diff --git a/data/2026/108xxx/CVE-2026-108291.json b/data/2026/108xxx/CVE-2026-108291.json index 3f44856967..12f7756b81 100644 --- a/data/2026/108xxx/CVE-2026-108291.json +++ b/data/2026/108xxx/CVE-2026-108291.json @@ -8,14 +8,14 @@ "assignerShortName": "Patchstack", "dateReserved": "2026-10-09T17:57:09.806Z", "datePublished": "2026-10-14T12:08:28.433Z", - "dateUpdated": "2026-10-15T16:43:47.695Z" + "dateUpdated": "2026-11-13T07:44:10.187Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack", - "dateUpdated": "2026-10-14T12:08:28.433Z" + "dateUpdated": "2026-11-13T07:44:10.187Z" }, "title": "WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection vulnerability", "datePublic": "2026-10-12T12:07:21.000Z", @@ -132,6 +132,7 @@ } ], "tags": [ + "x_known-exploited-vulnerability", "x_open-source" ] }, diff --git a/data/2026/111xxx/CVE-2026-111333.json b/data/2026/111xxx/CVE-2026-111333.json new file mode 100644 index 0000000000..81d569e6d7 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111333.json @@ -0,0 +1,135 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111333", + "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "state": "PUBLISHED", + "assignerShortName": "NetScaler", + "dateReserved": "2026-10-15T20:47:37.489Z", + "datePublished": "2026-11-13T07:29:29.352Z", + "dateUpdated": "2026-11-13T07:29:29.352Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "shortName": "NetScaler", + "dateUpdated": "2026-11-13T07:29:29.352Z" + }, + "title": "Memory overflow in an authentication request can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway", + "datePublic": "2026-11-12T23:05:00.000Z", + "affected": [ + { + "vendor": "Citrix", + "product": "NetScaler ADC", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.58 FIPS", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-37.293 FIPs and NDcPP", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Citrix", + "product": "NetScaler Gateway", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Memory overflow in an authentication request can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Memory overflow in an authentication request can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway." + } + ] + } + ], + "references": [ + { + "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "LOW", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "MEDIUM", + "baseScore": 6.9, + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:L/SA:L" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111334.json b/data/2026/111xxx/CVE-2026-111334.json new file mode 100644 index 0000000000..f77629d998 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111334.json @@ -0,0 +1,135 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111334", + "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "state": "PUBLISHED", + "assignerShortName": "NetScaler", + "dateReserved": "2026-10-15T20:47:37.489Z", + "datePublished": "2026-11-13T07:33:09.222Z", + "dateUpdated": "2026-11-13T07:33:09.222Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "shortName": "NetScaler", + "dateUpdated": "2026-11-13T07:33:09.222Z" + }, + "title": "Memory overflow in Endpoint Analysis (EPA/EPAS) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway", + "datePublic": "2026-11-12T23:05:00.000Z", + "affected": [ + { + "vendor": "Citrix", + "product": "NetScaler ADC", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.58 FIPS", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-37.293 FIPs and NDcPP", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Citrix", + "product": "NetScaler Gateway", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Memory overflow in Endpoint Analysis (EPA/EPAS) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Memory overflow in Endpoint Analysis (EPA/EPAS) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway." + } + ] + } + ], + "references": [ + { + "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "LOW", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "CRITICAL", + "baseScore": 9.3, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111335.json b/data/2026/111xxx/CVE-2026-111335.json new file mode 100644 index 0000000000..a091fad543 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111335.json @@ -0,0 +1,135 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111335", + "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "state": "PUBLISHED", + "assignerShortName": "NetScaler", + "dateReserved": "2026-10-15T20:47:37.489Z", + "datePublished": "2026-11-13T07:35:36.768Z", + "dateUpdated": "2026-11-13T07:35:36.768Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "shortName": "NetScaler", + "dateUpdated": "2026-11-13T07:35:36.768Z" + }, + "title": "Improper request handling can lead to a denial-of-service / reboot-loop condition in Citrix NetScaler ADC and Citrix NetScaler Gateway", + "datePublic": "2026-11-12T23:05:00.000Z", + "affected": [ + { + "vendor": "Citrix", + "product": "NetScaler ADC", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.58 FIPS", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-37.293 FIPs and NDcPP", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Citrix", + "product": "NetScaler Gateway", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Improper request handling can lead to a denial-of-service / reboot-loop condition in Citrix NetScaler ADC and Citrix NetScaler Gateway.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper request handling can lead to a denial-of-service / reboot-loop condition in Citrix NetScaler ADC and Citrix NetScaler Gateway." + } + ] + } + ], + "references": [ + { + "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "LOW", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "MEDIUM", + "baseScore": 6.9, + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111336.json b/data/2026/111xxx/CVE-2026-111336.json new file mode 100644 index 0000000000..11fb15b371 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111336.json @@ -0,0 +1,135 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111336", + "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "state": "PUBLISHED", + "assignerShortName": "NetScaler", + "dateReserved": "2026-10-15T20:47:37.489Z", + "datePublished": "2026-11-13T07:38:51.913Z", + "dateUpdated": "2026-11-13T07:38:51.913Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "shortName": "NetScaler", + "dateUpdated": "2026-11-13T07:38:51.913Z" + }, + "title": "Memory overflow in HTTP/2 handling can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway", + "datePublic": "2026-11-12T23:05:00.000Z", + "affected": [ + { + "vendor": "Citrix", + "product": "NetScaler ADC", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.58 FIPS", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-37.293 FIPs and NDcPP", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Citrix", + "product": "NetScaler Gateway", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Memory overflow in HTTP/2 handling can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Memory overflow in HTTP/2 handling can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway." + } + ] + } + ], + "references": [ + { + "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "subConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "subIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "LOW", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 8.3, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:L" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111337.json b/data/2026/111xxx/CVE-2026-111337.json new file mode 100644 index 0000000000..224f18ab3c --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111337.json @@ -0,0 +1,135 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111337", + "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "state": "PUBLISHED", + "assignerShortName": "NetScaler", + "dateReserved": "2026-10-15T20:47:37.489Z", + "datePublished": "2026-11-13T07:40:20.685Z", + "dateUpdated": "2026-11-13T07:40:20.685Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "shortName": "NetScaler", + "dateUpdated": "2026-11-13T07:40:20.685Z" + }, + "title": "Memory overflow in Base64 decoding in advanced policy expressions leading to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway", + "datePublic": "2026-11-12T23:05:00.000Z", + "affected": [ + { + "vendor": "Citrix", + "product": "NetScaler ADC", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.58 FIPS", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-37.293 FIPs and NDcPP", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Citrix", + "product": "NetScaler Gateway", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Memory overflow in Base64 decoding in advanced policy expressions leading to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Memory overflow in Base64 decoding in advanced policy expressions leading to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway." + } + ] + } + ], + "references": [ + { + "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "LOW", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 8.7, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:L/SA:L" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111338.json b/data/2026/111xxx/CVE-2026-111338.json new file mode 100644 index 0000000000..5f5cb7be03 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111338.json @@ -0,0 +1,135 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111338", + "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "state": "PUBLISHED", + "assignerShortName": "NetScaler", + "dateReserved": "2026-10-15T20:47:37.489Z", + "datePublished": "2026-11-13T07:42:17.340Z", + "dateUpdated": "2026-11-13T07:42:17.340Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "shortName": "NetScaler", + "dateUpdated": "2026-11-13T07:42:17.340Z" + }, + "title": "Sensitive authentication material written to a log file in Citrix NetScaler ADC and Citrix NetScaler Gateway", + "datePublic": "2026-11-12T23:05:00.000Z", + "affected": [ + { + "vendor": "Citrix", + "product": "NetScaler ADC", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.58 FIPS", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-37.293 FIPs and NDcPP", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Citrix", + "product": "NetScaler Gateway", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Sensitive authentication material written to a log file in Citrix NetScaler ADC and Citrix NetScaler Gateway.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Sensitive authentication material written to a log file in Citrix NetScaler ADC and Citrix NetScaler Gateway." + } + ] + } + ], + "references": [ + { + "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subAvailabilityImpact": "LOW", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "MEDIUM", + "baseScore": 6.9, + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111339.json b/data/2026/111xxx/CVE-2026-111339.json new file mode 100644 index 0000000000..ff49e93cbb --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111339.json @@ -0,0 +1,135 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111339", + "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "state": "PUBLISHED", + "assignerShortName": "NetScaler", + "dateReserved": "2026-10-15T20:47:37.489Z", + "datePublished": "2026-11-13T07:45:26.079Z", + "dateUpdated": "2026-11-13T07:45:26.079Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "shortName": "NetScaler", + "dateUpdated": "2026-11-13T07:45:26.079Z" + }, + "title": "Memory overflow in Application Firewall data decompression/inspection can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway", + "datePublic": "2026-11-12T23:05:00.000Z", + "affected": [ + { + "vendor": "Citrix", + "product": "NetScaler ADC", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.58 FIPS", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-37.293 FIPs and NDcPP", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Citrix", + "product": "NetScaler Gateway", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Memory overflow in Application Firewall data decompression/inspection can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Memory overflow in Application Firewall data decompression/inspection can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway." + } + ] + } + ], + "references": [ + { + "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subAvailabilityImpact": "LOW", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "MEDIUM", + "baseScore": 6.9, + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111402.json b/data/2026/111xxx/CVE-2026-111402.json index 09d7abe411..04f023307e 100644 --- a/data/2026/111xxx/CVE-2026-111402.json +++ b/data/2026/111xxx/CVE-2026-111402.json @@ -8,14 +8,14 @@ "assignerShortName": "Patchstack", "dateReserved": "2026-10-16T00:19:35.558Z", "datePublished": "2026-10-24T08:00:10.963Z", - "dateUpdated": "2026-10-24T14:46:59.295Z" + "dateUpdated": "2026-11-13T07:43:59.622Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack", - "dateUpdated": "2026-10-24T08:00:10.963Z" + "dateUpdated": "2026-11-13T07:43:59.622Z" }, "title": "WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability", "datePublic": "2026-10-22T07:10:01.000Z", @@ -132,6 +132,7 @@ } ], "tags": [ + "x_known-exploited-vulnerability", "x_open-source" ] }, diff --git a/data/2026/112xxx/CVE-2026-112820.json b/data/2026/112xxx/CVE-2026-112820.json index 80d6eb20f4..7b574f59cc 100644 --- a/data/2026/112xxx/CVE-2026-112820.json +++ b/data/2026/112xxx/CVE-2026-112820.json @@ -8,14 +8,14 @@ "assignerShortName": "Patchstack", "dateReserved": "2026-10-19T19:23:59.817Z", "datePublished": "2026-10-22T10:00:12.735Z", - "dateUpdated": "2026-10-22T10:56:12.421Z" + "dateUpdated": "2026-11-13T07:43:48.601Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack", - "dateUpdated": "2026-10-22T10:00:12.735Z" + "dateUpdated": "2026-11-13T07:43:48.601Z" }, "title": "WordPress Academist Core plugin <= 1.4.1 - Local File Inclusion vulnerability", "datePublic": "2026-10-20T09:25:35.000Z", @@ -111,6 +111,9 @@ } ] } + ], + "tags": [ + "x_known-exploited-vulnerability" ] }, "adp": [ diff --git a/data/2026/116xxx/CVE-2026-116432.json b/data/2026/116xxx/CVE-2026-116432.json new file mode 100644 index 0000000000..63cfcae2d9 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116432.json @@ -0,0 +1,102 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116432", + "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "state": "PUBLISHED", + "assignerShortName": "dell", + "dateReserved": "2026-10-26T10:04:27.244Z", + "datePublished": "2026-11-13T08:02:42.850Z", + "dateUpdated": "2026-11-13T08:02:42.850Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "shortName": "dell", + "dateUpdated": "2026-11-13T08:02:42.850Z" + }, + "datePublic": "2026-11-03T06:30:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-532", + "description": "CWE-532: Insertion of Sensitive Information into Log File", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Dell", + "product": "PowerScale InsightIQ", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "6.4.1 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure." + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-gb/000528934/dsa-2026-480-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE", + "baseSeverity": "MEDIUM", + "baseScore": 4.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120860.json b/data/2026/120xxx/CVE-2026-120860.json new file mode 100644 index 0000000000..7cafaa6659 --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120860.json @@ -0,0 +1,135 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120860", + "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "state": "PUBLISHED", + "assignerShortName": "NetScaler", + "dateReserved": "2026-11-03T00:53:55.696Z", + "datePublished": "2026-11-13T07:56:35.648Z", + "dateUpdated": "2026-11-13T07:56:35.648Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "shortName": "NetScaler", + "dateUpdated": "2026-11-13T07:56:35.648Z" + }, + "title": "Memory overflow in protocol load-balancing traffic handling (Diameter, SIP-over-TCP, MQTT, RADIUS) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway", + "datePublic": "2026-11-12T23:05:00.000Z", + "affected": [ + { + "vendor": "Citrix", + "product": "NetScaler ADC", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.58 FIPS", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-37.293 FIPs and NDcPP", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Citrix", + "product": "NetScaler Gateway", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Memory overflow in protocol load-balancing traffic handling (Diameter, SIP-over-TCP, MQTT, RADIUS) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Memory overflow in protocol load-balancing traffic handling (Diameter, SIP-over-TCP, MQTT, RADIUS) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway." + } + ] + } + ], + "references": [ + { + "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "LOW", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 8.7, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:L/SA:L" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120861.json b/data/2026/120xxx/CVE-2026-120861.json new file mode 100644 index 0000000000..1778624efd --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120861.json @@ -0,0 +1,135 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120861", + "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "state": "PUBLISHED", + "assignerShortName": "NetScaler", + "dateReserved": "2026-11-03T00:53:55.696Z", + "datePublished": "2026-11-13T07:58:38.809Z", + "dateUpdated": "2026-11-13T07:58:38.809Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "shortName": "NetScaler", + "dateUpdated": "2026-11-13T07:58:38.809Z" + }, + "title": "Memory overflow / improper handling in GSLB and geolocation (MEP, static-proximity, config-sync) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler", + "datePublic": "2026-11-12T23:05:00.000Z", + "affected": [ + { + "vendor": "Citrix", + "product": "NetScaler ADC", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.58 FIPS", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-37.293 FIPs and NDcPP", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Citrix", + "product": "NetScaler Gateway", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Memory overflow / improper handling in GSLB and geolocation (MEP, static-proximity, config-sync) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Memory overflow / improper handling in GSLB and geolocation (MEP, static-proximity, config-sync) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler" + } + ] + } + ], + "references": [ + { + "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "LOW", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 8.7, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:L/SA:L" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120862.json b/data/2026/120xxx/CVE-2026-120862.json new file mode 100644 index 0000000000..6eec51e1c1 --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120862.json @@ -0,0 +1,135 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120862", + "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "state": "PUBLISHED", + "assignerShortName": "NetScaler", + "dateReserved": "2026-11-03T00:53:55.696Z", + "datePublished": "2026-11-13T08:02:05.170Z", + "dateUpdated": "2026-11-13T08:02:05.170Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "shortName": "NetScaler", + "dateUpdated": "2026-11-13T08:02:05.170Z" + }, + "title": "Memory overflow in SIP ALG (LSN) and DNS answer-section logging datapaths can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler", + "datePublic": "2026-11-12T23:05:00.000Z", + "affected": [ + { + "vendor": "Citrix", + "product": "NetScaler ADC", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.58 FIPS", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-37.293 FIPs and NDcPP", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Citrix", + "product": "NetScaler Gateway", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Memory overflow in SIP ALG (LSN) and DNS answer-section logging datapaths can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Memory overflow in SIP ALG (LSN) and DNS answer-section logging datapaths can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler " + } + ] + } + ], + "references": [ + { + "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "LOW", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 8.7, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:L/SA:L" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120863.json b/data/2026/120xxx/CVE-2026-120863.json new file mode 100644 index 0000000000..7b15d8001f --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120863.json @@ -0,0 +1,135 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120863", + "assignerOrgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "state": "PUBLISHED", + "assignerShortName": "NetScaler", + "dateReserved": "2026-11-03T00:53:55.696Z", + "datePublished": "2026-11-13T08:03:43.365Z", + "dateUpdated": "2026-11-13T08:03:43.365Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "50a63c94-1ea7-4568-8c11-eb79e7c5a2b5", + "shortName": "NetScaler", + "dateUpdated": "2026-11-13T08:03:43.365Z" + }, + "title": "Memory overflow in the management plane can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway", + "datePublic": "2026-11-12T23:05:00.000Z", + "affected": [ + { + "vendor": "Citrix", + "product": "NetScaler ADC", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.58 FIPS", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-37.293 FIPs and NDcPP", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Citrix", + "product": "NetScaler Gateway", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "14.1-73.57", + "versionType": "patch" + }, + { + "status": "affected", + "version": "0", + "lessThan": "13.1-64.39", + "versionType": "patch" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Memory overflow in the management plane can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Memory overflow in the management plane can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway." + } + ] + } + ], + "references": [ + { + "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 8.7, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/128xxx/CVE-2026-128637.json b/data/2026/128xxx/CVE-2026-128637.json new file mode 100644 index 0000000000..43f69a037d --- /dev/null +++ b/data/2026/128xxx/CVE-2026-128637.json @@ -0,0 +1,319 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-128637", + "assignerOrgId": "5a6e4751-2f3f-4070-9419-94fb35b644e8", + "state": "PUBLISHED", + "assignerShortName": "CIRCL", + "dateReserved": "2026-11-13T07:15:13.649Z", + "datePublished": "2026-11-13T07:15:18.086Z", + "dateUpdated": "2026-11-13T07:15:18.086Z" + }, + "containers": { + "cna": { + "descriptions": [ + { + "lang": "en", + "value": "The MISP Modules website component contains an open redirect vulnerability in its login endpoint. The /login route accepted a user-supplied next query parameter and passed it directly to Flask's redirect() function without validating the destination. An attacker could craft a URL such as https://victim-host/login?next=https://attacker.example/phish and deliver it to a user (e.g., via email or a lookalike page). After the user successfully authenticated, the application issued a 302 redirect to the attacker-controlled external URL. This enables phishing attacks where a user, believing they are still on the legitimate MISP Modules site, may enter additional credentials or sensitive information on the attacker's page. It can also be used to obscure the true destination of a link, bypassing user trust in the legitimate domain. The vulnerability requires the victim to interact with the crafted URL and complete a login, but no prior authentication or special configuration is needed on the attacker's side. The affected component is the website sub-project of misp-modules, specifically the account blueprint in website/app/account/account.py. No version boundaries are specified in the patch metadata." + } + ], + "affected": [ + { + "vendor": "misp", + "product": "misp-modules", + "cpes": [ + "cpe:2.3:a:misp:misp-modules:*:*:*:*:*:*:*:*" + ], + "versions": [ + { + "version": "0", + "status": "affected", + "lessThanOrEqual": "3.1.4", + "versionType": "semver" + } + ], + "modules": [ + "website" + ], + "programFiles": [ + "website/app/account/account.py" + ], + "repo": "https://github.com/MISP/misp-modules" + } + ], + "references": [ + { + "url": "https://github.com/MISP/misp-modules/commit/d115f00414e761b0b70c8c8671edac681de74a4c", + "name": "Security patch", + "tags": [ + "patch" + ] + } + ], + "x_gcve": [ + { + "recordType": "advisory", + "extensions": { + "bcp-05-x-01": { + "ai_annotations": [ + { + "scope": "record", + "gna_source": 1, + "tags": [ + "ai-computer-assisted:llm-generated", + "ai-computer-assisted:classification" + ], + "description": "Draft vulnerability metadata was generated from a git-format patch using an Ollama-hosted language model. Human validation is required before publication.", + "ai_level": "generated", + "review_status": "full", + "models": [ + { + "name": "qwen3.8:27b", + "gna_source": 1, + "source": "ollama", + "identifier": "qwen3.8:27b" + } + ] + } + ] + }, + "bcp-05-x-02": { + "x_patch2vuln": { + "generator": "patch2vuln.py", + "generatedAt": "2026-11-13T07:10:51.231558Z", + "model": "qwen3.8:27b", + "source": "https://github.com/MISP/misp-modules/commit/d115f00414e761b0b70c8c8671edac681de74a4c.patch", + "patchSha256": "4b395e050af927c4d1a6033230f563b7d397ebcadcd72e6a56d7e61428aa31ea", + "patchTruncated": false, + "commit": "d115f00414e761b0b70c8c8671edac681de74a4c", + "subject": "fix: [website] restrict post-login redirects to local paths", + "patches": [ + { + "source": "https://github.com/MISP/misp-modules/commit/d115f00414e761b0b70c8c8671edac681de74a4c.patch", + "sourceUrl": "https://github.com/MISP/misp-modules/commit/d115f00414e761b0b70c8c8671edac681de74a4c.patch", + "patchSha256": "4b395e050af927c4d1a6033230f563b7d397ebcadcd72e6a56d7e61428aa31ea", + "commit": "d115f00414e761b0b70c8c8671edac681de74a4c", + "subject": "fix: [website] restrict post-login redirects to local paths", + "date": "Fri, 13 Nov 2026 06:49:26 +0100", + "retrievedAt": "2026-11-13T07:10:04.602453Z" + } + ], + "confidence": "high", + "assumptions": [ + "No specific affected or fixed version is identified in the patch metadata; the version range is recorded as unspecified.", + "The CVSS UI metric is set to Active (A) on the assumption that the victim must click a crafted link and submit login credentials; if the login page is auto-submitted in a phishing context, UI could be argued as Passive, but the evidence supports Active.", + "SC is set to Low based on the phishing/social-engineering risk of redirecting a user to an external site after login; no direct data exfiltration mechanism is present in the vulnerable code path.", + "The CAPEC-113 mapping is the closest available pattern for open redirect; no more specific CAPEC exists for post-login redirect manipulation.", + "The patch does not indicate whether this vulnerability was reported through a coordinated disclosure process; no finder or reporter credit is assigned beyond the remediation developer.", + "The website component is assumed to be a Flask-based web application served over HTTP(S); the patch does not specify deployment topology or additional authentication layers." + ], + "fixSummary": "The fix introduces a _safe_next_url() validation function that restricts post-login redirect destinations to local paths or same-host HTTP(S) URLs. Any target that is empty, contains backslashes, control characters, leading/trailing whitespace, an unrecognized scheme, a mismatched host, or a protocol-relative form is rejected and the user is redirected to the home page (/). Accepted same-host URLs are normalized to local paths (scheme and authority stripped) while preserving query strings and fragments, ensuring the Location header always contains a relative path. This eliminates the ability to redirect users to arbitrary external destinations after authentication.", + "patchSummary": "In website/app/account/account.py, the import of urlsplit and urlunsplit from urllib.parse is added. A new _safe_next_url() function is defined that validates the target string against a series of safety checks (whitespace, backslashes, control characters, scheme allowlist, host match, protocol-relative rejection, double-slash path rejection) and returns either a normalized local path or the fallback '/'. The login() handler's redirect call is changed from redirect(request.args.get('next') or '/') to redirect(_safe_next_url(request.args.get('next'))). A new test file website/tests/login_checks.py (172 lines) is added with comprehensive unit tests covering external rejection, malformed input rejection, local path preservation, same-host-with-port normalization, wrong-password non-redirect, CSRF enforcement, and remember-me cookie preservation. The website README is updated to document the new redirect validation behavior.", + "credits": [ + { + "lang": "en", + "value": "Alexandre Dulaunoy", + "type": "remediation developer" + } + ], + "cvssRationale": "AV:N: exploitable over the network via a crafted URL. AC:L: no race conditions or special conditions; simply append a next parameter. AT:N: no attack requirements beyond delivering the URL. PR:N: the attacker needs no account; the victim performs the login. UI:A: the victim must actively visit the crafted URL and submit credentials. VC/VI/VA:N: the vulnerable system itself suffers no direct confidentiality, integrity, or availability loss. SC:L: subsequent confidentiality impact is low because the redirected user may be tricked into entering sensitive data on a phishing page, but the session cookie is domain-scoped and not directly exfiltrated. SI/SA:N: no subsequent integrity or availability impact is evidenced.", + "ssvc": { + "version": "2.0.3", + "role": "Supplier", + "timestamp": "2026-11-13T07:10:51Z", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ] + }, + "weaknessRationale": [ + { + "cweId": "CWE-601", + "rationale": "The login endpoint accepted an unvalidated user-supplied URL in the next query parameter and used it directly as the redirect destination, allowing an attacker to redirect authenticated users to arbitrary external sites. This is a textbook open redirect (CWE-601)." + } + ], + "capecRationale": [ + { + "capecId": "CAPEC-113", + "rationale": "The patch directly addresses an open redirect: an attacker crafts a login URL with a malicious next parameter to redirect the victim to an external phishing site after authentication. CAPEC-113 describes exactly this attack pattern where a web application redirects to a user-controlled destination without proper validation. This is the closest and most precise CAPEC mapping available for this vulnerability class." + } + ], + "draft": false, + "modelComparison": { + "selectedModel": "qwen3.8:27b", + "selectionMethod": "deterministic-consensus-v1", + "selectionNotice": "The selected result is closest to model consensus; this heuristic does not establish factual correctness and human review remains required.", + "rankings": [ + { + "model": "qwen3.8:27b", + "score": 7, + "agreementScore": 11, + "confidence": "high", + "assumptionCount": 6 + } + ], + "potentialErrors": [] + } + } + }, + "bcp-05-x-03": { + "x_timeline": { + "events": [ + { + "type": "fix-developed", + "timestamp": "2026-11-13T05:49:26Z", + "description": "Corrective change authored (d115f00414e761b0b70c8c8671edac681de74a4c): fix: [website] restrict post-login redirects to local paths", + "references": [ + "https://github.com/MISP/misp-modules/commit/d115f00414e761b0b70c8c8671edac681de74a4c.patch" + ], + "id": "evt-fix-developed-1" + }, + { + "id": "evt-fix-available-1", + "type": "fix-available", + "timestamp": "2026-11-13T07:10:04.602453Z", + "description": "Patch retrieved from the supplied URL; retrieval time is used as the default availability time.", + "references": [ + "https://github.com/MISP/misp-modules/commit/d115f00414e761b0b70c8c8671edac681de74a4c.patch" + ] + } + ] + } + } + }, + "vulnId": "gcve-1-2026-20325" + } + ], + "title": "Open Redirect in MISP Modules Website Login via Unvalidated next Parameter", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-601", + "description": "CWE-601 Open Redirect", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + }, + { + "format": "SSVC", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "other": { + "type": "SSVC", + "content": { + "version": "2.0.3", + "role": "Supplier", + "timestamp": "2026-11-13T07:10:51Z", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ] + } + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "The fix introduces a _safe_next_url() validation function that restricts post-login redirect destinations to local paths or same-host HTTP(S) URLs. Any target that is empty, contains backslashes, control characters, leading/trailing whitespace, an unrecognized scheme, a mismatched host, or a protocol-relative form is rejected and the user is redirected to the home page (/). Accepted same-host URLs are normalized to local paths (scheme and authority stripped) while preserving query strings and fragments, ensuring the Location header always contains a relative path. This eliminates the ability to redirect users to arbitrary external destinations after authentication." + } + ], + "impacts": [ + { + "capecId": "CAPEC-113", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-113 Open Redirect" + } + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Alexandre Dulaunoy", + "type": "remediation developer" + } + ], + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:misp:misp-modules:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndIncluding": "3.1.4" + } + ] + } + ] + } + ], + "providerMetadata": { + "orgId": "5a6e4751-2f3f-4070-9419-94fb35b644e8", + "shortName": "CIRCL", + "dateUpdated": "2026-11-13T07:15:18.086Z" + } + } + } +} \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59074.json b/data/2026/59xxx/CVE-2026-59074.json new file mode 100644 index 0000000000..d1c0a9650f --- /dev/null +++ b/data/2026/59xxx/CVE-2026-59074.json @@ -0,0 +1,147 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-59074", + "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", + "state": "PUBLISHED", + "assignerShortName": "CERT-PL", + "dateReserved": "2026-07-02T08:57:58.309Z", + "datePublished": "2026-11-13T07:26:21.814Z", + "dateUpdated": "2026-11-13T07:26:21.814Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", + "shortName": "CERT-PL", + "dateUpdated": "2026-11-13T07:26:21.814Z" + }, + "title": "Improper Cryptographic Signature Verification in Edito CMS", + "datePublic": "2026-11-12T09:54:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-347", + "description": "CWE-347 Improper verification of cryptographic signature", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-21", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-21 Exploitation of Trusted Identifiers" + } + ] + } + ], + "affected": [ + { + "vendor": "Edito", + "product": "Edito CMS", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.10.2607", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Edito CMS is vulnerable to improper cryptographic signature verification in the JWT refresh logic. An authenticated low-privilege user can submit self-crafted​ ​JWT​ containing​ ​an existing user​ ​identifier and, due to the lack of signature validation,​​  obtain​ ​a ​​valid,​​ fully-signed​​ session ​​token​​ for​​ any ​​account ​​in​ ​the​ ​system. This allows the attacker to impersonate any user, including administrators.\nThis issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Edito CMS is vulnerable to improper cryptographic signature verification in the JWT refresh logic. An authenticated low-privilege user can submit self-crafted​ ​JWT​ containing​ ​an existing user​ ​identifier and, due to the lack of signature validation,​​  obtain​ ​a ​​valid,​​ fully-signed​​ session ​​token​​ for​​ any ​​account ​​in​ ​the​ ​system. This allows the attacker to impersonate any user, including administrators.

This issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released.
" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/posts/2026/11/CVE-2026-59074", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://www.edito.pl/", + "tags": [ + "product" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 8.7, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Michał Majchrowicz (AFINE Team)", + "type": "finder" + }, + { + "lang": "en", + "value": "Dawid Małecki (AFINE Team)", + "type": "finder" + }, + { + "lang": "en", + "value": "​Paweł Zdunek (AFINE Team)", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.3" + } + } + } +} \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59075.json b/data/2026/59xxx/CVE-2026-59075.json new file mode 100644 index 0000000000..7c30e9134b --- /dev/null +++ b/data/2026/59xxx/CVE-2026-59075.json @@ -0,0 +1,136 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-59075", + "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", + "state": "PUBLISHED", + "assignerShortName": "CERT-PL", + "dateReserved": "2026-07-02T08:57:58.309Z", + "datePublished": "2026-11-13T07:26:52.240Z", + "dateUpdated": "2026-11-13T07:26:52.240Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", + "shortName": "CERT-PL", + "dateUpdated": "2026-11-13T07:26:52.240Z" + }, + "title": "Dynamic LINQ Injection in Edito CMS", + "datePublic": "2026-11-12T09:56:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-917", + "description": "CWE-917 Improper neutralization of special elements used in an expression language statement ('expression language injection')", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Edito", + "product": "Edito CMS", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.10.2607", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Edito CMS is vulnerable to Dynamic LINQ injection. Due to improper input validation, an authenticated attacker can inject conditional expressions into the sort parameter of paginated administrative endpoints. Analyzing the returned result order allows the attacker to extract value of any field character by character, leading to potential exposure of sensitive data.\n\n\nThis issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Edito CMS is vulnerable to Dynamic LINQ injection. Due to improper input validation, an authenticated attacker can inject conditional expressions into the sort parameter of paginated administrative endpoints. Analyzing the returned result order allows the attacker to extract value of any field character by character, leading to potential exposure of sensitive data.

This issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released.
" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/posts/2026/11/CVE-2026-59074", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://www.edito.pl/", + "tags": [ + "product" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 7.1, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Michał Majchrowicz (AFINE Team)", + "type": "finder" + }, + { + "lang": "en", + "value": "Dawid Małecki (AFINE Team)", + "type": "finder" + }, + { + "lang": "en", + "value": "​Paweł Zdunek (AFINE Team)", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.3" + } + } + } +} \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59076.json b/data/2026/59xxx/CVE-2026-59076.json new file mode 100644 index 0000000000..5135f717d3 --- /dev/null +++ b/data/2026/59xxx/CVE-2026-59076.json @@ -0,0 +1,147 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-59076", + "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", + "state": "PUBLISHED", + "assignerShortName": "CERT-PL", + "dateReserved": "2026-07-02T08:57:58.309Z", + "datePublished": "2026-11-13T07:27:20.730Z", + "dateUpdated": "2026-11-13T07:27:20.730Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", + "shortName": "CERT-PL", + "dateUpdated": "2026-11-13T07:27:20.730Z" + }, + "title": "Stored XSS in Edito CMS", + "datePublic": "2026-11-12T09:58:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-79", + "description": "CWE-79 Improper neutralization of input during web page generation ('cross-site scripting')", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-592", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-592 Stored XSS" + } + ] + } + ], + "affected": [ + { + "vendor": "Edito", + "product": "Edito CMS", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.10.2607", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Edito CMS is vulnerable to Stored Cross-Site Scripting (XSS). Due to improper input validation, an authenticated attacker can inject malicious scripts into givenName and surname parameters via the /api/auth/profile endpoint. When an administrator visits the admin changelog logs, the injected script is automatically executed, in his browser.\n\n\nThis issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Edito CMS is vulnerable to Stored Cross-Site Scripting (XSS). Due to improper input validation, an authenticated attacker can inject malicious scripts into givenName and surname parameters via the /api/auth/profile endpoint. When an administrator visits the admin changelog logs, the injected script is automatically executed, in his browser.

This issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released.
" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/posts/2026/11/CVE-2026-59074", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://www.edito.pl/", + "tags": [ + "product" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "MEDIUM", + "baseScore": 5.1, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Michał Majchrowicz (AFINE Team)", + "type": "finder" + }, + { + "lang": "en", + "value": "Dawid Małecki (AFINE Team)", + "type": "finder" + }, + { + "lang": "en", + "value": "​Paweł Zdunek (AFINE Team)", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.3" + } + } + } +} \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59077.json b/data/2026/59xxx/CVE-2026-59077.json new file mode 100644 index 0000000000..725aaa2301 --- /dev/null +++ b/data/2026/59xxx/CVE-2026-59077.json @@ -0,0 +1,147 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-59077", + "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", + "state": "PUBLISHED", + "assignerShortName": "CERT-PL", + "dateReserved": "2026-07-02T08:57:58.309Z", + "datePublished": "2026-11-13T07:27:42.394Z", + "dateUpdated": "2026-11-13T07:27:42.394Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", + "shortName": "CERT-PL", + "dateUpdated": "2026-11-13T07:27:42.394Z" + }, + "title": "Stored XSS in Edito CMS", + "datePublic": "2026-11-12T09:58:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-79", + "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-592", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-592 Stored XSS" + } + ] + } + ], + "affected": [ + { + "vendor": "Edito", + "product": "Edito CMS", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.10.2607", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Edito CMS is vulnerable to Stored XSS via content parameter in Tiny editor functionality. Authenticated attacker can inject arbitrary HTML and JS into website, which will be rendered/executed when user tries to edit changed entry.\n\nThis issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Edito CMS is vulnerable to Stored XSS via content parameter in Tiny editor functionality. Authenticated attacker can inject arbitrary HTML and JS into website, which will be rendered/executed when user tries to edit changed entry.

This issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released." + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/posts/2026/11/CVE-2026-59074", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://www.edito.pl/", + "tags": [ + "product" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "MEDIUM", + "baseScore": 5.1, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Michał Majchrowicz (AFINE Team)", + "type": "finder" + }, + { + "lang": "en", + "value": "Dawid Małecki (AFINE Team)", + "type": "finder" + }, + { + "lang": "en", + "value": "​Paweł Zdunek (AFINE Team)", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.3" + } + } + } +} \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59078.json b/data/2026/59xxx/CVE-2026-59078.json new file mode 100644 index 0000000000..9acd3e46d2 --- /dev/null +++ b/data/2026/59xxx/CVE-2026-59078.json @@ -0,0 +1,147 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-59078", + "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", + "state": "PUBLISHED", + "assignerShortName": "CERT-PL", + "dateReserved": "2026-07-02T08:57:58.309Z", + "datePublished": "2026-11-13T07:28:01.242Z", + "dateUpdated": "2026-11-13T07:28:01.242Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", + "shortName": "CERT-PL", + "dateUpdated": "2026-11-13T07:28:01.242Z" + }, + "title": "Stored XSS in Edito CMS", + "datePublic": "2026-11-12T09:59:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-79", + "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-592", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-592 Stored XSS" + } + ] + } + ], + "affected": [ + { + "vendor": "Edito", + "product": "Edito CMS", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.10.2607", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Edito CMS is vulnerable to Stored XSS in avatar upload functionality. Authenticated attacker can inject arbitrary HTML and JS into website, which will be rendered/executed when visiting an URL leading to a edited avatar.\n\nThis issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Edito CMS is vulnerable to Stored XSS in avatar upload functionality. Authenticated attacker can inject arbitrary HTML and JS into website, which will be rendered/executed when visiting an URL leading to a edited avatar.

This issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released." + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/posts/2026/11/CVE-2026-59074", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://www.edito.pl/", + "tags": [ + "product" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "MEDIUM", + "baseScore": 5.1, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Michał Majchrowicz (AFINE Team)", + "type": "finder" + }, + { + "lang": "en", + "value": "Dawid Małecki (AFINE Team)", + "type": "finder" + }, + { + "lang": "en", + "value": "​Paweł Zdunek (AFINE Team)", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.3" + } + } + } +} \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59079.json b/data/2026/59xxx/CVE-2026-59079.json new file mode 100644 index 0000000000..dc7e42d47a --- /dev/null +++ b/data/2026/59xxx/CVE-2026-59079.json @@ -0,0 +1,141 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-59079", + "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", + "state": "PUBLISHED", + "assignerShortName": "CERT-PL", + "dateReserved": "2026-07-02T08:57:58.309Z", + "datePublished": "2026-11-13T07:28:26.032Z", + "dateUpdated": "2026-11-13T07:28:26.032Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", + "shortName": "CERT-PL", + "dateUpdated": "2026-11-13T07:28:26.032Z" + }, + "title": "Unrestricted File Upload in Edito CMS", + "datePublic": "2026-11-12T09:59:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-434", + "description": "CWE-434 Unrestricted Upload of File with Dangerous Type", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Edito", + "product": "Edito CMS", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.10.2607", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Edito CMS restricts the ability to upload files via the UI to specific file types. However, an avatar upload functionality allows an attacker to upload files of any type and extension without restriction.\nThis issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Edito CMS restricts the ability to upload files via the UI to specific file types. However, an avatar upload functionality allows an attacker to upload files of any type and extension without restriction.

This issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released.
" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/posts/2026/11/CVE-2026-59074", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://www.edito.pl/", + "tags": [ + "product" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 7.1, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Michał Majchrowicz (AFINE Team)", + "type": "finder" + }, + { + "lang": "en", + "value": "Dawid Małecki (AFINE Team)", + "type": "finder" + }, + { + "lang": "en", + "value": "​Paweł Zdunek (AFINE Team)", + "type": "finder" + }, + { + "lang": "en", + "value": "Franciszek Malek", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.3" + } + } + } +} \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59080.json b/data/2026/59xxx/CVE-2026-59080.json new file mode 100644 index 0000000000..7950b1ac2f --- /dev/null +++ b/data/2026/59xxx/CVE-2026-59080.json @@ -0,0 +1,136 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-59080", + "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", + "state": "PUBLISHED", + "assignerShortName": "CERT-PL", + "dateReserved": "2026-07-02T08:57:58.309Z", + "datePublished": "2026-11-13T07:28:47.080Z", + "dateUpdated": "2026-11-13T07:28:47.080Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", + "shortName": "CERT-PL", + "dateUpdated": "2026-11-13T07:28:47.080Z" + }, + "title": "JWT Exposure via GET Request in Edito CMS", + "datePublic": "2026-11-12T10:00:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-598", + "description": "CWE-598 Use of GET request method with sensitive query strings", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Edito", + "product": "Edito CMS", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThanOrEqual": "5.10.2607", + "versionType": "semver" + } + ], + "defaultStatus": "affected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Edito CMS sends JWT token via GET requests. This allows a local attacker with access to browser history to obtain valid JWT token and perform action on behalf of the victim. The token is valid for only short period of time; after that time, it expires and can no longer be used.\n\n\n\nThe vendor assessed the likelihood of exploitation as very low and determined that a fix is not necessary.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Edito CMS sends JWT token via GET requests. This allows a local attacker with access to browser history to obtain valid JWT token and perform action on behalf of the victim. The token is valid for only short period of time; after that time, it expires and can no longer be used.

The vendor assessed the likelihood of exploitation as very low and determined that a fix is not necessary.

" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/posts/2026/11/CVE-2026-59081", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://www.edito.pl/", + "tags": [ + "product" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "LOW", + "baseScore": 2.1, + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Michał Majchrowicz (AFINE Team)", + "type": "finder" + }, + { + "lang": "en", + "value": "Dawid Małecki (AFINE Team)", + "type": "finder" + }, + { + "lang": "en", + "value": "​Paweł Zdunek (AFINE Team)", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.3" + } + } + } +} \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59081.json b/data/2026/59xxx/CVE-2026-59081.json new file mode 100644 index 0000000000..aa40ff5803 --- /dev/null +++ b/data/2026/59xxx/CVE-2026-59081.json @@ -0,0 +1,130 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-59081", + "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", + "state": "PUBLISHED", + "assignerShortName": "CERT-PL", + "dateReserved": "2026-07-02T08:57:58.309Z", + "datePublished": "2026-11-13T07:29:04.031Z", + "dateUpdated": "2026-11-13T07:29:04.031Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", + "shortName": "CERT-PL", + "dateUpdated": "2026-11-13T07:29:04.031Z" + }, + "title": "Deserialization of untrusted data in Edito CMS", + "datePublic": "2026-11-12T10:01:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-502", + "description": "CWE-502 Deserialization of untrusted data", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Edito", + "product": "Edito CMS", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.10.2607", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Edito CMS deserializes JSON data without further validation. A user (even an administrator) cannot exploit this vulnerability through the application's normal functionality. An attacker who could modify cache entries or inject them could execute code on the server.\n\n\n\n\nThis issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Edito CMS deserializes JSON data without further validation. A user (even an administrator) cannot exploit this vulnerability through the application's normal functionality. An attacker who could modify cache entries or inject them could execute code on the server.

\n

This issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released.

" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/posts/2026/07/CVE-2026-59081" + }, + { + "url": "https://www.edito.pl/" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "LOW", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 8.4, + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Michał Majchrowicz (AFINE Team)", + "type": "finder" + }, + { + "lang": "en", + "value": "Dawid Małecki (AFINE Team)", + "type": "finder" + }, + { + "lang": "en", + "value": "​Paweł Zdunek (AFINE Team)", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.3" + } + } + } +} \ No newline at end of file diff --git a/data/delta.json b/data/delta.json index 8480bad2dc..7c24cc7012 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,20 +1,32 @@ { - "fetchTime": "2026-11-13T06:44:14.183Z", - "numberOfChanges": 2, - "new": [], - "updated": [ + "fetchTime": "2026-11-13T08:09:17.038Z", + "numberOfChanges": 4, + "new": [ { - "cveId": "CVE-2026-11732", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-11732", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/11xxx/CVE-2026-11732.json", - "dateUpdated": "2026-11-13T06:43:03.326Z" + "cveId": "CVE-2026-116432", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116432", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116432.json", + "dateUpdated": "2026-11-13T08:02:42.850Z" }, { - "cveId": "CVE-2026-128424", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128424", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128424.json", - "dateUpdated": "2026-11-13T06:41:03.642Z" + "cveId": "CVE-2026-120861", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120861", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120861.json", + "dateUpdated": "2026-11-13T07:58:38.809Z" + }, + { + "cveId": "CVE-2026-120862", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120862", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120862.json", + "dateUpdated": "2026-11-13T08:02:05.170Z" + }, + { + "cveId": "CVE-2026-120863", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120863", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120863.json", + "dateUpdated": "2026-11-13T08:03:43.365Z" } ], + "updated": [], "error": [] } \ No newline at end of file diff --git a/data/deltaLog.json b/data/deltaLog.json index 84ca87c824..d4531c0657 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,205 @@ [ + { + "fetchTime": "2026-11-13T08:09:17.038Z", + "numberOfChanges": 4, + "new": [ + { + "cveId": "CVE-2026-116432", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116432", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116432.json", + "dateUpdated": "2026-11-13T08:02:42.850Z" + }, + { + "cveId": "CVE-2026-120861", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120861", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120861.json", + "dateUpdated": "2026-11-13T07:58:38.809Z" + }, + { + "cveId": "CVE-2026-120862", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120862", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120862.json", + "dateUpdated": "2026-11-13T08:02:05.170Z" + }, + { + "cveId": "CVE-2026-120863", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120863", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120863.json", + "dateUpdated": "2026-11-13T08:03:43.365Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-13T07:58:19.664Z", + "numberOfChanges": 1, + "new": [ + { + "cveId": "CVE-2026-120860", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120860", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120860.json", + "dateUpdated": "2026-11-13T07:56:35.648Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-13T07:46:45.827Z", + "numberOfChanges": 5, + "new": [ + { + "cveId": "CVE-2026-111338", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111338", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111338.json", + "dateUpdated": "2026-11-13T07:42:17.340Z" + }, + { + "cveId": "CVE-2026-111339", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111339", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111339.json", + "dateUpdated": "2026-11-13T07:45:26.079Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-108291", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108291", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108291.json", + "dateUpdated": "2026-11-13T07:44:10.187Z" + }, + { + "cveId": "CVE-2026-111402", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111402", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111402.json", + "dateUpdated": "2026-11-13T07:43:59.622Z" + }, + { + "cveId": "CVE-2026-112820", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112820", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112820.json", + "dateUpdated": "2026-11-13T07:43:48.601Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T07:40:51.398Z", + "numberOfChanges": 3, + "new": [ + { + "cveId": "CVE-2026-111335", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111335", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111335.json", + "dateUpdated": "2026-11-13T07:35:36.768Z" + }, + { + "cveId": "CVE-2026-111336", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111336", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111336.json", + "dateUpdated": "2026-11-13T07:38:51.913Z" + }, + { + "cveId": "CVE-2026-111337", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111337", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111337.json", + "dateUpdated": "2026-11-13T07:40:20.685Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-13T07:35:07.308Z", + "numberOfChanges": 5, + "new": [ + { + "cveId": "CVE-2026-111333", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111333", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111333.json", + "dateUpdated": "2026-11-13T07:29:29.352Z" + }, + { + "cveId": "CVE-2026-111334", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111334", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111334.json", + "dateUpdated": "2026-11-13T07:33:09.222Z" + }, + { + "cveId": "CVE-2026-59079", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59079", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59079.json", + "dateUpdated": "2026-11-13T07:28:26.032Z" + }, + { + "cveId": "CVE-2026-59080", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59080", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59080.json", + "dateUpdated": "2026-11-13T07:28:47.080Z" + }, + { + "cveId": "CVE-2026-59081", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59081", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59081.json", + "dateUpdated": "2026-11-13T07:29:04.031Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-13T07:28:17.280Z", + "numberOfChanges": 5, + "new": [ + { + "cveId": "CVE-2026-59074", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59074", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59074.json", + "dateUpdated": "2026-11-13T07:26:21.814Z" + }, + { + "cveId": "CVE-2026-59075", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59075", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59075.json", + "dateUpdated": "2026-11-13T07:26:52.240Z" + }, + { + "cveId": "CVE-2026-59076", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59076", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59076.json", + "dateUpdated": "2026-11-13T07:27:20.730Z" + }, + { + "cveId": "CVE-2026-59077", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59077", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59077.json", + "dateUpdated": "2026-11-13T07:27:42.394Z" + }, + { + "cveId": "CVE-2026-59078", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59078", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59078.json", + "dateUpdated": "2026-11-13T07:28:01.242Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-13T07:22:01.890Z", + "numberOfChanges": 1, + "new": [ + { + "cveId": "CVE-2026-128637", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128637", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128637.json", + "dateUpdated": "2026-11-13T07:15:18.086Z" + } + ], + "updated": [], + "error": [] + }, { "fetchTime": "2026-11-13T06:44:14.183Z", "numberOfChanges": 2, @@ -807429,699 +807630,5 @@ } ], "error": [] - }, - { - "fetchTime": "2026-10-14T08:00:19.375Z", - "numberOfChanges": 8, - "new": [], - "updated": [ - { - "cveId": "CVE-2019-19926", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-19926", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/19xxx/CVE-2019-19926.json", - "dateUpdated": "2026-10-14T07:57:04.459Z" - }, - { - "cveId": "CVE-2019-19956", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-19956", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/19xxx/CVE-2019-19956.json", - "dateUpdated": "2026-10-14T07:57:06.000Z" - }, - { - "cveId": "CVE-2019-19959", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-19959", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/19xxx/CVE-2019-19959.json", - "dateUpdated": "2026-10-14T07:57:07.423Z" - }, - { - "cveId": "CVE-2019-20218", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-20218", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/20xxx/CVE-2019-20218.json", - "dateUpdated": "2026-10-14T07:57:09.113Z" - }, - { - "cveId": "CVE-2019-20367", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-20367", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/20xxx/CVE-2019-20367.json", - "dateUpdated": "2026-10-14T07:57:10.654Z" - }, - { - "cveId": "CVE-2019-20388", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-20388", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/20xxx/CVE-2019-20388.json", - "dateUpdated": "2026-10-14T07:57:12.262Z" - }, - { - "cveId": "CVE-2019-20795", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-20795", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/20xxx/CVE-2019-20795.json", - "dateUpdated": "2026-10-14T07:57:13.605Z" - }, - { - "cveId": "CVE-2019-20907", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-20907", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/20xxx/CVE-2019-20907.json", - "dateUpdated": "2026-10-14T07:57:15.074Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T07:54:28.778Z", - "numberOfChanges": 3, - "new": [ - { - "cveId": "CVE-2026-92392", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92392", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92392.json", - "dateUpdated": "2026-10-14T07:46:15.160Z" - } - ], - "updated": [ - { - "cveId": "CVE-2019-19924", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-19924", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/19xxx/CVE-2019-19924.json", - "dateUpdated": "2026-10-14T07:45:52.303Z" - }, - { - "cveId": "CVE-2019-19925", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-19925", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/19xxx/CVE-2019-19925.json", - "dateUpdated": "2026-10-14T07:51:28.248Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T07:45:22.911Z", - "numberOfChanges": 21, - "new": [ - { - "cveId": "CVE-2025-9373", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-9373", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9373.json", - "dateUpdated": "2026-10-14T07:43:32.584Z" - }, - { - "cveId": "CVE-2026-100163", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-100163", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/100xxx/CVE-2026-100163.json", - "dateUpdated": "2026-10-14T07:43:31.547Z" - }, - { - "cveId": "CVE-2026-103366", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103366", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103366.json", - "dateUpdated": "2026-10-14T07:43:31.890Z" - }, - { - "cveId": "CVE-2026-103367", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103367", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103367.json", - "dateUpdated": "2026-10-14T07:43:32.923Z" - }, - { - "cveId": "CVE-2026-103380", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103380", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103380.json", - "dateUpdated": "2026-10-14T07:43:32.242Z" - }, - { - "cveId": "CVE-2026-103907", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103907", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103907.json", - "dateUpdated": "2026-10-14T07:43:35.022Z" - }, - { - "cveId": "CVE-2026-104748", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104748", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104748.json", - "dateUpdated": "2026-10-14T07:43:35.763Z" - }, - { - "cveId": "CVE-2026-104761", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104761", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104761.json", - "dateUpdated": "2026-10-14T07:43:33.581Z" - }, - { - "cveId": "CVE-2026-104764", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104764", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104764.json", - "dateUpdated": "2026-10-14T07:43:36.131Z" - }, - { - "cveId": "CVE-2026-104909", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104909", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104909.json", - "dateUpdated": "2026-10-14T07:43:36.462Z" - }, - { - "cveId": "CVE-2026-105107", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105107", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105107.json", - "dateUpdated": "2026-10-14T07:32:56.786Z" - }, - { - "cveId": "CVE-2026-107631", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107631", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107631.json", - "dateUpdated": "2026-10-14T07:43:34.674Z" - }, - { - "cveId": "CVE-2026-107650", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107650", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107650.json", - "dateUpdated": "2026-10-14T07:43:35.373Z" - }, - { - "cveId": "CVE-2026-107751", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107751", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107751.json", - "dateUpdated": "2026-10-14T07:43:34.349Z" - }, - { - "cveId": "CVE-2026-107754", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107754", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107754.json", - "dateUpdated": "2026-10-14T07:43:31.053Z" - }, - { - "cveId": "CVE-2026-107756", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107756", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107756.json", - "dateUpdated": "2026-10-14T07:43:33.999Z" - }, - { - "cveId": "CVE-2026-107757", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107757", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107757.json", - "dateUpdated": "2026-10-14T07:43:36.794Z" - }, - { - "cveId": "CVE-2026-110284", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110284", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110284.json", - "dateUpdated": "2026-10-14T07:43:33.249Z" - } - ], - "updated": [ - { - "cveId": "CVE-2019-19880", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-19880", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/19xxx/CVE-2019-19880.json", - "dateUpdated": "2026-10-14T07:34:27.245Z" - }, - { - "cveId": "CVE-2019-19906", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-19906", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/19xxx/CVE-2019-19906.json", - "dateUpdated": "2026-10-14T07:34:28.873Z" - }, - { - "cveId": "CVE-2019-19923", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-19923", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/19xxx/CVE-2019-19923.json", - "dateUpdated": "2026-10-14T07:40:12.550Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T07:29:02.951Z", - "numberOfChanges": 8, - "new": [ - { - "cveId": "CVE-2026-105106", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105106", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105106.json", - "dateUpdated": "2026-10-14T07:23:03.069Z" - }, - { - "cveId": "CVE-2026-107171", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107171", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107171.json", - "dateUpdated": "2026-10-14T07:11:09.227Z" - }, - { - "cveId": "CVE-2026-109901", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109901", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109901.json", - "dateUpdated": "2026-10-14T07:12:15.660Z" - }, - { - "cveId": "CVE-2026-110227", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110227", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110227.json", - "dateUpdated": "2026-10-14T07:12:43.050Z" - } - ], - "updated": [ - { - "cveId": "CVE-2019-19317", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-19317", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/19xxx/CVE-2019-19317.json", - "dateUpdated": "2026-10-14T07:12:05.802Z" - }, - { - "cveId": "CVE-2019-19603", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-19603", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/19xxx/CVE-2019-19603.json", - "dateUpdated": "2026-10-14T07:17:37.095Z" - }, - { - "cveId": "CVE-2019-19645", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-19645", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/19xxx/CVE-2019-19645.json", - "dateUpdated": "2026-10-14T07:23:12.550Z" - }, - { - "cveId": "CVE-2019-19646", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-19646", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/19xxx/CVE-2019-19646.json", - "dateUpdated": "2026-10-14T07:28:44.915Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T07:08:12.978Z", - "numberOfChanges": 2, - "new": [], - "updated": [ - { - "cveId": "CVE-2019-19242", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-19242", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/19xxx/CVE-2019-19242.json", - "dateUpdated": "2026-10-14T07:00:29.607Z" - }, - { - "cveId": "CVE-2019-19244", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-19244", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/19xxx/CVE-2019-19244.json", - "dateUpdated": "2026-10-14T07:06:27.340Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T06:56:35.029Z", - "numberOfChanges": 65, - "new": [ - { - "cveId": "CVE-2026-110467", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110467", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110467.json", - "dateUpdated": "2026-10-14T06:31:24.977Z" - }, - { - "cveId": "CVE-2026-89310", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89310", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89310.json", - "dateUpdated": "2026-10-14T06:50:34.005Z" - } - ], - "updated": [ - { - "cveId": "CVE-2018-14404", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2018-14404", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/14xxx/CVE-2018-14404.json", - "dateUpdated": "2026-10-14T06:30:36.170Z" - }, - { - "cveId": "CVE-2018-14567", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2018-14567", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/14xxx/CVE-2018-14567.json", - "dateUpdated": "2026-10-14T06:30:37.625Z" - }, - { - "cveId": "CVE-2018-18928", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2018-18928", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/18xxx/CVE-2018-18928.json", - "dateUpdated": "2026-10-14T06:30:39.138Z" - }, - { - "cveId": "CVE-2018-19591", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2018-19591", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/19xxx/CVE-2018-19591.json", - "dateUpdated": "2026-10-14T06:30:40.649Z" - }, - { - "cveId": "CVE-2018-20482", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2018-20482", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/20xxx/CVE-2018-20482.json", - "dateUpdated": "2026-10-14T06:30:41.972Z" - }, - { - "cveId": "CVE-2018-20843", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2018-20843", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/20xxx/CVE-2018-20843.json", - "dateUpdated": "2026-10-14T06:30:43.493Z" - }, - { - "cveId": "CVE-2018-25032", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2018-25032", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/25xxx/CVE-2018-25032.json", - "dateUpdated": "2026-10-14T06:35:20.087Z" - }, - { - "cveId": "CVE-2019-10160", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-10160", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/10xxx/CVE-2019-10160.json", - "dateUpdated": "2026-10-14T06:49:52.193Z" - }, - { - "cveId": "CVE-2019-11360", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-11360", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/11xxx/CVE-2019-11360.json", - "dateUpdated": "2026-10-14T06:49:53.758Z" - }, - { - "cveId": "CVE-2019-12290", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-12290", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/12xxx/CVE-2019-12290.json", - "dateUpdated": "2026-10-14T06:49:57.145Z" - }, - { - "cveId": "CVE-2019-12900", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-12900", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/12xxx/CVE-2019-12900.json", - "dateUpdated": "2026-10-14T06:50:00.554Z" - }, - { - "cveId": "CVE-2019-12904", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-12904", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/12xxx/CVE-2019-12904.json", - "dateUpdated": "2026-10-14T06:50:02.025Z" - }, - { - "cveId": "CVE-2019-13057", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-13057", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/13xxx/CVE-2019-13057.json", - "dateUpdated": "2026-10-14T06:50:03.637Z" - }, - { - "cveId": "CVE-2019-13565", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-13565", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/13xxx/CVE-2019-13565.json", - "dateUpdated": "2026-10-14T06:50:05.228Z" - }, - { - "cveId": "CVE-2019-13627", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-13627", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/13xxx/CVE-2019-13627.json", - "dateUpdated": "2026-10-14T06:50:06.790Z" - }, - { - "cveId": "CVE-2019-15847", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-15847", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/15xxx/CVE-2019-15847.json", - "dateUpdated": "2026-10-14T06:50:08.351Z" - }, - { - "cveId": "CVE-2019-15903", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-15903", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/15xxx/CVE-2019-15903.json", - "dateUpdated": "2026-10-14T06:50:10.037Z" - }, - { - "cveId": "CVE-2019-16056", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-16056", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/16xxx/CVE-2019-16056.json", - "dateUpdated": "2026-10-14T06:50:11.813Z" - }, - { - "cveId": "CVE-2019-16168", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-16168", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/16xxx/CVE-2019-16168.json", - "dateUpdated": "2026-10-14T06:50:13.466Z" - }, - { - "cveId": "CVE-2019-16905", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-16905", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/16xxx/CVE-2019-16905.json", - "dateUpdated": "2026-10-14T06:54:43.458Z" - }, - { - "cveId": "CVE-2019-17498", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-17498", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/17xxx/CVE-2019-17498.json", - "dateUpdated": "2026-10-14T06:54:44.821Z" - }, - { - "cveId": "CVE-2019-17543", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-17543", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/17xxx/CVE-2019-17543.json", - "dateUpdated": "2026-10-14T06:54:46.324Z" - }, - { - "cveId": "CVE-2019-17594", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-17594", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/17xxx/CVE-2019-17594.json", - "dateUpdated": "2026-10-14T06:54:47.856Z" - }, - { - "cveId": "CVE-2019-17595", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-17595", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/17xxx/CVE-2019-17595.json", - "dateUpdated": "2026-10-14T06:54:49.378Z" - }, - { - "cveId": "CVE-2019-18224", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-18224", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/18xxx/CVE-2019-18224.json", - "dateUpdated": "2026-10-14T06:54:50.718Z" - }, - { - "cveId": "CVE-2019-18276", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-18276", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/18xxx/CVE-2019-18276.json", - "dateUpdated": "2026-10-14T06:54:52.201Z" - }, - { - "cveId": "CVE-2019-18348", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-18348", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/18xxx/CVE-2019-18348.json", - "dateUpdated": "2026-10-14T06:54:53.676Z" - }, - { - "cveId": "CVE-2019-19126", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-19126", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/19xxx/CVE-2019-19126.json", - "dateUpdated": "2026-10-14T06:54:55.184Z" - }, - { - "cveId": "CVE-2019-3855", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-3855", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/3xxx/CVE-2019-3855.json", - "dateUpdated": "2026-10-14T06:35:21.490Z" - }, - { - "cveId": "CVE-2019-3856", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-3856", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/3xxx/CVE-2019-3856.json", - "dateUpdated": "2026-10-14T06:35:23.162Z" - }, - { - "cveId": "CVE-2019-3857", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-3857", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/3xxx/CVE-2019-3857.json", - "dateUpdated": "2026-10-14T06:35:25.158Z" - }, - { - "cveId": "CVE-2019-3858", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-3858", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/3xxx/CVE-2019-3858.json", - "dateUpdated": "2026-10-14T06:35:26.727Z" - }, - { - "cveId": "CVE-2019-3859", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-3859", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/3xxx/CVE-2019-3859.json", - "dateUpdated": "2026-10-14T06:35:28.096Z" - }, - { - "cveId": "CVE-2019-3860", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-3860", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/3xxx/CVE-2019-3860.json", - "dateUpdated": "2026-10-14T06:35:29.708Z" - }, - { - "cveId": "CVE-2019-3861", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-3861", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/3xxx/CVE-2019-3861.json", - "dateUpdated": "2026-10-14T06:35:31.280Z" - }, - { - "cveId": "CVE-2019-3862", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-3862", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/3xxx/CVE-2019-3862.json", - "dateUpdated": "2026-10-14T06:35:32.835Z" - }, - { - "cveId": "CVE-2019-3863", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-3863", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/3xxx/CVE-2019-3863.json", - "dateUpdated": "2026-10-14T06:35:34.230Z" - }, - { - "cveId": "CVE-2019-5018", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-5018", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/5xxx/CVE-2019-5018.json", - "dateUpdated": "2026-10-14T06:35:35.878Z" - }, - { - "cveId": "CVE-2019-5094", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-5094", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/5xxx/CVE-2019-5094.json", - "dateUpdated": "2026-10-14T06:35:37.415Z" - }, - { - "cveId": "CVE-2019-5188", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-5188", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/5xxx/CVE-2019-5188.json", - "dateUpdated": "2026-10-14T06:35:38.977Z" - }, - { - "cveId": "CVE-2019-5435", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-5435", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/5xxx/CVE-2019-5435.json", - "dateUpdated": "2026-10-14T06:35:40.335Z" - }, - { - "cveId": "CVE-2019-5436", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-5436", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/5xxx/CVE-2019-5436.json", - "dateUpdated": "2026-10-14T06:35:41.896Z" - }, - { - "cveId": "CVE-2019-5443", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-5443", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/5xxx/CVE-2019-5443.json", - "dateUpdated": "2026-10-14T06:35:43.420Z" - }, - { - "cveId": "CVE-2019-5481", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-5481", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/5xxx/CVE-2019-5481.json", - "dateUpdated": "2026-10-14T06:35:44.992Z" - }, - { - "cveId": "CVE-2019-5482", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-5482", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/5xxx/CVE-2019-5482.json", - "dateUpdated": "2026-10-14T06:35:46.387Z" - }, - { - "cveId": "CVE-2019-6109", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-6109", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/6xxx/CVE-2019-6109.json", - "dateUpdated": "2026-10-14T06:40:21.079Z" - }, - { - "cveId": "CVE-2019-6110", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-6110", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/6xxx/CVE-2019-6110.json", - "dateUpdated": "2026-10-14T06:45:01.714Z" - }, - { - "cveId": "CVE-2019-6111", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-6111", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/6xxx/CVE-2019-6111.json", - "dateUpdated": "2026-10-14T06:49:32.238Z" - }, - { - "cveId": "CVE-2019-6488", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-6488", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/6xxx/CVE-2019-6488.json", - "dateUpdated": "2026-10-14T06:49:33.780Z" - }, - { - "cveId": "CVE-2019-7309", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-7309", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/7xxx/CVE-2019-7309.json", - "dateUpdated": "2026-10-14T06:49:35.327Z" - }, - { - "cveId": "CVE-2019-8457", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-8457", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/8xxx/CVE-2019-8457.json", - "dateUpdated": "2026-10-14T06:49:36.663Z" - }, - { - "cveId": "CVE-2019-9169", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-9169", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/9xxx/CVE-2019-9169.json", - "dateUpdated": "2026-10-14T06:49:38.188Z" - }, - { - "cveId": "CVE-2019-9636", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-9636", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/9xxx/CVE-2019-9636.json", - "dateUpdated": "2026-10-14T06:49:39.823Z" - }, - { - "cveId": "CVE-2019-9674", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-9674", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/9xxx/CVE-2019-9674.json", - "dateUpdated": "2026-10-14T06:49:41.485Z" - }, - { - "cveId": "CVE-2019-9740", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-9740", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/9xxx/CVE-2019-9740.json", - "dateUpdated": "2026-10-14T06:49:42.941Z" - }, - { - "cveId": "CVE-2019-9923", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-9923", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/9xxx/CVE-2019-9923.json", - "dateUpdated": "2026-10-14T06:49:44.616Z" - }, - { - "cveId": "CVE-2019-9936", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-9936", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/9xxx/CVE-2019-9936.json", - "dateUpdated": "2026-10-14T06:49:46.134Z" - }, - { - "cveId": "CVE-2019-9937", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-9937", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/9xxx/CVE-2019-9937.json", - "dateUpdated": "2026-10-14T06:49:47.672Z" - }, - { - "cveId": "CVE-2019-9947", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-9947", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/9xxx/CVE-2019-9947.json", - "dateUpdated": "2026-10-14T06:49:49.072Z" - }, - { - "cveId": "CVE-2019-9948", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2019-9948", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/9xxx/CVE-2019-9948.json", - "dateUpdated": "2026-10-14T06:49:50.648Z" - }, - { - "cveId": "CVE-2026-55653", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55653", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55653.json", - "dateUpdated": "2026-10-14T06:49:57.017Z" - }, - { - "cveId": "CVE-2026-55655", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55655", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55655.json", - "dateUpdated": "2026-10-14T06:49:56.858Z" - }, - { - "cveId": "CVE-2026-89309", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89309", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89309.json", - "dateUpdated": "2026-10-14T06:48:53.187Z" - } - ], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index 7f98640393..6cdb6863c0 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "1a4a87389f5d6e1a82de4c4b1a6ede53110f7753", + "upstream_commit": "1509a79ca35b8766255ad5f49b3e4fc492757df0", "since_year": 2017, - "records": 331836, - "synced_at_utc": "2026-11-13T07:25:53.900144+00:00" + "records": 331857, + "synced_at_utc": "2026-11-13T08:25:58.465979+00:00" }