest available version (at least 1.3.91)."
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"tags": [
|
||||
"x_open-source"
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,139 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-124257",
|
||||
"assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "Patchstack",
|
||||
"dateReserved": "2026-11-07T00:30:09.635Z",
|
||||
"datePublished": "2026-11-11T10:00:10.763Z",
|
||||
"dateUpdated": "2026-11-11T10:00:10.763Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "21595511-bba5-4825-b968-b78d1f9984a3",
|
||||
"shortName": "Patchstack",
|
||||
"dateUpdated": "2026-11-11T10:00:10.763Z"
|
||||
},
|
||||
"title": "WordPress BP Better Messages plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability",
|
||||
"datePublic": "2026-11-09T09:53:09.000Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wordplus BP Better Messages bp-better-messages allows Stored XSS.This issue affects BP Better Messages: from n/a through 3.2.1.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wordplus BP Better Messages bp-better-messages allows Stored XSS.<p>This issue affects BP Better Messages: from n/a through 3.2.1.</p>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "wordplus",
|
||||
"product": "BP Better Messages",
|
||||
"packageName": "bp-better-messages",
|
||||
"collectionURL": "https://wordpress.org/plugins",
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"versionType": "custom",
|
||||
"status": "affected",
|
||||
"lessThanOrEqual": "3.2.1",
|
||||
"changes": [
|
||||
{
|
||||
"at": "3.2.2",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://patchstack.com/database/wordpress/plugin/bp-better-messages/vulnerability/wordpress-bp-better-messages-plugin-3-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
|
||||
"tags": [
|
||||
"vdb-entry"
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "AndrewN | Patchstack Bug Bounty Program",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
|
||||
"baseScore": 6.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "LOW"
|
||||
}
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-79",
|
||||
"description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"impacts": [
|
||||
{
|
||||
"capecId": "CAPEC-592",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Stored XSS"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Update the WordPress BP Better Messages plugin to the latest available version (at least 3.2.2).",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "Update the WordPress BP Better Messages plugin to the latest available version (at least 3.2.2)."
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"tags": [
|
||||
"x_open-source"
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,137 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-124737",
|
||||
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "redhat",
|
||||
"dateReserved": "2026-11-09T11:36:29.478Z",
|
||||
"datePublished": "2026-11-11T09:40:57.419Z",
|
||||
"dateUpdated": "2026-11-11T09:40:57.419Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"title": "Busybox: heap buffer overflow in the tftp client on fallback to the default block size",
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"content": {
|
||||
"value": "Important",
|
||||
"namespace": "https://access.redhat.com/security/updates/classification/"
|
||||
},
|
||||
"type": "Red Hat severity rating"
|
||||
}
|
||||
},
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"attackComplexity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "REQUIRED",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"version": "3.1"
|
||||
},
|
||||
"format": "CVSS"
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A flaw was found in BusyBox. When the TFTP (Trivial File Transfer Protocol) client requests a custom small block size and receives a standard response, it falls back to the default block size without resizing the allocated memory buffer. A malicious TFTP server can exploit this issue by sending standard-sized network packets during a transfer, causing a heap buffer overflow. This flaw allows an attacker to achieve arbitrary code execution or cause a Denial of Service (DoS) by crashing the application."
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Enterprise Linux 6",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "busybox",
|
||||
"defaultStatus": "affected",
|
||||
"cpes": [
|
||||
"cpe:/o:redhat:rhel_els:6"
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Red Hat",
|
||||
"product": "Red Hat Hardened Images",
|
||||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||||
"packageName": "busybox",
|
||||
"defaultStatus": "affected",
|
||||
"cpes": [
|
||||
"cpe:/a:redhat:hummingbird:1"
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2026-124737",
|
||||
"tags": [
|
||||
"vdb-entry",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571607",
|
||||
"name": "RHBZ#2571607",
|
||||
"tags": [
|
||||
"issue-tracking",
|
||||
"x_refsource_REDHAT"
|
||||
]
|
||||
}
|
||||
],
|
||||
"datePublic": "2026-11-11T09:15:15.000Z",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-787",
|
||||
"description": "Out-of-bounds Write",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"x_redhatCweChain": "CWE-787: Out-of-bounds Write",
|
||||
"workarounds": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
|
||||
}
|
||||
],
|
||||
"timeline": [
|
||||
{
|
||||
"lang": "en",
|
||||
"time": "2026-10-25T13:34:21.000Z",
|
||||
"value": "Reported to Red Hat."
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"time": "2026-11-11T09:15:15.000Z",
|
||||
"value": "Made public."
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Red Hat would like to thank ducanhluu for reporting this issue."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||||
"shortName": "redhat",
|
||||
"dateUpdated": "2026-11-11T09:40:57.419Z"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "cvelib 1.8.0"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -8,14 +8,14 @@
|
||||
"assignerShortName": "VulDB",
|
||||
"dateReserved": "2026-08-31T05:10:03.728Z",
|
||||
"datePublished": "2026-08-31T17:00:10.617Z",
|
||||
"dateUpdated": "2026-08-31T18:47:25.115Z"
|
||||
"dateUpdated": "2026-11-11T10:16:32.775Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
|
||||
"shortName": "VulDB",
|
||||
"dateUpdated": "2026-08-31T17:00:10.617Z"
|
||||
"dateUpdated": "2026-11-11T10:16:32.775Z"
|
||||
},
|
||||
"title": "Toggl OÜ Toggl Track Extension postMessage origin validation",
|
||||
"problemTypes": [
|
||||
@@ -45,9 +45,97 @@
|
||||
"vendor": "Toggl OÜ",
|
||||
"product": "Toggl Track Extension",
|
||||
"versions": [
|
||||
{
|
||||
"version": "4.11.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.2",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.4",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.5",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.9",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.10",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.12",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.13",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.14",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.15",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.16",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.17",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.18",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.19",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.20",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.21",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "4.11.22",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
@@ -61,7 +149,7 @@
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This affects an unknown function of the component postMessage Handler. The manipulation leads to origin validation error. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
|
||||
"value": "A security vulnerability has been detected in Toggl OÜ Toggl Track Extension up to 4.11.21. This affects an unknown function of the component postMessage Handler. The manipulation leads to origin validation error. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 4.11.22 mitigates this issue. Upgrading the affected component is advised. The vendor confirms, that \"[i]t was fixed in 4.11.21 on Chrome and 4.11.22 on Firefox.\""
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
@@ -77,7 +165,7 @@
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"baseScore": 5.4,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C",
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
},
|
||||
@@ -85,7 +173,7 @@
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"baseScore": 5.4,
|
||||
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R",
|
||||
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C",
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
},
|
||||
@@ -93,7 +181,7 @@
|
||||
"cvssV2_0": {
|
||||
"version": "2.0",
|
||||
"baseScore": 6.4,
|
||||
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P/E:POC/RL:ND/RC:UR"
|
||||
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P/E:POC/RL:OF/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
@@ -109,7 +197,7 @@
|
||||
"value": "VulDB entry created"
|
||||
},
|
||||
{
|
||||
"time": "2026-08-31T07:15:12.000Z",
|
||||
"time": "2026-11-11T11:21:16.000Z",
|
||||
"lang": "en",
|
||||
"value": "VulDB entry last update"
|
||||
}
|
||||
@@ -164,7 +252,7 @@
|
||||
}
|
||||
],
|
||||
"x_generator": [
|
||||
"VulDB PVTS v202608"
|
||||
"VulDB PVTS v202611"
|
||||
]
|
||||
},
|
||||
"adp": [
|
||||
|
||||
@@ -0,0 +1,105 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-90993",
|
||||
"assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "apache",
|
||||
"dateReserved": "2026-09-14T14:32:55.692Z",
|
||||
"datePublished": "2026-11-11T10:20:13.294Z",
|
||||
"dateUpdated": "2026-11-11T10:20:13.294Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
|
||||
"shortName": "apache",
|
||||
"dateUpdated": "2026-11-11T10:20:13.294Z"
|
||||
},
|
||||
"title": "Apache XML Graphics Batik: Harden validation in SAXDocumentFactory",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"description": "CWE-611 Improper restriction of XML external entity reference",
|
||||
"lang": "en",
|
||||
"cweId": "CWE-611",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"defect": [
|
||||
"https://issues.apache.org/jira/browse/BATIK-1399"
|
||||
],
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Apache Software Foundation",
|
||||
"product": "Apache XML Graphics Batik",
|
||||
"packageURL": "pkg:maven/org.apache.xmlgraphics/batik-dom",
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "0",
|
||||
"lessThanOrEqual": "1.19.0",
|
||||
"versionType": "maven"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"collectionURL": "https://repo.maven.apache.org/maven2",
|
||||
"packageName": "org.apache.xmlgraphics:batik-dom"
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"value": "XXE vulnerability in Apache XML Graphics Batik.\n\n\n\nThis issue affects Apache XML Graphics Batik: through 1.19.\n\n\n\nUsers are recommended to upgrade to version 1.20, which fixes the issue.",
|
||||
"lang": "en",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "<p>XXE vulnerability in Apache XML Graphics Batik.</p><p>This issue affects Apache XML Graphics Batik: through 1.19.</p><p>Users are recommended to upgrade to version 1.20, which fixes the issue.</p>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://issues.apache.org/jira/browse/BATIK-1399",
|
||||
"tags": [
|
||||
"issue-tracking"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://lists.apache.org/thread.html/cnl5g2os5w048h32x50v1xgjnyo8y6vs",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "Textual description of severity",
|
||||
"content": {
|
||||
"text": "moderate"
|
||||
}
|
||||
},
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"x_generator": {
|
||||
"engine": "Vulnogram 1.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
+13
-12
@@ -1,19 +1,20 @@
|
||||
{
|
||||
"fetchTime": "2026-11-11T08:47:48.283Z",
|
||||
"fetchTime": "2026-11-11T10:20:41.658Z",
|
||||
"numberOfChanges": 2,
|
||||
"new": [],
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-90993",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-90993",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/90xxx/CVE-2026-90993.json",
|
||||
"dateUpdated": "2026-11-11T10:20:13.294Z"
|
||||
}
|
||||
],
|
||||
"updated": [
|
||||
{
|
||||
"cveId": "CVE-2026-80179",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-80179",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/80xxx/CVE-2026-80179.json",
|
||||
"dateUpdated": "2026-11-11T08:45:44.848Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-92091",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92091",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92091.json",
|
||||
"dateUpdated": "2026-11-11T08:45:44.871Z"
|
||||
"cveId": "CVE-2026-82811",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82811",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82811.json",
|
||||
"dateUpdated": "2026-11-11T10:16:32.775Z"
|
||||
}
|
||||
],
|
||||
"error": []
|
||||
|
||||
+89
-97
@@ -1,4 +1,93 @@
|
||||
[
|
||||
{
|
||||
"fetchTime": "2026-11-11T10:20:41.658Z",
|
||||
"numberOfChanges": 2,
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-90993",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-90993",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/90xxx/CVE-2026-90993.json",
|
||||
"dateUpdated": "2026-11-11T10:20:13.294Z"
|
||||
}
|
||||
],
|
||||
"updated": [
|
||||
{
|
||||
"cveId": "CVE-2026-82811",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82811",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82811.json",
|
||||
"dateUpdated": "2026-11-11T10:16:32.775Z"
|
||||
}
|
||||
],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-11-11T10:02:15.805Z",
|
||||
"numberOfChanges": 3,
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-124250",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124250",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124250.json",
|
||||
"dateUpdated": "2026-11-11T10:00:10.232Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-124256",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124256",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124256.json",
|
||||
"dateUpdated": "2026-11-11T10:00:11.299Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-124257",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124257",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124257.json",
|
||||
"dateUpdated": "2026-11-11T10:00:10.763Z"
|
||||
}
|
||||
],
|
||||
"updated": [],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-11-11T09:50:33.612Z",
|
||||
"numberOfChanges": 1,
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-112174",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112174",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112174.json",
|
||||
"dateUpdated": "2026-11-11T09:47:40.067Z"
|
||||
}
|
||||
],
|
||||
"updated": [],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-11-11T09:44:35.020Z",
|
||||
"numberOfChanges": 1,
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-124737",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124737",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124737.json",
|
||||
"dateUpdated": "2026-11-11T09:40:57.419Z"
|
||||
}
|
||||
],
|
||||
"updated": [],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-11-11T09:38:46.139Z",
|
||||
"numberOfChanges": 1,
|
||||
"new": [],
|
||||
"updated": [
|
||||
{
|
||||
"cveId": "CVE-2025-0604",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-0604",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/0xxx/CVE-2025-0604.json",
|
||||
"dateUpdated": "2026-11-11T09:35:54.710Z"
|
||||
}
|
||||
],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-11-11T08:47:48.283Z",
|
||||
"numberOfChanges": 2,
|
||||
@@ -833070,102 +833159,5 @@
|
||||
}
|
||||
],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-10-12T10:03:11.694Z",
|
||||
"numberOfChanges": 2,
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-108821",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108821",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108821.json",
|
||||
"dateUpdated": "2026-10-12T09:45:14.947Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-108822",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108822",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108822.json",
|
||||
"dateUpdated": "2026-10-12T10:00:16.378Z"
|
||||
}
|
||||
],
|
||||
"updated": [],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-10-12T09:43:08.054Z",
|
||||
"numberOfChanges": 6,
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-108819",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108819",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108819.json",
|
||||
"dateUpdated": "2026-10-12T09:15:19.326Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-108820",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108820",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108820.json",
|
||||
"dateUpdated": "2026-10-12T09:30:16.221Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-108979",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108979",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108979.json",
|
||||
"dateUpdated": "2026-10-12T09:15:12.219Z"
|
||||
}
|
||||
],
|
||||
"updated": [
|
||||
{
|
||||
"cveId": "CVE-2025-3456",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-3456",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/3xxx/CVE-2025-3456.json",
|
||||
"dateUpdated": "2026-10-12T09:31:55.160Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-107935",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107935",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107935.json",
|
||||
"dateUpdated": "2026-10-12T09:12:17.936Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-71364",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-71364",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/71xxx/CVE-2026-71364.json",
|
||||
"dateUpdated": "2026-10-12T09:40:50.395Z"
|
||||
}
|
||||
],
|
||||
"error": []
|
||||
},
|
||||
{
|
||||
"fetchTime": "2026-10-12T09:08:36.712Z",
|
||||
"numberOfChanges": 4,
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-107864",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107864",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107864.json",
|
||||
"dateUpdated": "2026-10-12T09:06:53.935Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-107865",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107865",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107865.json",
|
||||
"dateUpdated": "2026-10-12T09:04:13.480Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-107866",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107866",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107866.json",
|
||||
"dateUpdated": "2026-10-12T09:01:36.694Z"
|
||||
},
|
||||
{
|
||||
"cveId": "CVE-2026-108818",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108818",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108818.json",
|
||||
"dateUpdated": "2026-10-12T09:00:18.482Z"
|
||||
}
|
||||
],
|
||||
"updated": [],
|
||||
"error": []
|
||||
}
|
||||
]
|
||||
+3
-3
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"source": "https://github.com/CVEProject/cvelistV5.git",
|
||||
"upstream_commit": "4c07ec36f2902d5d14707eb349fb9509074b68c2",
|
||||
"upstream_commit": "a4ed5d5d48f2c3a616841462c9f42f4eb24e6fe5",
|
||||
"since_year": 2017,
|
||||
"records": 330878,
|
||||
"synced_at_utc": "2026-11-11T09:32:07.828143+00:00"
|
||||
"records": 330884,
|
||||
"synced_at_utc": "2026-11-11T10:29:55.337616+00:00"
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user