From a5623c3bc0c98bd67e2320aa9d8e9d987541b227 Mon Sep 17 00:00:00 2001 From: Vulnerability Bot Date: Tue, 10 Nov 2026 19:02:45 +0100 Subject: [PATCH] CVE sync 2026-11-10T18:02:43Z --- data/2024/9xxx/CVE-2024-9355.json | 8 +- data/2026/103xxx/CVE-2026-103061.json | 9 +- data/2026/103xxx/CVE-2026-103674.json | 38 +- data/2026/103xxx/CVE-2026-103682.json | 38 +- data/2026/105xxx/CVE-2026-105425.json | 8 +- data/2026/105xxx/CVE-2026-105426.json | 8 +- data/2026/105xxx/CVE-2026-105427.json | 8 +- data/2026/105xxx/CVE-2026-105669.json | 8 +- data/2026/107xxx/CVE-2026-107404.json | 8 +- data/2026/107xxx/CVE-2026-107405.json | 8 +- data/2026/107xxx/CVE-2026-107474.json | 4 +- data/2026/108xxx/CVE-2026-108018.json | 38 +- data/2026/111xxx/CVE-2026-111454.json | 4 +- data/2026/111xxx/CVE-2026-111494.json | 38 +- data/2026/111xxx/CVE-2026-111729.json | 118 +++ data/2026/112xxx/CVE-2026-112185.json | 131 +++ data/2026/112xxx/CVE-2026-112186.json | 131 +++ data/2026/115xxx/CVE-2026-115791.json | 50 +- data/2026/116xxx/CVE-2026-116592.json | 38 +- data/2026/116xxx/CVE-2026-116630.json | 38 +- data/2026/119xxx/CVE-2026-119446.json | 9 +- data/2026/120xxx/CVE-2026-120212.json | 107 +++ data/2026/120xxx/CVE-2026-120222.json | 38 +- data/2026/120xxx/CVE-2026-120415.json | 38 +- data/2026/120xxx/CVE-2026-120423.json | 38 +- data/2026/120xxx/CVE-2026-120474.json | 38 +- data/2026/121xxx/CVE-2026-121006.json | 50 +- data/2026/121xxx/CVE-2026-121220.json | 62 +- data/2026/121xxx/CVE-2026-121691.json | 199 ++++ data/2026/121xxx/CVE-2026-121819.json | 50 +- data/2026/121xxx/CVE-2026-121820.json | 38 +- data/2026/121xxx/CVE-2026-121821.json | 58 +- data/2026/121xxx/CVE-2026-121822.json | 46 +- data/2026/121xxx/CVE-2026-121823.json | 46 +- data/2026/121xxx/CVE-2026-121824.json | 46 +- data/2026/123xxx/CVE-2026-123087.json | 38 +- data/2026/123xxx/CVE-2026-123179.json | 8 +- data/2026/123xxx/CVE-2026-123181.json | 8 +- data/2026/123xxx/CVE-2026-123301.json | 38 +- data/2026/123xxx/CVE-2026-123319.json | 38 +- data/2026/123xxx/CVE-2026-123320.json | 38 +- data/2026/123xxx/CVE-2026-123322.json | 38 +- data/2026/123xxx/CVE-2026-123660.json | 38 +- data/2026/125xxx/CVE-2026-125320.json | 112 +++ data/2026/125xxx/CVE-2026-125321.json | 115 +++ data/2026/125xxx/CVE-2026-125322.json | 122 +++ data/2026/125xxx/CVE-2026-125342.json | 61 ++ data/2026/125xxx/CVE-2026-125343.json | 61 ++ data/2026/125xxx/CVE-2026-125344.json | 61 ++ data/2026/125xxx/CVE-2026-125345.json | 61 ++ data/2026/125xxx/CVE-2026-125346.json | 61 ++ data/2026/125xxx/CVE-2026-125347.json | 61 ++ data/2026/125xxx/CVE-2026-125348.json | 61 ++ data/2026/125xxx/CVE-2026-125349.json | 61 ++ data/2026/125xxx/CVE-2026-125350.json | 61 ++ data/2026/125xxx/CVE-2026-125729.json | 95 ++ data/2026/126xxx/CVE-2026-126048.json | 141 +++ data/2026/126xxx/CVE-2026-126049.json | 142 +++ data/2026/126xxx/CVE-2026-126050.json | 129 +++ data/2026/16xxx/CVE-2026-16530.json | 22 +- data/2026/16xxx/CVE-2026-16531.json | 22 +- data/2026/19xxx/CVE-2026-19876.json | 38 +- data/2026/19xxx/CVE-2026-19877.json | 38 +- data/2026/20xxx/CVE-2026-20703.json | 91 ++ data/2026/28xxx/CVE-2026-28730.json | 91 ++ data/2026/28xxx/CVE-2026-28746.json | 91 ++ data/2026/32xxx/CVE-2026-32146.json | 242 +++-- data/2026/33xxx/CVE-2026-33094.json | 91 ++ data/2026/33xxx/CVE-2026-33275.json | 91 ++ data/2026/33xxx/CVE-2026-33379.json | 38 +- data/2026/33xxx/CVE-2026-33818.json | 4 +- data/2026/34xxx/CVE-2026-34017.json | 91 ++ data/2026/34xxx/CVE-2026-34489.json | 91 ++ data/2026/35xxx/CVE-2026-35500.json | 91 ++ data/2026/40xxx/CVE-2026-40064.json | 91 ++ data/2026/40xxx/CVE-2026-40216.json | 91 ++ data/2026/40xxx/CVE-2026-40424.json | 91 ++ data/2026/40xxx/CVE-2026-40433.json | 91 ++ data/2026/40xxx/CVE-2026-40626.json | 91 ++ data/2026/40xxx/CVE-2026-40694.json | 91 ++ data/2026/40xxx/CVE-2026-40695.json | 91 ++ data/2026/40xxx/CVE-2026-40697.json | 91 ++ data/2026/41xxx/CVE-2026-41221.json | 91 ++ data/2026/41xxx/CVE-2026-41224.json | 91 ++ data/2026/42xxx/CVE-2026-42056.json | 91 ++ data/2026/42xxx/CVE-2026-42504.json | 4 +- data/2026/42xxx/CVE-2026-42956.json | 91 ++ data/2026/44xxx/CVE-2026-44382.json | 91 ++ data/2026/44xxx/CVE-2026-44606.json | 91 ++ data/2026/44xxx/CVE-2026-44624.json | 91 ++ data/2026/44xxx/CVE-2026-44625.json | 91 ++ data/2026/44xxx/CVE-2026-44685.json | 91 ++ data/2026/49xxx/CVE-2026-49036.json | 91 ++ data/2026/50xxx/CVE-2026-50175.json | 91 ++ data/2026/50xxx/CVE-2026-50249.json | 91 ++ data/2026/52xxx/CVE-2026-52899.json | 91 ++ data/2026/55xxx/CVE-2026-55709.json | 91 ++ data/2026/55xxx/CVE-2026-55716.json | 91 ++ data/2026/56xxx/CVE-2026-56432.json | 91 ++ data/2026/56xxx/CVE-2026-56435.json | 91 ++ data/2026/56xxx/CVE-2026-56440.json | 91 ++ data/2026/56xxx/CVE-2026-56759.json | 91 ++ data/2026/57xxx/CVE-2026-57882.json | 91 ++ data/2026/57xxx/CVE-2026-57890.json | 91 ++ data/2026/57xxx/CVE-2026-57891.json | 91 ++ data/2026/57xxx/CVE-2026-57892.json | 91 ++ data/2026/57xxx/CVE-2026-57893.json | 91 ++ data/2026/57xxx/CVE-2026-57907.json | 38 +- data/2026/59xxx/CVE-2026-59771.json | 91 ++ data/2026/60xxx/CVE-2026-60020.json | 91 ++ data/2026/60xxx/CVE-2026-60059.json | 91 ++ data/2026/60xxx/CVE-2026-60071.json | 91 ++ data/2026/60xxx/CVE-2026-60133.json | 91 ++ data/2026/60xxx/CVE-2026-60138.json | 91 ++ data/2026/60xxx/CVE-2026-60139.json | 91 ++ data/2026/60xxx/CVE-2026-60141.json | 91 ++ data/2026/60xxx/CVE-2026-60142.json | 91 ++ data/2026/61xxx/CVE-2026-61377.json | 91 ++ data/2026/61xxx/CVE-2026-61383.json | 91 ++ data/2026/61xxx/CVE-2026-61467.json | 91 ++ data/2026/61xxx/CVE-2026-61468.json | 91 ++ data/2026/61xxx/CVE-2026-61469.json | 91 ++ data/2026/61xxx/CVE-2026-61470.json | 91 ++ data/2026/61xxx/CVE-2026-61473.json | 91 ++ data/2026/61xxx/CVE-2026-61887.json | 91 ++ data/2026/62xxx/CVE-2026-62275.json | 91 ++ data/2026/62xxx/CVE-2026-62920.json | 91 ++ data/2026/62xxx/CVE-2026-62929.json | 91 ++ data/2026/62xxx/CVE-2026-62930.json | 91 ++ data/2026/63xxx/CVE-2026-63018.json | 91 ++ data/2026/63xxx/CVE-2026-63027.json | 91 ++ data/2026/63xxx/CVE-2026-63028.json | 91 ++ data/2026/63xxx/CVE-2026-63540.json | 91 ++ data/2026/66xxx/CVE-2026-66293.json | 38 +- data/2026/66xxx/CVE-2026-66294.json | 38 +- data/2026/66xxx/CVE-2026-66295.json | 38 +- data/2026/66xxx/CVE-2026-66297.json | 33 +- data/2026/66xxx/CVE-2026-66298.json | 31 +- data/2026/66xxx/CVE-2026-66881.json | 31 +- data/2026/66xxx/CVE-2026-66885.json | 33 +- data/2026/68xxx/CVE-2026-68524.json | 54 +- data/2026/68xxx/CVE-2026-68746.json | 63 +- data/2026/72xxx/CVE-2026-72493.json | 120 +-- data/2026/73xxx/CVE-2026-73577.json | 54 +- data/2026/73xxx/CVE-2026-73578.json | 54 +- data/2026/73xxx/CVE-2026-73580.json | 54 +- data/2026/76xxx/CVE-2026-76185.json | 4 +- data/2026/81xxx/CVE-2026-81808.json | 54 +- data/2026/81xxx/CVE-2026-81815.json | 54 +- data/2026/81xxx/CVE-2026-81828.json | 54 +- data/2026/82xxx/CVE-2026-82894.json | 54 +- data/2026/83xxx/CVE-2026-83528.json | 8 +- data/2026/83xxx/CVE-2026-83538.json | 54 +- data/2026/84xxx/CVE-2026-84155.json | 46 +- data/2026/92xxx/CVE-2026-92887.json | 54 +- data/2026/97xxx/CVE-2026-97401.json | 128 +++ data/2026/99xxx/CVE-2026-99285.json | 255 +++++ data/delta.json | 454 ++++++++- data/deltaLog.json | 1233 ++++++++++++++++++++----- state/sync.json | 6 +- 160 files changed, 12040 insertions(+), 663 deletions(-) create mode 100644 data/2026/111xxx/CVE-2026-111729.json create mode 100644 data/2026/112xxx/CVE-2026-112185.json create mode 100644 data/2026/112xxx/CVE-2026-112186.json create mode 100644 data/2026/120xxx/CVE-2026-120212.json create mode 100644 data/2026/121xxx/CVE-2026-121691.json create mode 100644 data/2026/125xxx/CVE-2026-125320.json create mode 100644 data/2026/125xxx/CVE-2026-125321.json create mode 100644 data/2026/125xxx/CVE-2026-125322.json create mode 100644 data/2026/125xxx/CVE-2026-125342.json create mode 100644 data/2026/125xxx/CVE-2026-125343.json create mode 100644 data/2026/125xxx/CVE-2026-125344.json create mode 100644 data/2026/125xxx/CVE-2026-125345.json create mode 100644 data/2026/125xxx/CVE-2026-125346.json create mode 100644 data/2026/125xxx/CVE-2026-125347.json create mode 100644 data/2026/125xxx/CVE-2026-125348.json create mode 100644 data/2026/125xxx/CVE-2026-125349.json create mode 100644 data/2026/125xxx/CVE-2026-125350.json create mode 100644 data/2026/125xxx/CVE-2026-125729.json create mode 100644 data/2026/126xxx/CVE-2026-126048.json create mode 100644 data/2026/126xxx/CVE-2026-126049.json create mode 100644 data/2026/126xxx/CVE-2026-126050.json create mode 100644 data/2026/20xxx/CVE-2026-20703.json create mode 100644 data/2026/28xxx/CVE-2026-28730.json create mode 100644 data/2026/28xxx/CVE-2026-28746.json create mode 100644 data/2026/33xxx/CVE-2026-33094.json create mode 100644 data/2026/33xxx/CVE-2026-33275.json create mode 100644 data/2026/34xxx/CVE-2026-34017.json create mode 100644 data/2026/34xxx/CVE-2026-34489.json create mode 100644 data/2026/35xxx/CVE-2026-35500.json create mode 100644 data/2026/40xxx/CVE-2026-40064.json create mode 100644 data/2026/40xxx/CVE-2026-40216.json create mode 100644 data/2026/40xxx/CVE-2026-40424.json create mode 100644 data/2026/40xxx/CVE-2026-40433.json create mode 100644 data/2026/40xxx/CVE-2026-40626.json create mode 100644 data/2026/40xxx/CVE-2026-40694.json create mode 100644 data/2026/40xxx/CVE-2026-40695.json create mode 100644 data/2026/40xxx/CVE-2026-40697.json create mode 100644 data/2026/41xxx/CVE-2026-41221.json create mode 100644 data/2026/41xxx/CVE-2026-41224.json create mode 100644 data/2026/42xxx/CVE-2026-42056.json create mode 100644 data/2026/42xxx/CVE-2026-42956.json create mode 100644 data/2026/44xxx/CVE-2026-44382.json create mode 100644 data/2026/44xxx/CVE-2026-44606.json create mode 100644 data/2026/44xxx/CVE-2026-44624.json create mode 100644 data/2026/44xxx/CVE-2026-44625.json create mode 100644 data/2026/44xxx/CVE-2026-44685.json create mode 100644 data/2026/49xxx/CVE-2026-49036.json create mode 100644 data/2026/50xxx/CVE-2026-50175.json create mode 100644 data/2026/50xxx/CVE-2026-50249.json create mode 100644 data/2026/52xxx/CVE-2026-52899.json create mode 100644 data/2026/55xxx/CVE-2026-55709.json create mode 100644 data/2026/55xxx/CVE-2026-55716.json create mode 100644 data/2026/56xxx/CVE-2026-56432.json create mode 100644 data/2026/56xxx/CVE-2026-56435.json create mode 100644 data/2026/56xxx/CVE-2026-56440.json create mode 100644 data/2026/56xxx/CVE-2026-56759.json create mode 100644 data/2026/57xxx/CVE-2026-57882.json create mode 100644 data/2026/57xxx/CVE-2026-57890.json create mode 100644 data/2026/57xxx/CVE-2026-57891.json create mode 100644 data/2026/57xxx/CVE-2026-57892.json create mode 100644 data/2026/57xxx/CVE-2026-57893.json create mode 100644 data/2026/59xxx/CVE-2026-59771.json create mode 100644 data/2026/60xxx/CVE-2026-60020.json create mode 100644 data/2026/60xxx/CVE-2026-60059.json create mode 100644 data/2026/60xxx/CVE-2026-60071.json create mode 100644 data/2026/60xxx/CVE-2026-60133.json create mode 100644 data/2026/60xxx/CVE-2026-60138.json create mode 100644 data/2026/60xxx/CVE-2026-60139.json create mode 100644 data/2026/60xxx/CVE-2026-60141.json create mode 100644 data/2026/60xxx/CVE-2026-60142.json create mode 100644 data/2026/61xxx/CVE-2026-61377.json create mode 100644 data/2026/61xxx/CVE-2026-61383.json create mode 100644 data/2026/61xxx/CVE-2026-61467.json create mode 100644 data/2026/61xxx/CVE-2026-61468.json create mode 100644 data/2026/61xxx/CVE-2026-61469.json create mode 100644 data/2026/61xxx/CVE-2026-61470.json create mode 100644 data/2026/61xxx/CVE-2026-61473.json create mode 100644 data/2026/61xxx/CVE-2026-61887.json create mode 100644 data/2026/62xxx/CVE-2026-62275.json create mode 100644 data/2026/62xxx/CVE-2026-62920.json create mode 100644 data/2026/62xxx/CVE-2026-62929.json create mode 100644 data/2026/62xxx/CVE-2026-62930.json create mode 100644 data/2026/63xxx/CVE-2026-63018.json create mode 100644 data/2026/63xxx/CVE-2026-63027.json create mode 100644 data/2026/63xxx/CVE-2026-63028.json create mode 100644 data/2026/63xxx/CVE-2026-63540.json create mode 100644 data/2026/97xxx/CVE-2026-97401.json create mode 100644 data/2026/99xxx/CVE-2026-99285.json diff --git a/data/2024/9xxx/CVE-2024-9355.json b/data/2024/9xxx/CVE-2024-9355.json index 9d2f42a752..9d377da8a6 100644 --- a/data/2024/9xxx/CVE-2024-9355.json +++ b/data/2024/9xxx/CVE-2024-9355.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2024-09-30T17:07:30.833Z", "datePublished": "2024-10-01T18:17:29.420Z", - "dateUpdated": "2026-11-05T12:15:45.984Z" + "dateUpdated": "2026-11-10T17:49:15.914Z" }, "containers": { "cna": { @@ -1231,7 +1231,7 @@ "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "openshift4/ose-aws-efs-csi-driver-container-rhel9", + "packageName": "openshift4/ose-aws-efs-csi-driver-container-rhel8", "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:openshift:4" @@ -1241,7 +1241,7 @@ "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "openshift4/ose-gcp-filestore-csi-driver-rhel8", + "packageName": "openshift4/ose-gcp-filestore-csi-driver-rhel9", "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:openshift:4" @@ -1839,7 +1839,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-05T12:15:45.984Z" + "dateUpdated": "2026-11-10T17:49:15.914Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/103xxx/CVE-2026-103061.json b/data/2026/103xxx/CVE-2026-103061.json index 958718ebd5..cfd16f083d 100644 --- a/data/2026/103xxx/CVE-2026-103061.json +++ b/data/2026/103xxx/CVE-2026-103061.json @@ -8,7 +8,7 @@ "assignerShortName": "EEF", "dateReserved": "2026-10-07T13:15:01.364Z", "datePublished": "2026-10-12T18:23:41.507Z", - "dateUpdated": "2026-10-16T17:49:42.484Z" + "dateUpdated": "2026-11-10T17:33:56.845Z" }, "containers": { "cna": { @@ -76,7 +76,7 @@ "gleam_cli::fs" ], "packageName": "gleam-lang/gleam", - "packageURL": "pkg:oci/gleam?repository_url=ghcr.io%2Fgleam-lang", + "packageURL": "pkg:oci/gleam?repository_url=ghcr.io%2Fgleam-lang%2Fgleam", "product": "Gleam", "programFiles": [ "compiler-cli/src/dependencies.rs", @@ -288,6 +288,7 @@ } ], "dateAssigned": "2026-10-07T22:06:26.000Z", + "datePublic": "2026-10-12T18:23:41.000Z", "descriptions": [ { "lang": "en", @@ -368,7 +369,7 @@ "descriptions": [ { "cweId": "CWE-22", - "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", + "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory", "lang": "en", "type": "CWE" } @@ -378,7 +379,7 @@ "providerMetadata": { "orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "shortName": "EEF", - "dateUpdated": "2026-10-12T18:23:41.507Z" + "dateUpdated": "2026-11-10T17:33:56.845Z" }, "references": [ { diff --git a/data/2026/103xxx/CVE-2026-103674.json b/data/2026/103xxx/CVE-2026-103674.json index 532ceb5b9b..98f28c4913 100644 --- a/data/2026/103xxx/CVE-2026-103674.json +++ b/data/2026/103xxx/CVE-2026-103674.json @@ -8,7 +8,7 @@ "assignerShortName": "Checkmk", "dateReserved": "2026-10-01T09:04:13.924Z", "datePublished": "2026-11-06T09:06:40.803Z", - "dateUpdated": "2026-11-06T09:06:40.803Z" + "dateUpdated": "2026-11-10T17:42:41.362Z" }, "containers": { "cna": { @@ -101,6 +101,40 @@ "x_generator": { "engine": "cvelib 1.8.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:40:30.843560Z", + "id": "CVE-2026-103674", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:42:41.362Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/103xxx/CVE-2026-103682.json b/data/2026/103xxx/CVE-2026-103682.json index 71bd4c837c..960774b2ed 100644 --- a/data/2026/103xxx/CVE-2026-103682.json +++ b/data/2026/103xxx/CVE-2026-103682.json @@ -8,7 +8,7 @@ "assignerShortName": "Checkmk", "dateReserved": "2026-10-01T09:19:30.801Z", "datePublished": "2026-11-06T09:07:55.856Z", - "dateUpdated": "2026-11-06T09:07:55.856Z" + "dateUpdated": "2026-11-10T17:43:47.092Z" }, "containers": { "cna": { @@ -101,6 +101,40 @@ "x_generator": { "engine": "cvelib 1.8.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:43:31.140722Z", + "id": "CVE-2026-103682", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:43:47.092Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105425.json b/data/2026/105xxx/CVE-2026-105425.json index d12ad3c883..431b992a98 100644 --- a/data/2026/105xxx/CVE-2026-105425.json +++ b/data/2026/105xxx/CVE-2026-105425.json @@ -8,14 +8,14 @@ "assignerShortName": "ivanti", "dateReserved": "2026-10-05T12:48:38.617Z", "datePublished": "2026-11-10T15:43:00.759Z", - "dateUpdated": "2026-11-10T15:43:00.759Z" + "dateUpdated": "2026-11-10T17:26:36.642Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75", "shortName": "ivanti", - "dateUpdated": "2026-11-10T15:43:00.759Z" + "dateUpdated": "2026-11-10T17:26:36.642Z" }, "problemTypes": [ { @@ -89,12 +89,12 @@ "descriptions": [ { "lang": "en", - "value": "OS command injection in Ivanti Sentry before versions 10.7.4, 10.8.3, and 11.0.0 as well as in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution.", + "value": "OS command injection in Ivanti Sentry before versions 11.0.0, 10.8.3, and 10.7.4 as well as in Ivanti EPMM before versions 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to achieve remote code execution.", "supportingMedia": [ { "type": "text/html", "base64": false, - "value": "OS command injection in Ivanti Sentry before versions 10.7.4, 10.8.3, and 11.0.0 as well as in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution." + "value": "OS command injection in Ivanti Sentry before versions 11.0.0, 10.8.3, and 10.7.4 as well as in Ivanti EPMM before versions 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to achieve remote code execution." } ] } diff --git a/data/2026/105xxx/CVE-2026-105426.json b/data/2026/105xxx/CVE-2026-105426.json index 5e3b7ee6f8..4d6ac128cd 100644 --- a/data/2026/105xxx/CVE-2026-105426.json +++ b/data/2026/105xxx/CVE-2026-105426.json @@ -8,14 +8,14 @@ "assignerShortName": "ivanti", "dateReserved": "2026-10-05T12:48:39.997Z", "datePublished": "2026-11-10T15:54:24.149Z", - "dateUpdated": "2026-11-10T16:38:45.261Z" + "dateUpdated": "2026-11-10T17:28:32.954Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75", "shortName": "ivanti", - "dateUpdated": "2026-11-10T15:54:24.149Z" + "dateUpdated": "2026-11-10T17:28:32.954Z" }, "problemTypes": [ { @@ -67,12 +67,12 @@ "descriptions": [ { "lang": "en", - "value": "Improper input validation in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to set arbitrary Linux kernel parameters as root.", + "value": "Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to set arbitrary Linux kernel parameters as root.", "supportingMedia": [ { "type": "text/html", "base64": false, - "value": "Improper input validation in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to set arbitrary Linux kernel parameters as root." + "value": "Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to set arbitrary Linux kernel parameters as root." } ] } diff --git a/data/2026/105xxx/CVE-2026-105427.json b/data/2026/105xxx/CVE-2026-105427.json index b0c9c12309..82c388acdf 100644 --- a/data/2026/105xxx/CVE-2026-105427.json +++ b/data/2026/105xxx/CVE-2026-105427.json @@ -8,14 +8,14 @@ "assignerShortName": "ivanti", "dateReserved": "2026-10-05T12:48:41.073Z", "datePublished": "2026-11-10T15:57:39.124Z", - "dateUpdated": "2026-11-10T15:57:39.124Z" + "dateUpdated": "2026-11-10T17:29:09.471Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75", "shortName": "ivanti", - "dateUpdated": "2026-11-10T15:57:39.124Z" + "dateUpdated": "2026-11-10T17:29:09.471Z" }, "problemTypes": [ { @@ -67,12 +67,12 @@ "descriptions": [ { "lang": "en", - "value": "Improper input validation in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to permanently disable all Apache HTTPS services resulting in denial of service.", + "value": "Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to permanently disable all Apache HTTPS services resulting in denial of service.", "supportingMedia": [ { "type": "text/html", "base64": false, - "value": "Improper input validation in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to permanently disable all Apache HTTPS services resulting in denial of service. " + "value": "Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to permanently disable all Apache HTTPS services resulting in denial of service. " } ] } diff --git a/data/2026/105xxx/CVE-2026-105669.json b/data/2026/105xxx/CVE-2026-105669.json index 536c2eebb8..e902938f62 100644 --- a/data/2026/105xxx/CVE-2026-105669.json +++ b/data/2026/105xxx/CVE-2026-105669.json @@ -8,14 +8,14 @@ "assignerShortName": "ivanti", "dateReserved": "2026-10-05T16:57:22.487Z", "datePublished": "2026-11-10T15:45:42.277Z", - "dateUpdated": "2026-11-10T15:45:42.277Z" + "dateUpdated": "2026-11-10T17:32:18.042Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75", "shortName": "ivanti", - "dateUpdated": "2026-11-10T15:45:42.277Z" + "dateUpdated": "2026-11-10T17:32:18.042Z" }, "problemTypes": [ { @@ -67,12 +67,12 @@ "descriptions": [ { "lang": "en", - "value": "Argument injection in Ivanti Sentry before version 10.8.3 and 10.7.4 allows a remote authenticated attacker with admin privileges to execute arbitrary on-disk binaries.", + "value": "Argument injection in Ivanti Sentry before version 11.0, 10.8.3, and 10.7.4 allows a remote authenticated attacker with admin privileges to execute arbitrary on-disk binaries.", "supportingMedia": [ { "type": "text/html", "base64": false, - "value": "Argument injection in Ivanti Sentry before version 10.8.3 and 10.7.4 allows a remote authenticated attacker with admin privileges to execute arbitrary on-disk binaries. " + "value": "Argument injection in Ivanti Sentry before version 11.0, 10.8.3, and 10.7.4 allows a remote authenticated attacker with admin privileges to execute arbitrary on-disk binaries. " } ] } diff --git a/data/2026/107xxx/CVE-2026-107404.json b/data/2026/107xxx/CVE-2026-107404.json index 88bc548f5b..0abd199120 100644 --- a/data/2026/107xxx/CVE-2026-107404.json +++ b/data/2026/107xxx/CVE-2026-107404.json @@ -8,14 +8,14 @@ "assignerShortName": "ivanti", "dateReserved": "2026-10-07T21:35:39.743Z", "datePublished": "2026-11-10T15:59:51.214Z", - "dateUpdated": "2026-11-10T15:59:51.214Z" + "dateUpdated": "2026-11-10T17:29:46.336Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75", "shortName": "ivanti", - "dateUpdated": "2026-11-10T15:59:51.214Z" + "dateUpdated": "2026-11-10T17:29:46.336Z" }, "problemTypes": [ { @@ -67,12 +67,12 @@ "descriptions": [ { "lang": "en", - "value": "Argument injection in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to delete arbitrary files on disk.", + "value": "Argument injection in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to delete arbitrary files on disk.", "supportingMedia": [ { "type": "text/html", "base64": false, - "value": "Argument injection in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to delete arbitrary files on disk. " + "value": "Argument injection in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to delete arbitrary files on disk. " } ] } diff --git a/data/2026/107xxx/CVE-2026-107405.json b/data/2026/107xxx/CVE-2026-107405.json index 025575d716..703cc0833f 100644 --- a/data/2026/107xxx/CVE-2026-107405.json +++ b/data/2026/107xxx/CVE-2026-107405.json @@ -8,14 +8,14 @@ "assignerShortName": "ivanti", "dateReserved": "2026-10-07T21:35:40.271Z", "datePublished": "2026-11-10T16:02:19.948Z", - "dateUpdated": "2026-11-10T16:02:19.948Z" + "dateUpdated": "2026-11-10T17:30:20.493Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75", "shortName": "ivanti", - "dateUpdated": "2026-11-10T16:02:19.948Z" + "dateUpdated": "2026-11-10T17:30:20.493Z" }, "problemTypes": [ { @@ -67,12 +67,12 @@ "descriptions": [ { "lang": "en", - "value": "An exposed dangerous function in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a local authenticated attacker to trigger a denial of service.", + "value": "An exposed dangerous function in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a local authenticated attacker to trigger a denial of service.", "supportingMedia": [ { "type": "text/html", "base64": false, - "value": "An exposed dangerous function in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a local authenticated attacker to trigger a denial of service.  " + "value": "An exposed dangerous function in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a local authenticated attacker to trigger a denial of service.  " } ] } diff --git a/data/2026/107xxx/CVE-2026-107474.json b/data/2026/107xxx/CVE-2026-107474.json index bdd5c235f7..a78b8631dc 100644 --- a/data/2026/107xxx/CVE-2026-107474.json +++ b/data/2026/107xxx/CVE-2026-107474.json @@ -8,7 +8,7 @@ "assignerShortName": "apache", "dateReserved": "2026-10-08T07:54:15.560Z", "datePublished": "2026-11-09T09:19:48.955Z", - "dateUpdated": "2026-11-09T13:04:27.940Z" + "dateUpdated": "2026-11-10T17:22:24.145Z" }, "containers": { "cna": { @@ -102,7 +102,7 @@ "providerMetadata": { "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "shortName": "apache", - "dateUpdated": "2026-11-09T13:04:27.940Z" + "dateUpdated": "2026-11-10T17:22:24.145Z" }, "references": [ { diff --git a/data/2026/108xxx/CVE-2026-108018.json b/data/2026/108xxx/CVE-2026-108018.json index 63b29c2824..71c70ba9f0 100644 --- a/data/2026/108xxx/CVE-2026-108018.json +++ b/data/2026/108xxx/CVE-2026-108018.json @@ -8,7 +8,7 @@ "assignerShortName": "HCL", "dateReserved": "2026-10-09T09:26:54.337Z", "datePublished": "2026-11-06T08:27:09.873Z", - "dateUpdated": "2026-11-06T08:27:09.873Z" + "dateUpdated": "2026-11-10T17:35:06.894Z" }, "containers": { "cna": { @@ -93,6 +93,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:33:57.046825Z", + "id": "CVE-2026-108018", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:35:06.894Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111454.json b/data/2026/111xxx/CVE-2026-111454.json index c20a2c90ed..e4e008f4b4 100644 --- a/data/2026/111xxx/CVE-2026-111454.json +++ b/data/2026/111xxx/CVE-2026-111454.json @@ -8,7 +8,7 @@ "assignerShortName": "apache", "dateReserved": "2026-10-16T04:01:37.703Z", "datePublished": "2026-11-09T09:07:30.929Z", - "dateUpdated": "2026-11-09T13:04:53.228Z" + "dateUpdated": "2026-11-10T17:22:56.784Z" }, "containers": { "cna": { @@ -102,7 +102,7 @@ "providerMetadata": { "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "shortName": "apache", - "dateUpdated": "2026-11-09T13:04:53.228Z" + "dateUpdated": "2026-11-10T17:22:56.784Z" }, "references": [ { diff --git a/data/2026/111xxx/CVE-2026-111494.json b/data/2026/111xxx/CVE-2026-111494.json index bdf14b991a..a9c15a79bb 100644 --- a/data/2026/111xxx/CVE-2026-111494.json +++ b/data/2026/111xxx/CVE-2026-111494.json @@ -8,7 +8,7 @@ "assignerShortName": "INCIBE", "dateReserved": "2026-10-16T09:54:33.846Z", "datePublished": "2026-11-05T21:58:02.432Z", - "dateUpdated": "2026-11-05T21:58:02.432Z" + "dateUpdated": "2026-11-10T17:02:02.198Z" }, "containers": { "cna": { @@ -139,6 +139,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:01:46.390464Z", + "id": "CVE-2026-111494", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:02:02.198Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111729.json b/data/2026/111xxx/CVE-2026-111729.json new file mode 100644 index 0000000000..e1e5e8ee3c --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111729.json @@ -0,0 +1,118 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111729", + "assignerOrgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c", + "state": "PUBLISHED", + "assignerShortName": "eclipse", + "dateReserved": "2026-10-16T15:10:09.577Z", + "datePublished": "2026-11-10T17:09:16.247Z", + "dateUpdated": "2026-11-10T17:09:16.247Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c", + "shortName": "eclipse", + "dateUpdated": "2026-11-10T17:09:16.247Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-22", + "description": "CWE-22", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Eclipse Foundation", + "product": "Eclipse Kura", + "versions": [ + { + "status": "affected", + "version": "0.7.0", + "lessThanOrEqual": "5.6.2", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "In Kura versions <= 5.6.2, the \"Command\" file-upload handler at `POST /admin/denali/file/command` extracts a client-supplied ZIP archive into the configured `command.working.directory`. The path-containment check `validateFileName()` compares canonical paths with `String.startsWith()` without appending a trailing path separator, so an entry that canonicalises to a sibling directory sharing the same string prefix (e.g. `/tmpevil/x` when the intended directory is `/tmp`) is accepted. The handler then calls `parent.mkdirs()` and `new FileOutputStream(newFile)`, creating directories and writing attacker-controlled bytes outside the intended extraction root.\n\n\n\nThe command service is disabled by default since Kura 4.0.0 [1]. The issue does not apply when the command service is disabled. The caller must be authenticated with `rest.command` permission.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

In Kura versions <= 5.6.2, the \"Command\" file-upload handler at `POST /admin/denali/file/command` extracts a client-supplied ZIP archive into the configured `command.working.directory`. The path-containment check `validateFileName()` compares canonical paths with `String.startsWith()` without appending a trailing path separator, so an entry that canonicalises to a sibling directory sharing the same string prefix (e.g. `/tmpevil/x` when the intended directory is `/tmp`) is accepted. The handler then calls `parent.mkdirs()` and `new FileOutputStream(newFile)`, creating directories and writing attacker-controlled bytes outside the intended extraction root.

The command service is disabled by default since Kura 4.0.0 [1]. The issue does not apply when the command service is disabled. The caller must be authenticated with `rest.command` permission.

" + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/958" + }, + { + "url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/428" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Eclipse Foundation Security Team", + "type": "finder" + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112185.json b/data/2026/112xxx/CVE-2026-112185.json new file mode 100644 index 0000000000..32d1a86184 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112185.json @@ -0,0 +1,131 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112185", + "assignerOrgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c", + "state": "PUBLISHED", + "assignerShortName": "eclipse", + "dateReserved": "2026-10-19T09:21:00.410Z", + "datePublished": "2026-11-10T16:58:30.765Z", + "dateUpdated": "2026-11-10T16:58:30.765Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c", + "shortName": "eclipse", + "dateUpdated": "2026-11-10T16:58:30.765Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-863", + "description": "CWE-863", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-522", + "description": "CWE-522", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-668", + "description": "CWE-668", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Eclipse Foundation", + "product": "Eclipse Kura", + "versions": [ + { + "status": "affected", + "version": "5.1.0", + "lessThanOrEqual": "5.6.2", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "In Eclipse Kura versions 5.1.0 through 5.6.2, the Configuration REST API v2 (org.eclipse.kura.rest.configuration.provider) does not restrict access to the configuration of the UserAdmin persistence component to identities holding the kura.admin permission. An authenticated identity holding only the rest.configuration permission can read the password hashes of all identities, including administrators, which are stored as unsalted SHA-256 digests. The same identity can also modify identities and permission assignments, and restore previous configuration snapshots, which allows escalation to full administrative privileges. The issue is fixed in Eclipse Kura 5.6.3.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

In Eclipse Kura versions 5.1.0 through 5.6.2, the Configuration REST API v2 (org.eclipse.kura.rest.configuration.provider) does not restrict access to the configuration of the UserAdmin persistence component to identities holding the kura.admin permission. An authenticated identity holding only the rest.configuration permission can read the password hashes of all identities, including administrators, which are stored as unsalted SHA-256 digests. The same identity can also modify identities and permission assignments, and restore previous configuration snapshots, which allows escalation to full administrative privileges. The issue is fixed in Eclipse Kura 5.6.3.

" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/eclipse-kura/kura/security/advisories/GHSA-gqr7-j252-qwqx" + }, + { + "url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/430" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 8.6, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112186.json b/data/2026/112xxx/CVE-2026-112186.json new file mode 100644 index 0000000000..25c8028901 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112186.json @@ -0,0 +1,131 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112186", + "assignerOrgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c", + "state": "PUBLISHED", + "assignerShortName": "eclipse", + "dateReserved": "2026-10-19T09:21:22.208Z", + "datePublished": "2026-11-10T17:02:46.279Z", + "dateUpdated": "2026-11-10T17:02:46.279Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c", + "shortName": "eclipse", + "dateUpdated": "2026-11-10T17:02:46.279Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-696", + "description": "CWE-696", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-674", + "description": "CWE-674", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-770", + "description": "CWE-770", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Eclipse Foundation", + "product": "Eclipse Kura", + "versions": [ + { + "status": "affected", + "version": "5.4.0", + "lessThanOrEqual": "5.6.2", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "In Eclipse Kura versions 5.4.0 through 5.6.2, the Service Listing V1 REST API read the JSON body of every request into memory, with no limit on its size. The endpoints parse the body before they check whether the caller is authenticated. A remote attacker without valid credentials can therefore send a few dozen large JSON requests at the same time, exhaust the Java heap with an `OutOfMemoryError`, and cause a denial of service. Likewise, a remote attacker, can send a deeply nested JSON request and trigger a `StackOverflowError` because of an unbound recursion in Service Listing V1.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

In Eclipse Kura versions 5.4.0 through 5.6.2, the Service Listing V1 REST API read the JSON body of every request into memory, with no limit on its size. The endpoints parse the body before they check whether the caller is authenticated. A remote attacker without valid credentials can therefore send a few dozen large JSON requests at the same time, exhaust the Java heap with an `OutOfMemoryError`, and cause a denial of service. Likewise, a remote attacker, can send a deeply nested JSON request and trigger a `StackOverflowError` because of an unbound recursion in Service Listing V1.

" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/eclipse-kura/kura/security/advisories/GHSA-pwq4-h95h-5634" + }, + { + "url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/429" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "LOW", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 8.7, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/115xxx/CVE-2026-115791.json b/data/2026/115xxx/CVE-2026-115791.json index ebbafab72f..5ee7ad552e 100644 --- a/data/2026/115xxx/CVE-2026-115791.json +++ b/data/2026/115xxx/CVE-2026-115791.json @@ -8,7 +8,7 @@ "assignerShortName": "PSF", "dateReserved": "2026-10-23T14:12:50.150Z", "datePublished": "2026-11-10T16:33:49.360Z", - "dateUpdated": "2026-11-10T16:33:49.360Z" + "dateUpdated": "2026-11-10T17:25:02.503Z" }, "containers": { "cna": { @@ -136,6 +136,52 @@ "discovery": "UNKNOWN" }, "title": "Prevent shadowing stdlib in gzip/tarfile/zipfile CLI during extraction" - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-829", + "lang": "en", + "description": "CWE-829 Inclusion of Functionality from Untrusted Control Sphere" + } + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:24:59.223694Z", + "id": "CVE-2026-115791", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:25:02.503Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116592.json b/data/2026/116xxx/CVE-2026-116592.json index f042f0d1ba..a3b2ec0461 100644 --- a/data/2026/116xxx/CVE-2026-116592.json +++ b/data/2026/116xxx/CVE-2026-116592.json @@ -8,7 +8,7 @@ "assignerShortName": "openjs", "dateReserved": "2026-10-26T15:14:13.192Z", "datePublished": "2026-11-06T10:05:41.972Z", - "dateUpdated": "2026-11-06T10:05:41.972Z" + "dateUpdated": "2026-11-10T17:38:20.727Z" }, "containers": { "cna": { @@ -140,6 +140,40 @@ "x_generator": { "engine": "cve-kit 1.0.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:37:59.041677Z", + "id": "CVE-2026-116592", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:38:20.727Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116630.json b/data/2026/116xxx/CVE-2026-116630.json index 2a4dc45cf4..17aa0dcf8b 100644 --- a/data/2026/116xxx/CVE-2026-116630.json +++ b/data/2026/116xxx/CVE-2026-116630.json @@ -8,7 +8,7 @@ "assignerShortName": "openjs", "dateReserved": "2026-10-26T17:49:18.547Z", "datePublished": "2026-11-06T10:13:44.685Z", - "dateUpdated": "2026-11-06T10:13:44.685Z" + "dateUpdated": "2026-11-10T17:41:21.172Z" }, "containers": { "cna": { @@ -135,6 +135,40 @@ "x_generator": { "engine": "cve-kit 1.0.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:41:05.332969Z", + "id": "CVE-2026-116630", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:41:21.172Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119446.json b/data/2026/119xxx/CVE-2026-119446.json index 88b80ba1bf..72f224a3e1 100644 --- a/data/2026/119xxx/CVE-2026-119446.json +++ b/data/2026/119xxx/CVE-2026-119446.json @@ -8,7 +8,7 @@ "assignerShortName": "EEF", "dateReserved": "2026-11-07T21:44:37.269Z", "datePublished": "2026-11-10T10:44:15.336Z", - "dateUpdated": "2026-11-10T10:44:15.336Z" + "dateUpdated": "2026-11-10T17:11:05.623Z" }, "containers": { "cna": { @@ -26,7 +26,7 @@ "'Elixir.NervesHubWeb.Router'" ], "packageName": "nerves-hub/nerves-hub", - "packageURL": "pkg:oci/nerves-hub?repository_url=ghcr.io%2Fnerves-hub", + "packageURL": "pkg:oci/nerves-hub?repository_url=ghcr.io%2Fnerves-hub%2Fnerves-hub", "product": "nerves_hub_web", "programFiles": [ "lib/nerves_hub_web/controllers/api/user_controller.ex", @@ -79,7 +79,7 @@ "'Elixir.NervesHubWeb.Router'" ], "packageName": "nerves_hub", - "packageURL": "pkg:otp/nerves_hub?repository_url=https:%2F%2Fgithub.com%2Fnerves-hub%2Fnerves_hub_web&vcs_url=git%20https:%2F%2Fgithub.com%2Fnerves-hub%2Fnerves_hub_web.git", + "packageURL": "pkg:otp/nerves_hub?repository_url=https:%2F%2Fgithub.com%2Fnerves-hub%2Fnerves_hub_web&vcs_url=git%2Bhttps:%2F%2Fgithub.com%2Fnerves-hub%2Fnerves_hub_web.git", "product": "nerves_hub_web", "programFiles": [ "lib/nerves_hub_web/controllers/api/user_controller.ex", @@ -219,6 +219,7 @@ } ], "dateAssigned": "2026-11-09T22:12:23.000Z", + "datePublic": "2026-11-10T10:44:15.000Z", "descriptions": [ { "lang": "en", @@ -309,7 +310,7 @@ "providerMetadata": { "orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "shortName": "EEF", - "dateUpdated": "2026-11-10T10:44:15.336Z" + "dateUpdated": "2026-11-10T17:11:05.623Z" }, "references": [ { diff --git a/data/2026/120xxx/CVE-2026-120212.json b/data/2026/120xxx/CVE-2026-120212.json new file mode 100644 index 0000000000..e170e0d3b1 --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120212.json @@ -0,0 +1,107 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120212", + "assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", + "state": "PUBLISHED", + "assignerShortName": "CPANSec", + "dateReserved": "2026-10-31T13:26:38.835Z", + "datePublished": "2026-11-10T17:42:05.207Z", + "dateUpdated": "2026-11-10T17:42:05.207Z" + }, + "containers": { + "cna": { + "affected": [ + { + "collectionURL": "https://cpan.org/modules", + "defaultStatus": "unaffected", + "modules": [ + "Web::Simple" + ], + "packageName": "Web-Simple", + "packageURL": "pkg:cpan/Web-Simple", + "programFiles": [ + "lib/XML/Tags.pm" + ], + "programRoutines": [ + { + "name": "XML::Tags::to_xml_string" + } + ], + "repo": "https://github.com/p5sagit/Web-Simple", + "versions": [ + { + "lessThan": "0.037", + "status": "affected", + "version": "0", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Web::Simple versions before 0.037 for Perl do not escape single quotes in HTML::Tags output.\n\nHTML::Tags and XML::Tags escape a plain string value by replacing only &, \", < and > with entities. A value interpolated into a single-quoted attribute, as in , can therefore close the attribute and add new ones, such as an event handler. Double-quoted attributes are not affected.\n\nAn attacker who controls a value that an application interpolates into a single-quoted attribute can inject script into the generated page." + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "providerMetadata": { + "orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", + "shortName": "CPANSec", + "dateUpdated": "2026-11-10T17:42:05.207Z" + }, + "references": [ + { + "tags": [ + "patch" + ], + "url": "https://github.com/p5sagit/Web-Simple/commit/de0b7743f7015ec2c1c678dfdaa4bc6f5ccfb640.patch" + }, + { + "tags": [ + "release-notes" + ], + "url": "https://metacpan.org/release/ETHER/Web-Simple-0.037/changes" + }, + { + "tags": [ + "related" + ], + "url": "https://www.cve.org/CVERecord?id=CVE-2026-5090" + } + ], + "solutions": [ + { + "lang": "en", + "value": "Upgrade to Web-Simple 0.037 or later." + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "title": "Web::Simple versions before 0.037 for Perl do not escape single quotes in HTML::Tags output", + "workarounds": [ + { + "lang": "en", + "value": "Use double-quoted attributes for values that may contain untrusted data." + } + ], + "x_generator": { + "engine": "cpansec-cna-tool 0.1" + } + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120222.json b/data/2026/120xxx/CVE-2026-120222.json index 5cc711a9d2..d5f7e108fe 100644 --- a/data/2026/120xxx/CVE-2026-120222.json +++ b/data/2026/120xxx/CVE-2026-120222.json @@ -8,7 +8,7 @@ "assignerShortName": "openjs", "dateReserved": "2026-10-31T19:03:40.724Z", "datePublished": "2026-11-06T10:00:50.635Z", - "dateUpdated": "2026-11-06T10:00:50.635Z" + "dateUpdated": "2026-11-10T17:46:47.844Z" }, "containers": { "cna": { @@ -130,6 +130,40 @@ "x_generator": { "engine": "cve-kit 1.0.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:46:29.400804Z", + "id": "CVE-2026-120222", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:46:47.844Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120415.json b/data/2026/120xxx/CVE-2026-120415.json index b299bb0a95..9f80a70ff2 100644 --- a/data/2026/120xxx/CVE-2026-120415.json +++ b/data/2026/120xxx/CVE-2026-120415.json @@ -8,7 +8,7 @@ "assignerShortName": "openjs", "dateReserved": "2026-11-02T11:55:49.802Z", "datePublished": "2026-11-06T10:10:48.653Z", - "dateUpdated": "2026-11-06T10:10:48.653Z" + "dateUpdated": "2026-11-10T17:40:41.647Z" }, "containers": { "cna": { @@ -135,6 +135,40 @@ "x_generator": { "engine": "cve-kit 1.0.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:40:27.623427Z", + "id": "CVE-2026-120415", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:40:41.647Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120423.json b/data/2026/120xxx/CVE-2026-120423.json index 6db95e9266..85a8d5785a 100644 --- a/data/2026/120xxx/CVE-2026-120423.json +++ b/data/2026/120xxx/CVE-2026-120423.json @@ -8,7 +8,7 @@ "assignerShortName": "openjs", "dateReserved": "2026-11-02T12:34:23.577Z", "datePublished": "2026-11-06T10:08:32.545Z", - "dateUpdated": "2026-11-06T10:08:32.545Z" + "dateUpdated": "2026-11-10T17:39:59.015Z" }, "containers": { "cna": { @@ -125,6 +125,40 @@ "x_generator": { "engine": "cve-kit 1.0.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:39:43.820702Z", + "id": "CVE-2026-120423", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:39:59.015Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120474.json b/data/2026/120xxx/CVE-2026-120474.json index d6b0ce2062..9af9e0369d 100644 --- a/data/2026/120xxx/CVE-2026-120474.json +++ b/data/2026/120xxx/CVE-2026-120474.json @@ -8,7 +8,7 @@ "assignerShortName": "openjs", "dateReserved": "2026-11-02T13:47:10.769Z", "datePublished": "2026-11-06T09:57:46.664Z", - "dateUpdated": "2026-11-06T09:57:46.664Z" + "dateUpdated": "2026-11-10T17:46:05.157Z" }, "containers": { "cna": { @@ -135,6 +135,40 @@ "x_generator": { "engine": "cve-kit 1.0.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:45:36.174318Z", + "id": "CVE-2026-120474", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:46:05.157Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121006.json b/data/2026/121xxx/CVE-2026-121006.json index 410c05002f..ce2598ee79 100644 --- a/data/2026/121xxx/CVE-2026-121006.json +++ b/data/2026/121xxx/CVE-2026-121006.json @@ -8,7 +8,7 @@ "assignerShortName": "CPANSec", "dateReserved": "2026-11-03T07:58:36.822Z", "datePublished": "2026-11-06T07:47:23.570Z", - "dateUpdated": "2026-11-06T19:05:07.229Z" + "dateUpdated": "2026-11-10T17:33:18.232Z" }, "containers": { "cna": { @@ -104,6 +104,54 @@ "shortName": "CVE", "dateUpdated": "2026-11-06T19:05:07.229Z" } + }, + { + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7.5, + "attackVector": "NETWORK", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "NONE" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:32:54.621629Z", + "id": "CVE-2026-121006", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:33:18.232Z" + } } ] } diff --git a/data/2026/121xxx/CVE-2026-121220.json b/data/2026/121xxx/CVE-2026-121220.json index 34ebfdd950..25e1a37112 100644 --- a/data/2026/121xxx/CVE-2026-121220.json +++ b/data/2026/121xxx/CVE-2026-121220.json @@ -8,7 +8,7 @@ "assignerShortName": "Chrome", "dateReserved": "2026-11-03T10:33:08.182Z", "datePublished": "2026-11-03T20:42:45.515Z", - "dateUpdated": "2026-11-03T20:42:45.515Z" + "dateUpdated": "2026-11-10T17:48:39.559Z" }, "containers": { "cna": { @@ -56,6 +56,64 @@ "url": "https://issues.chromium.org/issues/553158297" } ] - } + }, + "adp": [ + { + "references": [ + { + "url": "https://issues.chromium.org/issues/553158297", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.1, + "attackVector": "NETWORK", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", + "integrityImpact": "HIGH", + "userInteraction": "REQUIRED", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:48:33.039606Z", + "id": "CVE-2026-121220", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:48:39.559Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121691.json b/data/2026/121xxx/CVE-2026-121691.json new file mode 100644 index 0000000000..956f0c4085 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121691.json @@ -0,0 +1,199 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121691", + "assignerOrgId": "4daa8cea-433a-44bd-9456-53b127fc289a", + "state": "PUBLISHED", + "assignerShortName": "Secur0", + "dateReserved": "2026-11-03T20:07:54.134Z", + "datePublished": "2026-11-10T17:29:34.562Z", + "dateUpdated": "2026-11-10T17:29:34.562Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "4daa8cea-433a-44bd-9456-53b127fc289a", + "shortName": "Secur0", + "dateUpdated": "2026-11-10T17:29:34.562Z" + }, + "title": "Unbounded decompression in the whatstk ZIP loader exhausts memory and disk", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-409", + "description": "CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "lucasrodes", + "product": "whatstk", + "collectionURL": "https://pypi.org", + "packageName": "whatstk", + "repo": "https://github.com/lucasrodes/whatstk", + "programFiles": [ + "whatstk/whatsapp/parser.py" + ], + "versions": [ + { + "status": "affected", + "version": "0.7.0", + "lessThan": "0.9.0", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "cpeApplicability": [ + { + "operator": "OR", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:lucasrodes:whatstk:*:*:*:*:*:python:*:*", + "versionStartIncluding": "0.7.0", + "versionEndExcluding": "0.9.0" + } + ] + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Improper Handling of Highly Compressed Data (CWE-409) in the ZIP loader of whatstk from 0.7.0 before 0.9.0 allows a party that supplies a chat export to exhaust the memory and the disk of the process that parses it, because _str_from_file() (whatstk/whatsapp/parser.py) calls zip_ref.extractall() with no bound on the size of the members and no check of the compression ratio, then reads the extracted file in full with f.read(). The only guard on the archive counts the extracted files and raises when there is not exactly one, but it runs after extractall() has already written them, so it does not prevent the cost. _clean_text() then passes the whole text through unicodedata.normalize(\"NFKD\", text), which holds a second copy, and the parse builds a list of regular expression matches and a DataFrame over it, so peak memory is a multiple of the decompressed text rather than of the archive. A ZIP is a documented input of WhatsAppChat.from_source() and df_from_whatsapp(), and is the form in which WhatsApp exports a chat on iOS, so the attacker supplies the whole file. This results in a small upload costing hundreds of megabytes of memory and of disk, and in the process being killed where that exceeds what is available.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Handling of Highly Compressed Data (CWE-409) in the ZIP loader of whatstk from 0.7.0 before 0.9.0 allows a party that supplies a chat export to exhaust the memory and the disk of the process that parses it, because _str_from_file() (whatstk/whatsapp/parser.py) calls zip_ref.extractall() with no bound on the size of the members and no check of the compression ratio, then reads the extracted file in full with f.read(). The only guard on the archive counts the extracted files and raises when there is not exactly one, but it runs after extractall() has already written them, so it does not prevent the cost. _clean_text() then passes the whole text through unicodedata.normalize(\"NFKD\", text), which holds a second copy, and the parse builds a list of regular expression matches and a DataFrame over it, so peak memory is a multiple of the decompressed text rather than of the archive. A ZIP is a documented input of WhatsAppChat.from_source() and df_from_whatsapp(), and is the form in which WhatsApp exports a chat on iOS, so the attacker supplies the whole file. This results in a small upload costing hundreds of megabytes of memory and of disk, and in the process being killed where that exceeds what is available." + } + ] + } + ], + "tags": [ + "x_open-source" + ], + "references": [ + { + "url": "https://github.com/lucasrodes/whatstk/pull/182", + "tags": [ + "patch" + ] + }, + { + "url": "https://github.com/lucasrodes/whatstk/commit/01d66d8", + "tags": [ + "patch" + ] + }, + { + "url": "https://github.com/lucasrodes/whatstk/releases/tag/v0.9.0", + "tags": [ + "release-notes" + ] + }, + { + "url": "https://secur0.com/en/cna/cve-list/cve-2026-121691-whatstk-zip-decompression-bomb", + "tags": [ + "third-party-advisory", + "technical-description" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "MEDIUM", + "baseScore": 6.7, + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "Upgrade to whatstk 0.9.0 or later, which rejects a source larger than 50 MB by default and accepts a max_size argument to lower that bound.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Upgrade to whatstk 0.9.0 or later, which rejects a source larger than 50 MB by default and accepts a max_size argument to lower that bound." + } + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Jorge Rey Cotallo (reddev)", + "type": "finder" + }, + { + "lang": "en", + "value": "Xoán M. Otero Jorge", + "type": "analyst" + }, + { + "lang": "en", + "value": "Darío Rivas", + "type": "analyst" + }, + { + "lang": "en", + "value": "Secur0 CNA", + "type": "coordinator" + }, + { + "lang": "en", + "value": "Lucas Rodés-Guirao", + "type": "remediation developer" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121819.json b/data/2026/121xxx/CVE-2026-121819.json index 4676667ff7..e587db41c8 100644 --- a/data/2026/121xxx/CVE-2026-121819.json +++ b/data/2026/121xxx/CVE-2026-121819.json @@ -8,7 +8,7 @@ "assignerShortName": "LY-Corporation", "dateReserved": "2026-11-04T05:50:04.721Z", "datePublished": "2026-11-06T07:46:45.370Z", - "dateUpdated": "2026-11-06T07:46:45.370Z" + "dateUpdated": "2026-11-10T17:23:02.739Z" }, "containers": { "cna": { @@ -66,6 +66,52 @@ "shortName": "LY-Corporation", "dateUpdated": "2026-11-06T07:46:45.370Z" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-59", + "lang": "en", + "description": "CWE-59 Improper Link Resolution Before File Access ('Link Following')" + } + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:22:34.642521Z", + "id": "CVE-2026-121819", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:23:02.739Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121820.json b/data/2026/121xxx/CVE-2026-121820.json index 4fa23f26a4..3cbcac0b10 100644 --- a/data/2026/121xxx/CVE-2026-121820.json +++ b/data/2026/121xxx/CVE-2026-121820.json @@ -8,7 +8,7 @@ "assignerShortName": "LY-Corporation", "dateReserved": "2026-11-04T05:50:04.721Z", "datePublished": "2026-11-06T07:46:48.261Z", - "dateUpdated": "2026-11-06T07:46:48.261Z" + "dateUpdated": "2026-11-10T17:24:41.043Z" }, "containers": { "cna": { @@ -66,6 +66,40 @@ "shortName": "LY-Corporation", "dateUpdated": "2026-11-06T07:46:48.261Z" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:24:04.893375Z", + "id": "CVE-2026-121820", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:24:41.043Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121821.json b/data/2026/121xxx/CVE-2026-121821.json index 2eea6324c9..96a830a8a4 100644 --- a/data/2026/121xxx/CVE-2026-121821.json +++ b/data/2026/121xxx/CVE-2026-121821.json @@ -8,7 +8,7 @@ "assignerShortName": "LY-Corporation", "dateReserved": "2026-11-04T05:50:04.721Z", "datePublished": "2026-11-06T07:46:50.787Z", - "dateUpdated": "2026-11-06T07:46:50.787Z" + "dateUpdated": "2026-11-10T17:26:35.550Z" }, "containers": { "cna": { @@ -66,6 +66,60 @@ "shortName": "LY-Corporation", "dateUpdated": "2026-11-06T07:46:50.787Z" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-942", + "lang": "en", + "description": "CWE-942 Permissive Cross-domain Policy with Untrusted Domains" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/line/armeria/security/advisories/GHSA-386q-mrg6-jfj8", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:26:30.974212Z", + "id": "CVE-2026-121821", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:26:35.550Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121822.json b/data/2026/121xxx/CVE-2026-121822.json index e761f0320f..640ab74d0f 100644 --- a/data/2026/121xxx/CVE-2026-121822.json +++ b/data/2026/121xxx/CVE-2026-121822.json @@ -8,7 +8,7 @@ "assignerShortName": "LY-Corporation", "dateReserved": "2026-11-04T05:50:04.721Z", "datePublished": "2026-11-06T07:46:53.527Z", - "dateUpdated": "2026-11-06T07:46:53.527Z" + "dateUpdated": "2026-11-10T17:27:42.017Z" }, "containers": { "cna": { @@ -66,6 +66,48 @@ "shortName": "LY-Corporation", "dateUpdated": "2026-11-06T07:46:53.527Z" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/line/armeria/security/advisories/GHSA-x9vf-hjgg-cq25", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:26:53.598214Z", + "id": "CVE-2026-121822", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:27:42.017Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121823.json b/data/2026/121xxx/CVE-2026-121823.json index 0f9e6df5e1..ea79c13180 100644 --- a/data/2026/121xxx/CVE-2026-121823.json +++ b/data/2026/121xxx/CVE-2026-121823.json @@ -8,7 +8,7 @@ "assignerShortName": "LY-Corporation", "dateReserved": "2026-11-04T05:50:04.722Z", "datePublished": "2026-11-06T07:46:56.347Z", - "dateUpdated": "2026-11-06T07:46:56.347Z" + "dateUpdated": "2026-11-10T17:29:42.578Z" }, "containers": { "cna": { @@ -66,6 +66,48 @@ "shortName": "LY-Corporation", "dateUpdated": "2026-11-06T07:46:56.347Z" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/line/armeria/security/advisories/GHSA-xqhm-4ph4-423v", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:29:18.437980Z", + "id": "CVE-2026-121823", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:29:42.578Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121824.json b/data/2026/121xxx/CVE-2026-121824.json index d0731d87aa..7387e2dd4c 100644 --- a/data/2026/121xxx/CVE-2026-121824.json +++ b/data/2026/121xxx/CVE-2026-121824.json @@ -8,7 +8,7 @@ "assignerShortName": "LY-Corporation", "dateReserved": "2026-11-04T05:50:04.722Z", "datePublished": "2026-11-06T07:46:59.325Z", - "dateUpdated": "2026-11-06T07:46:59.325Z" + "dateUpdated": "2026-11-10T17:31:12.964Z" }, "containers": { "cna": { @@ -66,6 +66,48 @@ "shortName": "LY-Corporation", "dateUpdated": "2026-11-06T07:46:59.325Z" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/line/armeria/security/advisories/GHSA-2pfv-5p52-crjm", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:30:41.519632Z", + "id": "CVE-2026-121824", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:31:12.964Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123087.json b/data/2026/123xxx/CVE-2026-123087.json index 76a1e02c42..8f287d8bb9 100644 --- a/data/2026/123xxx/CVE-2026-123087.json +++ b/data/2026/123xxx/CVE-2026-123087.json @@ -8,7 +8,7 @@ "assignerShortName": "INCIBE", "dateReserved": "2026-11-05T11:54:54.482Z", "datePublished": "2026-11-06T09:30:48.276Z", - "dateUpdated": "2026-11-06T09:30:48.276Z" + "dateUpdated": "2026-11-10T17:45:11.526Z" }, "containers": { "cna": { @@ -144,6 +144,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:44:36.719507Z", + "id": "CVE-2026-123087", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:45:11.526Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123179.json b/data/2026/123xxx/CVE-2026-123179.json index 9442cc7596..5cde6da3b3 100644 --- a/data/2026/123xxx/CVE-2026-123179.json +++ b/data/2026/123xxx/CVE-2026-123179.json @@ -8,14 +8,14 @@ "assignerShortName": "ivanti", "dateReserved": "2026-11-05T16:48:19.395Z", "datePublished": "2026-11-10T15:49:44.908Z", - "dateUpdated": "2026-11-10T15:49:44.908Z" + "dateUpdated": "2026-11-10T17:33:07.728Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75", "shortName": "ivanti", - "dateUpdated": "2026-11-10T15:49:44.908Z" + "dateUpdated": "2026-11-10T17:33:07.728Z" }, "problemTypes": [ { @@ -67,12 +67,12 @@ "descriptions": [ { "lang": "en", - "value": "An insecure default initialization of resource in the Tomcat shutdown listener of Ivanti Ivanti Sentry before versions 10.7.4 and 10.8.3 allows a local authenticated attacker to cause a denial of service.", + "value": "An insecure default initialization of resource in the Tomcat shutdown listener of Ivanti Sentry before versions 11.0, 10.8.3, and 10.7.4 allows a local authenticated attacker to cause a denial of service.", "supportingMedia": [ { "type": "text/html", "base64": false, - "value": "

An insecure default initialization of resource in the Tomcat shutdown listener of Ivanti Ivanti Sentry before versions 10.7.4 and 10.8.3 allows a local authenticated attacker to cause a denial of service. 

" + "value": "An insecure default initialization of resource in the Tomcat shutdown listener of Ivanti Sentry before versions 11.0, 10.8.3, and 10.7.4 allows a local authenticated attacker to cause a denial of service. " } ] } diff --git a/data/2026/123xxx/CVE-2026-123181.json b/data/2026/123xxx/CVE-2026-123181.json index 7071599655..17ab728237 100644 --- a/data/2026/123xxx/CVE-2026-123181.json +++ b/data/2026/123xxx/CVE-2026-123181.json @@ -8,14 +8,14 @@ "assignerShortName": "ivanti", "dateReserved": "2026-11-05T16:55:42.443Z", "datePublished": "2026-11-10T15:52:01.338Z", - "dateUpdated": "2026-11-10T15:52:01.338Z" + "dateUpdated": "2026-11-10T17:33:46.264Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75", "shortName": "ivanti", - "dateUpdated": "2026-11-10T15:52:01.338Z" + "dateUpdated": "2026-11-10T17:33:46.264Z" }, "problemTypes": [ { @@ -65,12 +65,12 @@ "descriptions": [ { "lang": "en", - "value": "A path traversal vulnerability in Ivanti Sentry before versions 10.7.4 and 10.8.3 allows a remote authenticated attacker with administrative privileges to create arbitrary directories and files with root privileges.", + "value": "A path traversal vulnerability in Ivanti Sentry before versions 11.0, 10.8.3, and 10.7.4 allows a remote authenticated attacker with administrative privileges to create arbitrary directories and files with root privileges.", "supportingMedia": [ { "type": "text/html", "base64": false, - "value": "A path traversal vulnerability in Ivanti Sentry before versions 10.7.4 and 10.8.3 allows a remote authenticated attacker with administrative privileges to create arbitrary directories and files with root privileges. " + "value": "A path traversal vulnerability in Ivanti Sentry before versions 11.0, 10.8.3, and 10.7.4 allows a remote authenticated attacker with administrative privileges to create arbitrary directories and files with root privileges." } ] } diff --git a/data/2026/123xxx/CVE-2026-123301.json b/data/2026/123xxx/CVE-2026-123301.json index 6b78160802..40d35e9d73 100644 --- a/data/2026/123xxx/CVE-2026-123301.json +++ b/data/2026/123xxx/CVE-2026-123301.json @@ -8,7 +8,7 @@ "assignerShortName": "JetBrains", "dateReserved": "2026-11-05T18:38:21.235Z", "datePublished": "2026-11-06T10:27:58.145Z", - "dateUpdated": "2026-11-06T10:27:58.145Z" + "dateUpdated": "2026-11-10T17:47:55.557Z" }, "containers": { "cna": { @@ -79,6 +79,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:47:34.720283Z", + "id": "CVE-2026-123301", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:47:55.557Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123319.json b/data/2026/123xxx/CVE-2026-123319.json index 6f320aaa35..dd10726f43 100644 --- a/data/2026/123xxx/CVE-2026-123319.json +++ b/data/2026/123xxx/CVE-2026-123319.json @@ -8,7 +8,7 @@ "assignerShortName": "JetBrains", "dateReserved": "2026-11-05T18:38:26.991Z", "datePublished": "2026-11-06T10:28:05.274Z", - "dateUpdated": "2026-11-06T10:28:05.274Z" + "dateUpdated": "2026-11-10T17:50:08.481Z" }, "containers": { "cna": { @@ -79,6 +79,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:49:12.446472Z", + "id": "CVE-2026-123319", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:50:08.481Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123320.json b/data/2026/123xxx/CVE-2026-123320.json index 00a632330c..710ce2046a 100644 --- a/data/2026/123xxx/CVE-2026-123320.json +++ b/data/2026/123xxx/CVE-2026-123320.json @@ -8,7 +8,7 @@ "assignerShortName": "JetBrains", "dateReserved": "2026-11-05T18:38:27.309Z", "datePublished": "2026-11-06T10:28:05.629Z", - "dateUpdated": "2026-11-06T10:28:05.629Z" + "dateUpdated": "2026-11-10T17:46:35.039Z" }, "containers": { "cna": { @@ -79,6 +79,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:46:02.566094Z", + "id": "CVE-2026-123320", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:46:35.039Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123322.json b/data/2026/123xxx/CVE-2026-123322.json index fd6b56e4ee..9490c72934 100644 --- a/data/2026/123xxx/CVE-2026-123322.json +++ b/data/2026/123xxx/CVE-2026-123322.json @@ -8,7 +8,7 @@ "assignerShortName": "JetBrains", "dateReserved": "2026-11-05T18:38:28.086Z", "datePublished": "2026-11-06T10:28:06.467Z", - "dateUpdated": "2026-11-06T10:28:06.467Z" + "dateUpdated": "2026-11-10T17:45:37.272Z" }, "containers": { "cna": { @@ -79,6 +79,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:45:20.765241Z", + "id": "CVE-2026-123322", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:45:37.272Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123660.json b/data/2026/123xxx/CVE-2026-123660.json index c3d5bfaa6c..649ca46cf4 100644 --- a/data/2026/123xxx/CVE-2026-123660.json +++ b/data/2026/123xxx/CVE-2026-123660.json @@ -8,7 +8,7 @@ "assignerShortName": "CIRCL", "dateReserved": "2026-11-06T08:57:03.368Z", "datePublished": "2026-11-06T08:58:24.857Z", - "dateUpdated": "2026-11-06T09:04:51.732Z" + "dateUpdated": "2026-11-10T17:40:09.862Z" }, "containers": { "cna": { @@ -303,6 +303,40 @@ "x_generator": { "engine": "Vulnogram 0.2.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:39:52.273550Z", + "id": "CVE-2026-123660", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:40:09.862Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125320.json b/data/2026/125xxx/CVE-2026-125320.json new file mode 100644 index 0000000000..e87e3f63e7 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125320.json @@ -0,0 +1,112 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125320", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-11-09T21:22:55.597Z", + "datePublished": "2026-11-10T17:23:43.734Z", + "dateUpdated": "2026-11-10T17:23:43.734Z" + }, + "containers": { + "cna": { + "title": "pgEdge Postgres MCP Server did not validate the Origin header, allowing DNS rebinding", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-346", + "lang": "en", + "description": "CWE-346: Origin Validation Error", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "HIGH", + "attackVector": "NETWORK", + "availabilityImpact": "NONE", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "privilegesRequired": "NONE", + "scope": "UNCHANGED", + "userInteraction": "REQUIRED", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/pgEdge/pgedge-postgres-mcp/security/advisories/GHSA-6hg5-9f3w-c886", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/pgEdge/pgedge-postgres-mcp/security/advisories/GHSA-6hg5-9f3w-c886" + }, + { + "name": "https://github.com/pgEdge/pgedge-postgres-mcp/issues/231", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-postgres-mcp/issues/231" + }, + { + "name": "https://github.com/pgEdge/pgedge-postgres-mcp/pull/232", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-postgres-mcp/pull/232" + }, + { + "name": "https://github.com/pgEdge/pgedge-postgres-mcp/commit/5571bd492a803e8f8831599c88b4619c5041fd8e", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-postgres-mcp/commit/5571bd492a803e8f8831599c88b4619c5041fd8e" + }, + { + "name": "https://github.com/pgEdge/pgedge-postgres-mcp/releases/tag/v1.1.0", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-postgres-mcp/releases/tag/v1.1.0" + } + ], + "affected": [ + { + "vendor": "pgEdge", + "product": "pgedge-postgres-mcp", + "versions": [ + { + "version": "< 1.1.0", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-10T17:23:43.734Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the HTTP transport did not validate the Origin header on incoming requests. A user who visited an attacker-controlled page could be targeted through DNS rebinding, allowing the page to reach a locally running server and read schemas and query results from configured databases. The issue affected deployments with the HTTP transport enabled on a machine that also ran a browser, while the default stdio transport was not reachable through this path. This issue is fixed in version 1.1.0." + } + ], + "source": { + "advisory": "GHSA-6hg5-9f3w-c886", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125321.json b/data/2026/125xxx/CVE-2026-125321.json new file mode 100644 index 0000000000..485586e7c2 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125321.json @@ -0,0 +1,115 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125321", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-11-09T21:22:55.597Z", + "datePublished": "2026-11-10T17:36:23.877Z", + "dateUpdated": "2026-11-10T17:36:23.877Z" + }, + "containers": { + "cna": { + "title": "pgEdge Postgres MCP Server login rate limiting can be evaded by a caller-supplied header", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-770", + "lang": "en", + "description": "CWE-770: Allocation of Resources Without Limits or Throttling", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "cweId": "CWE-807", + "lang": "en", + "description": "CWE-807: Reliance on Untrusted Inputs in a Security Decision", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "LOW", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "privilegesRequired": "NONE", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/pgEdge/pgedge-postgres-mcp/security/advisories/GHSA-v347-v3w7-7fq9", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/pgEdge/pgedge-postgres-mcp/security/advisories/GHSA-v347-v3w7-7fq9" + }, + { + "name": "https://github.com/pgEdge/pgedge-postgres-mcp/issues/204", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-postgres-mcp/issues/204" + }, + { + "name": "https://github.com/pgEdge/pgedge-postgres-mcp/pull/205", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-postgres-mcp/pull/205" + }, + { + "name": "https://github.com/pgEdge/pgedge-postgres-mcp/commit/6a19e46a240b9f4661a4a253811948dd75c4077e", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-postgres-mcp/commit/6a19e46a240b9f4661a4a253811948dd75c4077e" + } + ], + "affected": [ + { + "vendor": "pgEdge", + "product": "pgedge-postgres-mcp", + "versions": [ + { + "version": "< 1.1.0", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-10T17:36:23.877Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, deployments exposing the nondefault HTTP transport with authentication enabled used the leftmost caller-supplied X-Forwarded-For value as the client address for login rate limiting. ExtractIPAddress in internal/auth/middleware.go supplied that value to IsAllowed and RecordFailedAttempt in internal/auth/rate_limiter.go, allowing an unauthenticated caller to rotate addresses to evade throttling or assert another user's address to consume that user's limiter bucket. The published nginx configuration appended rather than replaced X-Forwarded-For, making the issue reachable without an operator misconfiguration. Username-keyed account lockout did not use the client address, but shipped defaults disabled that separate control through MaxFailedAttemptsBeforeLockout: 0. This issue is fixed in version 1.1.0." + } + ], + "source": { + "advisory": "GHSA-v347-v3w7-7fq9", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125322.json b/data/2026/125xxx/CVE-2026-125322.json new file mode 100644 index 0000000000..346613f38e --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125322.json @@ -0,0 +1,122 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125322", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-11-09T21:22:55.597Z", + "datePublished": "2026-11-10T17:39:00.060Z", + "dateUpdated": "2026-11-10T17:39:00.060Z" + }, + "containers": { + "cna": { + "title": "pgEdge Postgres MCP Server SQL injection in the count_rows where parameter", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-89", + "lang": "en", + "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "cweId": "CWE-209", + "lang": "en", + "description": "CWE-209: Generation of Error Message Containing Sensitive Information", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "NONE", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "privilegesRequired": "LOW", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/pgEdge/pgedge-postgres-mcp/security/advisories/GHSA-fhv3-x3jh-grj7", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/pgEdge/pgedge-postgres-mcp/security/advisories/GHSA-fhv3-x3jh-grj7" + }, + { + "name": "https://github.com/pgEdge/pgedge-postgres-mcp/issues/200", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-postgres-mcp/issues/200" + }, + { + "name": "https://github.com/pgEdge/pgedge-postgres-mcp/pull/201", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-postgres-mcp/pull/201" + }, + { + "name": "https://github.com/pgEdge/pgedge-postgres-mcp/commit/933f1b4cb136183eb307064c1cf1ad2bf015f314", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-postgres-mcp/commit/933f1b4cb136183eb307064c1cf1ad2bf015f314" + }, + { + "name": "https://github.com/pgEdge/pgedge-postgres-mcp/releases/tag/v1.1.0", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-postgres-mcp/releases/tag/v1.1.0" + } + ], + "affected": [ + { + "vendor": "pgEdge", + "product": "pgedge-postgres-mcp", + "versions": [ + { + "version": "< 1.1.0", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-10T17:39:00.060Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the where parameter of the count_rows tool accepted subqueries against tables other than the table named in the tool call. A caller could use predicates and the returned row count as an inference oracle to extract data from any other table that the connected database role could read. The database privilege boundary remained intact, and the flaw did not grant access to tables outside that role's existing SELECT privileges. This issue is fixed in version 1.1.0." + } + ], + "source": { + "advisory": "GHSA-fhv3-x3jh-grj7", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125342.json b/data/2026/125xxx/CVE-2026-125342.json new file mode 100644 index 0000000000..9c84dd7676 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125342.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125342", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-09T21:42:54.096Z", + "datePublished": "2026-11-10T17:20:21.607Z", + "dateUpdated": "2026-11-10T17:20:21.607Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.50", + "status": "affected", + "lessThan": "157.0.8103.50", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Uninitialized resource", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-10T17:20:21.607Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_018223192.html" + }, + { + "url": "https://issues.chromium.org/issues/566384898" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125343.json b/data/2026/125xxx/CVE-2026-125343.json new file mode 100644 index 0000000000..4076ef0856 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125343.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125343", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-09T21:42:57.312Z", + "datePublished": "2026-11-10T17:20:20.233Z", + "dateUpdated": "2026-11-10T17:20:20.233Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.50", + "status": "affected", + "lessThan": "157.0.8103.50", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Buffer overflow in Compositing in Google Chrome prior to 157.0.8103.50 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Buffer overflow", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-10T17:20:20.233Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_018223192.html" + }, + { + "url": "https://issues.chromium.org/issues/561998123" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125344.json b/data/2026/125xxx/CVE-2026-125344.json new file mode 100644 index 0000000000..7aec71aee9 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125344.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125344", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-09T21:42:58.360Z", + "datePublished": "2026-11-10T17:20:20.692Z", + "dateUpdated": "2026-11-10T17:20:20.692Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.50", + "status": "affected", + "lessThan": "157.0.8103.50", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Type confusion in V8 in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Type confusion", + "cweId": "CWE-843" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-10T17:20:20.692Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_018223192.html" + }, + { + "url": "https://issues.chromium.org/issues/568893995" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125345.json b/data/2026/125xxx/CVE-2026-125345.json new file mode 100644 index 0000000000..2292cd3d5a --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125345.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125345", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-09T21:42:59.429Z", + "datePublished": "2026-11-10T17:20:19.715Z", + "dateUpdated": "2026-11-10T17:20:19.715Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.50", + "status": "affected", + "lessThan": "157.0.8103.50", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Uninitialized resource", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-10T17:20:19.715Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_018223192.html" + }, + { + "url": "https://issues.chromium.org/issues/550525698" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125346.json b/data/2026/125xxx/CVE-2026-125346.json new file mode 100644 index 0000000000..663a77ccc2 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125346.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125346", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-09T21:43:04.617Z", + "datePublished": "2026-11-10T17:20:20.915Z", + "dateUpdated": "2026-11-10T17:20:20.915Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.50", + "status": "affected", + "lessThan": "157.0.8103.50", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-10T17:20:20.915Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_018223192.html" + }, + { + "url": "https://issues.chromium.org/issues/572578603" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125347.json b/data/2026/125xxx/CVE-2026-125347.json new file mode 100644 index 0000000000..499d74cd49 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125347.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125347", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-09T21:43:06.554Z", + "datePublished": "2026-11-10T17:20:20.019Z", + "dateUpdated": "2026-11-10T17:20:20.019Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.50", + "status": "affected", + "lessThan": "157.0.8103.50", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Incorrect authorization", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-10T17:20:20.019Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_018223192.html" + }, + { + "url": "https://issues.chromium.org/issues/561996724" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125348.json b/data/2026/125xxx/CVE-2026-125348.json new file mode 100644 index 0000000000..fca8e6aea4 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125348.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125348", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-09T21:43:08.055Z", + "datePublished": "2026-11-10T17:20:20.455Z", + "dateUpdated": "2026-11-10T17:20:20.455Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.50", + "status": "affected", + "lessThan": "157.0.8103.50", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out of bounds write in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Out of bounds write", + "cweId": "CWE-787" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-10T17:20:20.455Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_018223192.html" + }, + { + "url": "https://issues.chromium.org/issues/563358700" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125349.json b/data/2026/125xxx/CVE-2026-125349.json new file mode 100644 index 0000000000..3859eebdc5 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125349.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125349", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-09T21:43:09.709Z", + "datePublished": "2026-11-10T17:20:21.382Z", + "dateUpdated": "2026-11-10T17:20:21.382Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.50", + "status": "affected", + "lessThan": "157.0.8103.50", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.50 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Uninitialized resource", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-10T17:20:21.382Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_018223192.html" + }, + { + "url": "https://issues.chromium.org/issues/536663516" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125350.json b/data/2026/125xxx/CVE-2026-125350.json new file mode 100644 index 0000000000..3a9e946bb5 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125350.json @@ -0,0 +1,61 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125350", + "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "state": "PUBLISHED", + "assignerShortName": "Chrome", + "dateReserved": "2026-11-09T21:43:19.223Z", + "datePublished": "2026-11-10T17:20:21.161Z", + "dateUpdated": "2026-11-10T17:20:21.161Z" + }, + "containers": { + "cna": { + "affected": [ + { + "vendor": "Google", + "product": "Chrome", + "versions": [ + { + "version": "157.0.8103.50", + "status": "affected", + "lessThan": "157.0.8103.50", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use after free", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", + "shortName": "Chrome", + "dateUpdated": "2026-11-10T17:20:21.161Z" + }, + "references": [ + { + "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_018223192.html" + }, + { + "url": "https://issues.chromium.org/issues/582442907" + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125729.json b/data/2026/125xxx/CVE-2026-125729.json new file mode 100644 index 0000000000..655d21a8de --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125729.json @@ -0,0 +1,95 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125729", + "assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", + "state": "PUBLISHED", + "assignerShortName": "CPANSec", + "dateReserved": "2026-11-10T11:17:20.551Z", + "datePublished": "2026-11-10T17:35:57.712Z", + "dateUpdated": "2026-11-10T17:35:57.712Z" + }, + "containers": { + "cna": { + "affected": [ + { + "collectionURL": "https://cpan.org/modules", + "defaultStatus": "unaffected", + "modules": [ + "Plack::Middleware::CSP" + ], + "packageName": "Plack-Middleware-CSP", + "packageURL": "pkg:cpan/Plack-Middleware-CSP", + "programFiles": [ + "lib/Plack/Middleware/CSP.pm" + ], + "programRoutines": [ + { + "name": "Plack::Middleware::CSP::call" + } + ], + "repo": "https://github.com/pangyre/Plack-Middleware-CSP/", + "versions": [ + { + "lessThan": "0.03", + "status": "affected", + "version": "0", + "versionType": "custom" + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Plack::Middleware::CSP versions before 0.03 for Perl send the Content Security Policy under the wrong header name, so browsers never enforce it.\n\nThe call method sets the policy in a response header named \"content-security-protocol\" instead of \"Content-Security-Policy\". Browsers ignore that header.\n\nAny cross-site scripting flaw in the wrapped application can run scripts the policy was meant to block." + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-684", + "description": "CWE-684 Incorrect Provision of Specified Functionality", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "providerMetadata": { + "orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", + "shortName": "CPANSec", + "dateUpdated": "2026-11-10T17:35:57.712Z" + }, + "references": [ + { + "tags": [ + "issue-tracking" + ], + "url": "https://github.com/pangyre/Plack-Middleware-CSP/issues/1" + }, + { + "tags": [ + "release-notes" + ], + "url": "https://metacpan.org/release/ASHLEY/Plack-Middleware-CSP-0.03/source/CHANGES" + } + ], + "solutions": [ + { + "lang": "en", + "value": "Upgrade to Plack-Middleware-CSP 0.03 or later." + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "title": "Plack::Middleware::CSP versions before 0.03 for Perl send the Content Security Policy under the wrong header name, so browsers never enforce it", + "x_generator": { + "engine": "cpansec-cna-tool 0.1" + } + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126048.json b/data/2026/126xxx/CVE-2026-126048.json new file mode 100644 index 0000000000..3b301f415a --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126048.json @@ -0,0 +1,141 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126048", + "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "state": "PUBLISHED", + "assignerShortName": "VulnCheck", + "dateReserved": "2026-11-10T16:53:12.633Z", + "datePublished": "2026-11-10T16:58:03.611Z", + "dateUpdated": "2026-11-10T16:58:03.611Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "shortName": "VulnCheck", + "dateUpdated": "2026-11-10T16:58:03.611Z" + }, + "datePublic": "2026-11-09T00:00:00.000Z", + "title": "Gwenhywfar 4.99.8beta before 5.14.2 Stack Buffer Overflow via GWEN_TLV_Buffer_To_DB()", + "descriptions": [ + { + "lang": "en", + "value": "Gwenhywfar 4.99.8beta before 5.14.2 contains a stack-based buffer overflow in GWEN_TLV_Buffer_To_DB() in src/parser/tlv.c when decoding BER-TLV tags into a fixed 128-byte buffer. Attackers can supply a record with about 127 or more tag continuation bytes or a truncated multi-byte tag, such as via a malicious chip card's EF_SSD file read by libchipcard's ZKA driver, to crash the application." + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Stack-based Buffer Overflow", + "cweId": "CWE-121", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Martin Preuss", + "product": "Gwenhywfar", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "4.99.8beta", + "status": "affected", + "versionType": "custom", + "lessThan": "5.14.2" + } + ], + "packageURL": "pkg:github/aqbanking/gwenhywfar", + "repo": "https://github.com/aqbanking/gwenhywfar" + } + ], + "metrics": [ + { + "format": "CVSS", + "cvssV4_0": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", + "attackVector": "PHYSICAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "baseScore": 5.1, + "baseSeverity": "MEDIUM" + } + }, + { + "format": "CVSS", + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "attackVector": "PHYSICAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH", + "baseScore": 4.6, + "baseSeverity": "MEDIUM" + } + } + ], + "references": [ + { + "url": "https://github.com/aqbanking/gwenhywfar/commit/ed8e2f8cdc27fd5c1b629cf9c1f6b93b2e009757", + "tags": [ + "patch" + ] + }, + { + "url": "https://github.com/aqbanking/gwenhywfar/commit/6b50388e6b4a96f02d3d56e1d7747405fa881f39", + "tags": [ + "patch" + ] + }, + { + "url": "https://www.aquamaniac.de/rdm/projects/gwenhywfar/files", + "tags": [ + "product" + ] + }, + { + "url": "https://github.com/aqbanking/gwenhywfar/blob/424949d0c6e61028eaccd6e46e4c0c41931c2b2f/src/parser/tlv.c#L629-L655", + "tags": [ + "technical-description" + ] + }, + { + "name": "VulnCheck Advisory: Gwenhywfar 4.99.8beta before 5.14.2 Stack Buffer Overflow via GWEN_TLV_Buffer_To_DB()", + "tags": [ + "third-party-advisory" + ], + "url": "https://www.vulncheck.com/advisories/gwenhywfar-4.99-8beta-before-5.14.2-stack-buffer-overflow-via-gwen-tlv-buffer-to-db" + } + ], + "credits": [ + { + "lang": "en", + "value": "Deus Rex", + "type": "finder" + } + ], + "x_generator": { + "engine": "vulncheck-endgame" + } + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126049.json b/data/2026/126xxx/CVE-2026-126049.json new file mode 100644 index 0000000000..65e382a237 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126049.json @@ -0,0 +1,142 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126049", + "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "state": "PUBLISHED", + "assignerShortName": "VulnCheck", + "dateReserved": "2026-11-10T16:53:12.633Z", + "datePublished": "2026-11-10T16:58:04.296Z", + "dateUpdated": "2026-11-10T16:58:04.296Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "shortName": "VulnCheck", + "dateUpdated": "2026-11-10T16:58:04.296Z" + }, + "datePublic": "2026-11-10T00:00:00.000Z", + "title": "Gwenhywfar 5.14.2 Use-After-Free via GWEN_TLV_Buffer_To_DB() Nested BER-TLV Parsing", + "descriptions": [ + { + "lang": "en", + "value": "Gwenhywfar 5.14.2 contains a heap use-after-free vulnerability in GWEN_TLV_Buffer_To_DB() in src/parser/tlv.c, which frees a nested record's GWEN_DB node when parsing of its contents fails but continues processing and adds the freed node to the parent instead of returning. Attackers can supply a constructed BER-TLV record with unparseable contents, such as via a malicious chip card read by libchipcard, to corrupt heap memory." + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Use After Free", + "cweId": "CWE-416", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Martin Preuss", + "product": "Gwenhywfar", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "5.14.2", + "status": "affected", + "versionType": "custom", + "lessThan": "5.14.3" + } + ], + "packageURL": "pkg:github/aqbanking/gwenhywfar", + "repo": "https://github.com/aqbanking/gwenhywfar" + } + ], + "metrics": [ + { + "format": "CVSS", + "cvssV4_0": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", + "attackVector": "PHYSICAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "baseScore": 5.1, + "baseSeverity": "MEDIUM" + } + }, + { + "format": "CVSS", + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "attackVector": "PHYSICAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH", + "baseScore": 4.6, + "baseSeverity": "MEDIUM" + } + } + ], + "references": [ + { + "url": "https://github.com/aqbanking/gwenhywfar/commit/828b34135dfa33fc347a2929caa2f079ffb00738", + "tags": [ + "patch" + ] + }, + { + "url": "https://github.com/aqbanking/gwenhywfar/commit/dc8b80945e877f5bdf2d2ae1b50c928c15e990b0", + "tags": [ + "release-notes", + "patch" + ] + }, + { + "url": "https://www.aquamaniac.de/rdm/projects/gwenhywfar/files", + "tags": [ + "product" + ] + }, + { + "url": "https://github.com/aqbanking/gwenhywfar/blob/f5c3f9dc56aa20cab85fd149885474239cf68632/src/parser/tlv.c#L651-L672", + "tags": [ + "technical-description" + ] + }, + { + "name": "VulnCheck Advisory: Gwenhywfar 5.14.2 Use-After-Free via GWEN_TLV_Buffer_To_DB() Nested BER-TLV Parsing", + "tags": [ + "third-party-advisory" + ], + "url": "https://www.vulncheck.com/advisories/gwenhywfar-5.14.2-use-after-free-via-gwen-tlv-buffer-to-db-nested-ber-tlv-parsing" + } + ], + "credits": [ + { + "lang": "en", + "value": "Deus Rex", + "type": "finder" + } + ], + "x_generator": { + "engine": "vulncheck-endgame" + } + } + } +} \ No newline at end of file diff --git a/data/2026/126xxx/CVE-2026-126050.json b/data/2026/126xxx/CVE-2026-126050.json new file mode 100644 index 0000000000..1283ae2252 --- /dev/null +++ b/data/2026/126xxx/CVE-2026-126050.json @@ -0,0 +1,129 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-126050", + "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "state": "PUBLISHED", + "assignerShortName": "VulnCheck", + "dateReserved": "2026-11-10T16:53:12.633Z", + "datePublished": "2026-11-10T16:58:04.990Z", + "dateUpdated": "2026-11-10T16:58:04.990Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "shortName": "VulnCheck", + "dateUpdated": "2026-11-10T16:58:04.990Z" + }, + "datePublic": "2026-11-10T00:00:00.000Z", + "title": "apitrace 2.0 through 14.0 Heap Buffer Overflow via SnappyFile::flushReadCache()", + "descriptions": [ + { + "lang": "en", + "value": "apitrace 2.0 through 14.0 contains a heap-based buffer overflow in SnappyFile::flushReadCache() that allows attackers to write past m_compressedCache via an oversized compressed chunk length. Attackers can supply a crafted .trace file whose 4-byte chunk length exceeds the fixed buffer size, corrupting heap memory when users dump, inspect, or replay it." + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Heap-based Buffer Overflow", + "cweId": "CWE-122", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "apitrace", + "product": "apitrace", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "2.0", + "status": "affected", + "versionType": "custom", + "lessThanOrEqual": "14.0" + } + ], + "packageURL": "pkg:github/apitrace/apitrace", + "repo": "https://github.com/apitrace/apitrace" + } + ], + "metrics": [ + { + "format": "CVSS", + "cvssV4_0": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "baseScore": 8.5, + "baseSeverity": "HIGH" + } + }, + { + "format": "CVSS", + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ], + "references": [ + { + "url": "https://github.com/apitrace/apitrace/commit/3890c5a448addfd75ccbe1bd09e3075de6fb3395", + "tags": [ + "patch" + ] + }, + { + "url": "https://github.com/apitrace/apitrace/blob/18cfd388ac47a9e00978b34d6c20341f3e2cdb56/lib/trace/trace_file_snappy.cpp#L215-L235", + "tags": [ + "technical-description" + ] + }, + { + "name": "VulnCheck Advisory: apitrace 2.0 through 14.0 Heap Buffer Overflow via SnappyFile::flushReadCache()", + "tags": [ + "third-party-advisory" + ], + "url": "https://www.vulncheck.com/advisories/apitrace-2.0-through-14.0-heap-buffer-overflow-via-snappyfile-flushreadcache" + } + ], + "credits": [ + { + "lang": "en", + "value": "Deus Rex", + "type": "finder" + } + ], + "x_generator": { + "engine": "vulncheck-endgame" + } + } + } +} \ No newline at end of file diff --git a/data/2026/16xxx/CVE-2026-16530.json b/data/2026/16xxx/CVE-2026-16530.json index add34be261..cc3897cc29 100644 --- a/data/2026/16xxx/CVE-2026-16530.json +++ b/data/2026/16xxx/CVE-2026-16530.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-07-22T07:57:32.480Z", "datePublished": "2026-07-30T05:30:59.912Z", - "dateUpdated": "2026-11-05T19:23:59.346Z" + "dateUpdated": "2026-11-10T17:46:17.674Z" }, "containers": { "cna": { @@ -54,8 +54,16 @@ "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "pcp", "defaultStatus": "affected", + "versions": [ + { + "version": "0:7.1.5-6.el10", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], "cpes": [ - "cpe:/a:redhat:enterprise_linux:10" + "cpe:/o:redhat:enterprise_linux:10.3" ] }, { @@ -120,6 +128,14 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:97299", + "name": "RHSA-2026:97299", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-16530", "tags": [ @@ -177,7 +193,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-05T19:23:59.346Z" + "dateUpdated": "2026-11-10T17:46:17.674Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/16xxx/CVE-2026-16531.json b/data/2026/16xxx/CVE-2026-16531.json index 396b996fa6..b4941c6a4a 100644 --- a/data/2026/16xxx/CVE-2026-16531.json +++ b/data/2026/16xxx/CVE-2026-16531.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-07-22T08:02:56.004Z", "datePublished": "2026-07-30T05:41:07.583Z", - "dateUpdated": "2026-11-05T19:24:02.312Z" + "dateUpdated": "2026-11-10T17:46:17.823Z" }, "containers": { "cna": { @@ -54,8 +54,16 @@ "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "pcp", "defaultStatus": "affected", + "versions": [ + { + "version": "0:7.1.5-6.el10", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], "cpes": [ - "cpe:/a:redhat:enterprise_linux:10" + "cpe:/o:redhat:enterprise_linux:10.3" ] }, { @@ -120,6 +128,14 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2026:97299", + "name": "RHSA-2026:97299", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-16531", "tags": [ @@ -177,7 +193,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-05T19:24:02.312Z" + "dateUpdated": "2026-11-10T17:46:17.823Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/19xxx/CVE-2026-19876.json b/data/2026/19xxx/CVE-2026-19876.json index a0d0b354df..bb156a377c 100644 --- a/data/2026/19xxx/CVE-2026-19876.json +++ b/data/2026/19xxx/CVE-2026-19876.json @@ -8,7 +8,7 @@ "assignerShortName": "NCSC.ch", "dateReserved": "2026-08-14T14:11:08.840Z", "datePublished": "2026-11-06T08:29:25.674Z", - "dateUpdated": "2026-11-06T08:29:25.674Z" + "dateUpdated": "2026-11-10T17:38:08.513Z" }, "containers": { "cna": { @@ -120,6 +120,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:36:05.477130Z", + "id": "CVE-2026-19876", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:38:08.513Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/19xxx/CVE-2026-19877.json b/data/2026/19xxx/CVE-2026-19877.json index 6edbd420e7..0f72c1120d 100644 --- a/data/2026/19xxx/CVE-2026-19877.json +++ b/data/2026/19xxx/CVE-2026-19877.json @@ -8,7 +8,7 @@ "assignerShortName": "NCSC.ch", "dateReserved": "2026-08-14T14:11:08.980Z", "datePublished": "2026-11-06T08:30:14.583Z", - "dateUpdated": "2026-11-06T08:30:14.583Z" + "dateUpdated": "2026-11-10T17:39:24.921Z" }, "containers": { "cna": { @@ -126,6 +126,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:38:51.525813Z", + "id": "CVE-2026-19877", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:39:24.921Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/20xxx/CVE-2026-20703.json b/data/2026/20xxx/CVE-2026-20703.json new file mode 100644 index 0000000000..cfe88f51d3 --- /dev/null +++ b/data/2026/20xxx/CVE-2026-20703.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-20703", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-01-13T04:00:20.851Z", + "datePublished": "2026-11-10T17:43:52.494Z", + "dateUpdated": "2026-11-10T17:43:52.494Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:43:52.494Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Protection Mechanism Failure", + "cweId": "CWE-693", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "BigDL", + "versions": [ + { + "version": "before version 2.4.0", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Protection mechanism failure for some BigDL before version 2.4.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01553.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01553.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/28xxx/CVE-2026-28730.json b/data/2026/28xxx/CVE-2026-28730.json new file mode 100644 index 0000000000..ba598c12cf --- /dev/null +++ b/data/2026/28xxx/CVE-2026-28730.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-28730", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-04-11T03:00:25.846Z", + "datePublished": "2026-11-10T17:44:02.403Z", + "dateUpdated": "2026-11-10T17:44:02.403Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:44:02.403Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "NULL Pointer Dereference", + "cweId": "CWE-476", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Hyperscan", + "versions": [ + { + "version": "before version v5.4.2.1", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Null pointer dereference for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01511.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01511.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/28xxx/CVE-2026-28746.json b/data/2026/28xxx/CVE-2026-28746.json new file mode 100644 index 0000000000..8294e9d8f4 --- /dev/null +++ b/data/2026/28xxx/CVE-2026-28746.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-28746", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-04-02T03:00:20.878Z", + "datePublished": "2026-11-10T17:44:06.178Z", + "dateUpdated": "2026-11-10T17:44:06.178Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:44:06.178Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Out-of-bounds Read", + "cweId": "CWE-125", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Slim Bootloader", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds read in the AuthenticateComponent for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01526.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01526.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/32xxx/CVE-2026-32146.json b/data/2026/32xxx/CVE-2026-32146.json index f8b93da337..8369673850 100644 --- a/data/2026/32xxx/CVE-2026-32146.json +++ b/data/2026/32xxx/CVE-2026-32146.json @@ -8,7 +8,7 @@ "assignerShortName": "EEF", "dateReserved": "2026-03-10T22:37:29.213Z", "datePublished": "2026-04-11T12:59:22.911Z", - "dateUpdated": "2026-09-08T00:58:49.792Z" + "dateUpdated": "2026-11-10T17:40:31.314Z" }, "containers": { "cna": { @@ -39,73 +39,16 @@ "vendor": "Gleam", "versions": [ { - "changes": [ - { - "at": "1.15.4", - "status": "unaffected" - } - ], - "lessThan": "*", - "status": "affected", - "version": "1.9.0-rc1", - "versionType": "semver" - } - ] - }, - { - "collectionURL": "https://github.com", - "cpes": [ - "cpe:2.3:a:gleam-lang:gleam:*:*:*:*:*:*:*:*" - ], - "defaultStatus": "unaffected", - "modules": [ - "compiler-core" - ], - "packageName": "gleam-lang/gleam", - "packageURL": "pkg:github/gleam-lang/gleam", - "product": "Gleam", - "programFiles": [ - "compiler-core/src/config.rs", - "compiler-core/src/manifest.rs" - ], - "programRoutines": [ - { - "name": "compiler_core::config::dependencies_map::deserialize" - }, - { - "name": "compiler_core::config::package_name::deserialize" - } - ], - "repo": "https://github.com/gleam-lang/gleam", - "vendor": "Gleam", - "versions": [ - { - "changes": [ - { - "at": "1.15.4", - "status": "unaffected" - } - ], - "lessThan": "*", + "lessThan": "1.15.4", "status": "affected", "version": "1.9.0-rc1", "versionType": "semver" }, { - "changes": [ - { - "at": "92aae3913570e8d8962f6399404777d313045bfa", - "status": "unaffected" - }, - { - "at": "2dc0467f822c75de94697a912755d172928ee40a", - "status": "unaffected" - } - ], - "lessThan": "*", + "lessThan": "1.16.0-rc2", "status": "affected", - "version": "a4fde22445ab8e5cc79c2ff48971616cb570702c", - "versionType": "git" + "version": "1.16.0-rc1", + "versionType": "semver" } ] }, @@ -119,7 +62,7 @@ "compiler-core" ], "packageName": "gleam-lang/gleam", - "packageURL": "pkg:oci/gleam?repository_url=ghcr.io/gleam-lang", + "packageURL": "pkg:oci/gleam?repository_url=ghcr.io%2Fgleam-lang%2Fgleam", "product": "Gleam", "programFiles": [ "compiler-core/src/config.rs", @@ -194,6 +137,111 @@ "status": "affected", "version": "v1.9.0-rc1-scratch", "versionType": "other" + }, + { + "lessThan": "v1.16.0-rc2-elixir", + "status": "affected", + "version": "v1.16.0-rc1-elixir", + "versionType": "other" + }, + { + "lessThan": "v1.16.0-rc2-erlang", + "status": "affected", + "version": "v1.16.0-rc1-erlang", + "versionType": "other" + }, + { + "lessThan": "v1.16.0-rc2-node", + "status": "affected", + "version": "v1.16.0-rc1-node", + "versionType": "other" + }, + { + "lessThan": "v1.16.0-rc2-node-slim", + "status": "affected", + "version": "v1.16.0-rc1-node-slim", + "versionType": "other" + }, + { + "lessThan": "v1.16.0-rc2-elixir-slim", + "status": "affected", + "version": "v1.16.0-rc1-elixir-slim", + "versionType": "other" + }, + { + "lessThan": "v1.16.0-rc2-erlang-slim", + "status": "affected", + "version": "v1.16.0-rc1-erlang-slim", + "versionType": "other" + }, + { + "lessThan": "v1.16.0-rc2-erlang-alpine", + "status": "affected", + "version": "v1.16.0-rc1-erlang-alpine", + "versionType": "other" + }, + { + "lessThan": "v1.16.0-rc2-elixir-alpine", + "status": "affected", + "version": "v1.16.0-rc1-elixir-alpine", + "versionType": "other" + }, + { + "lessThan": "v1.16.0-rc2-node-alpine", + "status": "affected", + "version": "v1.16.0-rc1-node-alpine", + "versionType": "other" + }, + { + "lessThan": "v1.16.0-rc2-scratch", + "status": "affected", + "version": "v1.16.0-rc1-scratch", + "versionType": "other" + } + ] + }, + { + "collectionURL": "https://github.com", + "cpes": [ + "cpe:2.3:a:gleam-lang:gleam:*:*:*:*:*:*:*:*" + ], + "defaultStatus": "unaffected", + "modules": [ + "compiler-core" + ], + "packageName": "gleam-lang/gleam", + "packageURL": "pkg:github/gleam-lang/gleam", + "product": "Gleam", + "programFiles": [ + "compiler-core/src/config.rs", + "compiler-core/src/manifest.rs" + ], + "programRoutines": [ + { + "name": "compiler_core::config::dependencies_map::deserialize" + }, + { + "name": "compiler_core::config::package_name::deserialize" + } + ], + "repo": "https://github.com/gleam-lang/gleam", + "vendor": "Gleam", + "versions": [ + { + "changes": [ + { + "at": "2dc0467f822c75de94697a912755d172928ee40a", + "status": "unaffected" + }, + { + "at": "92aae3913570e8d8962f6399404777d313045bfa", + "status": "unaffected" + } + ], + "lessThan": "*", + "status": "affected", + "version": "a4fde22445ab8e5cc79c2ff48971616cb570702c", + "versionType": "git" } ] } @@ -205,7 +253,12 @@ { "base64": false, "type": "text/html", - "value": "

The project must use git-based dependencies (direct or transitive), or the victim must run gleam deps download on a repository with a malicious manifest.toml lockfile. Projects that exclusively use Hex dependencies and do not clone untrusted repositories are not affected.

Projects that exclusively use trusted or personally controlled git dependencies, or dependencies pinned to verified commit SHAs, are not exposed.

" + "value": "

The project must use git-based dependencies (direct or transitive), or the victim must run gleam deps download on a repository with a malicious manifest.toml lockfile. Projects that exclusively use Hex dependencies and do not clone untrusted repositories are not affected.

\n

Projects that exclusively use trusted or personally controlled git dependencies, or dependencies pinned to verified commit SHAs, are not exposed.

" + }, + { + "base64": false, + "type": "text/markdown", + "value": "The project must use git-based dependencies (direct or transitive), or the victim must run `gleam deps download` on a repository with a malicious `manifest.toml` lockfile. Projects that exclusively use Hex dependencies and do not clone untrusted repositories are not affected.\n\nProjects that exclusively use trusted or personally controlled git dependencies, or dependencies pinned to verified commit SHAs, are not exposed." } ], "value": "The project must use git-based dependencies (direct or transitive), or the victim must run gleam deps download on a repository with a malicious manifest.toml lockfile. Projects that exclusively use Hex dependencies and do not clone untrusted repositories are not affected.\n\nProjects that exclusively use trusted or personally controlled git dependencies, or dependencies pinned to verified commit SHAs, are not exposed." @@ -221,12 +274,19 @@ "versionEndExcluding": "1.15.4", "versionStartIncluding": "1.9.0-rc1", "vulnerable": true + }, + { + "criteria": "cpe:2.3:a:gleam-lang:gleam:*:*:*:*:*:*:*:*", + "versionEndExcluding": "1.16.0-rc2", + "versionStartIncluding": "1.16.0-rc1", + "vulnerable": true } ], "negate": false, "operator": "OR" } - ] + ], + "operator": "AND" } ], "credits": [ @@ -253,10 +313,15 @@ { "base64": false, "type": "text/html", - "value": "Improper path validation vulnerability in the Gleam compiler's handling of git dependencies allows arbitrary file system modification during dependency download.

Dependency names from gleam.toml and manifest.toml are incorporated into filesystem paths without sufficient validation or confinement to the intended dependency directory, allowing attacker-controlled paths (via relative traversal such as ../ or absolute paths) to target filesystem locations outside that directory. When resolving git dependencies (e.g. via gleam deps download), the computed path is used for filesystem operations including directory deletion and creation.

This vulnerability occurs during the dependency resolution and download phase, which is generally expected to be limited to fetching and preparing dependencies within a confined directory. A malicious direct or transitive git dependency can exploit this issue to delete and overwrite arbitrary directories outside the intended dependency directory, including attacker-chosen absolute paths, potentially causing data loss. In some environments, this may be further leveraged to achieve code execution, for example by overwriting git hooks or shell configuration files.

This issue affects Gleam from 1.9.0-rc1 until 1.15.4.

" + "value": "

Improper path validation vulnerability in the Gleam compiler's handling of git dependencies allows arbitrary file system modification during dependency download.

\n

Dependency names from gleam.toml and manifest.toml are incorporated into filesystem paths without sufficient validation or confinement to the intended dependency directory, allowing attacker-controlled paths (via relative traversal such as ../ or absolute paths) to target filesystem locations outside that directory. When resolving git dependencies (e.g. via gleam deps download), the computed path is used for filesystem operations including directory deletion and creation.

\n

This vulnerability occurs during the dependency resolution and download phase, which is generally expected to be limited to fetching and preparing dependencies within a confined directory. A malicious direct or transitive git dependency can exploit this issue to delete and overwrite arbitrary directories outside the intended dependency directory, including attacker-chosen absolute paths, potentially causing data loss. In some environments, this may be further leveraged to achieve code execution, for example by overwriting git hooks or shell configuration files.

\n

This issue affects gleam: from 1.9.0-rc1 before 1.15.4 and from 1.16.0-rc1 before 1.16.0-rc2.

" + }, + { + "base64": false, + "type": "text/markdown", + "value": "Improper path validation vulnerability in the Gleam compiler's handling of git dependencies allows arbitrary file system modification during dependency download.\n\nDependency names from `gleam.toml` and `manifest.toml` are incorporated into filesystem paths without sufficient validation or confinement to the intended dependency directory, allowing attacker-controlled paths (via relative traversal such as `../` or absolute paths) to target filesystem locations outside that directory. When resolving git dependencies (e.g. via `gleam deps download`), the computed path is used for filesystem operations including directory deletion and creation.\n\nThis vulnerability occurs during the dependency resolution and download phase, which is generally expected to be limited to fetching and preparing dependencies within a confined directory. A malicious direct or transitive git dependency can exploit this issue to delete and overwrite arbitrary directories outside the intended dependency directory, including attacker-chosen absolute paths, potentially causing data loss. In some environments, this may be further leveraged to achieve code execution, for example by overwriting git hooks or shell configuration files.\n\nThis issue affects gleam: from 1.9.0-rc1 before 1.15.4 and from 1.16.0-rc1 before 1.16.0-rc2." } ], - "value": "Improper path validation vulnerability in the Gleam compiler's handling of git dependencies allows arbitrary file system modification during dependency download.\n\nDependency names from gleam.toml and manifest.toml are incorporated into filesystem paths without sufficient validation or confinement to the intended dependency directory, allowing attacker-controlled paths (via relative traversal such as ../ or absolute paths) to target filesystem locations outside that directory. When resolving git dependencies (e.g. via gleam deps download), the computed path is used for filesystem operations including directory deletion and creation.\n\nThis vulnerability occurs during the dependency resolution and download phase, which is generally expected to be limited to fetching and preparing dependencies within a confined directory. A malicious direct or transitive git dependency can exploit this issue to delete and overwrite arbitrary directories outside the intended dependency directory, including attacker-chosen absolute paths, potentially causing data loss. In some environments, this may be further leveraged to achieve code execution, for example by overwriting git hooks or shell configuration files.\n\nThis issue affects Gleam from 1.9.0-rc1 until 1.15.4." + "value": "Improper path validation vulnerability in the Gleam compiler's handling of git dependencies allows arbitrary file system modification during dependency download.\n\nDependency names from gleam.toml and manifest.toml are incorporated into filesystem paths without sufficient validation or confinement to the intended dependency directory, allowing attacker-controlled paths (via relative traversal such as ../ or absolute paths) to target filesystem locations outside that directory. When resolving git dependencies (e.g. via gleam deps download), the computed path is used for filesystem operations including directory deletion and creation.\n\nThis vulnerability occurs during the dependency resolution and download phase, which is generally expected to be limited to fetching and preparing dependencies within a confined directory. A malicious direct or transitive git dependency can exploit this issue to delete and overwrite arbitrary directories outside the intended dependency directory, including attacker-chosen absolute paths, potentially causing data loss. In some environments, this may be further leveraged to achieve code execution, for example by overwriting git hooks or shell configuration files.\n\nThis issue affects gleam: from 1.9.0-rc1 before 1.15.4 and from 1.16.0-rc1 before 1.16.0-rc2." } ], "impacts": [ @@ -290,7 +355,6 @@ "attackVector": "LOCAL", "baseScore": 8.3, "baseSeverity": "HIGH", - "exploitMaturity": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", @@ -319,7 +383,7 @@ "descriptions": [ { "cweId": "CWE-22", - "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", + "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory", "lang": "en", "type": "CWE" } @@ -329,10 +393,11 @@ "providerMetadata": { "orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "shortName": "EEF", - "dateUpdated": "2026-09-08T00:58:49.792Z" + "dateUpdated": "2026-11-10T17:40:31.314Z" }, "references": [ { + "name": "Improper Path Validation in Git Dependency Handling Allows Arbitrary File System Modification", "tags": [ "vendor-advisory", "related" @@ -340,28 +405,46 @@ "url": "https://github.com/gleam-lang/gleam/security/advisories/GHSA-vq5j-55vx-wq8j" }, { + "name": "EEF CNA record for CVE-2026-32146", "tags": [ "related" ], "url": "https://cna.erlef.org/cves/CVE-2026-32146.html" }, { + "name": "OSV record EEF-CVE-2026-32146", "tags": [ "related" ], "url": "https://osv.dev/vulnerability/EEF-CVE-2026-32146" }, { + "name": "Error immediately for invalid config", "tags": [ "patch" ], "url": "https://github.com/gleam-lang/gleam/commit/1aa5d8e594b0aa240bb213fce6ee19c65e6d5bcf" }, { + "name": "Introducing commit a4fde22 in gleam-lang/gleam", + "tags": [ + "related" + ], + "url": "https://github.com/gleam-lang/gleam/commit/a4fde22445ab8e5cc79c2ff48971616cb570702c" + }, + { + "name": "Fix commit 2dc0467 in gleam-lang/gleam", "tags": [ "patch" ], "url": "https://github.com/gleam-lang/gleam/commit/2dc0467f822c75de94697a912755d172928ee40a" + }, + { + "name": "Fix commit 92aae39 in gleam-lang/gleam", + "tags": [ + "patch" + ], + "url": "https://github.com/gleam-lang/gleam/commit/92aae3913570e8d8962f6399404777d313045bfa" } ], "solutions": [ @@ -371,7 +454,12 @@ { "base64": false, "type": "text/html", - "value": "

Upgrade to Gleam 1.15.4 or later.

Both patches must be applied: the original incomplete fix (1aa5d8e594b0aa240bb213fce6ee19c65e6d5bcf, backported as 55bb36e6d7febfbbc48c4d001e0ae13eb0312d78 to 1.15) and the follow-up fix (2dc0467f822c75de94697a912755d172928ee40a, backported as 92aae3913570e8d8962f6399404777d313045bfa to 1.15). Gleam 1.15.4 includes both.

" + "value": "

Upgrade to Gleam 1.15.4 or later.

\n

Both patches must be applied: the original incomplete fix (1aa5d8e594b0aa240bb213fce6ee19c65e6d5bcf, backported as 55bb36e6d7febfbbc48c4d001e0ae13eb0312d78 to 1.15) and the follow-up fix (2dc0467f822c75de94697a912755d172928ee40a, backported as 92aae3913570e8d8962f6399404777d313045bfa to 1.15). Gleam 1.15.4 includes both.

" + }, + { + "base64": false, + "type": "text/markdown", + "value": "Upgrade to Gleam 1.15.4 or later.\n\nBoth patches must be applied: the original incomplete fix (`1aa5d8e594b0aa240bb213fce6ee19c65e6d5bcf`, backported as `55bb36e6d7febfbbc48c4d001e0ae13eb0312d78` to 1.15) and the follow-up fix (`2dc0467f822c75de94697a912755d172928ee40a`, backported as `92aae3913570e8d8962f6399404777d313045bfa` to 1.15). Gleam 1.15.4 includes both." } ], "value": "Upgrade to Gleam 1.15.4 or later.\n\nBoth patches must be applied: the original incomplete fix (1aa5d8e594b0aa240bb213fce6ee19c65e6d5bcf, backported as 55bb36e6d7febfbbc48c4d001e0ae13eb0312d78 to 1.15) and the follow-up fix (2dc0467f822c75de94697a912755d172928ee40a, backported as 92aae3913570e8d8962f6399404777d313045bfa to 1.15). Gleam 1.15.4 includes both." @@ -388,15 +476,17 @@ { "base64": false, "type": "text/html", - "value": "" + "value": "" + }, + { + "base64": false, + "type": "text/markdown", + "value": "* Avoid using untrusted git dependencies, especially without pinning to a specific commit SHA\n* Review dependency trees carefully, including transitive git dependencies\n* Run dependency resolution commands in a restricted or isolated environment (e.g. containers)" } ], "value": "* Avoid using untrusted git dependencies, especially without pinning to a specific commit SHA\n* Review dependency trees carefully, including transitive git dependencies\n* Run dependency resolution commands in a restricted or isolated environment (e.g. containers)" } - ], - "x_generator": { - "engine": "Vulnogram 0.2.0" - } + ] }, "adp": [ { diff --git a/data/2026/33xxx/CVE-2026-33094.json b/data/2026/33xxx/CVE-2026-33094.json new file mode 100644 index 0000000000..78d783ce4d --- /dev/null +++ b/data/2026/33xxx/CVE-2026-33094.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-33094", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-04-11T03:00:25.868Z", + "datePublished": "2026-11-10T17:44:15.176Z", + "dateUpdated": "2026-11-10T17:44:15.176Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:44:15.176Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Out-of-bounds Write", + "cweId": "CWE-787", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Hyperscan", + "versions": [ + { + "version": "before version v5.4.2.1", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds write for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01511.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01511.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/33xxx/CVE-2026-33275.json b/data/2026/33xxx/CVE-2026-33275.json new file mode 100644 index 0000000000..fc18446770 --- /dev/null +++ b/data/2026/33xxx/CVE-2026-33275.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-33275", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-04-02T03:00:20.849Z", + "datePublished": "2026-11-10T17:44:19.114Z", + "dateUpdated": "2026-11-10T17:44:19.114Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:44:19.114Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Improper Resource Shutdown or Release", + "cweId": "CWE-404", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) PROSet/Wireless Wi-Fi Software for Windows", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Improper resource shutdown or release for some Intel(R) PROSet/Wireless Wi-Fi Software for Windows within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/33xxx/CVE-2026-33379.json b/data/2026/33xxx/CVE-2026-33379.json index bf184fcc00..9900c7287b 100644 --- a/data/2026/33xxx/CVE-2026-33379.json +++ b/data/2026/33xxx/CVE-2026-33379.json @@ -8,7 +8,7 @@ "assignerShortName": "GRAFANA", "dateReserved": "2026-03-19T07:55:06.977Z", "datePublished": "2026-11-06T10:05:44.477Z", - "dateUpdated": "2026-11-06T10:05:44.477Z" + "dateUpdated": "2026-11-10T17:39:19.777Z" }, "containers": { "cna": { @@ -93,6 +93,40 @@ "discovery": "BUG_BOUNTY" }, "title": "Dashboard snapshot permission bypass" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:39:05.352293Z", + "id": "CVE-2026-33379", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:39:19.777Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/33xxx/CVE-2026-33818.json b/data/2026/33xxx/CVE-2026-33818.json index 3e7138335f..e1347ddd00 100644 --- a/data/2026/33xxx/CVE-2026-33818.json +++ b/data/2026/33xxx/CVE-2026-33818.json @@ -8,14 +8,14 @@ "assignerShortName": "Go", "dateReserved": "2026-03-23T20:35:32.815Z", "datePublished": "2026-08-13T21:58:52.821Z", - "dateUpdated": "2026-11-10T11:21:21.296Z" + "dateUpdated": "2026-11-10T17:20:47.076Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", - "dateUpdated": "2026-11-10T11:21:21.296Z" + "dateUpdated": "2026-11-10T17:20:47.076Z" }, "title": "Enforce maximum recursion depth in encoding/asn1", "descriptions": [ diff --git a/data/2026/34xxx/CVE-2026-34017.json b/data/2026/34xxx/CVE-2026-34017.json new file mode 100644 index 0000000000..289d2ee3d8 --- /dev/null +++ b/data/2026/34xxx/CVE-2026-34017.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-34017", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-04-15T03:00:23.189Z", + "datePublished": "2026-11-10T17:44:28.084Z", + "dateUpdated": "2026-11-10T17:44:28.084Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:44:28.084Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Heap-based Buffer Overflow", + "cweId": "CWE-122", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Hyperscan", + "versions": [ + { + "version": "before version v5.4.2.1", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Heap-based buffer overflow for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01511.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01511.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.8, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/34xxx/CVE-2026-34489.json b/data/2026/34xxx/CVE-2026-34489.json new file mode 100644 index 0000000000..0c9918fdb8 --- /dev/null +++ b/data/2026/34xxx/CVE-2026-34489.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-34489", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-04-15T03:00:23.205Z", + "datePublished": "2026-11-10T17:44:30.858Z", + "dateUpdated": "2026-11-10T17:44:30.858Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:44:30.858Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Untrusted Pointer Dereference", + "cweId": "CWE-822", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Hyperscan", + "versions": [ + { + "version": "before version v5.4.2.1", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Untrusted pointer dereference for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01511.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01511.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/35xxx/CVE-2026-35500.json b/data/2026/35xxx/CVE-2026-35500.json new file mode 100644 index 0000000000..adde7a0826 --- /dev/null +++ b/data/2026/35xxx/CVE-2026-35500.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-35500", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-04-18T03:00:24.870Z", + "datePublished": "2026-11-10T17:44:34.959Z", + "dateUpdated": "2026-11-10T17:44:34.959Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:44:34.959Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Stack-based Buffer Overflow", + "cweId": "CWE-121", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Slim Bootloader", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Stack-based buffer overflow in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of privilege. Startup code and smm adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via physical access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01526.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01526.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", + "attackVector": "PHYSICAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/40xxx/CVE-2026-40064.json b/data/2026/40xxx/CVE-2026-40064.json new file mode 100644 index 0000000000..3f3f1e580b --- /dev/null +++ b/data/2026/40xxx/CVE-2026-40064.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-40064", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-06-04T03:00:12.196Z", + "datePublished": "2026-11-10T17:44:41.827Z", + "dateUpdated": "2026-11-10T17:44:41.827Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:44:41.827Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Improper Input Validation", + "cweId": "CWE-20", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) oneAPI CLI Tool software", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Improper input validation for some Intel(R) oneAPI CLI Tool software within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01522.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01522.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 4.6, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/40xxx/CVE-2026-40216.json b/data/2026/40xxx/CVE-2026-40216.json new file mode 100644 index 0000000000..498aef4ca0 --- /dev/null +++ b/data/2026/40xxx/CVE-2026-40216.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-40216", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-04-11T03:00:25.826Z", + "datePublished": "2026-11-10T17:44:46.097Z", + "dateUpdated": "2026-11-10T17:44:46.097Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:44:46.097Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Out-of-bounds Read", + "cweId": "CWE-125", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Hyperscan", + "versions": [ + { + "version": "before version v5.4.2.1", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds read for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01511.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01511.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/40xxx/CVE-2026-40424.json b/data/2026/40xxx/CVE-2026-40424.json new file mode 100644 index 0000000000..4a013a3dd5 --- /dev/null +++ b/data/2026/40xxx/CVE-2026-40424.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-40424", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-04-15T03:00:23.179Z", + "datePublished": "2026-11-10T17:44:49.036Z", + "dateUpdated": "2026-11-10T17:44:49.036Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:44:49.036Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Out-of-bounds Read", + "cweId": "CWE-125", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Hyperscan", + "versions": [ + { + "version": "before version v5.4.2.1", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds read for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01511.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01511.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/40xxx/CVE-2026-40433.json b/data/2026/40xxx/CVE-2026-40433.json new file mode 100644 index 0000000000..247d47f02a --- /dev/null +++ b/data/2026/40xxx/CVE-2026-40433.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-40433", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-04-15T03:00:23.235Z", + "datePublished": "2026-11-10T17:44:54.870Z", + "dateUpdated": "2026-11-10T17:44:54.870Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:44:54.870Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Heap-based Buffer Overflow", + "cweId": "CWE-122", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) PROSet Wireless Wi-Fi Software for Windows", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Heap-based buffer overflow for some Intel(R) PROSet Wireless Wi-Fi Software for Windows within Ring 0: Kernel may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent network access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (high) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/40xxx/CVE-2026-40626.json b/data/2026/40xxx/CVE-2026-40626.json new file mode 100644 index 0000000000..b64b799350 --- /dev/null +++ b/data/2026/40xxx/CVE-2026-40626.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-40626", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-04-15T03:00:23.256Z", + "datePublished": "2026-11-10T17:44:57.838Z", + "dateUpdated": "2026-11-10T17:44:57.838Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:44:57.838Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Uncontrolled Search Path Element", + "cweId": "CWE-427", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Wireless Bluetooth(R) software for Windows", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Uncontrolled search path for some Intel(R) Wireless Bluetooth(R) software for Windows within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/40xxx/CVE-2026-40694.json b/data/2026/40xxx/CVE-2026-40694.json new file mode 100644 index 0000000000..4babc20c6a --- /dev/null +++ b/data/2026/40xxx/CVE-2026-40694.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-40694", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-04-15T03:00:23.196Z", + "datePublished": "2026-11-10T17:45:02.220Z", + "dateUpdated": "2026-11-10T17:45:02.220Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:45:02.220Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Out-of-bounds Write", + "cweId": "CWE-787", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Hyperscan", + "versions": [ + { + "version": "before version v5.4.2.1", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds write for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01511.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01511.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.8, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/40xxx/CVE-2026-40695.json b/data/2026/40xxx/CVE-2026-40695.json new file mode 100644 index 0000000000..4655342837 --- /dev/null +++ b/data/2026/40xxx/CVE-2026-40695.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-40695", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-05-15T03:00:15.528Z", + "datePublished": "2026-11-10T17:45:05.233Z", + "dateUpdated": "2026-11-10T17:45:05.233Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:45:05.233Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "NULL Pointer Dereference", + "cweId": "CWE-476", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Wireless Bluetooth(R)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Null pointer dereference for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/40xxx/CVE-2026-40697.json b/data/2026/40xxx/CVE-2026-40697.json new file mode 100644 index 0000000000..96e89b1813 --- /dev/null +++ b/data/2026/40xxx/CVE-2026-40697.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-40697", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-04-15T03:00:23.241Z", + "datePublished": "2026-11-10T17:45:08.304Z", + "dateUpdated": "2026-11-10T17:45:08.304Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:45:08.304Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Use After Free", + "cweId": "CWE-416", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Wireless Software for Windows", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free for some Intel(R) Wireless Software for Windows within Ring 3: User Applications may allow denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (low) and availability (low) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.8, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:L/SA:L", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "LOW" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/41xxx/CVE-2026-41221.json b/data/2026/41xxx/CVE-2026-41221.json new file mode 100644 index 0000000000..402ed9a3cb --- /dev/null +++ b/data/2026/41xxx/CVE-2026-41221.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-41221", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-04-18T03:00:24.881Z", + "datePublished": "2026-11-10T17:45:15.891Z", + "dateUpdated": "2026-11-10T17:45:15.891Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:45:15.891Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Integer Overflow or Wraparound", + "cweId": "CWE-190", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Slim Bootloader", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Integer overflow in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of privilege. Startup code and smm adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via physical access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01526.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01526.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", + "attackVector": "PHYSICAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/41xxx/CVE-2026-41224.json b/data/2026/41xxx/CVE-2026-41224.json new file mode 100644 index 0000000000..66736136fd --- /dev/null +++ b/data/2026/41xxx/CVE-2026-41224.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-41224", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-04-18T03:00:24.861Z", + "datePublished": "2026-11-10T17:45:18.958Z", + "dateUpdated": "2026-11-10T17:45:18.958Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:45:18.958Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Out-of-bounds Write", + "cweId": "CWE-787", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Slim Bootloader", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds write in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of privilege. Startup code and smm adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via physical access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01526.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01526.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", + "attackVector": "PHYSICAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/42xxx/CVE-2026-42056.json b/data/2026/42xxx/CVE-2026-42056.json new file mode 100644 index 0000000000..ce0cddbb57 --- /dev/null +++ b/data/2026/42xxx/CVE-2026-42056.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-42056", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-05-15T03:00:15.480Z", + "datePublished": "2026-11-10T17:45:22.106Z", + "dateUpdated": "2026-11-10T17:45:22.106Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:45:22.106Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Stack-based Buffer Overflow", + "cweId": "CWE-121", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Wireless Bluetooth(R)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Stack-based buffer overflow for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 6, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/42xxx/CVE-2026-42504.json b/data/2026/42xxx/CVE-2026-42504.json index 238cb350cd..e68ac9ee1b 100644 --- a/data/2026/42xxx/CVE-2026-42504.json +++ b/data/2026/42xxx/CVE-2026-42504.json @@ -8,14 +8,14 @@ "assignerShortName": "Go", "dateReserved": "2026-04-28T00:21:12.792Z", "datePublished": "2026-06-02T22:01:37.219Z", - "dateUpdated": "2026-11-10T11:21:19.746Z" + "dateUpdated": "2026-11-10T17:20:45.563Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", - "dateUpdated": "2026-11-10T11:21:19.746Z" + "dateUpdated": "2026-11-10T17:20:45.563Z" }, "title": "Quadratic complexity in WordDecoder.DecodeHeader in mime", "descriptions": [ diff --git a/data/2026/42xxx/CVE-2026-42956.json b/data/2026/42xxx/CVE-2026-42956.json new file mode 100644 index 0000000000..32c1241bde --- /dev/null +++ b/data/2026/42xxx/CVE-2026-42956.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-42956", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-05-27T03:00:16.598Z", + "datePublished": "2026-11-10T17:45:28.301Z", + "dateUpdated": "2026-11-10T17:45:28.301Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:45:28.301Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Out-of-bounds Write", + "cweId": "CWE-787", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Wireless Bluetooth(R)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds write for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/44xxx/CVE-2026-44382.json b/data/2026/44xxx/CVE-2026-44382.json new file mode 100644 index 0000000000..bc8c3a4eee --- /dev/null +++ b/data/2026/44xxx/CVE-2026-44382.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-44382", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-05-15T03:00:15.427Z", + "datePublished": "2026-11-10T17:45:33.036Z", + "dateUpdated": "2026-11-10T17:45:33.036Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:45:33.036Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Out-of-bounds Read", + "cweId": "CWE-125", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Wireless Bluetooth(R)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds read for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/44xxx/CVE-2026-44606.json b/data/2026/44xxx/CVE-2026-44606.json new file mode 100644 index 0000000000..feb0ed7047 --- /dev/null +++ b/data/2026/44xxx/CVE-2026-44606.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-44606", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-06-04T03:00:12.189Z", + "datePublished": "2026-11-10T17:45:36.326Z", + "dateUpdated": "2026-11-10T17:45:36.326Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:45:36.326Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Out-of-bounds Write", + "cweId": "CWE-787", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Intelligent Storage Acceleration Library", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds write for some Intel(R) Intelligent Storage Acceleration Library within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01514.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01514.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/44xxx/CVE-2026-44624.json b/data/2026/44xxx/CVE-2026-44624.json new file mode 100644 index 0000000000..2e92ec50c8 --- /dev/null +++ b/data/2026/44xxx/CVE-2026-44624.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-44624", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-06-23T03:00:05.195Z", + "datePublished": "2026-11-10T17:45:39.669Z", + "dateUpdated": "2026-11-10T17:45:39.669Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:45:39.669Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Incorrect Comparison", + "cweId": "CWE-697", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Slim Bootloader", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect comparison in the Ext2 parser for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01526.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01526.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.7, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/44xxx/CVE-2026-44625.json b/data/2026/44xxx/CVE-2026-44625.json new file mode 100644 index 0000000000..f08bc15241 --- /dev/null +++ b/data/2026/44xxx/CVE-2026-44625.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-44625", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-05-15T03:00:15.554Z", + "datePublished": "2026-11-10T17:45:43.003Z", + "dateUpdated": "2026-11-10T17:45:43.003Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:45:43.003Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Use After Free", + "cweId": "CWE-416", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Wireless Bluetooth(R)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/44xxx/CVE-2026-44685.json b/data/2026/44xxx/CVE-2026-44685.json new file mode 100644 index 0000000000..c94ae2a26d --- /dev/null +++ b/data/2026/44xxx/CVE-2026-44685.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-44685", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-14T22:09:54.074Z", + "datePublished": "2026-11-10T17:45:48.332Z", + "dateUpdated": "2026-11-10T17:45:48.332Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:45:48.332Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Authentication Bypass by Spoofing", + "cweId": "CWE-290", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Authentication bypass by spoofing in the MigTD rebinding protocol for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/49xxx/CVE-2026-49036.json b/data/2026/49xxx/CVE-2026-49036.json new file mode 100644 index 0000000000..227314e738 --- /dev/null +++ b/data/2026/49xxx/CVE-2026-49036.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-49036", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-14T22:12:36.553Z", + "datePublished": "2026-11-10T17:45:55.790Z", + "dateUpdated": "2026-11-10T17:45:55.790Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:45:55.790Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Time-of-check Time-of-use (TOCTOU) Race Condition", + "cweId": "CWE-367", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Time-of-check time-of-use race condition in the MigTD shared memory for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.7, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/50xxx/CVE-2026-50175.json b/data/2026/50xxx/CVE-2026-50175.json new file mode 100644 index 0000000000..a8a19d9b27 --- /dev/null +++ b/data/2026/50xxx/CVE-2026-50175.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-50175", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-06-23T03:00:05.174Z", + "datePublished": "2026-11-10T17:46:00.552Z", + "dateUpdated": "2026-11-10T17:46:00.552Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:46:00.552Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Untrusted Pointer Dereference", + "cweId": "CWE-822", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Slim Bootloader", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Untrusted pointer dereference in the FirmwareWakingVector for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01526.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01526.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 8.4, + "baseSeverity": "HIGH", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/50xxx/CVE-2026-50249.json b/data/2026/50xxx/CVE-2026-50249.json new file mode 100644 index 0000000000..3b56639dcb --- /dev/null +++ b/data/2026/50xxx/CVE-2026-50249.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-50249", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-06-30T03:00:12.011Z", + "datePublished": "2026-11-10T17:46:05.887Z", + "dateUpdated": "2026-11-10T17:46:05.887Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:46:05.887Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Information Disclosure" + }, + { + "lang": "en", + "description": "Out-of-bounds Read", + "cweId": "CWE-125", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds read in the GenerationSetup for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may allow an information disclosure. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.6, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/52xxx/CVE-2026-52899.json b/data/2026/52xxx/CVE-2026-52899.json new file mode 100644 index 0000000000..8b4bc450e6 --- /dev/null +++ b/data/2026/52xxx/CVE-2026-52899.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-52899", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-06-26T03:00:03.712Z", + "datePublished": "2026-11-10T17:46:09.330Z", + "dateUpdated": "2026-11-10T17:46:09.330Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:46:09.330Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Deserialization of Untrusted Data", + "cweId": "CWE-502", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "BigDL software", + "versions": [ + { + "version": "before version 2.5.0b1", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of untrusted data for some BigDL software before version 2.5.0b1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via network access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01553.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01553.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/55xxx/CVE-2026-55709.json b/data/2026/55xxx/CVE-2026-55709.json new file mode 100644 index 0000000000..0f792c55bd --- /dev/null +++ b/data/2026/55xxx/CVE-2026-55709.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-55709", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-16T03:00:02.857Z", + "datePublished": "2026-11-10T17:46:12.985Z", + "dateUpdated": "2026-11-10T17:46:12.985Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:46:12.985Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Loop with Unreachable Exit Condition ('Infinite Loop')", + "cweId": "CWE-835", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Loop with unreachable exit condition ('infinite loop') in the MigTD's GetQuote for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. System software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/55xxx/CVE-2026-55716.json b/data/2026/55xxx/CVE-2026-55716.json new file mode 100644 index 0000000000..de67fb9598 --- /dev/null +++ b/data/2026/55xxx/CVE-2026-55716.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-55716", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-06-30T03:00:12.008Z", + "datePublished": "2026-11-10T17:46:16.549Z", + "dateUpdated": "2026-11-10T17:46:16.549Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:46:16.549Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Information Disclosure" + }, + { + "lang": "en", + "description": "Out-of-bounds Read", + "cweId": "CWE-125", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds read in the CheckUefiVgaMode for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may allow an information disclosure. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.6, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/56xxx/CVE-2026-56432.json b/data/2026/56xxx/CVE-2026-56432.json new file mode 100644 index 0000000000..f1acd92934 --- /dev/null +++ b/data/2026/56xxx/CVE-2026-56432.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-56432", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-14T22:12:36.536Z", + "datePublished": "2026-11-10T17:46:20.132Z", + "dateUpdated": "2026-11-10T17:46:20.132Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:46:20.132Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Unintended Proxy or Intermediary ('Confused Deputy')", + "cweId": "CWE-441", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Unintended proxy or intermediary ('confused deputy') in the MigTD signing for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 8.2, + "baseSeverity": "HIGH", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/56xxx/CVE-2026-56435.json b/data/2026/56xxx/CVE-2026-56435.json new file mode 100644 index 0000000000..3ed2984416 --- /dev/null +++ b/data/2026/56xxx/CVE-2026-56435.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-56435", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-06-30T03:00:12.021Z", + "datePublished": "2026-11-10T17:46:23.837Z", + "dateUpdated": "2026-11-10T17:46:23.837Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:46:23.837Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Out-of-bounds Write", + "cweId": "CWE-787", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/56xxx/CVE-2026-56440.json b/data/2026/56xxx/CVE-2026-56440.json new file mode 100644 index 0000000000..b960238065 --- /dev/null +++ b/data/2026/56xxx/CVE-2026-56440.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-56440", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-06-26T03:00:03.723Z", + "datePublished": "2026-11-10T17:46:29.405Z", + "dateUpdated": "2026-11-10T17:46:29.405Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:46:29.405Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Improper Input Validation", + "cweId": "CWE-20", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "BigDL", + "versions": [ + { + "version": "before version 2.5.0b1", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Improper input validation for some BigDL before version 2.5.0b1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01553.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01553.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 4.6, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/56xxx/CVE-2026-56759.json b/data/2026/56xxx/CVE-2026-56759.json new file mode 100644 index 0000000000..eb64798f76 --- /dev/null +++ b/data/2026/56xxx/CVE-2026-56759.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-56759", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-15T03:00:03.704Z", + "datePublished": "2026-11-10T17:46:33.076Z", + "dateUpdated": "2026-11-10T17:46:33.076Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:46:33.076Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Improper Input Validation", + "cweId": "CWE-20", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Improper input validation in the MigTD PCI BAR handling for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/57xxx/CVE-2026-57882.json b/data/2026/57xxx/CVE-2026-57882.json new file mode 100644 index 0000000000..d57891bad4 --- /dev/null +++ b/data/2026/57xxx/CVE-2026-57882.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-57882", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-06-30T03:00:12.024Z", + "datePublished": "2026-11-10T17:46:36.852Z", + "dateUpdated": "2026-11-10T17:46:36.852Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:46:36.852Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Out-of-bounds Write", + "cweId": "CWE-787", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/57xxx/CVE-2026-57890.json b/data/2026/57xxx/CVE-2026-57890.json new file mode 100644 index 0000000000..0a39312892 --- /dev/null +++ b/data/2026/57xxx/CVE-2026-57890.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-57890", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-14T22:12:36.547Z", + "datePublished": "2026-11-10T17:46:42.831Z", + "dateUpdated": "2026-11-10T17:46:42.831Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:46:42.831Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Information Disclosure" + }, + { + "lang": "en", + "description": "Improper Cleanup on Thrown Exception", + "cweId": "CWE-460", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Improper cleanup on thrown exception in the MigTD's SPDM responder for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an information disclosure. Network adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/57xxx/CVE-2026-57891.json b/data/2026/57xxx/CVE-2026-57891.json new file mode 100644 index 0000000000..5275ce5ca6 --- /dev/null +++ b/data/2026/57xxx/CVE-2026-57891.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-57891", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-06-30T03:00:12.014Z", + "datePublished": "2026-11-10T17:46:46.787Z", + "dateUpdated": "2026-11-10T17:46:46.787Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:46:46.787Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Out-of-bounds Write", + "cweId": "CWE-787", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/57xxx/CVE-2026-57892.json b/data/2026/57xxx/CVE-2026-57892.json new file mode 100644 index 0000000000..db5dea91bf --- /dev/null +++ b/data/2026/57xxx/CVE-2026-57892.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-57892", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-16T22:45:23.637Z", + "datePublished": "2026-11-10T17:46:50.571Z", + "dateUpdated": "2026-11-10T17:46:50.571Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:46:50.571Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Insufficient Granularity of Access Control", + "cweId": "CWE-1220", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Insufficient granularity of access control in the MigTD v2 policy evaluation engine for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. Network adversary with an unauthenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N", + "attackVector": "ADJACENT", + "attackComplexity": "HIGH", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/57xxx/CVE-2026-57893.json b/data/2026/57xxx/CVE-2026-57893.json new file mode 100644 index 0000000000..d5fa21fb14 --- /dev/null +++ b/data/2026/57xxx/CVE-2026-57893.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-57893", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-15T03:00:03.681Z", + "datePublished": "2026-11-10T17:46:54.357Z", + "dateUpdated": "2026-11-10T17:46:54.357Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:46:54.357Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Incomplete Internal State Distinction", + "cweId": "CWE-372", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Incomplete internal state distinction in the MigTD's SPDM responder for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/57xxx/CVE-2026-57907.json b/data/2026/57xxx/CVE-2026-57907.json index 27953fb4b5..0b22df51c9 100644 --- a/data/2026/57xxx/CVE-2026-57907.json +++ b/data/2026/57xxx/CVE-2026-57907.json @@ -8,7 +8,7 @@ "assignerShortName": "WatchGuard", "dateReserved": "2026-06-26T09:41:49.464Z", "datePublished": "2026-11-10T16:42:00.448Z", - "dateUpdated": "2026-11-10T16:42:00.448Z" + "dateUpdated": "2026-11-10T17:01:49.222Z" }, "containers": { "cna": { @@ -98,6 +98,40 @@ "type": "reporter" } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:01:37.192902Z", + "id": "CVE-2026-57907", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:01:49.222Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59771.json b/data/2026/59xxx/CVE-2026-59771.json new file mode 100644 index 0000000000..ab15587b3c --- /dev/null +++ b/data/2026/59xxx/CVE-2026-59771.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-59771", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-15T03:00:03.689Z", + "datePublished": "2026-11-10T17:46:58.137Z", + "dateUpdated": "2026-11-10T17:46:58.137Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:46:58.137Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Improper Validation of Array Index", + "cweId": "CWE-129", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Improper validation of array index in the MigTD's virtio-serial driver for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/60xxx/CVE-2026-60020.json b/data/2026/60xxx/CVE-2026-60020.json new file mode 100644 index 0000000000..648ad9fb88 --- /dev/null +++ b/data/2026/60xxx/CVE-2026-60020.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-60020", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-14T22:12:36.523Z", + "datePublished": "2026-11-10T17:47:01.967Z", + "dateUpdated": "2026-11-10T17:47:01.967Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:47:01.967Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Missing Release of Memory after Effective Lifetime", + "cweId": "CWE-401", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Missing release of memory after effective lifetime in the MigTD virtio-serial driver for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 4.6, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/60xxx/CVE-2026-60059.json b/data/2026/60xxx/CVE-2026-60059.json new file mode 100644 index 0000000000..78c13b976b --- /dev/null +++ b/data/2026/60xxx/CVE-2026-60059.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-60059", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-15T03:00:03.677Z", + "datePublished": "2026-11-10T17:47:05.924Z", + "dateUpdated": "2026-11-10T17:47:05.924Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:47:05.924Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Information Disclosure" + }, + { + "lang": "en", + "description": "Use of Uninitialized Resource", + "cweId": "CWE-908", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use of uninitialized resource in the MigTD memory for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an information disclosure. Network adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/60xxx/CVE-2026-60071.json b/data/2026/60xxx/CVE-2026-60071.json new file mode 100644 index 0000000000..81696ce42a --- /dev/null +++ b/data/2026/60xxx/CVE-2026-60071.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-60071", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-14T22:09:54.091Z", + "datePublished": "2026-11-10T17:47:10.374Z", + "dateUpdated": "2026-11-10T17:47:10.374Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:47:10.374Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Improper Validation of Specified Quantity in Input", + "cweId": "CWE-1284", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Improper validation of specified quantity in input in the MigTD vsock packet handling for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/60xxx/CVE-2026-60133.json b/data/2026/60xxx/CVE-2026-60133.json new file mode 100644 index 0000000000..fb4e45669a --- /dev/null +++ b/data/2026/60xxx/CVE-2026-60133.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-60133", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-14T22:09:54.080Z", + "datePublished": "2026-11-10T17:47:14.251Z", + "dateUpdated": "2026-11-10T17:47:14.251Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:47:14.251Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Integer Overflow or Wraparound", + "cweId": "CWE-190", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Integer overflow in the MigTD vsock for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.8, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/60xxx/CVE-2026-60138.json b/data/2026/60xxx/CVE-2026-60138.json new file mode 100644 index 0000000000..c716d0d574 --- /dev/null +++ b/data/2026/60xxx/CVE-2026-60138.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-60138", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-14T22:12:36.514Z", + "datePublished": "2026-11-10T17:47:18.447Z", + "dateUpdated": "2026-11-10T17:47:18.447Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:47:18.447Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Use of Out-of-range Pointer Offset", + "cweId": "CWE-823", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use of out-of-range pointer offset in the MigTD's virtio-vsock implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 8.4, + "baseSeverity": "HIGH", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/60xxx/CVE-2026-60139.json b/data/2026/60xxx/CVE-2026-60139.json new file mode 100644 index 0000000000..851abd3ada --- /dev/null +++ b/data/2026/60xxx/CVE-2026-60139.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-60139", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-14T22:09:54.086Z", + "datePublished": "2026-11-10T17:47:22.913Z", + "dateUpdated": "2026-11-10T17:47:22.913Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:47:22.913Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Improper Neutralization", + "cweId": "CWE-707", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Improper neutralization in the MigTD SPDM transport for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 6, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/60xxx/CVE-2026-60141.json b/data/2026/60xxx/CVE-2026-60141.json new file mode 100644 index 0000000000..3b0c402d7e --- /dev/null +++ b/data/2026/60xxx/CVE-2026-60141.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-60141", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-16T22:44:46.404Z", + "datePublished": "2026-11-10T17:47:27.031Z", + "dateUpdated": "2026-11-10T17:47:27.031Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:47:27.031Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Improper Null Termination", + "cweId": "CWE-170", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Metrics Discovery Application Programming Interface", + "versions": [ + { + "version": "before version 1.16.189", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Improper null termination for some Intel(R) Metrics Discovery Application Programming Interface before version 1.16.189 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01565.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01565.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/60xxx/CVE-2026-60142.json b/data/2026/60xxx/CVE-2026-60142.json new file mode 100644 index 0000000000..70c1adf5da --- /dev/null +++ b/data/2026/60xxx/CVE-2026-60142.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-60142", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-15T03:00:03.697Z", + "datePublished": "2026-11-10T17:47:31.218Z", + "dateUpdated": "2026-11-10T17:47:31.218Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:47:31.218Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege, Information Disclosure" + }, + { + "lang": "en", + "description": "Write-what-where Condition", + "cweId": "CWE-123", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Write-what-where condition in the MigTD for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an information disclosure and escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 8.4, + "baseSeverity": "HIGH", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/61xxx/CVE-2026-61377.json b/data/2026/61xxx/CVE-2026-61377.json new file mode 100644 index 0000000000..de8f2fc77d --- /dev/null +++ b/data/2026/61xxx/CVE-2026-61377.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-61377", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-15T03:00:03.700Z", + "datePublished": "2026-11-10T17:47:35.849Z", + "dateUpdated": "2026-11-10T17:47:35.849Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:47:35.849Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Information Disclosure" + }, + { + "lang": "en", + "description": "Sensitive Information in Resource Not Removed Before Reuse", + "cweId": "CWE-226", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Sensitive information uncleared in resource before release for reuse in the MigTD for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/61xxx/CVE-2026-61383.json b/data/2026/61xxx/CVE-2026-61383.json new file mode 100644 index 0000000000..2104624614 --- /dev/null +++ b/data/2026/61xxx/CVE-2026-61383.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-61383", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-16T03:00:02.877Z", + "datePublished": "2026-11-10T17:47:40.111Z", + "dateUpdated": "2026-11-10T17:47:40.111Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:47:40.111Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Incorrect Calculation of Buffer Size", + "cweId": "CWE-131", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect calculation of buffer size in the MigTD's servtd_get_quote for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. System software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 2, + "baseSeverity": "LOW", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/61xxx/CVE-2026-61467.json b/data/2026/61xxx/CVE-2026-61467.json new file mode 100644 index 0000000000..cb59ece2a2 --- /dev/null +++ b/data/2026/61xxx/CVE-2026-61467.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-61467", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-21T03:00:03.907Z", + "datePublished": "2026-11-10T17:47:44.385Z", + "dateUpdated": "2026-11-10T17:47:44.385Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:47:44.385Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Use After Free", + "cweId": "CWE-416", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use after free in the MigTD virtio driver for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/61xxx/CVE-2026-61468.json b/data/2026/61xxx/CVE-2026-61468.json new file mode 100644 index 0000000000..7e72466748 --- /dev/null +++ b/data/2026/61xxx/CVE-2026-61468.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-61468", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-14T22:12:36.559Z", + "datePublished": "2026-11-10T17:47:48.484Z", + "dateUpdated": "2026-11-10T17:47:48.484Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:47:48.484Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Information Disclosure" + }, + { + "lang": "en", + "description": "Improper Privilege Management", + "cweId": "CWE-269", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Improper privilege management in the MigTD logging for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/61xxx/CVE-2026-61469.json b/data/2026/61xxx/CVE-2026-61469.json new file mode 100644 index 0000000000..3045470c78 --- /dev/null +++ b/data/2026/61xxx/CVE-2026-61469.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-61469", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-15T03:00:03.693Z", + "datePublished": "2026-11-10T17:47:53.863Z", + "dateUpdated": "2026-11-10T17:47:53.863Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:47:53.863Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Off-by-one Error", + "cweId": "CWE-193", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Off-by-one error in the MigTD's vmcall_raw transport for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. System software adversary with an unauthenticated user combined with a low complexity attack may enable data corruption. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/61xxx/CVE-2026-61470.json b/data/2026/61xxx/CVE-2026-61470.json new file mode 100644 index 0000000000..2f8aa8cf41 --- /dev/null +++ b/data/2026/61xxx/CVE-2026-61470.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-61470", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-16T03:00:02.872Z", + "datePublished": "2026-11-10T17:47:58.054Z", + "dateUpdated": "2026-11-10T17:47:58.054Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:47:58.054Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Improper Control of a Resource Through its Lifetime", + "cweId": "CWE-664", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Improper control of a resource through its lifetime in the MigTD's TLS client for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable data corruption. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/61xxx/CVE-2026-61473.json b/data/2026/61xxx/CVE-2026-61473.json new file mode 100644 index 0000000000..6140c1bcdf --- /dev/null +++ b/data/2026/61xxx/CVE-2026-61473.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-61473", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-14T22:12:36.518Z", + "datePublished": "2026-11-10T17:48:02.255Z", + "dateUpdated": "2026-11-10T17:48:02.255Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:48:02.255Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Authentication Bypass by Capture-replay", + "cweId": "CWE-294", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Authentication bypass by capture-replay in the MigTD for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 9.2, + "baseSeverity": "CRITICAL", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/61xxx/CVE-2026-61887.json b/data/2026/61xxx/CVE-2026-61887.json new file mode 100644 index 0000000000..e0bd45ba0c --- /dev/null +++ b/data/2026/61xxx/CVE-2026-61887.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-61887", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-14T22:09:54.089Z", + "datePublished": "2026-11-10T17:48:06.439Z", + "dateUpdated": "2026-11-10T17:48:06.439Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:48:06.439Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege, Information Disclosure" + }, + { + "lang": "en", + "description": "Missing Critical Step in Authentication", + "cweId": "CWE-304", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Missing critical step in authentication in the MigTD SPDM rebind implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege and information disclosure. Network adversary with an unauthenticated user combined with a low complexity attack may enable remote code execution. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 9.4, + "baseSeverity": "CRITICAL", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/62xxx/CVE-2026-62275.json b/data/2026/62xxx/CVE-2026-62275.json new file mode 100644 index 0000000000..2914dd61ad --- /dev/null +++ b/data/2026/62xxx/CVE-2026-62275.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-62275", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-15T03:00:03.708Z", + "datePublished": "2026-11-10T17:48:10.617Z", + "dateUpdated": "2026-11-10T17:48:10.617Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:48:10.617Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege" + }, + { + "lang": "en", + "description": "Detection of Error Condition Without Action", + "cweId": "CWE-390", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Detection of error condition without action in the MigTD's vmcall_raw transport for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.6, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/62xxx/CVE-2026-62920.json b/data/2026/62xxx/CVE-2026-62920.json new file mode 100644 index 0000000000..b069098426 --- /dev/null +++ b/data/2026/62xxx/CVE-2026-62920.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-62920", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-14T22:12:36.508Z", + "datePublished": "2026-11-10T17:48:14.798Z", + "dateUpdated": "2026-11-10T17:48:14.798Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:48:14.798Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Unchecked Return Value", + "cweId": "CWE-252", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Unchecked return value in the MigTD error handling for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/62xxx/CVE-2026-62929.json b/data/2026/62xxx/CVE-2026-62929.json new file mode 100644 index 0000000000..dcbee58986 --- /dev/null +++ b/data/2026/62xxx/CVE-2026-62929.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-62929", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-15T03:00:03.711Z", + "datePublished": "2026-11-10T17:48:19.147Z", + "dateUpdated": "2026-11-10T17:48:19.147Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:48:19.147Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Escalation of Privilege, Information Disclosure" + }, + { + "lang": "en", + "description": "Expired Pointer Dereference", + "cweId": "CWE-825", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Expired pointer dereference in the MigTD's virtio-vsock implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege and information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 8.4, + "baseSeverity": "HIGH", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/62xxx/CVE-2026-62930.json b/data/2026/62xxx/CVE-2026-62930.json new file mode 100644 index 0000000000..e34f3fb3d0 --- /dev/null +++ b/data/2026/62xxx/CVE-2026-62930.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-62930", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-16T03:00:02.891Z", + "datePublished": "2026-11-10T17:48:23.237Z", + "dateUpdated": "2026-11-10T17:48:23.237Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:48:23.237Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Unchecked Return Value", + "cweId": "CWE-252", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Unchecked return value in the MigTD's TLS implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/63xxx/CVE-2026-63018.json b/data/2026/63xxx/CVE-2026-63018.json new file mode 100644 index 0000000000..f2cb277dac --- /dev/null +++ b/data/2026/63xxx/CVE-2026-63018.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-63018", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-16T22:44:46.400Z", + "datePublished": "2026-11-10T17:48:27.589Z", + "dateUpdated": "2026-11-10T17:48:27.589Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:48:27.589Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Integer Underflow (Wrap or Wraparound)", + "cweId": "CWE-191", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) Metrics Discovery Application Programming Interface software", + "versions": [ + { + "version": "before version 1.16.189", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Integer underflow (wrap or wraparound) for some Intel(R) Metrics Discovery Application Programming Interface software before version 1.16.189 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01565.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01565.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/63xxx/CVE-2026-63027.json b/data/2026/63xxx/CVE-2026-63027.json new file mode 100644 index 0000000000..2a2bcbbf2b --- /dev/null +++ b/data/2026/63xxx/CVE-2026-63027.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-63027", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-16T22:45:23.626Z", + "datePublished": "2026-11-10T17:48:32.030Z", + "dateUpdated": "2026-11-10T17:48:32.030Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:48:32.030Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Incorrect Behavior Order", + "cweId": "CWE-696", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect behavior order in the get_tcb_level_by_svn for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/63xxx/CVE-2026-63028.json b/data/2026/63xxx/CVE-2026-63028.json new file mode 100644 index 0000000000..b826d85930 --- /dev/null +++ b/data/2026/63xxx/CVE-2026-63028.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-63028", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-16T22:44:46.378Z", + "datePublished": "2026-11-10T17:48:36.379Z", + "dateUpdated": "2026-11-10T17:48:36.379Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:48:36.379Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Improper Initialization", + "cweId": "CWE-665", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Intel(R) TDX Migration Trust Domain (MigTD)", + "versions": [ + { + "version": "See references", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Improper initialization in the MigTD virtio-vsock stream handling for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. System software adversary with an unauthenticated user combined with a low complexity attack may enable data corruption. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01580.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/63xxx/CVE-2026-63540.json b/data/2026/63xxx/CVE-2026-63540.json new file mode 100644 index 0000000000..9a14ecbb52 --- /dev/null +++ b/data/2026/63xxx/CVE-2026-63540.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-63540", + "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "state": "PUBLISHED", + "assignerShortName": "intel", + "dateReserved": "2026-07-21T03:00:03.898Z", + "datePublished": "2026-11-10T17:48:40.945Z", + "dateUpdated": "2026-11-10T17:48:40.945Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", + "shortName": "intel", + "dateUpdated": "2026-11-10T17:48:40.945Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Denial of Service" + }, + { + "lang": "en", + "description": "Heap-based Buffer Overflow", + "cweId": "CWE-122", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "n/a", + "product": "Hyperscan", + "versions": [ + { + "version": "before version v5.4.2.1", + "status": "affected" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Heap-based buffer overflow for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts." + } + ], + "references": [ + { + "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01511.html", + "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01511.html" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "version": "4.0", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/66xxx/CVE-2026-66293.json b/data/2026/66xxx/CVE-2026-66293.json index 7ef1cacdd4..150b87d0ef 100644 --- a/data/2026/66xxx/CVE-2026-66293.json +++ b/data/2026/66xxx/CVE-2026-66293.json @@ -8,7 +8,7 @@ "assignerShortName": "EEF", "dateReserved": "2026-07-24T14:10:01.114Z", "datePublished": "2026-11-06T10:16:42.053Z", - "dateUpdated": "2026-11-06T10:16:42.053Z" + "dateUpdated": "2026-11-10T17:42:24.114Z" }, "containers": { "cna": { @@ -304,6 +304,40 @@ "value": "Reject or rewrite the -- sequence in untrusted text before passing it to Saxy.XML.comment/1, for example by replacing -- with - -.\n\nAlternatively, stop emitting untrusted data as XML comments. Comments carry no semantic payload for consumers, so the text can usually be moved into an element or a CDATA section instead." } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:42:07.677044Z", + "id": "CVE-2026-66293", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:42:24.114Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/66xxx/CVE-2026-66294.json b/data/2026/66xxx/CVE-2026-66294.json index 970c96645b..2362b93841 100644 --- a/data/2026/66xxx/CVE-2026-66294.json +++ b/data/2026/66xxx/CVE-2026-66294.json @@ -8,7 +8,7 @@ "assignerShortName": "EEF", "dateReserved": "2026-07-24T14:10:01.114Z", "datePublished": "2026-11-06T10:16:49.656Z", - "dateUpdated": "2026-11-06T10:16:49.656Z" + "dateUpdated": "2026-11-10T17:43:39.205Z" }, "containers": { "cna": { @@ -298,6 +298,40 @@ "value": "Render untrusted text as ordinary character data instead of CDATA, by passing a plain string or Saxy.XML.characters/1 to the element builder. That encoder path escapes the XML metacharacters and preserves the same text content.\n\nIf a CDATA section is required, split the terminator in application code before building the node: replace every occurrence of ]]> in the untrusted text with ]]]]> and pass the result to Saxy.XML.cdata/1. Once the encoder wraps that payload, the output is the standard split encoding." } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:43:23.760979Z", + "id": "CVE-2026-66294", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:43:39.205Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/66xxx/CVE-2026-66295.json b/data/2026/66xxx/CVE-2026-66295.json index b0c283ae97..472f23d5e0 100644 --- a/data/2026/66xxx/CVE-2026-66295.json +++ b/data/2026/66xxx/CVE-2026-66295.json @@ -8,7 +8,7 @@ "assignerShortName": "EEF", "dateReserved": "2026-07-24T14:10:01.114Z", "datePublished": "2026-11-06T10:16:45.577Z", - "dateUpdated": "2026-11-06T10:16:45.577Z" + "dateUpdated": "2026-11-10T17:43:03.747Z" }, "containers": { "cna": { @@ -310,6 +310,40 @@ "value": "Do not place untrusted data in processing instructions. Where a dynamic value is unavoidable, validate it before building the node: reject any content containing ?>, and reject any target that does not match the XML Name production or that equals xml case-insensitively. Alternatively, carry the value in element content or an attribute instead, both of which the encoder escapes." } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:42:52.953846Z", + "id": "CVE-2026-66295", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:43:03.747Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/66xxx/CVE-2026-66297.json b/data/2026/66xxx/CVE-2026-66297.json index a52da2301c..08d88c1bd0 100644 --- a/data/2026/66xxx/CVE-2026-66297.json +++ b/data/2026/66xxx/CVE-2026-66297.json @@ -8,7 +8,7 @@ "assignerShortName": "EEF", "dateReserved": "2026-07-24T14:10:01.114Z", "datePublished": "2026-08-05T19:43:58.068Z", - "dateUpdated": "2026-08-06T13:04:30.860Z" + "dateUpdated": "2026-11-10T17:28:38.470Z" }, "containers": { "cna": { @@ -63,7 +63,7 @@ "Elixir.LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent" ], "packageName": "livebook-dev/livebook", - "packageURL": "pkg:oci/livebook?repository_url=ghcr.io%2Flivebook-dev", + "packageURL": "pkg:oci/livebook?repository_url=ghcr.io%2Flivebook-dev%2Flivebook", "product": "livebook", "programFiles": [ "lib/livebook_web/live/hub/teams/deployment_group_agent_component.ex" @@ -84,18 +84,18 @@ "version": "0.13.0", "versionType": "other" }, - { - "lessThan": "0.19.9", - "status": "affected", - "version": "0.19.0", - "versionType": "other" - }, { "lessThan": "0.18.7-cuda12", "status": "affected", "version": "0.13.0-cuda12", "versionType": "other" }, + { + "lessThan": "0.19.9", + "status": "affected", + "version": "0.19.0", + "versionType": "other" + }, { "lessThan": "0.19.9-cuda12", "status": "affected", @@ -268,7 +268,7 @@ "descriptions": [ { "cweId": "CWE-78", - "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", + "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command", "lang": "en", "type": "CWE" } @@ -278,10 +278,11 @@ "providerMetadata": { "orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "shortName": "EEF", - "dateUpdated": "2026-08-05T19:43:58.068Z" + "dateUpdated": "2026-11-10T17:28:38.470Z" }, "references": [ { + "name": "Unescaped deployment environment variables in generated setup commands", "tags": [ "vendor-advisory", "related" @@ -289,30 +290,42 @@ "url": "https://github.com/livebook-dev/livebook/security/advisories/GHSA-qpjc-w5mm-73mj" }, { + "name": "EEF CNA record for CVE-2026-66297", "tags": [ "related" ], "url": "https://cna.erlef.org/cves/CVE-2026-66297.html" }, { + "name": "OSV record EEF-CVE-2026-66297", "tags": [ "related" ], "url": "https://osv.dev/vulnerability/EEF-CVE-2026-66297" }, { + "name": "Introducing commit 7cf4af5 in livebook-dev/livebook", + "tags": [ + "related" + ], + "url": "https://github.com/livebook-dev/livebook/commit/7cf4af5c10ec645f55a10f30e5661c54f6a6b319" + }, + { + "name": "Fix commit b2a8416 in livebook-dev/livebook", "tags": [ "patch" ], "url": "https://github.com/livebook-dev/livebook/commit/b2a8416d149043132fe5a14ed611e0fefc9dc9cd" }, { + "name": "Fix commit 0c24873 in livebook-dev/livebook", "tags": [ "patch" ], "url": "https://github.com/livebook-dev/livebook/commit/0c2487326bbb37cb1eb43bb2f76eb93ad9f8fd6b" }, { + "name": "Fix commit f8fe9c6 in livebook-dev/livebook", "tags": [ "patch" ], diff --git a/data/2026/66xxx/CVE-2026-66298.json b/data/2026/66xxx/CVE-2026-66298.json index 4451c0c32e..a7faa90769 100644 --- a/data/2026/66xxx/CVE-2026-66298.json +++ b/data/2026/66xxx/CVE-2026-66298.json @@ -8,7 +8,7 @@ "assignerShortName": "EEF", "dateReserved": "2026-07-24T14:10:01.114Z", "datePublished": "2026-08-05T19:44:11.831Z", - "dateUpdated": "2026-08-06T13:08:23.940Z" + "dateUpdated": "2026-11-10T17:27:49.021Z" }, "containers": { "cna": { @@ -63,7 +63,7 @@ "Elixir.LivebookWeb.SessionLive" ], "packageName": "livebook-dev/livebook", - "packageURL": "pkg:oci/livebook?repository_url=ghcr.io%2Flivebook-dev", + "packageURL": "pkg:oci/livebook?repository_url=ghcr.io%2Flivebook-dev%2Flivebook", "product": "livebook", "programFiles": [ "iframe/priv/static/iframe/v5.html", @@ -84,18 +84,18 @@ "version": "0.5.0", "versionType": "other" }, - { - "lessThan": "0.19.9", - "status": "affected", - "version": "0.19.0", - "versionType": "other" - }, { "lessThan": "0.18.7-cuda12", "status": "affected", "version": "0.5.0-cuda12", "versionType": "other" }, + { + "lessThan": "0.19.9", + "status": "affected", + "version": "0.19.0", + "versionType": "other" + }, { "lessThan": "0.19.9-cuda12", "status": "affected", @@ -278,10 +278,11 @@ "providerMetadata": { "orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "shortName": "EEF", - "dateUpdated": "2026-08-05T19:44:11.831Z" + "dateUpdated": "2026-11-10T17:27:49.021Z" }, "references": [ { + "name": "JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts (forced full evaluation / runtime restart)", "tags": [ "vendor-advisory", "related" @@ -289,30 +290,42 @@ "url": "https://github.com/livebook-dev/livebook/security/advisories/GHSA-68c2-prqg-x62g" }, { + "name": "EEF CNA record for CVE-2026-66298", "tags": [ "related" ], "url": "https://cna.erlef.org/cves/CVE-2026-66298.html" }, { + "name": "OSV record EEF-CVE-2026-66298", "tags": [ "related" ], "url": "https://osv.dev/vulnerability/EEF-CVE-2026-66298" }, { + "name": "Introducing commit 844242b in livebook-dev/livebook", + "tags": [ + "related" + ], + "url": "https://github.com/livebook-dev/livebook/commit/844242ba80a928d0d675416d312a58003cb7771b" + }, + { + "name": "Fix commit 296318f in livebook-dev/livebook", "tags": [ "patch" ], "url": "https://github.com/livebook-dev/livebook/commit/296318ffdfa6e5ed7b18ad8d5a5b2af90f3cd728" }, { + "name": "Fix commit a552ce8 in livebook-dev/livebook", "tags": [ "patch" ], "url": "https://github.com/livebook-dev/livebook/commit/a552ce8f99ad348ea37061394dc950a0cebdb33e" }, { + "name": "Fix commit 5980e5c in livebook-dev/livebook", "tags": [ "patch" ], diff --git a/data/2026/66xxx/CVE-2026-66881.json b/data/2026/66xxx/CVE-2026-66881.json index 1b899774b3..3b27c2e8eb 100644 --- a/data/2026/66xxx/CVE-2026-66881.json +++ b/data/2026/66xxx/CVE-2026-66881.json @@ -8,7 +8,7 @@ "assignerShortName": "EEF", "dateReserved": "2026-07-28T04:15:10.239Z", "datePublished": "2026-08-05T19:43:48.812Z", - "dateUpdated": "2026-08-06T13:03:45.814Z" + "dateUpdated": "2026-11-10T17:26:44.453Z" }, "containers": { "cna": { @@ -75,7 +75,7 @@ "Elixir.Livebook.FileSystem.Utils" ], "packageName": "livebook-dev/livebook", - "packageURL": "pkg:oci/livebook?repository_url=ghcr.io%2Flivebook-dev", + "packageURL": "pkg:oci/livebook?repository_url=ghcr.io%2Flivebook-dev%2Flivebook", "product": "livebook", "programFiles": [ "lib/livebook/live_markdown/import.ex", @@ -104,18 +104,18 @@ "version": "0.11.0", "versionType": "other" }, - { - "lessThan": "0.19.9", - "status": "affected", - "version": "0.19.0", - "versionType": "other" - }, { "lessThan": "0.18.7-cuda12", "status": "affected", "version": "0.11.0-cuda12", "versionType": "other" }, + { + "lessThan": "0.19.9", + "status": "affected", + "version": "0.19.0", + "versionType": "other" + }, { "lessThan": "0.19.9-cuda12", "status": "affected", @@ -308,10 +308,11 @@ "providerMetadata": { "orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "shortName": "EEF", - "dateUpdated": "2026-08-05T19:43:48.812Z" + "dateUpdated": "2026-11-10T17:26:44.453Z" }, "references": [ { + "name": "Path traversal via unsanitized file_entries name on notebook import (arbitrary local file write)", "tags": [ "vendor-advisory", "related" @@ -319,30 +320,42 @@ "url": "https://github.com/livebook-dev/livebook/security/advisories/GHSA-r4h8-2xpq-v48g" }, { + "name": "EEF CNA record for CVE-2026-66881", "tags": [ "related" ], "url": "https://cna.erlef.org/cves/CVE-2026-66881.html" }, { + "name": "OSV record EEF-CVE-2026-66881", "tags": [ "related" ], "url": "https://osv.dev/vulnerability/EEF-CVE-2026-66881" }, { + "name": "Introducing commit c02eb98 in livebook-dev/livebook", + "tags": [ + "related" + ], + "url": "https://github.com/livebook-dev/livebook/commit/c02eb984f80a543c7a52b1d882c76f56aa5be743" + }, + { + "name": "Fix commit 1443dd2 in livebook-dev/livebook", "tags": [ "patch" ], "url": "https://github.com/livebook-dev/livebook/commit/1443dd23df6e7b9203b6797f0695a807aeb81dde" }, { + "name": "Fix commit acf4cb8 in livebook-dev/livebook", "tags": [ "patch" ], "url": "https://github.com/livebook-dev/livebook/commit/acf4cb8c0c79b89c795b180f061be7de2d8b5aa9" }, { + "name": "Fix commit 50f8698 in livebook-dev/livebook", "tags": [ "patch" ], diff --git a/data/2026/66xxx/CVE-2026-66885.json b/data/2026/66xxx/CVE-2026-66885.json index 142fad6907..7c6d1b62df 100644 --- a/data/2026/66xxx/CVE-2026-66885.json +++ b/data/2026/66xxx/CVE-2026-66885.json @@ -8,7 +8,7 @@ "assignerShortName": "EEF", "dateReserved": "2026-07-28T04:15:10.240Z", "datePublished": "2026-08-05T19:44:23.834Z", - "dateUpdated": "2026-08-06T13:09:29.359Z" + "dateUpdated": "2026-11-10T17:25:33.237Z" }, "containers": { "cna": { @@ -66,7 +66,7 @@ "Elixir.Livebook.Teams.Requests" ], "packageName": "livebook-dev/livebook", - "packageURL": "pkg:oci/livebook?repository_url=ghcr.io%2Flivebook-dev", + "packageURL": "pkg:oci/livebook?repository_url=ghcr.io%2Flivebook-dev%2Flivebook", "product": "livebook", "programFiles": [ "lib/livebook/zta/livebook_teams.ex", @@ -88,18 +88,18 @@ "version": "0.15.0", "versionType": "other" }, - { - "lessThan": "0.19.9", - "status": "affected", - "version": "0.19.0", - "versionType": "other" - }, { "lessThan": "0.18.7-cuda12", "status": "affected", "version": "0.15.0-cuda12", "versionType": "other" }, + { + "lessThan": "0.19.9", + "status": "affected", + "version": "0.19.0", + "versionType": "other" + }, { "lessThan": "0.19.9-cuda12", "status": "affected", @@ -274,7 +274,7 @@ "descriptions": [ { "cweId": "CWE-352", - "description": "CWE-352 Cross-Site Request Forgery (CSRF)", + "description": "CWE-352 Cross-Site Request Forgery", "lang": "en", "type": "CWE" } @@ -284,10 +284,11 @@ "providerMetadata": { "orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "shortName": "EEF", - "dateUpdated": "2026-08-05T19:44:23.834Z" + "dateUpdated": "2026-11-10T17:25:33.237Z" }, "references": [ { + "name": "Livebook Teams Identity OAuth-style callback has no state/nonce binding, enabling login CSRF", "tags": [ "vendor-advisory", "related" @@ -295,30 +296,42 @@ "url": "https://github.com/livebook-dev/livebook/security/advisories/GHSA-pvvw-28fw-c6fg" }, { + "name": "EEF CNA record for CVE-2026-66885", "tags": [ "related" ], "url": "https://cna.erlef.org/cves/CVE-2026-66885.html" }, { + "name": "OSV record EEF-CVE-2026-66885", "tags": [ "related" ], "url": "https://osv.dev/vulnerability/EEF-CVE-2026-66885" }, { + "name": "Introducing commit 4380a41 in livebook-dev/livebook", + "tags": [ + "related" + ], + "url": "https://github.com/livebook-dev/livebook/commit/4380a411920531223088267ed1c0ad21f96ef660" + }, + { + "name": "Fix commit 21c1616 in livebook-dev/livebook", "tags": [ "patch" ], "url": "https://github.com/livebook-dev/livebook/commit/21c16168263275541a6e076d0c31852c40e09a18" }, { + "name": "Fix commit 33a052d in livebook-dev/livebook", "tags": [ "patch" ], "url": "https://github.com/livebook-dev/livebook/commit/33a052daa386c4ce08a9c39a07fc90f353ff6a51" }, { + "name": "Fix commit 6ed2e21 in livebook-dev/livebook", "tags": [ "patch" ], diff --git a/data/2026/68xxx/CVE-2026-68524.json b/data/2026/68xxx/CVE-2026-68524.json index 46581e2678..26b7d6b5be 100644 --- a/data/2026/68xxx/CVE-2026-68524.json +++ b/data/2026/68xxx/CVE-2026-68524.json @@ -8,7 +8,7 @@ "assignerShortName": "apache", "dateReserved": "2026-07-30T16:38:58.984Z", "datePublished": "2026-11-05T14:11:35.683Z", - "dateUpdated": "2026-11-05T14:11:35.683Z" + "dateUpdated": "2026-11-10T17:01:18.681Z" }, "containers": { "cna": { @@ -95,6 +95,56 @@ "x_generator": { "engine": "Vulnogram 0.2.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7.5, + "attackVector": "NETWORK", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:01:12.782549Z", + "id": "CVE-2026-68524", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:01:18.681Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/68xxx/CVE-2026-68746.json b/data/2026/68xxx/CVE-2026-68746.json index cfd49af352..e6108b65fc 100644 --- a/data/2026/68xxx/CVE-2026-68746.json +++ b/data/2026/68xxx/CVE-2026-68746.json @@ -8,7 +8,7 @@ "assignerShortName": "EEF", "dateReserved": "2026-07-31T13:23:00.354Z", "datePublished": "2026-08-05T19:43:38.188Z", - "dateUpdated": "2026-08-06T14:48:46.790Z" + "dateUpdated": "2026-11-10T17:22:57.901Z" }, "containers": { "cna": { @@ -72,7 +72,7 @@ "Elixir.LivebookWeb.AuthPlug" ], "packageName": "livebook-dev/livebook", - "packageURL": "pkg:oci/livebook?repository_url=ghcr.io%2Flivebook-dev", + "packageURL": "pkg:oci/livebook?repository_url=ghcr.io%2Flivebook-dev%2Flivebook", "product": "livebook", "programFiles": [ "lib/livebook/hubs/team_client.ex", @@ -152,24 +152,22 @@ "vendor": "livebook-dev", "versions": [ { - "changes": [ - { - "at": "d374e90647edbb00286bfee9182c0161d29a8e07", - "status": "unaffected" - }, - { - "at": "d6d0dfa746b172540442852f74de4a9deacc433b", - "status": "unaffected" - }, - { - "at": "2d3a2c710c880abd24a2bc888d3cf5239d98cf72", - "status": "unaffected" - } - ], - "lessThan": "*", + "lessThan": "2d3a2c710c880abd24a2bc888d3cf5239d98cf72", "status": "affected", "version": "fc2c87c6b0276705281842acbe17142d1ac4d555", "versionType": "git" + }, + { + "lessThan": "d374e90647edbb00286bfee9182c0161d29a8e07", + "status": "affected", + "version": "6592a0faf973943a3c8de5e9871a4c9493d78671", + "versionType": "git" + }, + { + "lessThan": "d6d0dfa746b172540442852f74de4a9deacc433b", + "status": "affected", + "version": "82e0b8009a59298dbad8638e01dbc9b0d7798353", + "versionType": "git" } ] } @@ -301,7 +299,7 @@ "descriptions": [ { "cweId": "CWE-636", - "description": "CWE-636 Not Failing Securely ('Failing Open')", + "description": "CWE-636 Not Failing Securely", "lang": "en", "type": "CWE" } @@ -311,10 +309,11 @@ "providerMetadata": { "orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "shortName": "EEF", - "dateUpdated": "2026-08-05T19:43:38.188Z" + "dateUpdated": "2026-11-10T17:22:57.901Z" }, "references": [ { + "name": "Livebook Teams Identity fails open to full unauthenticated access after a deployment group becomes unresolvable in the agent local cache", "tags": [ "vendor-advisory", "related" @@ -322,30 +321,56 @@ "url": "https://github.com/livebook-dev/livebook/security/advisories/GHSA-74j5-6grg-g6wj" }, { + "name": "EEF CNA record for CVE-2026-68746", "tags": [ "related" ], "url": "https://cna.erlef.org/cves/CVE-2026-68746.html" }, { + "name": "OSV record EEF-CVE-2026-68746", "tags": [ "related" ], "url": "https://osv.dev/vulnerability/EEF-CVE-2026-68746" }, { + "name": "Introducing commit fc2c87c in livebook-dev/livebook", + "tags": [ + "related" + ], + "url": "https://github.com/livebook-dev/livebook/commit/fc2c87c6b0276705281842acbe17142d1ac4d555" + }, + { + "name": "Introducing commit 6592a0f in livebook-dev/livebook", + "tags": [ + "related" + ], + "url": "https://github.com/livebook-dev/livebook/commit/6592a0faf973943a3c8de5e9871a4c9493d78671" + }, + { + "name": "Introducing commit 82e0b80 in livebook-dev/livebook", + "tags": [ + "related" + ], + "url": "https://github.com/livebook-dev/livebook/commit/82e0b8009a59298dbad8638e01dbc9b0d7798353" + }, + { + "name": "Fix commit d374e90 in livebook-dev/livebook", "tags": [ "patch" ], "url": "https://github.com/livebook-dev/livebook/commit/d374e90647edbb00286bfee9182c0161d29a8e07" }, { + "name": "Fix commit d6d0dfa in livebook-dev/livebook", "tags": [ "patch" ], "url": "https://github.com/livebook-dev/livebook/commit/d6d0dfa746b172540442852f74de4a9deacc433b" }, { + "name": "Fix commit 2d3a2c7 in livebook-dev/livebook", "tags": [ "patch" ], diff --git a/data/2026/72xxx/CVE-2026-72493.json b/data/2026/72xxx/CVE-2026-72493.json index 14dad5d0e3..43206d6d93 100644 --- a/data/2026/72xxx/CVE-2026-72493.json +++ b/data/2026/72xxx/CVE-2026-72493.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-08-09T03:40:39.937Z", "datePublished": "2026-08-15T05:57:27.642Z", - "dateUpdated": "2026-10-21T12:45:02.169Z" + "dateUpdated": "2026-11-10T17:36:15.589Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-21T12:45:02.169Z" + "dateUpdated": "2026-11-10T17:36:15.589Z" }, "descriptions": [ { @@ -50,94 +50,28 @@ ], "versions": [ { - "version": "e9e4dd3267d0c5234c5c0f47440456b10875dec9", + "version": "95e48d862ada73188be6d91a33c49d1712815bd2", "lessThan": "cbe10ea090ea9d6fa5ff50c9b44f2a86fe56f0b7", "status": "affected", "versionType": "git" }, { - "version": "e9e4dd3267d0c5234c5c0f47440456b10875dec9", + "version": "95e48d862ada73188be6d91a33c49d1712815bd2", "lessThan": "b422e3eff0edf0975de4883929adbed28f9d08bc", "status": "affected", "versionType": "git" }, { - "version": "e9e4dd3267d0c5234c5c0f47440456b10875dec9", + "version": "95e48d862ada73188be6d91a33c49d1712815bd2", "lessThan": "2fface6e0bbd6314d1d9d071abf2c4d67548511c", "status": "affected", "versionType": "git" }, { - "version": "e9e4dd3267d0c5234c5c0f47440456b10875dec9", + "version": "95e48d862ada73188be6d91a33c49d1712815bd2", "lessThan": "46762cefe7f4e5bffc1eb467810a7bbb02e461d7", "status": "affected", "versionType": "git" - }, - { - "version": "78b6803a1961369d0b8350ff1f99b7375bbd7a8f", - "status": "affected", - "versionType": "git" - }, - { - "version": "b5d73d9cdd6be22795499890ea928a6f57ef829c", - "status": "affected", - "versionType": "git" - }, - { - "version": "f6533fed1bfa842e391ee50f9a9c5e963c71e579", - "status": "affected", - "versionType": "git" - }, - { - "version": "2095ab2456da766174cda8bc105d7a7b1bc70e16", - "status": "affected", - "versionType": "git" - }, - { - "version": "f1fdb184aefa8447560e3ea0e605171592ffee41", - "status": "affected", - "versionType": "git" - }, - { - "version": "f75c8a3015422128ca150e81c730bc2a471b5f4a", - "status": "affected", - "versionType": "git" - }, - { - "version": "3.2.71", - "lessThan": "3.3", - "status": "affected", - "versionType": "semver" - }, - { - "version": "3.4.111", - "lessThan": "3.5", - "status": "affected", - "versionType": "semver" - }, - { - "version": "3.12.48", - "lessThan": "3.13", - "status": "affected", - "versionType": "semver" - }, - { - "version": "3.14.54", - "lessThan": "3.15", - "status": "affected", - "versionType": "semver" - }, - { - "version": "3.18.22", - "lessThan": "3.19", - "status": "affected", - "versionType": "semver" - }, - { - "version": "4.1.9", - "lessThan": "4.2", - "status": "affected", - "versionType": "semver" } ] }, @@ -151,12 +85,12 @@ ], "versions": [ { - "version": "4.2", + "version": "6.10", "status": "affected" }, { "version": "0", - "lessThan": "4.2", + "lessThan": "6.10", "status": "unaffected", "versionType": "semver" }, @@ -197,56 +131,26 @@ { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", - "versionStartIncluding": "4.2", + "versionStartIncluding": "6.10", "versionEndExcluding": "6.12.114" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", - "versionStartIncluding": "4.2", + "versionStartIncluding": "6.10", "versionEndExcluding": "6.18.57" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", - "versionStartIncluding": "4.2", + "versionStartIncluding": "6.10", "versionEndExcluding": "7.1.5" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", - "versionStartIncluding": "4.2", + "versionStartIncluding": "6.10", "versionEndExcluding": "7.2" - }, - { - "vulnerable": true, - "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", - "versionStartIncluding": "3.2.71" - }, - { - "vulnerable": true, - "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", - "versionStartIncluding": "3.4.111" - }, - { - "vulnerable": true, - "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", - "versionStartIncluding": "3.12.48" - }, - { - "vulnerable": true, - "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", - "versionStartIncluding": "3.14.54" - }, - { - "vulnerable": true, - "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", - "versionStartIncluding": "3.18.22" - }, - { - "vulnerable": true, - "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", - "versionStartIncluding": "4.1.9" } ] } diff --git a/data/2026/73xxx/CVE-2026-73577.json b/data/2026/73xxx/CVE-2026-73577.json index f6ae900141..e85937a388 100644 --- a/data/2026/73xxx/CVE-2026-73577.json +++ b/data/2026/73xxx/CVE-2026-73577.json @@ -8,7 +8,7 @@ "assignerShortName": "apache", "dateReserved": "2026-08-13T06:22:26.082Z", "datePublished": "2026-11-05T14:11:06.966Z", - "dateUpdated": "2026-11-05T14:11:06.966Z" + "dateUpdated": "2026-11-10T17:00:39.063Z" }, "containers": { "cna": { @@ -100,6 +100,56 @@ "x_generator": { "engine": "Vulnogram 1.0.3" } - } + }, + "adp": [ + { + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7.5, + "attackVector": "NETWORK", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:00:33.218892Z", + "id": "CVE-2026-73577", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:00:39.063Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/73xxx/CVE-2026-73578.json b/data/2026/73xxx/CVE-2026-73578.json index efb657a867..336d89bff8 100644 --- a/data/2026/73xxx/CVE-2026-73578.json +++ b/data/2026/73xxx/CVE-2026-73578.json @@ -8,7 +8,7 @@ "assignerShortName": "apache", "dateReserved": "2026-08-13T07:03:41.998Z", "datePublished": "2026-11-05T14:10:39.024Z", - "dateUpdated": "2026-11-05T14:10:39.024Z" + "dateUpdated": "2026-11-10T16:59:20.542Z" }, "containers": { "cna": { @@ -100,6 +100,56 @@ "x_generator": { "engine": "Vulnogram 1.0.3" } - } + }, + "adp": [ + { + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7.5, + "attackVector": "NETWORK", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:59:16.862892Z", + "id": "CVE-2026-73578", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T16:59:20.542Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/73xxx/CVE-2026-73580.json b/data/2026/73xxx/CVE-2026-73580.json index b5d12eedaa..a47ea635ab 100644 --- a/data/2026/73xxx/CVE-2026-73580.json +++ b/data/2026/73xxx/CVE-2026-73580.json @@ -8,7 +8,7 @@ "assignerShortName": "apache", "dateReserved": "2026-08-13T07:26:39.294Z", "datePublished": "2026-11-05T14:10:09.376Z", - "dateUpdated": "2026-11-05T14:10:09.376Z" + "dateUpdated": "2026-11-10T16:58:35.021Z" }, "containers": { "cna": { @@ -124,6 +124,56 @@ "x_generator": { "engine": "Vulnogram 1.0.3" } - } + }, + "adp": [ + { + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 5.3, + "attackVector": "NETWORK", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "NONE", + "confidentialityImpact": "LOW" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:58:09.462310Z", + "id": "CVE-2026-73580", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T16:58:35.021Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/76xxx/CVE-2026-76185.json b/data/2026/76xxx/CVE-2026-76185.json index 7070f6bbb1..0c83896a9f 100644 --- a/data/2026/76xxx/CVE-2026-76185.json +++ b/data/2026/76xxx/CVE-2026-76185.json @@ -8,7 +8,7 @@ "assignerShortName": "apache", "dateReserved": "2026-08-19T10:41:07.241Z", "datePublished": "2026-11-09T09:53:57.995Z", - "dateUpdated": "2026-11-09T13:05:16.726Z" + "dateUpdated": "2026-11-10T17:22:57.031Z" }, "containers": { "cna": { @@ -86,7 +86,7 @@ "providerMetadata": { "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "shortName": "apache", - "dateUpdated": "2026-11-09T13:05:16.726Z" + "dateUpdated": "2026-11-10T17:22:57.031Z" }, "references": [ { diff --git a/data/2026/81xxx/CVE-2026-81808.json b/data/2026/81xxx/CVE-2026-81808.json index db39251de5..8a60589788 100644 --- a/data/2026/81xxx/CVE-2026-81808.json +++ b/data/2026/81xxx/CVE-2026-81808.json @@ -8,7 +8,7 @@ "assignerShortName": "apache", "dateReserved": "2026-08-27T12:30:08.494Z", "datePublished": "2026-11-05T14:07:19.063Z", - "dateUpdated": "2026-11-05T14:07:19.063Z" + "dateUpdated": "2026-11-10T17:18:35.882Z" }, "containers": { "cna": { @@ -114,6 +114,56 @@ "x_generator": { "engine": "Vulnogram 1.0.3" } - } + }, + "adp": [ + { + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 6.5, + "attackVector": "NETWORK", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "LOW", + "confidentialityImpact": "NONE" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:18:32.172526Z", + "id": "CVE-2026-81808", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:18:35.882Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/81xxx/CVE-2026-81815.json b/data/2026/81xxx/CVE-2026-81815.json index a0c91e15ec..c6448f5243 100644 --- a/data/2026/81xxx/CVE-2026-81815.json +++ b/data/2026/81xxx/CVE-2026-81815.json @@ -8,7 +8,7 @@ "assignerShortName": "apache", "dateReserved": "2026-08-27T12:50:39.968Z", "datePublished": "2026-11-05T14:06:58.943Z", - "dateUpdated": "2026-11-05T14:06:58.943Z" + "dateUpdated": "2026-11-10T17:17:32.775Z" }, "containers": { "cna": { @@ -114,6 +114,56 @@ "x_generator": { "engine": "Vulnogram 1.0.3" } - } + }, + "adp": [ + { + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 9.8, + "attackVector": "NETWORK", + "baseSeverity": "CRITICAL", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:17:25.550689Z", + "id": "CVE-2026-81815", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:17:32.775Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/81xxx/CVE-2026-81828.json b/data/2026/81xxx/CVE-2026-81828.json index ebccfec927..5d6c16a470 100644 --- a/data/2026/81xxx/CVE-2026-81828.json +++ b/data/2026/81xxx/CVE-2026-81828.json @@ -8,7 +8,7 @@ "assignerShortName": "apache", "dateReserved": "2026-08-27T13:37:54.127Z", "datePublished": "2026-11-05T14:06:07.453Z", - "dateUpdated": "2026-11-05T14:06:07.453Z" + "dateUpdated": "2026-11-10T17:13:35.665Z" }, "containers": { "cna": { @@ -114,6 +114,56 @@ "x_generator": { "engine": "Vulnogram 1.0.3" } - } + }, + "adp": [ + { + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.1, + "attackVector": "NETWORK", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "LOW", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:12:54.949738Z", + "id": "CVE-2026-81828", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:13:35.665Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/82xxx/CVE-2026-82894.json b/data/2026/82xxx/CVE-2026-82894.json index 652738fe24..0c6d10a2b6 100644 --- a/data/2026/82xxx/CVE-2026-82894.json +++ b/data/2026/82xxx/CVE-2026-82894.json @@ -8,7 +8,7 @@ "assignerShortName": "apache", "dateReserved": "2026-08-31T09:15:36.042Z", "datePublished": "2026-11-05T14:05:44.942Z", - "dateUpdated": "2026-11-05T14:05:44.942Z" + "dateUpdated": "2026-11-10T17:08:37.509Z" }, "containers": { "cna": { @@ -119,6 +119,56 @@ "x_generator": { "engine": "Vulnogram 1.0.3" } - } + }, + "adp": [ + { + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7.5, + "attackVector": "NETWORK", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "NONE", + "confidentialityImpact": "NONE" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:07:19.247124Z", + "id": "CVE-2026-82894", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:08:37.509Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/83xxx/CVE-2026-83528.json b/data/2026/83xxx/CVE-2026-83528.json index d8077cd09e..d8d668865c 100644 --- a/data/2026/83xxx/CVE-2026-83528.json +++ b/data/2026/83xxx/CVE-2026-83528.json @@ -8,14 +8,14 @@ "assignerShortName": "ivanti", "dateReserved": "2026-08-31T16:19:07.442Z", "datePublished": "2026-11-10T16:04:37.642Z", - "dateUpdated": "2026-11-10T16:04:37.642Z" + "dateUpdated": "2026-11-10T17:31:04.819Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75", "shortName": "ivanti", - "dateUpdated": "2026-11-10T16:04:37.642Z" + "dateUpdated": "2026-11-10T17:31:04.819Z" }, "problemTypes": [ { @@ -67,12 +67,12 @@ "descriptions": [ { "lang": "en", - "value": "Exposure of PII in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to leak GDPR protected user information.", + "value": "Exposure of PII in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to leak GDPR protected user information.", "supportingMedia": [ { "type": "text/html", "base64": false, - "value": "Exposure of PII in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to leak GDPR protected user information. " + "value": "Exposure of PII in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to leak GDPR protected user information." } ] } diff --git a/data/2026/83xxx/CVE-2026-83538.json b/data/2026/83xxx/CVE-2026-83538.json index 5049586463..33dc9ca49a 100644 --- a/data/2026/83xxx/CVE-2026-83538.json +++ b/data/2026/83xxx/CVE-2026-83538.json @@ -8,7 +8,7 @@ "assignerShortName": "apache", "dateReserved": "2026-08-31T17:06:04.922Z", "datePublished": "2026-11-05T14:00:57.259Z", - "dateUpdated": "2026-11-05T14:00:57.259Z" + "dateUpdated": "2026-11-10T17:04:47.959Z" }, "containers": { "cna": { @@ -110,6 +110,56 @@ "x_generator": { "engine": "Vulnogram 1.0.3" } - } + }, + "adp": [ + { + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 5.3, + "attackVector": "NETWORK", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "NONE", + "confidentialityImpact": "LOW" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:04:40.566725Z", + "id": "CVE-2026-83538", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:04:47.959Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/84xxx/CVE-2026-84155.json b/data/2026/84xxx/CVE-2026-84155.json index 0696374303..b63491edc9 100644 --- a/data/2026/84xxx/CVE-2026-84155.json +++ b/data/2026/84xxx/CVE-2026-84155.json @@ -8,7 +8,7 @@ "assignerShortName": "ERIC", "dateReserved": "2026-09-01T08:00:17.054Z", "datePublished": "2026-11-06T10:27:24.656Z", - "dateUpdated": "2026-11-06T10:27:24.656Z" + "dateUpdated": "2026-11-10T17:44:40.339Z" }, "containers": { "cna": { @@ -121,6 +121,48 @@ "x_generator": { "engine": "Vulnogram 1.0.4" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/Ericsson/codechecker/security/advisories/GHSA-r42x-9wgw-cqc2", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:44:06.507542Z", + "id": "CVE-2026-84155", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:44:40.339Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/92xxx/CVE-2026-92887.json b/data/2026/92xxx/CVE-2026-92887.json index a132bbef3b..cc3031b308 100644 --- a/data/2026/92xxx/CVE-2026-92887.json +++ b/data/2026/92xxx/CVE-2026-92887.json @@ -8,7 +8,7 @@ "assignerShortName": "apache", "dateReserved": "2026-09-17T08:53:18.206Z", "datePublished": "2026-11-05T13:45:53.657Z", - "dateUpdated": "2026-11-05T13:45:53.657Z" + "dateUpdated": "2026-11-10T17:03:27.490Z" }, "containers": { "cna": { @@ -105,6 +105,56 @@ "x_generator": { "engine": "Vulnogram 1.0.3" } - } + }, + "adp": [ + { + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7.3, + "attackVector": "NETWORK", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "integrityImpact": "LOW", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "LOW", + "privilegesRequired": "NONE", + "confidentialityImpact": "LOW" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:03:21.854912Z", + "id": "CVE-2026-92887", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:03:27.490Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/97xxx/CVE-2026-97401.json b/data/2026/97xxx/CVE-2026-97401.json new file mode 100644 index 0000000000..71ba815a4f --- /dev/null +++ b/data/2026/97xxx/CVE-2026-97401.json @@ -0,0 +1,128 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-97401", + "assignerOrgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c", + "state": "PUBLISHED", + "assignerShortName": "eclipse", + "dateReserved": "2026-09-24T14:32:26.998Z", + "datePublished": "2026-11-10T17:06:10.888Z", + "dateUpdated": "2026-11-10T17:06:10.888Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c", + "shortName": "eclipse", + "dateUpdated": "2026-11-10T17:06:10.888Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-73", + "description": "CWE-73", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-269", + "description": "CWE-269", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Eclipse Foundation", + "product": "Eclipse Kura", + "versions": [ + { + "status": "affected", + "version": "0.7.0", + "lessThanOrEqual": "5.6.2", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "In Kura versions <= 5.6.2, `CommandCloudApp.execute()` extracts a caller-supplied ZIP archive into a caller-supplied directory inside the Kura JVM process before dispatching the command to the executor service. On a packaged Kura installation the JVM runs as `kurad` with `CAP_DAC_OVERRIDE`, while the configurable \"Unprivileged\" executor drops to the `kura` user via `su`.\n\n\n\nA caller with permissions `rest.command` who is intentionally restricted to unprivileged command execution (`privileged.command.service.enable=false`, the default) can therefore set `workingDirectory` to `/` and use the ZIP body to write or overwrite arbitrary files on the device as `kurad`, completely bypassing the unprivileged sandbox the operator selected.\n\n\n\nThe command service is disabled by default since Kura 4.0.0 [1]. The issue does not apply when the command service is disabled.\n\n\n\n[1] https://github.com/eclipse-kura/kura/blob/f9f969231892769a269876b23f19fa0e8173e3df/kura/distrib/RELEASE_NOTES.txt#L94", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

In Kura versions <= 5.6.2, `CommandCloudApp.execute()` extracts a caller-supplied ZIP archive into a caller-supplied directory inside the Kura JVM process before dispatching the command to the executor service. On a packaged Kura installation the JVM runs as `kurad` with `CAP_DAC_OVERRIDE`, while the configurable \"Unprivileged\" executor drops to the `kura` user via `su`.

A caller with permissions `rest.command` who is intentionally restricted to unprivileged command execution (`privileged.command.service.enable=false`, the default) can therefore set `workingDirectory` to `/` and use the ZIP body to write or overwrite arbitrary files on the device as `kurad`, completely bypassing the unprivileged sandbox the operator selected.

The command service is disabled by default since Kura 4.0.0 [1]. The issue does not apply when the command service is disabled.

[1] https://github.com/eclipse-kura/kura/blob/f9f969231892769a269876b23f19fa0e8173e3df/kura/distrib/RELEASE_NOTES.txt#L94

" + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/922" + }, + { + "url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/323" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "subConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 7.4, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Eclipse Foundation Security Team", + "type": "finder" + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/99xxx/CVE-2026-99285.json b/data/2026/99xxx/CVE-2026-99285.json new file mode 100644 index 0000000000..344324d3ad --- /dev/null +++ b/data/2026/99xxx/CVE-2026-99285.json @@ -0,0 +1,255 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-99285", + "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "state": "PUBLISHED", + "assignerShortName": "Linux", + "dateReserved": "2026-09-25T10:25:14.405Z", + "datePublished": "2026-11-10T17:37:13.348Z", + "dateUpdated": "2026-11-10T17:37:13.348Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "shortName": "Linux", + "dateUpdated": "2026-11-10T17:37:13.348Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_byteorder: remove multi-register support\n\n64bit byteorder conversion is broken when several registers need to be\nconverted because the source register array advances in steps for 4 bytes\ninstead of 8:\n\n for (i = ...\n src64 = nft_reg_load64(&src[i]);\n ~~~~~ u32 *src\n nft_reg_store64(&dst64[i],\n\nRemove the multi-register support, it has other issues as well:\n\nPablo points out that commit\ncaf3ef7468f7 (\"netfilter: nf_tables: prevent OOB access in nft_byteorder_eval\")\nalters semantics: before the loop operated on registers, i.e.\n for ( ... )\n dst32[i] = htons((u16)src32[i])\n\n .. but after the patch it will operate on bytes, which makes this\n useless to convert e.g. concatenations, which store each compound\n in its own register.\n\nMulti-convert of u32 has one theoretical application:\n\nct mark . meta mark . tcp dport @intervalset\n\nBecause ct mark and meta mark are host byte order, use with\nintervals has to convert the byteorder for ct/meta mark value\nto network byte order (bigendian).\n\nnftables emits this:\n [ meta load mark => reg 1 ]\n [ byteorder reg 1 = hton(reg 1, 4, 4) ]\n [ ct load mark => reg 9 ]\n [ byteorder reg 9 = hton(reg 9, 4, 4) ]\n ...\n\nI.e. two separate calls. Theoretically it could be changed to do:\n [ meta load mark => reg 1 ]\n [ ct load mark => reg 9 ]\n [ byteorder reg 1 = htonl(reg 1, 4, 8) ]\n ...\n\nBut then all it would take to change the set to\nmeta mark . tcp dport . ct mark\n\n... and we'd be back to two \"byteorder\" calls. IOW, support to\nconvert a range of registers is both dysfunctional and dubious.\n\nSimplify this: remove the feature.\n\nPablo Neira Ayuso points out that nftables before 1.1.0 can generate\nincorrect byteorder conversions, see 9fe58952c45a,\n\"evaluate: skip byteorder conversion for selector smaller than 2 bytes\"\nin nftables.git). Affected rulesets fail to load with this change and\nold userspace due to 'len != size' check." + } + ], + "affected": [ + { + "product": "Linux", + "vendor": "Linux", + "defaultStatus": "unaffected", + "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", + "programFiles": [ + "net/netfilter/nft_byteorder.c" + ], + "versions": [ + { + "version": "c301f0981fdd3fd1ffac6836b423c4d7a8e0eb63", + "lessThan": "3c5fb3a6c8118d15e60295e76fb5b879021eef43", + "status": "affected", + "versionType": "git" + }, + { + "version": "c301f0981fdd3fd1ffac6836b423c4d7a8e0eb63", + "lessThan": "dc29c0478b8564feb9371e715b5a0016eb8903fd", + "status": "affected", + "versionType": "git" + }, + { + "version": "c301f0981fdd3fd1ffac6836b423c4d7a8e0eb63", + "lessThan": "bb061d3de41707415269be75ebf700efb03ec212", + "status": "affected", + "versionType": "git" + }, + { + "version": "fca41e5b687e029f69e3a35a2fa31e2560e538dc", + "status": "affected", + "versionType": "git" + }, + { + "version": "25b42be4e067e107a2559266b54bf07fa5b094fb", + "status": "affected", + "versionType": "git" + }, + { + "version": "9a865a11d6890d4a789db1eaafebdc8bd092b12c", + "status": "affected", + "versionType": "git" + }, + { + "version": "b8b514b2a6cdfac24911e4910461bcb9db15ca8d", + "status": "affected", + "versionType": "git" + }, + { + "version": "18a169810cff769a7a697b35058c756805f589e0", + "status": "affected", + "versionType": "git" + }, + { + "version": "1a605657adc58b3c8e2c1c66aaa5fecd29072135", + "status": "affected", + "versionType": "git" + }, + { + "version": "013deed31ab15ef287b0045e4e7bd8f250e75b94", + "status": "affected", + "versionType": "git" + }, + { + "version": "4.19.307", + "lessThan": "4.20", + "status": "affected", + "versionType": "semver" + }, + { + "version": "5.4.269", + "lessThan": "5.5", + "status": "affected", + "versionType": "semver" + }, + { + "version": "5.10.210", + "lessThan": "5.11", + "status": "affected", + "versionType": "semver" + }, + { + "version": "5.15.140", + "lessThan": "5.16", + "status": "affected", + "versionType": "semver" + }, + { + "version": "6.1.64", + "lessThan": "6.2", + "status": "affected", + "versionType": "semver" + }, + { + "version": "6.5.13", + "lessThan": "6.6", + "status": "affected", + "versionType": "semver" + }, + { + "version": "6.6.3", + "lessThan": "6.7", + "status": "affected", + "versionType": "semver" + } + ] + }, + { + "product": "Linux", + "vendor": "Linux", + "defaultStatus": "affected", + "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", + "programFiles": [ + "net/netfilter/nft_byteorder.c" + ], + "versions": [ + { + "version": "6.7", + "status": "affected" + }, + { + "version": "0", + "lessThan": "6.7", + "status": "unaffected", + "versionType": "semver" + }, + { + "version": "6.12.115", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, + { + "version": "6.18.59", + "lessThanOrEqual": "6.18.*", + "status": "unaffected", + "versionType": "semver" + }, + { + "version": "7.1", + "lessThanOrEqual": "*", + "status": "unaffected", + "versionType": "original_commit_for_fix" + } + ] + } + ], + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.115" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.18.59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "7.1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.19.307" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4.269" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.210" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1.64" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.5.13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6.3" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://git.kernel.org/stable/c/3c5fb3a6c8118d15e60295e76fb5b879021eef43" + }, + { + "url": "https://git.kernel.org/stable/c/dc29c0478b8564feb9371e715b5a0016eb8903fd" + }, + { + "url": "https://git.kernel.org/stable/c/bb061d3de41707415269be75ebf700efb03ec212" + } + ], + "title": "netfilter: nft_byteorder: remove multi-register support", + "x_generator": { + "engine": "bippy-1.2.0" + } + } + } +} \ No newline at end of file diff --git a/data/delta.json b/data/delta.json index 79fc624556..c573d756fb 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,80 +1,434 @@ { - "fetchTime": "2026-11-10T16:58:01.273Z", - "numberOfChanges": 12, + "fetchTime": "2026-11-10T17:50:26.673Z", + "numberOfChanges": 71, "new": [ { - "cveId": "CVE-2026-125123", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125123", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125123.json", - "dateUpdated": "2026-11-10T16:52:31.891Z" + "cveId": "CVE-2026-34489", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-34489", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34489.json", + "dateUpdated": "2026-11-10T17:44:30.858Z" }, { - "cveId": "CVE-2026-125124", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125124", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125124.json", - "dateUpdated": "2026-11-10T16:53:57.148Z" + "cveId": "CVE-2026-35500", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-35500", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35500.json", + "dateUpdated": "2026-11-10T17:44:34.959Z" }, { - "cveId": "CVE-2026-125125", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125125", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125125.json", - "dateUpdated": "2026-11-10T16:55:55.117Z" + "cveId": "CVE-2026-40064", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40064", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40064.json", + "dateUpdated": "2026-11-10T17:44:41.827Z" }, { - "cveId": "CVE-2026-97891", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97891", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97891.json", - "dateUpdated": "2026-11-10T16:55:45.062Z" + "cveId": "CVE-2026-40216", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40216", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40216.json", + "dateUpdated": "2026-11-10T17:44:46.097Z" + }, + { + "cveId": "CVE-2026-40424", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40424", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40424.json", + "dateUpdated": "2026-11-10T17:44:49.036Z" + }, + { + "cveId": "CVE-2026-40433", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40433", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40433.json", + "dateUpdated": "2026-11-10T17:44:54.870Z" + }, + { + "cveId": "CVE-2026-40626", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40626", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40626.json", + "dateUpdated": "2026-11-10T17:44:57.838Z" + }, + { + "cveId": "CVE-2026-40694", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40694", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40694.json", + "dateUpdated": "2026-11-10T17:45:02.220Z" + }, + { + "cveId": "CVE-2026-40695", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40695", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40695.json", + "dateUpdated": "2026-11-10T17:45:05.233Z" + }, + { + "cveId": "CVE-2026-40697", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40697", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40697.json", + "dateUpdated": "2026-11-10T17:45:08.304Z" + }, + { + "cveId": "CVE-2026-41221", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-41221", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41221.json", + "dateUpdated": "2026-11-10T17:45:15.891Z" + }, + { + "cveId": "CVE-2026-41224", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-41224", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41224.json", + "dateUpdated": "2026-11-10T17:45:18.958Z" + }, + { + "cveId": "CVE-2026-42056", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42056", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42056.json", + "dateUpdated": "2026-11-10T17:45:22.106Z" + }, + { + "cveId": "CVE-2026-42956", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42956", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42956.json", + "dateUpdated": "2026-11-10T17:45:28.301Z" + }, + { + "cveId": "CVE-2026-44382", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-44382", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44382.json", + "dateUpdated": "2026-11-10T17:45:33.036Z" + }, + { + "cveId": "CVE-2026-44606", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-44606", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44606.json", + "dateUpdated": "2026-11-10T17:45:36.326Z" + }, + { + "cveId": "CVE-2026-44624", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-44624", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44624.json", + "dateUpdated": "2026-11-10T17:45:39.669Z" + }, + { + "cveId": "CVE-2026-44625", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-44625", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44625.json", + "dateUpdated": "2026-11-10T17:45:43.003Z" + }, + { + "cveId": "CVE-2026-44685", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-44685", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44685.json", + "dateUpdated": "2026-11-10T17:45:48.332Z" + }, + { + "cveId": "CVE-2026-49036", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-49036", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/49xxx/CVE-2026-49036.json", + "dateUpdated": "2026-11-10T17:45:55.790Z" + }, + { + "cveId": "CVE-2026-50175", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-50175", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50175.json", + "dateUpdated": "2026-11-10T17:46:00.552Z" + }, + { + "cveId": "CVE-2026-50249", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-50249", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50249.json", + "dateUpdated": "2026-11-10T17:46:05.887Z" + }, + { + "cveId": "CVE-2026-52899", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-52899", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/52xxx/CVE-2026-52899.json", + "dateUpdated": "2026-11-10T17:46:09.330Z" + }, + { + "cveId": "CVE-2026-55709", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55709", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55709.json", + "dateUpdated": "2026-11-10T17:46:12.985Z" + }, + { + "cveId": "CVE-2026-55716", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55716", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55716.json", + "dateUpdated": "2026-11-10T17:46:16.549Z" + }, + { + "cveId": "CVE-2026-56432", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56432", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56432.json", + "dateUpdated": "2026-11-10T17:46:20.132Z" + }, + { + "cveId": "CVE-2026-56435", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56435", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56435.json", + "dateUpdated": "2026-11-10T17:46:23.837Z" + }, + { + "cveId": "CVE-2026-56440", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56440", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56440.json", + "dateUpdated": "2026-11-10T17:46:29.405Z" + }, + { + "cveId": "CVE-2026-56759", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56759", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56759.json", + "dateUpdated": "2026-11-10T17:46:33.076Z" + }, + { + "cveId": "CVE-2026-57882", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57882", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57882.json", + "dateUpdated": "2026-11-10T17:46:36.852Z" + }, + { + "cveId": "CVE-2026-57890", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57890", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57890.json", + "dateUpdated": "2026-11-10T17:46:42.831Z" + }, + { + "cveId": "CVE-2026-57891", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57891", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57891.json", + "dateUpdated": "2026-11-10T17:46:46.787Z" + }, + { + "cveId": "CVE-2026-57892", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57892", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57892.json", + "dateUpdated": "2026-11-10T17:46:50.571Z" + }, + { + "cveId": "CVE-2026-57893", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57893", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57893.json", + "dateUpdated": "2026-11-10T17:46:54.357Z" + }, + { + "cveId": "CVE-2026-59771", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59771", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59771.json", + "dateUpdated": "2026-11-10T17:46:58.137Z" + }, + { + "cveId": "CVE-2026-60020", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60020", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60020.json", + "dateUpdated": "2026-11-10T17:47:01.967Z" + }, + { + "cveId": "CVE-2026-60059", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60059", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60059.json", + "dateUpdated": "2026-11-10T17:47:05.924Z" + }, + { + "cveId": "CVE-2026-60071", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60071", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60071.json", + "dateUpdated": "2026-11-10T17:47:10.374Z" + }, + { + "cveId": "CVE-2026-60133", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60133", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60133.json", + "dateUpdated": "2026-11-10T17:47:14.251Z" + }, + { + "cveId": "CVE-2026-60138", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60138", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60138.json", + "dateUpdated": "2026-11-10T17:47:18.447Z" + }, + { + "cveId": "CVE-2026-60139", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60139", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60139.json", + "dateUpdated": "2026-11-10T17:47:22.913Z" + }, + { + "cveId": "CVE-2026-60141", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60141", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60141.json", + "dateUpdated": "2026-11-10T17:47:27.031Z" + }, + { + "cveId": "CVE-2026-60142", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60142", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60142.json", + "dateUpdated": "2026-11-10T17:47:31.218Z" + }, + { + "cveId": "CVE-2026-61377", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61377", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61377.json", + "dateUpdated": "2026-11-10T17:47:35.849Z" + }, + { + "cveId": "CVE-2026-61383", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61383", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61383.json", + "dateUpdated": "2026-11-10T17:47:40.111Z" + }, + { + "cveId": "CVE-2026-61467", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61467", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61467.json", + "dateUpdated": "2026-11-10T17:47:44.385Z" + }, + { + "cveId": "CVE-2026-61468", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61468", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61468.json", + "dateUpdated": "2026-11-10T17:47:48.484Z" + }, + { + "cveId": "CVE-2026-61469", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61469", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61469.json", + "dateUpdated": "2026-11-10T17:47:53.863Z" + }, + { + "cveId": "CVE-2026-61470", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61470", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61470.json", + "dateUpdated": "2026-11-10T17:47:58.054Z" + }, + { + "cveId": "CVE-2026-61473", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61473", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61473.json", + "dateUpdated": "2026-11-10T17:48:02.255Z" + }, + { + "cveId": "CVE-2026-61887", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61887", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61887.json", + "dateUpdated": "2026-11-10T17:48:06.439Z" + }, + { + "cveId": "CVE-2026-62275", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62275", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62275.json", + "dateUpdated": "2026-11-10T17:48:10.617Z" + }, + { + "cveId": "CVE-2026-62920", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62920", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62920.json", + "dateUpdated": "2026-11-10T17:48:14.798Z" + }, + { + "cveId": "CVE-2026-62929", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62929", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62929.json", + "dateUpdated": "2026-11-10T17:48:19.147Z" + }, + { + "cveId": "CVE-2026-62930", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62930", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62930.json", + "dateUpdated": "2026-11-10T17:48:23.237Z" + }, + { + "cveId": "CVE-2026-63018", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63018", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63018.json", + "dateUpdated": "2026-11-10T17:48:27.589Z" + }, + { + "cveId": "CVE-2026-63027", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63027", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63027.json", + "dateUpdated": "2026-11-10T17:48:32.030Z" + }, + { + "cveId": "CVE-2026-63028", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63028", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63028.json", + "dateUpdated": "2026-11-10T17:48:36.379Z" + }, + { + "cveId": "CVE-2026-63540", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63540", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63540.json", + "dateUpdated": "2026-11-10T17:48:40.945Z" } ], "updated": [ { - "cveId": "CVE-2026-100081", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-100081", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/100xxx/CVE-2026-100081.json", - "dateUpdated": "2026-11-10T16:57:39.730Z" + "cveId": "CVE-2024-9355", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-9355", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9355.json", + "dateUpdated": "2026-11-10T17:49:15.914Z" }, { - "cveId": "CVE-2026-74841", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-74841", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74841.json", - "dateUpdated": "2026-11-10T16:57:21.226Z" + "cveId": "CVE-2026-120222", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120222", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120222.json", + "dateUpdated": "2026-11-10T17:46:47.844Z" }, { - "cveId": "CVE-2026-76150", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-76150", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76150.json", - "dateUpdated": "2026-11-10T16:55:55.054Z" + "cveId": "CVE-2026-120474", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120474", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120474.json", + "dateUpdated": "2026-11-10T17:46:05.157Z" }, { - "cveId": "CVE-2026-76152", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-76152", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76152.json", - "dateUpdated": "2026-11-10T16:54:08.940Z" + "cveId": "CVE-2026-121220", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121220", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121220.json", + "dateUpdated": "2026-11-10T17:48:39.559Z" }, { - "cveId": "CVE-2026-81734", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-81734", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/81xxx/CVE-2026-81734.json", - "dateUpdated": "2026-11-10T16:55:13.877Z" + "cveId": "CVE-2026-123087", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123087", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123087.json", + "dateUpdated": "2026-11-10T17:45:11.526Z" }, { - "cveId": "CVE-2026-81744", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-81744", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/81xxx/CVE-2026-81744.json", - "dateUpdated": "2026-11-10T16:52:52.740Z" + "cveId": "CVE-2026-123301", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123301", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123301.json", + "dateUpdated": "2026-11-10T17:47:55.557Z" }, { - "cveId": "CVE-2026-99277", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99277", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99277.json", - "dateUpdated": "2026-11-10T16:57:40.367Z" + "cveId": "CVE-2026-123319", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123319", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123319.json", + "dateUpdated": "2026-11-10T17:50:08.481Z" }, { - "cveId": "CVE-2026-99281", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99281", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99281.json", - "dateUpdated": "2026-11-10T16:57:40.816Z" + "cveId": "CVE-2026-123320", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123320", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123320.json", + "dateUpdated": "2026-11-10T17:46:35.039Z" + }, + { + "cveId": "CVE-2026-123322", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123322", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123322.json", + "dateUpdated": "2026-11-10T17:45:37.272Z" + }, + { + "cveId": "CVE-2026-16530", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16530", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16530.json", + "dateUpdated": "2026-11-10T17:46:17.674Z" + }, + { + "cveId": "CVE-2026-16531", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16531", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16531.json", + "dateUpdated": "2026-11-10T17:46:17.823Z" + }, + { + "cveId": "CVE-2026-84155", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84155", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84155.json", + "dateUpdated": "2026-11-10T17:44:40.339Z" } ], "error": [] diff --git a/data/deltaLog.json b/data/deltaLog.json index 88b0e3a3de..ef5be18e85 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,1017 @@ [ + { + "fetchTime": "2026-11-10T17:50:26.673Z", + "numberOfChanges": 71, + "new": [ + { + "cveId": "CVE-2026-34489", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-34489", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34489.json", + "dateUpdated": "2026-11-10T17:44:30.858Z" + }, + { + "cveId": "CVE-2026-35500", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-35500", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35500.json", + "dateUpdated": "2026-11-10T17:44:34.959Z" + }, + { + "cveId": "CVE-2026-40064", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40064", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40064.json", + "dateUpdated": "2026-11-10T17:44:41.827Z" + }, + { + "cveId": "CVE-2026-40216", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40216", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40216.json", + "dateUpdated": "2026-11-10T17:44:46.097Z" + }, + { + "cveId": "CVE-2026-40424", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40424", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40424.json", + "dateUpdated": "2026-11-10T17:44:49.036Z" + }, + { + "cveId": "CVE-2026-40433", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40433", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40433.json", + "dateUpdated": "2026-11-10T17:44:54.870Z" + }, + { + "cveId": "CVE-2026-40626", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40626", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40626.json", + "dateUpdated": "2026-11-10T17:44:57.838Z" + }, + { + "cveId": "CVE-2026-40694", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40694", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40694.json", + "dateUpdated": "2026-11-10T17:45:02.220Z" + }, + { + "cveId": "CVE-2026-40695", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40695", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40695.json", + "dateUpdated": "2026-11-10T17:45:05.233Z" + }, + { + "cveId": "CVE-2026-40697", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40697", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40697.json", + "dateUpdated": "2026-11-10T17:45:08.304Z" + }, + { + "cveId": "CVE-2026-41221", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-41221", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41221.json", + "dateUpdated": "2026-11-10T17:45:15.891Z" + }, + { + "cveId": "CVE-2026-41224", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-41224", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41224.json", + "dateUpdated": "2026-11-10T17:45:18.958Z" + }, + { + "cveId": "CVE-2026-42056", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42056", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42056.json", + "dateUpdated": "2026-11-10T17:45:22.106Z" + }, + { + "cveId": "CVE-2026-42956", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42956", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42956.json", + "dateUpdated": "2026-11-10T17:45:28.301Z" + }, + { + "cveId": "CVE-2026-44382", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-44382", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44382.json", + "dateUpdated": "2026-11-10T17:45:33.036Z" + }, + { + "cveId": "CVE-2026-44606", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-44606", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44606.json", + "dateUpdated": "2026-11-10T17:45:36.326Z" + }, + { + "cveId": "CVE-2026-44624", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-44624", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44624.json", + "dateUpdated": "2026-11-10T17:45:39.669Z" + }, + { + "cveId": "CVE-2026-44625", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-44625", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44625.json", + "dateUpdated": "2026-11-10T17:45:43.003Z" + }, + { + "cveId": "CVE-2026-44685", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-44685", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44685.json", + "dateUpdated": "2026-11-10T17:45:48.332Z" + }, + { + "cveId": "CVE-2026-49036", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-49036", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/49xxx/CVE-2026-49036.json", + "dateUpdated": "2026-11-10T17:45:55.790Z" + }, + { + "cveId": "CVE-2026-50175", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-50175", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50175.json", + "dateUpdated": "2026-11-10T17:46:00.552Z" + }, + { + "cveId": "CVE-2026-50249", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-50249", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50249.json", + "dateUpdated": "2026-11-10T17:46:05.887Z" + }, + { + "cveId": "CVE-2026-52899", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-52899", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/52xxx/CVE-2026-52899.json", + "dateUpdated": "2026-11-10T17:46:09.330Z" + }, + { + "cveId": "CVE-2026-55709", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55709", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55709.json", + "dateUpdated": "2026-11-10T17:46:12.985Z" + }, + { + "cveId": "CVE-2026-55716", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55716", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55716.json", + "dateUpdated": "2026-11-10T17:46:16.549Z" + }, + { + "cveId": "CVE-2026-56432", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56432", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56432.json", + "dateUpdated": "2026-11-10T17:46:20.132Z" + }, + { + "cveId": "CVE-2026-56435", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56435", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56435.json", + "dateUpdated": "2026-11-10T17:46:23.837Z" + }, + { + "cveId": "CVE-2026-56440", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56440", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56440.json", + "dateUpdated": "2026-11-10T17:46:29.405Z" + }, + { + "cveId": "CVE-2026-56759", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56759", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56759.json", + "dateUpdated": "2026-11-10T17:46:33.076Z" + }, + { + "cveId": "CVE-2026-57882", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57882", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57882.json", + "dateUpdated": "2026-11-10T17:46:36.852Z" + }, + { + "cveId": "CVE-2026-57890", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57890", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57890.json", + "dateUpdated": "2026-11-10T17:46:42.831Z" + }, + { + "cveId": "CVE-2026-57891", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57891", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57891.json", + "dateUpdated": "2026-11-10T17:46:46.787Z" + }, + { + "cveId": "CVE-2026-57892", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57892", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57892.json", + "dateUpdated": "2026-11-10T17:46:50.571Z" + }, + { + "cveId": "CVE-2026-57893", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57893", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57893.json", + "dateUpdated": "2026-11-10T17:46:54.357Z" + }, + { + "cveId": "CVE-2026-59771", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59771", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59771.json", + "dateUpdated": "2026-11-10T17:46:58.137Z" + }, + { + "cveId": "CVE-2026-60020", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60020", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60020.json", + "dateUpdated": "2026-11-10T17:47:01.967Z" + }, + { + "cveId": "CVE-2026-60059", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60059", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60059.json", + "dateUpdated": "2026-11-10T17:47:05.924Z" + }, + { + "cveId": "CVE-2026-60071", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60071", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60071.json", + "dateUpdated": "2026-11-10T17:47:10.374Z" + }, + { + "cveId": "CVE-2026-60133", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60133", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60133.json", + "dateUpdated": "2026-11-10T17:47:14.251Z" + }, + { + "cveId": "CVE-2026-60138", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60138", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60138.json", + "dateUpdated": "2026-11-10T17:47:18.447Z" + }, + { + "cveId": "CVE-2026-60139", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60139", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60139.json", + "dateUpdated": "2026-11-10T17:47:22.913Z" + }, + { + "cveId": "CVE-2026-60141", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60141", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60141.json", + "dateUpdated": "2026-11-10T17:47:27.031Z" + }, + { + "cveId": "CVE-2026-60142", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60142", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60142.json", + "dateUpdated": "2026-11-10T17:47:31.218Z" + }, + { + "cveId": "CVE-2026-61377", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61377", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61377.json", + "dateUpdated": "2026-11-10T17:47:35.849Z" + }, + { + "cveId": "CVE-2026-61383", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61383", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61383.json", + "dateUpdated": "2026-11-10T17:47:40.111Z" + }, + { + "cveId": "CVE-2026-61467", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61467", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61467.json", + "dateUpdated": "2026-11-10T17:47:44.385Z" + }, + { + "cveId": "CVE-2026-61468", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61468", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61468.json", + "dateUpdated": "2026-11-10T17:47:48.484Z" + }, + { + "cveId": "CVE-2026-61469", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61469", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61469.json", + "dateUpdated": "2026-11-10T17:47:53.863Z" + }, + { + "cveId": "CVE-2026-61470", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61470", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61470.json", + "dateUpdated": "2026-11-10T17:47:58.054Z" + }, + { + "cveId": "CVE-2026-61473", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61473", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61473.json", + "dateUpdated": "2026-11-10T17:48:02.255Z" + }, + { + "cveId": "CVE-2026-61887", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61887", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61887.json", + "dateUpdated": "2026-11-10T17:48:06.439Z" + }, + { + "cveId": "CVE-2026-62275", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62275", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62275.json", + "dateUpdated": "2026-11-10T17:48:10.617Z" + }, + { + "cveId": "CVE-2026-62920", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62920", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62920.json", + "dateUpdated": "2026-11-10T17:48:14.798Z" + }, + { + "cveId": "CVE-2026-62929", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62929", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62929.json", + "dateUpdated": "2026-11-10T17:48:19.147Z" + }, + { + "cveId": "CVE-2026-62930", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62930", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62930.json", + "dateUpdated": "2026-11-10T17:48:23.237Z" + }, + { + "cveId": "CVE-2026-63018", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63018", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63018.json", + "dateUpdated": "2026-11-10T17:48:27.589Z" + }, + { + "cveId": "CVE-2026-63027", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63027", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63027.json", + "dateUpdated": "2026-11-10T17:48:32.030Z" + }, + { + "cveId": "CVE-2026-63028", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63028", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63028.json", + "dateUpdated": "2026-11-10T17:48:36.379Z" + }, + { + "cveId": "CVE-2026-63540", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63540", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63540.json", + "dateUpdated": "2026-11-10T17:48:40.945Z" + } + ], + "updated": [ + { + "cveId": "CVE-2024-9355", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-9355", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9355.json", + "dateUpdated": "2026-11-10T17:49:15.914Z" + }, + { + "cveId": "CVE-2026-120222", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120222", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120222.json", + "dateUpdated": "2026-11-10T17:46:47.844Z" + }, + { + "cveId": "CVE-2026-120474", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120474", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120474.json", + "dateUpdated": "2026-11-10T17:46:05.157Z" + }, + { + "cveId": "CVE-2026-121220", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121220", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121220.json", + "dateUpdated": "2026-11-10T17:48:39.559Z" + }, + { + "cveId": "CVE-2026-123087", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123087", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123087.json", + "dateUpdated": "2026-11-10T17:45:11.526Z" + }, + { + "cveId": "CVE-2026-123301", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123301", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123301.json", + "dateUpdated": "2026-11-10T17:47:55.557Z" + }, + { + "cveId": "CVE-2026-123319", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123319", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123319.json", + "dateUpdated": "2026-11-10T17:50:08.481Z" + }, + { + "cveId": "CVE-2026-123320", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123320", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123320.json", + "dateUpdated": "2026-11-10T17:46:35.039Z" + }, + { + "cveId": "CVE-2026-123322", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123322", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123322.json", + "dateUpdated": "2026-11-10T17:45:37.272Z" + }, + { + "cveId": "CVE-2026-16530", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16530", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16530.json", + "dateUpdated": "2026-11-10T17:46:17.674Z" + }, + { + "cveId": "CVE-2026-16531", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16531", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16531.json", + "dateUpdated": "2026-11-10T17:46:17.823Z" + }, + { + "cveId": "CVE-2026-84155", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84155", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84155.json", + "dateUpdated": "2026-11-10T17:44:40.339Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-10T17:44:29.694Z", + "numberOfChanges": 21, + "new": [ + { + "cveId": "CVE-2026-120212", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120212", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120212.json", + "dateUpdated": "2026-11-10T17:42:05.207Z" + }, + { + "cveId": "CVE-2026-125322", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125322", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125322.json", + "dateUpdated": "2026-11-10T17:39:00.060Z" + }, + { + "cveId": "CVE-2026-20703", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-20703", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20703.json", + "dateUpdated": "2026-11-10T17:43:52.494Z" + }, + { + "cveId": "CVE-2026-28730", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-28730", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28730.json", + "dateUpdated": "2026-11-10T17:44:02.403Z" + }, + { + "cveId": "CVE-2026-28746", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-28746", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28746.json", + "dateUpdated": "2026-11-10T17:44:06.178Z" + }, + { + "cveId": "CVE-2026-33094", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-33094", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33094.json", + "dateUpdated": "2026-11-10T17:44:15.176Z" + }, + { + "cveId": "CVE-2026-33275", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-33275", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33275.json", + "dateUpdated": "2026-11-10T17:44:19.114Z" + }, + { + "cveId": "CVE-2026-34017", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-34017", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34017.json", + "dateUpdated": "2026-11-10T17:44:28.084Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-103674", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103674", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103674.json", + "dateUpdated": "2026-11-10T17:42:41.362Z" + }, + { + "cveId": "CVE-2026-103682", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103682", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103682.json", + "dateUpdated": "2026-11-10T17:43:47.092Z" + }, + { + "cveId": "CVE-2026-116592", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116592", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116592.json", + "dateUpdated": "2026-11-10T17:38:20.727Z" + }, + { + "cveId": "CVE-2026-116630", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116630", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116630.json", + "dateUpdated": "2026-11-10T17:41:21.172Z" + }, + { + "cveId": "CVE-2026-120415", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120415", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120415.json", + "dateUpdated": "2026-11-10T17:40:41.647Z" + }, + { + "cveId": "CVE-2026-120423", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120423", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120423.json", + "dateUpdated": "2026-11-10T17:39:59.015Z" + }, + { + "cveId": "CVE-2026-123660", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123660", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123660.json", + "dateUpdated": "2026-11-10T17:40:09.862Z" + }, + { + "cveId": "CVE-2026-19877", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19877", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19877.json", + "dateUpdated": "2026-11-10T17:39:24.921Z" + }, + { + "cveId": "CVE-2026-32146", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-32146", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32146.json", + "dateUpdated": "2026-11-10T17:40:31.314Z" + }, + { + "cveId": "CVE-2026-33379", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-33379", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33379.json", + "dateUpdated": "2026-11-10T17:39:19.777Z" + }, + { + "cveId": "CVE-2026-66293", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66293", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66293.json", + "dateUpdated": "2026-11-10T17:42:24.114Z" + }, + { + "cveId": "CVE-2026-66294", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66294", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66294.json", + "dateUpdated": "2026-11-10T17:43:39.205Z" + }, + { + "cveId": "CVE-2026-66295", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66295", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66295.json", + "dateUpdated": "2026-11-10T17:43:03.747Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-10T17:38:17.536Z", + "numberOfChanges": 11, + "new": [ + { + "cveId": "CVE-2026-125321", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125321", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125321.json", + "dateUpdated": "2026-11-10T17:36:23.877Z" + }, + { + "cveId": "CVE-2026-125729", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125729", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125729.json", + "dateUpdated": "2026-11-10T17:35:57.712Z" + }, + { + "cveId": "CVE-2026-99285", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99285", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99285.json", + "dateUpdated": "2026-11-10T17:37:13.348Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-103061", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103061", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103061.json", + "dateUpdated": "2026-11-10T17:33:56.845Z" + }, + { + "cveId": "CVE-2026-105669", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105669", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105669.json", + "dateUpdated": "2026-11-10T17:32:18.042Z" + }, + { + "cveId": "CVE-2026-108018", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108018", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108018.json", + "dateUpdated": "2026-11-10T17:35:06.894Z" + }, + { + "cveId": "CVE-2026-121006", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121006", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121006.json", + "dateUpdated": "2026-11-10T17:33:18.232Z" + }, + { + "cveId": "CVE-2026-123179", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123179", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123179.json", + "dateUpdated": "2026-11-10T17:33:07.728Z" + }, + { + "cveId": "CVE-2026-123181", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123181", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123181.json", + "dateUpdated": "2026-11-10T17:33:46.264Z" + }, + { + "cveId": "CVE-2026-19876", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19876", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19876.json", + "dateUpdated": "2026-11-10T17:38:08.513Z" + }, + { + "cveId": "CVE-2026-72493", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-72493", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72493.json", + "dateUpdated": "2026-11-10T17:36:15.589Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-10T17:31:25.477Z", + "numberOfChanges": 14, + "new": [ + { + "cveId": "CVE-2026-121691", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121691", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121691.json", + "dateUpdated": "2026-11-10T17:29:34.562Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-105425", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105425", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105425.json", + "dateUpdated": "2026-11-10T17:26:36.642Z" + }, + { + "cveId": "CVE-2026-105426", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105426", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105426.json", + "dateUpdated": "2026-11-10T17:28:32.954Z" + }, + { + "cveId": "CVE-2026-105427", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105427", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105427.json", + "dateUpdated": "2026-11-10T17:29:09.471Z" + }, + { + "cveId": "CVE-2026-107404", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107404", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107404.json", + "dateUpdated": "2026-11-10T17:29:46.336Z" + }, + { + "cveId": "CVE-2026-107405", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107405", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107405.json", + "dateUpdated": "2026-11-10T17:30:20.493Z" + }, + { + "cveId": "CVE-2026-121821", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121821", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121821.json", + "dateUpdated": "2026-11-10T17:26:35.550Z" + }, + { + "cveId": "CVE-2026-121822", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121822", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121822.json", + "dateUpdated": "2026-11-10T17:27:42.017Z" + }, + { + "cveId": "CVE-2026-121823", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121823", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121823.json", + "dateUpdated": "2026-11-10T17:29:42.578Z" + }, + { + "cveId": "CVE-2026-121824", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121824", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121824.json", + "dateUpdated": "2026-11-10T17:31:12.964Z" + }, + { + "cveId": "CVE-2026-66297", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66297", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66297.json", + "dateUpdated": "2026-11-10T17:28:38.470Z" + }, + { + "cveId": "CVE-2026-66298", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66298", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66298.json", + "dateUpdated": "2026-11-10T17:27:49.021Z" + }, + { + "cveId": "CVE-2026-66881", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66881", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66881.json", + "dateUpdated": "2026-11-10T17:26:44.453Z" + }, + { + "cveId": "CVE-2026-83528", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-83528", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/83xxx/CVE-2026-83528.json", + "dateUpdated": "2026-11-10T17:31:04.819Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-10T17:25:37.765Z", + "numberOfChanges": 20, + "new": [ + { + "cveId": "CVE-2026-125320", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125320", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125320.json", + "dateUpdated": "2026-11-10T17:23:43.734Z" + }, + { + "cveId": "CVE-2026-125342", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125342", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125342.json", + "dateUpdated": "2026-11-10T17:20:21.607Z" + }, + { + "cveId": "CVE-2026-125343", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125343", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125343.json", + "dateUpdated": "2026-11-10T17:20:20.233Z" + }, + { + "cveId": "CVE-2026-125344", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125344", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125344.json", + "dateUpdated": "2026-11-10T17:20:20.692Z" + }, + { + "cveId": "CVE-2026-125345", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125345", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125345.json", + "dateUpdated": "2026-11-10T17:20:19.715Z" + }, + { + "cveId": "CVE-2026-125346", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125346", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125346.json", + "dateUpdated": "2026-11-10T17:20:20.915Z" + }, + { + "cveId": "CVE-2026-125347", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125347", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125347.json", + "dateUpdated": "2026-11-10T17:20:20.019Z" + }, + { + "cveId": "CVE-2026-125348", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125348", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125348.json", + "dateUpdated": "2026-11-10T17:20:20.455Z" + }, + { + "cveId": "CVE-2026-125349", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125349", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125349.json", + "dateUpdated": "2026-11-10T17:20:21.382Z" + }, + { + "cveId": "CVE-2026-125350", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125350", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125350.json", + "dateUpdated": "2026-11-10T17:20:21.161Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-107474", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107474", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107474.json", + "dateUpdated": "2026-11-10T17:22:24.145Z" + }, + { + "cveId": "CVE-2026-111454", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111454", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111454.json", + "dateUpdated": "2026-11-10T17:22:56.784Z" + }, + { + "cveId": "CVE-2026-115791", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-115791", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/115xxx/CVE-2026-115791.json", + "dateUpdated": "2026-11-10T17:25:02.503Z" + }, + { + "cveId": "CVE-2026-121819", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121819", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121819.json", + "dateUpdated": "2026-11-10T17:23:02.739Z" + }, + { + "cveId": "CVE-2026-121820", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121820", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121820.json", + "dateUpdated": "2026-11-10T17:24:41.043Z" + }, + { + "cveId": "CVE-2026-33818", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-33818", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33818.json", + "dateUpdated": "2026-11-10T17:20:47.076Z" + }, + { + "cveId": "CVE-2026-42504", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42504", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42504.json", + "dateUpdated": "2026-11-10T17:20:45.563Z" + }, + { + "cveId": "CVE-2026-66885", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66885", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66885.json", + "dateUpdated": "2026-11-10T17:25:33.237Z" + }, + { + "cveId": "CVE-2026-68746", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-68746", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68746.json", + "dateUpdated": "2026-11-10T17:22:57.901Z" + }, + { + "cveId": "CVE-2026-76185", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-76185", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76185.json", + "dateUpdated": "2026-11-10T17:22:57.031Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-10T17:19:43.826Z", + "numberOfChanges": 2, + "new": [], + "updated": [ + { + "cveId": "CVE-2026-81808", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-81808", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/81xxx/CVE-2026-81808.json", + "dateUpdated": "2026-11-10T17:18:35.882Z" + }, + { + "cveId": "CVE-2026-81815", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-81815", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/81xxx/CVE-2026-81815.json", + "dateUpdated": "2026-11-10T17:17:32.775Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-10T17:13:52.137Z", + "numberOfChanges": 5, + "new": [ + { + "cveId": "CVE-2026-111729", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111729", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111729.json", + "dateUpdated": "2026-11-10T17:09:16.247Z" + }, + { + "cveId": "CVE-2026-97401", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97401", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97401.json", + "dateUpdated": "2026-11-10T17:06:10.888Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-119446", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119446", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119446.json", + "dateUpdated": "2026-11-10T17:11:05.623Z" + }, + { + "cveId": "CVE-2026-81828", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-81828", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/81xxx/CVE-2026-81828.json", + "dateUpdated": "2026-11-10T17:13:35.665Z" + }, + { + "cveId": "CVE-2026-82894", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82894", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82894.json", + "dateUpdated": "2026-11-10T17:08:37.509Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-10T17:05:30.132Z", + "numberOfChanges": 13, + "new": [ + { + "cveId": "CVE-2026-112185", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112185", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112185.json", + "dateUpdated": "2026-11-10T16:58:30.765Z" + }, + { + "cveId": "CVE-2026-112186", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112186", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112186.json", + "dateUpdated": "2026-11-10T17:02:46.279Z" + }, + { + "cveId": "CVE-2026-126048", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126048", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126048.json", + "dateUpdated": "2026-11-10T16:58:03.611Z" + }, + { + "cveId": "CVE-2026-126049", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126049", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126049.json", + "dateUpdated": "2026-11-10T16:58:04.296Z" + }, + { + "cveId": "CVE-2026-126050", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126050", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126050.json", + "dateUpdated": "2026-11-10T16:58:04.990Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-111494", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111494", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111494.json", + "dateUpdated": "2026-11-10T17:02:02.198Z" + }, + { + "cveId": "CVE-2026-57907", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57907", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57907.json", + "dateUpdated": "2026-11-10T17:01:49.222Z" + }, + { + "cveId": "CVE-2026-68524", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-68524", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68524.json", + "dateUpdated": "2026-11-10T17:01:18.681Z" + }, + { + "cveId": "CVE-2026-73577", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73577", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73577.json", + "dateUpdated": "2026-11-10T17:00:39.063Z" + }, + { + "cveId": "CVE-2026-73578", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73578", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73578.json", + "dateUpdated": "2026-11-10T16:59:20.542Z" + }, + { + "cveId": "CVE-2026-73580", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73580", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73580.json", + "dateUpdated": "2026-11-10T16:58:35.021Z" + }, + { + "cveId": "CVE-2026-83538", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-83538", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/83xxx/CVE-2026-83538.json", + "dateUpdated": "2026-11-10T17:04:47.959Z" + }, + { + "cveId": "CVE-2026-92887", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92887", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92887.json", + "dateUpdated": "2026-11-10T17:03:27.490Z" + } + ], + "error": [] + }, { "fetchTime": "2026-11-10T16:58:01.273Z", "numberOfChanges": 12, @@ -774356,225 +775369,5 @@ ], "updated": [], "error": [] - }, - { - "fetchTime": "2026-10-11T17:21:53.025Z", - "numberOfChanges": 11, - "new": [ - { - "cveId": "CVE-2026-18418", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-18418", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18418.json", - "dateUpdated": "2026-10-11T17:15:00.221Z" - }, - { - "cveId": "CVE-2026-19576", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19576", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19576.json", - "dateUpdated": "2026-10-11T17:14:53.339Z" - }, - { - "cveId": "CVE-2026-19577", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19577", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19577.json", - "dateUpdated": "2026-10-11T17:14:55.032Z" - }, - { - "cveId": "CVE-2026-19669", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19669", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19669.json", - "dateUpdated": "2026-10-11T17:14:51.720Z" - }, - { - "cveId": "CVE-2026-19735", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19735", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19735.json", - "dateUpdated": "2026-10-11T17:14:56.782Z" - }, - { - "cveId": "CVE-2026-19736", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19736", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19736.json", - "dateUpdated": "2026-10-11T17:14:58.574Z" - }, - { - "cveId": "CVE-2026-19737", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19737", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19737.json", - "dateUpdated": "2026-10-11T17:15:01.878Z" - }, - { - "cveId": "CVE-2026-19738", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19738", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19738.json", - "dateUpdated": "2026-10-11T17:15:04.970Z" - }, - { - "cveId": "CVE-2026-19739", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19739", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19739.json", - "dateUpdated": "2026-10-11T17:15:06.540Z" - }, - { - "cveId": "CVE-2026-19740", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19740", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19740.json", - "dateUpdated": "2026-10-11T17:15:08.080Z" - }, - { - "cveId": "CVE-2026-19935", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19935", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19935.json", - "dateUpdated": "2026-10-11T17:15:03.386Z" - } - ], - "updated": [], - "error": [] - }, - { - "fetchTime": "2026-10-11T17:06:44.265Z", - "numberOfChanges": 23, - "new": [], - "updated": [ - { - "cveId": "CVE-2026-100251", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-100251", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/100xxx/CVE-2026-100251.json", - "dateUpdated": "2026-10-11T17:05:29.805Z" - }, - { - "cveId": "CVE-2026-100730", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-100730", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/100xxx/CVE-2026-100730.json", - "dateUpdated": "2026-10-11T17:05:29.323Z" - }, - { - "cveId": "CVE-2026-101893", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101893", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101893.json", - "dateUpdated": "2026-10-11T17:05:29.573Z" - }, - { - "cveId": "CVE-2026-102262", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102262", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102262.json", - "dateUpdated": "2026-10-11T17:05:29.450Z" - }, - { - "cveId": "CVE-2026-102628", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102628", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102628.json", - "dateUpdated": "2026-10-11T17:05:29.691Z" - }, - { - "cveId": "CVE-2026-102669", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102669", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102669.json", - "dateUpdated": "2026-10-11T17:05:30.781Z" - }, - { - "cveId": "CVE-2026-102670", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102670", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102670.json", - "dateUpdated": "2026-10-11T17:05:30.134Z" - }, - { - "cveId": "CVE-2026-102671", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102671", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102671.json", - "dateUpdated": "2026-10-11T17:05:29.924Z" - }, - { - "cveId": "CVE-2026-105278", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105278", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105278.json", - "dateUpdated": "2026-10-11T17:05:28.955Z" - }, - { - "cveId": "CVE-2026-105281", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105281", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105281.json", - "dateUpdated": "2026-10-11T17:05:29.198Z" - }, - { - "cveId": "CVE-2026-108501", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108501", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108501.json", - "dateUpdated": "2026-10-11T17:05:28.127Z" - }, - { - "cveId": "CVE-2026-108502", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108502", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108502.json", - "dateUpdated": "2026-10-11T17:05:27.996Z" - }, - { - "cveId": "CVE-2026-108503", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108503", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108503.json", - "dateUpdated": "2026-10-11T17:05:27.880Z" - }, - { - "cveId": "CVE-2026-108504", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108504", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108504.json", - "dateUpdated": "2026-10-11T17:05:27.756Z" - }, - { - "cveId": "CVE-2026-108505", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108505", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108505.json", - "dateUpdated": "2026-10-11T17:05:27.629Z" - }, - { - "cveId": "CVE-2026-108506", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108506", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108506.json", - "dateUpdated": "2026-10-11T17:05:27.509Z" - }, - { - "cveId": "CVE-2026-15340", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-15340", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15340.json", - "dateUpdated": "2026-10-11T17:05:28.240Z" - }, - { - "cveId": "CVE-2026-28745", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-28745", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28745.json", - "dateUpdated": "2026-10-11T17:05:28.832Z" - }, - { - "cveId": "CVE-2026-29797", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-29797", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/29xxx/CVE-2026-29797.json", - "dateUpdated": "2026-10-11T17:05:28.589Z" - }, - { - "cveId": "CVE-2026-33272", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-33272", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33272.json", - "dateUpdated": "2026-10-11T17:05:28.353Z" - }, - { - "cveId": "CVE-2026-33367", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-33367", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33367.json", - "dateUpdated": "2026-10-11T17:05:28.710Z" - }, - { - "cveId": "CVE-2026-39453", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-39453", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39453.json", - "dateUpdated": "2026-10-11T17:05:28.474Z" - }, - { - "cveId": "CVE-2026-85479", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85479", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85479.json", - "dateUpdated": "2026-10-11T17:05:29.076Z" - } - ], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index afd1f5ec45..aa2e4eaab0 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "f09326516d6cf463a4e31c8ecffcd476cf9538ba", + "upstream_commit": "9e6a5aa08e00dacc07e1d2a5803c7d385abf1733", "since_year": 2017, - "records": 329069, - "synced_at_utc": "2026-11-10T17:14:58.376913+00:00" + "records": 329157, + "synced_at_utc": "2026-11-10T17:58:29.685393+00:00" }