This issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 8.7, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2025/53xxx/CVE-2025-53697.json b/data/2025/53xxx/CVE-2025-53697.json new file mode 100644 index 0000000000..fd4f9225b8 --- /dev/null +++ b/data/2025/53xxx/CVE-2025-53697.json @@ -0,0 +1,237 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2025-53697", + "assignerOrgId": "7281d04a-a537-43df-bfb4-fa4110af9d01", + "state": "PUBLISHED", + "assignerShortName": "jci", + "dateReserved": "2025-07-08T14:48:42.604Z", + "datePublished": "2026-11-13T21:37:44.321Z", + "dateUpdated": "2026-11-13T21:41:47.141Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "7281d04a-a537-43df-bfb4-fa4110af9d01", + "shortName": "jci", + "dateUpdated": "2026-11-13T21:41:47.141Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-1392", + "description": "CWE-1392 Use of default credentials", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "descriptions": [ + { + "lang": "en", + "value": "CAPEC‑560: Use of Default Credentials" + } + ] + } + ], + "affected": [ + { + "vendor": "Johnson Controls", + "product": "iSTAR Ultra", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "2.9.2.CU02", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Johnson Controls", + "product": "iSTAR Ultra SE", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "6.9.2.CU02", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Johnson Controls", + "product": "iSTAR Ultra G2", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "6.9.2.CU02", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Johnson Controls", + "product": "iSTAR Ultra G2 SE", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "6.9.2.CU02", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Johnson Controls", + "product": "iSTAR Edge G2", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "6.9.2.CU02", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "cpeApplicability": [ + { + "operator": "OR", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "2.9.2.cu02" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "6.9.2.cu02" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "6.9.2.cu02" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "6.9.2.cu02" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "6.9.2.cu02" + } + ] + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use of default credentials vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC‑560: Use of Default Credentials.\n\nThis issue affects iSTAR Ultra: before 2.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Use of default credentials vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC‑560: Use of Default Credentials.This issue affects iSTAR Ultra: before 2.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 8.4, + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2025/53xxx/CVE-2025-53698.json b/data/2025/53xxx/CVE-2025-53698.json new file mode 100644 index 0000000000..76965361cc --- /dev/null +++ b/data/2025/53xxx/CVE-2025-53698.json @@ -0,0 +1,162 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2025-53698", + "assignerOrgId": "7281d04a-a537-43df-bfb4-fa4110af9d01", + "state": "PUBLISHED", + "assignerShortName": "jci", + "dateReserved": "2025-07-08T14:48:42.604Z", + "datePublished": "2026-11-13T21:46:48.829Z", + "dateUpdated": "2026-11-13T21:46:48.829Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "7281d04a-a537-43df-bfb4-fa4110af9d01", + "shortName": "jci", + "dateUpdated": "2026-11-13T21:46:48.829Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-1299", + "description": "CWE-1299 Missing protection mechanism for alternate hardware interface", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "descriptions": [ + { + "lang": "en", + "value": "CAPEC‑554: Functionality Bypass" + } + ] + } + ], + "affected": [ + { + "vendor": "Johnson Controls", + "product": "iSTAR Ultra", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "6.9.2.CU02", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Johnson Controls", + "product": "iSTAR Ultra SE", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "6.9.2.CU02", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "cpeApplicability": [ + { + "operator": "OR", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "6.9.2.cu02" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "6.9.2.cu02" + } + ] + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra and Johnson Controls iSTAR Ultra SE allows CAPEC‑554: Functionality Bypass.\n\nThis issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra and Johnson Controls iSTAR Ultra SE allows CAPEC‑554: Functionality Bypass.This issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "PHYSICAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2025/53xxx/CVE-2025-53699.json b/data/2025/53xxx/CVE-2025-53699.json new file mode 100644 index 0000000000..7e92ccdd6a --- /dev/null +++ b/data/2025/53xxx/CVE-2025-53699.json @@ -0,0 +1,237 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2025-53699", + "assignerOrgId": "7281d04a-a537-43df-bfb4-fa4110af9d01", + "state": "PUBLISHED", + "assignerShortName": "jci", + "dateReserved": "2025-07-08T14:48:42.604Z", + "datePublished": "2026-11-13T21:50:56.925Z", + "dateUpdated": "2026-11-13T21:50:56.925Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "7281d04a-a537-43df-bfb4-fa4110af9d01", + "shortName": "jci", + "dateUpdated": "2026-11-13T21:50:56.925Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-1299", + "description": "CWE-1299 Missing protection mechanism for alternate hardware interface", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "descriptions": [ + { + "lang": "en", + "value": "CAPEC‑554: Functionality Bypass" + } + ] + } + ], + "affected": [ + { + "vendor": "Johnson Controls", + "product": "iSTAR Ultra", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "6.9.2.CU02", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Johnson Controls", + "product": "iSTAR Ultra SE", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "6.9.2.CU02", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Johnson Controls", + "product": "iSTAR Ultra G2", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "6.9.2.CU02", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Johnson Controls", + "product": "iSTAR Ultra G2 SE", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "6.9.2.CU02", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Johnson Controls", + "product": "iSTAR Edge G2", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "6.9.2.CU02", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "cpeApplicability": [ + { + "operator": "OR", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "6.9.2.cu02" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "6.9.2.cu02" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "6.9.2.cu02" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "6.9.2.cu02" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "6.9.2.cu02" + } + ] + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC‑554: Functionality Bypass.\n\nThis issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC‑554: Functionality Bypass.This issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "PHYSICAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2025/53xxx/CVE-2025-53700.json b/data/2025/53xxx/CVE-2025-53700.json new file mode 100644 index 0000000000..3ef91ea422 --- /dev/null +++ b/data/2025/53xxx/CVE-2025-53700.json @@ -0,0 +1,235 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2025-53700", + "assignerOrgId": "7281d04a-a537-43df-bfb4-fa4110af9d01", + "state": "PUBLISHED", + "assignerShortName": "jci", + "dateReserved": "2025-07-08T14:48:42.604Z", + "datePublished": "2026-11-13T21:56:12.492Z", + "dateUpdated": "2026-11-13T21:56:12.492Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "7281d04a-a537-43df-bfb4-fa4110af9d01", + "shortName": "jci", + "dateUpdated": "2026-11-13T21:56:12.492Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "CWE‑922 Insecure Storage of Sensitive Information" + } + ] + } + ], + "impacts": [ + { + "descriptions": [ + { + "lang": "en", + "value": "CAPEC‑15 File Manipulation" + } + ] + } + ], + "affected": [ + { + "vendor": "Johnson Controls", + "product": "iSTAR Ultra", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "6.9.2.CU02", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Johnson Controls", + "product": "iSTAR Ultra SE", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "6.9.2.CU02", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Johnson Controls", + "product": "iSTAR Ultra G2", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "6.9.2.CU02", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Johnson Controls", + "product": "iSTAR Ultra G2 SE", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "6.9.2.CU02", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Johnson Controls", + "product": "iSTAR Edge G2", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "6.9.2.CU02", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "cpeApplicability": [ + { + "operator": "OR", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "6.9.2.cu02" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "6.9.2.cu02" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "6.9.2.cu02" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "6.9.2.cu02" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "6.9.2.cu02" + } + ] + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "CWE‑922 Insecure Storage of Sensitive Information vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC‑15 File Manipulation.\n\nThis issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "CWE‑922 Insecure Storage of Sensitive Information vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC‑15 File Manipulation.This issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "MEDIUM", + "baseScore": 6.3, + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/102xxx/CVE-2026-102632.json b/data/2026/102xxx/CVE-2026-102632.json new file mode 100644 index 0000000000..9885db1465 --- /dev/null +++ b/data/2026/102xxx/CVE-2026-102632.json @@ -0,0 +1,73 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-102632", + "assignerOrgId": "bfee16bd-18e6-446c-9a65-f5b2e3d89c23", + "state": "PUBLISHED", + "assignerShortName": "DEVOLUTIONS", + "dateReserved": "2026-09-29T15:43:49.635Z", + "datePublished": "2026-11-13T21:17:45.535Z", + "dateUpdated": "2026-11-13T21:17:45.535Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "bfee16bd-18e6-446c-9a65-f5b2e3d89c23", + "shortName": "DEVOLUTIONS", + "dateUpdated": "2026-11-13T21:17:45.535Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-266", + "description": "CWE-266 Incorrect Privilege Assignment", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Devolutions", + "product": "PowerShell Universal", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "2026.3.5", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect privilege assignment in the app token management component in Devolutions PowerShell Universal 2026.3.4 and earlier allows an authenticated user with token creation or update permissions to escalate privileges to administrator, and allows a revoked app token to be reinstated in multi-node deployments, via crafted app token requests that set an arbitrary role or revocation state.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Incorrect privilege assignment in the app token management component in Devolutions PowerShell Universal 2026.3.4 and earlier allows an authenticated user with token creation or update permissions to escalate privileges to administrator, and allows a revoked app token to be reinstated in multi-node deployments, via crafted app token requests that set an arbitrary role or revocation state." + } + ] + } + ], + "references": [ + { + "url": "https://devolutions.net/security/advisories/DEVO-2026-0042/" + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.2" + } + } + } +} \ No newline at end of file diff --git a/data/2026/104xxx/CVE-2026-104204.json b/data/2026/104xxx/CVE-2026-104204.json index db6c3880e2..bc9a5da2e6 100644 --- a/data/2026/104xxx/CVE-2026-104204.json +++ b/data/2026/104xxx/CVE-2026-104204.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-10-01T18:54:15.120Z", "datePublished": "2026-11-13T18:44:09.471Z", - "dateUpdated": "2026-11-13T18:44:09.471Z" + "dateUpdated": "2026-11-13T21:18:52.182Z" }, "containers": { "cna": { @@ -89,6 +89,48 @@ "advisory": "GHSA-hg85-pmm3-jfcf", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-hg85-pmm3-jfcf", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T21:18:32.522646Z", + "id": "CVE-2026-104204", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T21:18:52.182Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105622.json b/data/2026/105xxx/CVE-2026-105622.json index 09abc6173d..51b3e79a48 100644 --- a/data/2026/105xxx/CVE-2026-105622.json +++ b/data/2026/105xxx/CVE-2026-105622.json @@ -8,7 +8,7 @@ "assignerShortName": "Zenitel", "dateReserved": "2026-10-05T16:30:58.403Z", "datePublished": "2026-11-13T15:40:23.944Z", - "dateUpdated": "2026-11-13T15:40:23.944Z" + "dateUpdated": "2026-11-13T21:46:22.488Z" }, "containers": { "cna": { @@ -125,6 +125,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T21:46:14.050984Z", + "id": "CVE-2026-105622", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T21:46:22.488Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105623.json b/data/2026/105xxx/CVE-2026-105623.json index 97ac901389..8438312692 100644 --- a/data/2026/105xxx/CVE-2026-105623.json +++ b/data/2026/105xxx/CVE-2026-105623.json @@ -8,7 +8,7 @@ "assignerShortName": "Zenitel", "dateReserved": "2026-10-05T16:31:04.052Z", "datePublished": "2026-11-13T15:42:42.515Z", - "dateUpdated": "2026-11-13T15:42:42.515Z" + "dateUpdated": "2026-11-13T21:43:33.794Z" }, "containers": { "cna": { @@ -125,6 +125,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T21:43:27.551807Z", + "id": "CVE-2026-105623", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T21:43:33.794Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105624.json b/data/2026/105xxx/CVE-2026-105624.json index 8b4fd6786e..94d916960f 100644 --- a/data/2026/105xxx/CVE-2026-105624.json +++ b/data/2026/105xxx/CVE-2026-105624.json @@ -8,7 +8,7 @@ "assignerShortName": "Zenitel", "dateReserved": "2026-10-05T16:31:06.093Z", "datePublished": "2026-11-13T15:41:59.393Z", - "dateUpdated": "2026-11-13T15:41:59.393Z" + "dateUpdated": "2026-11-13T21:45:18.832Z" }, "containers": { "cna": { @@ -125,6 +125,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T21:45:12.663777Z", + "id": "CVE-2026-105624", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T21:45:18.832Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/106xxx/CVE-2026-106018.json b/data/2026/106xxx/CVE-2026-106018.json index 8773bbd3ab..e27e8a3cf9 100644 --- a/data/2026/106xxx/CVE-2026-106018.json +++ b/data/2026/106xxx/CVE-2026-106018.json @@ -8,7 +8,7 @@ "assignerShortName": "jci", "dateReserved": "2026-10-06T12:44:52.563Z", "datePublished": "2026-11-12T20:50:42.994Z", - "dateUpdated": "2026-11-12T20:50:42.994Z" + "dateUpdated": "2026-11-13T21:32:54.410Z" }, "containers": { "cna": { @@ -114,6 +114,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T21:32:44.371811Z", + "id": "CVE-2026-106018", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T21:32:54.410Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108290.json b/data/2026/108xxx/CVE-2026-108290.json new file mode 100644 index 0000000000..064b9ef6bd --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108290.json @@ -0,0 +1,113 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108290", + "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", + "state": "PUBLISHED", + "assignerShortName": "ibm", + "dateReserved": "2026-10-09T17:54:29.151Z", + "datePublished": "2026-11-13T21:35:45.225Z", + "dateUpdated": "2026-11-13T21:35:45.225Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", + "shortName": "ibm", + "dateUpdated": "2026-11-13T21:35:45.225Z" + }, + "title": "IBM Cyber Fraud includes components with multiple known vulnerabilities", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-923", + "description": "CWE-923 Improper Restriction of Communication Channel to Intended Endpoints", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "IBM", + "product": "Cyber Fraud", + "versions": [ + { + "status": "affected", + "version": "1.0.0", + "lessThanOrEqual": "1.1.0", + "versionType": "semver" + } + ], + "cpes": [ + "cpe:2.3:a:ibm:cyber_fraud:1.0.0:*:*:*:*:*:*:*", + "cpe:2.3:a:ibm:cyber_fraud:1.1.0:*:*:*:*:*:*:*" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an attacker with local access to a container to extract sensitive information due to unrestrictive network policies.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an attacker with local access to a container to extract sensitive information due to unrestrictive network policies.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7295966", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE", + "baseSeverity": "MEDIUM", + "baseScore": 4, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "IBM strongly encourages customers to update their systems promptly.\n\n\n\nPlease upgrade to at least version 1.1.1 according to the following instructions:\n\n https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud \n\n\n\n https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM strongly encourages customers to update their systems promptly.
Please upgrade to at least version 1.1.1 according to the following instructions:
https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud
https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud
" + } + ] + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109158.json b/data/2026/109xxx/CVE-2026-109158.json new file mode 100644 index 0000000000..ff948cde75 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109158.json @@ -0,0 +1,162 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109158", + "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", + "state": "PUBLISHED", + "assignerShortName": "ibm", + "dateReserved": "2026-10-12T12:02:17.685Z", + "datePublished": "2026-11-13T22:03:01.617Z", + "dateUpdated": "2026-11-13T22:03:27.115Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", + "shortName": "ibm", + "dateUpdated": "2026-11-13T22:03:27.115Z" + }, + "title": "IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands Insertion of Sensitive Information into Log File", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-532", + "description": "CWE-532 Insertion of Sensitive Information into Log File", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "IBM", + "product": "App Connect Operator", + "versions": [ + { + "status": "affected", + "version": "12.1.0", + "lessThanOrEqual": "12.21.0", + "versionType": "semver" + }, + { + "status": "affected", + "version": "12.0.0", + "lessThanOrEqual": "12.0.28", + "versionType": "semver" + }, + { + "status": "affected", + "version": "13.0.0", + "lessThanOrEqual": "13.6.0", + "versionType": "semver" + } + ], + "cpes": [ + "cpe:2.3:a:ibm:app_connect_operator:12.1.0:*:*:*:*:*:*:*", + "cpe:2.3:a:ibm:app_connect_operator:12.0.0:*:*:*:*:*:*:*", + "cpe:2.3:a:ibm:app_connect_operator:13.0.0:*:*:*:*:*:*:*" + ] + }, + { + "vendor": "IBM", + "product": "App Connect Enterprise Certified Containers Operands", + "versions": [ + { + "status": "affected", + "version": "12.0.11.1-r1", + "lessThanOrEqual": "12.0.12.5-r1", + "versionType": "custom" + }, + { + "status": "affected", + "version": "13.0.1.0-r1", + "lessThanOrEqual": "13.0.6.2-r1", + "versionType": "custom" + }, + { + "status": "affected", + "version": "12.0.12-r1", + "lessThanOrEqual": "12.0.12-r28", + "versionType": "custom" + }, + { + "status": "affected", + "version": "13.0.7.0-r1", + "lessThanOrEqual": "13.0.9.0-r1", + "versionType": "custom" + } + ], + "cpes": [ + "cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:cd:12.0.11.1:*:*:*:*:*:*:*", + "cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:cd:13.0.1.0:*:*:*:*:*:*:*", + "cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:cd:12.0.12:*:*:*:*:*:*:*", + "cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:cd:13.0.7.0:*:*:*:*:*:*:*" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands may allow the AI Agent to log sensitive information about the deployed environment within error messages.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands may allow the AI Agent to log sensitive information about the deployed environment within error messages.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7296008", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "IBM strongly suggests the following:\n\n\n\nApp Connect Enterprise Certified Container CD and 13 LTS (Long Term Support)\n\n\n\nUpgrade to App Connect Enterprise Certified Container Operator version 13.7.0 or higher, and ensure that all components are at 13.0.9.1-r1 or higher. Documentation on the upgrade process is available at https://www.ibm.com/docs/en/app-connect/13.0?topic=releases-upgrading-operator \n\n\n\n\nApp Connect Enterprise Certified Container 12.0 LTS (Long Term Support)\n\n\n\nUpgrade to App Connect Enterprise Certified Container Operator version 12.0.29 or higher, and ensure that all components are at 12.0.12-r29 or higher. Documentation on the upgrade process is available at https://www.ibm.com/docs/en/app-connect/12.0?topic=umfpr-upgrading-operator-releases", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM strongly suggests the following:
App Connect Enterprise Certified Container CD and 13 LTS (Long Term Support)
Upgrade to App Connect Enterprise Certified Container Operator version 13.7.0 or higher, and ensure that all components are at 13.0.9.1-r1 or higher. Documentation on the upgrade process is available at https://www.ibm.com/docs/en/app-connect/13.0?topic=releases-upgrading-operator
App Connect Enterprise Certified Container 12.0 LTS (Long Term Support)
Upgrade to App Connect Enterprise Certified Container Operator version 12.0.29 or higher, and ensure that all components are at 12.0.12-r29 or higher. Documentation on the upgrade process is available at https://www.ibm.com/docs/en/app-connect/12.0?topic=umfpr-upgrading-operator-releases
" + } + ] + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110178.json b/data/2026/110xxx/CVE-2026-110178.json new file mode 100644 index 0000000000..5f2154dab6 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110178.json @@ -0,0 +1,126 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110178", + "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", + "state": "PUBLISHED", + "assignerShortName": "ibm", + "dateReserved": "2026-10-13T17:10:52.843Z", + "datePublished": "2026-11-13T21:44:00.993Z", + "dateUpdated": "2026-11-13T21:44:00.993Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", + "shortName": "ibm", + "dateUpdated": "2026-11-13T21:44:00.993Z" + }, + "title": "IBM ContextForge MCP Gateway is affected by an improper access control vulnerability in configuration import", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-284", + "description": "CWE-284 Improper Access Control", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "IBM", + "product": "ContextForge MCP Gateway", + "versions": [ + { + "status": "affected", + "version": "1.0.0", + "lessThanOrEqual": "1.0.11", + "versionType": "semver" + } + ], + "cpes": [ + "cpe:2.3:a:ibm:contextforge_mcp_gateway:1.0.0:*:*:*:*:*:*:*", + "cpe:2.3:a:ibm:contextforge_mcp_gateway:1.0.11:*:*:*:*:*:*:*" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is vulnerable to improper access control in the bulk import path. A remote authenticated attacker holding a team-scoped `admin.import` permission can overwrite the endpoint URL, request headers, and authentication credentials of public tools, resources, and prompts owned by other tenants by sending a crafted POST request to `/v1/import` with `conflict_strategy=update`, redirecting subsequent AI gateway invocations to an attacker-controlled host.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is vulnerable to improper access control in the bulk import path. A remote authenticated attacker holding a team-scoped `admin.import` permission can overwrite the endpoint URL, request headers, and authentication credentials of public tools, resources, and prompts owned by other tenants by sending a crafted POST request to `/v1/import` with `conflict_strategy=update`, redirecting subsequent AI gateway invocations to an attacker-controlled host.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7296701", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseSeverity": "MEDIUM", + "baseScore": 4.1, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N" + } + } + ], + "workarounds": [ + { + "lang": "en", + "value": "None. IBM strongly recommends upgrading to the fixed version.\n\n\n\nUntil upgrading, administrators can reduce exposure by not granting `admin.import` to team-scoped roles and by reserving configuration import for platform administrators.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM strongly recommends addressing the vulnerability now.
| Product(s) | Version(s) number and/or range | Remediation/Fix/Instructions |
| IBM ContextForge MCP Gateway | v1.1.0 | Install or upgrade to v1.1.0 [v1.1.0 Release Notes] |
IBM ContextForge MCP Gateway 1.0.8 through 1.0.11, and v1.1.0 is vulnerable to denial of service due to an incomplete denylist in the jq filter guard module (CWE-184). An authenticated remote attacker can supply a crafted `jsonpath_filter` value containing `halt`, `halt_error`, or unbounded-loop built-ins that bypass the safety check, causing gateway worker process termination or sustained resource exhaustion.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7296697", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + } + ], + "workarounds": [ + { + "lang": "en", + "value": "None. IBM strongly recommends upgrading to the fixed version.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM strongly recommends addressing the vulnerability now.
| Product(s) | Version(s) number and/or range | Remediation/Fix/Instructions |
| IBM ContextForge MCP Gateway | v1.1.1 | Install or upgrade to v1.1.1 [v1.1.1 Release notes] |
IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7296696", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseSeverity": "MEDIUM", + "baseScore": 5.4, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" + } + } + ], + "workarounds": [ + { + "lang": "en", + "value": "IBM strongly recommends upgrading to the fixed version.\n\nIf this is not possible restrict the accepted authorization server issuers by setting `DCR_ALLOWED_ISSUERS` to a list of trusted issuers, or disable Dynamic Client Registration (`DCR_ENABLED=false`), and restrict gateway creation permissions to trusted users.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "| Product(s) | Version(s) number and/or range | Remediation/Fix/Instructions |
| IBM ContextForge MCP Gateway | v1.1.0 | Install or upgrade to v1.1.0 [v1.1.0 Release Notes] |
IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow an authenticated caller to bypass upstream credential-level authorization policies due to an insufficiently specific cache key in the RFC 8693 token exchange cache, enabling reuse of cached upstream bearer tokens across different credentials belonging to the same user.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7296695", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseSeverity": "MEDIUM", + "baseScore": 5.4, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" + } + } + ], + "workarounds": [ + { + "lang": "en", + "value": "IBM strongly recommends upgrading to the fixed version.\n\nIf this cannot be done, ensure authorization policies for upstream MCP servers assign identical scopes and permissions to all credential types (interactive session JWTs and API tokens) for a given account, or avoid configuring OAuth token exchange with `subject_token_source=inbound_user_jwt` across mixed credential types until the gateway is updated.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM strongly recommends addressing the vulnerability now.
| Product(s) | Version(s) number and/or range | Remediation/Fix/Instructions |
| IBM ContextForge MCP Gateway | v1.1.0 | Install or upgrade to v1.1.0 [v1.1.0 Release Notes] |
IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7296694", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseSeverity": "MEDIUM", + "baseScore": 4.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" + } + } + ], + "workarounds": [ + { + "lang": "en", + "value": "None. IBM strongly recommends upgrading to the fixed version.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM strongly recommends addressing the vulnerability now.
| Product(s) | Version(s) number and/or range | Remediation/Fix/Instructions |
| IBM ContextForge MCP Gateway | v1.1.0 | Install or upgrade to v1.1.0 [v1.1.0 Release Notes] |
IBM ContextForge MCP Gateway 1.0.0 through 1.1.0 could allow an attacker to replay identity propagation claims signatures or expose sensitive user identity information to third-party MCP servers due to static signature payloads and missing per-gateway configuration checks during tool invocation.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7296489", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE", + "baseSeverity": "HIGH", + "baseScore": 7.4, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + } + } + ], + "workarounds": [ + { + "lang": "en", + "value": "IBM strongly recommends upgrading to the fixed version.\nIf you cannot update disable identity propagation globally (set `IDENTITY_PROPAGATION_ENABLED=false`) so that no upstream MCP server receives user identity information, and restrict access to the gateway to trusted users.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM strongly recommends addressing the vulnerability now.
| Product(s) | Version(s) number and/or range | Remediation/Fix/Instructions |
IBM ContextForge MCP Gateway | v1.0.0-v1.1.0 | Upgrade to v1.1.1 immediately [Release notes] |
IBM ContextForge MCP Gateway 1.0.0 through 1.1.0 is vulnerable to improper credential handling because the X-Upstream-Authorization request header can override the gateway-managed upstream credential for OAuth (authorization_code and client_credentials), bearer and basic authenticated gateways, which could allow an authenticated user to cause upstream requests to be made with a different credential and bypass per-user permission and audit attribution.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7296490", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" + } + } + ], + "workarounds": [ + { + "lang": "en", + "value": "Remove the X-Upstream-Authorization request header at the reverse proxy or API gateway in front of IBM ContextForge MCP Gateway for all MCP endpoints, and restrict network access to MCP endpoints to trusted networks. IBM strongly recommends upgrading to the fixed version.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM strongly recommends addressing the vulnerability now.
| Product(s) | Version(s) number and/or range | Remediation/Fix/Instructions |
| IBM ContextForge MCP Gateway | 2.0 | Download and deploy v1.1.1 [Release notes v1.1.1] |
IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an attacker with the ability to run HTTP calls within the running container to can make administrative calls to a running IntegrationRuntime.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7296008", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "MEDIUM", + "baseScore": 6, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "IBM strongly suggests the following:\n\n\n\nApp Connect Enterprise Certified Container CD and 13 LTS (Long Term Support)\n\n\n\nUpgrade to App Connect Enterprise Certified Container Operator version 13.7.0 or higher, and ensure that all components are at 13.0.9.1-r1 or higher. Documentation on the upgrade process is available at https://www.ibm.com/docs/en/app-connect/13.0?topic=releases-upgrading-operator \n\n\n\n\nApp Connect Enterprise Certified Container 12.0 LTS (Long Term Support)\n\n\n\nUpgrade to App Connect Enterprise Certified Container Operator version 12.0.29 or higher, and ensure that all components are at 12.0.12-r29 or higher. Documentation on the upgrade process is available at https://www.ibm.com/docs/en/app-connect/12.0?topic=umfpr-upgrading-operator-releases", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM strongly suggests the following:
App Connect Enterprise Certified Container CD and 13 LTS (Long Term Support)
Upgrade to App Connect Enterprise Certified Container Operator version 13.7.0 or higher, and ensure that all components are at 13.0.9.1-r1 or higher. Documentation on the upgrade process is available at https://www.ibm.com/docs/en/app-connect/13.0?topic=releases-upgrading-operator
App Connect Enterprise Certified Container 12.0 LTS (Long Term Support)
Upgrade to App Connect Enterprise Certified Container Operator version 12.0.29 or higher, and ensure that all components are at 12.0.12-r29 or higher. Documentation on the upgrade process is available at https://www.ibm.com/docs/en/app-connect/12.0?topic=umfpr-upgrading-operator-releases
" + } + ] + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/115xxx/CVE-2026-115501.json b/data/2026/115xxx/CVE-2026-115501.json new file mode 100644 index 0000000000..d6de3e25a2 --- /dev/null +++ b/data/2026/115xxx/CVE-2026-115501.json @@ -0,0 +1,159 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-115501", + "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", + "state": "PUBLISHED", + "assignerShortName": "ibm", + "dateReserved": "2026-10-22T16:04:20.832Z", + "datePublished": "2026-11-13T21:46:28.286Z", + "dateUpdated": "2026-11-13T21:51:38.210Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", + "shortName": "ibm", + "dateUpdated": "2026-11-13T21:46:28.286Z" + }, + "title": "IBM i is Affected By A Buffer Overflow Vulnerability in QFileSvr.400 File System []", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-121", + "description": "CWE-121 Stack-based Buffer Overflow", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "IBM", + "product": "i", + "versions": [ + { + "status": "affected", + "version": "7.6" + }, + { + "status": "affected", + "version": "7.5" + }, + { + "status": "affected", + "version": "7.4" + }, + { + "status": "affected", + "version": "7.3" + } + ], + "cpes": [ + "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*", + "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*", + "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*", + "cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "IBM i 7.3 7.4, 7.5, and 7.6 is vulnerable to a stack buffer overflow, caused by improper bounds checking in the QFileSvr.400 file system. By sending a command in the QFileSvr.400 file system, a local authenticated attacker could cause undefined behavior.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM i 7.3 7.4, 7.5, and 7.6 is vulnerable to a stack buffer overflow, caused by improper bounds checking in the QFileSvr.400 file system. By sending a command in the QFileSvr.400 file system, a local authenticated attacker could cause undefined behavior.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7296188", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "IBM i Release5770-SS1 \nPTF Number(s)PTF Download Link(s)7.6SJ12288 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ12288 7.5SJ12287 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ12287 7.4SJ12286 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ12286 7.3SJ12285 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ12285 \n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "| IBM i Release | 5770-SS1 PTF Number(s) | PTF Download Link(s) |
| 7.6 | SJ12288 | https://www.ibm.com/mysupport/s/fix-information?legacy=SJ12288 |
| 7.5 | SJ12287 | https://www.ibm.com/mysupport/s/fix-information?legacy=SJ12287 |
| 7.4 | SJ12286 | https://www.ibm.com/mysupport/s/fix-information?legacy=SJ12286 |
| 7.3 | SJ12285 | https://www.ibm.com/mysupport/s/fix-information?legacy=SJ12285 |
IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.
" + } + ] + } + ] + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T21:51:31.064711Z", + "id": "CVE-2026-115501", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T21:51:38.210Z" + } + } + ] + } +} \ No newline at end of file diff --git a/data/2026/115xxx/CVE-2026-115788.json b/data/2026/115xxx/CVE-2026-115788.json new file mode 100644 index 0000000000..a28f47263e --- /dev/null +++ b/data/2026/115xxx/CVE-2026-115788.json @@ -0,0 +1,162 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-115788", + "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", + "state": "PUBLISHED", + "assignerShortName": "ibm", + "dateReserved": "2026-10-23T13:52:20.386Z", + "datePublished": "2026-11-13T22:01:07.122Z", + "dateUpdated": "2026-11-13T22:01:07.122Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", + "shortName": "ibm", + "dateUpdated": "2026-11-13T22:01:07.122Z" + }, + "title": "IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands Log Forging", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-117", + "description": "CWE-117 Improper Output Neutralization for Logs", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "IBM", + "product": "App Connect Operator", + "versions": [ + { + "status": "affected", + "version": "12.1.0", + "lessThanOrEqual": "12.21.0", + "versionType": "semver" + }, + { + "status": "affected", + "version": "12.0.0", + "lessThanOrEqual": "12.0.28", + "versionType": "semver" + }, + { + "status": "affected", + "version": "13.0.0", + "lessThanOrEqual": "13.6.0", + "versionType": "semver" + } + ], + "cpes": [ + "cpe:2.3:a:ibm:app_connect_operator:12.1.0:*:*:*:*:*:*:*", + "cpe:2.3:a:ibm:app_connect_operator:12.0.0:*:*:*:*:*:*:*", + "cpe:2.3:a:ibm:app_connect_operator:13.0.0:*:*:*:*:*:*:*" + ] + }, + { + "vendor": "IBM", + "product": "App Connect Enterprise Certified Containers Operands", + "versions": [ + { + "status": "affected", + "version": "12.0.11.1-r1", + "lessThanOrEqual": "12.0.12.5-r1", + "versionType": "custom" + }, + { + "status": "affected", + "version": "13.0.1.0-r1", + "lessThanOrEqual": "13.0.6.2-r1", + "versionType": "custom" + }, + { + "status": "affected", + "version": "12.0.12-r1", + "lessThanOrEqual": "12.0.12-r28", + "versionType": "custom" + }, + { + "status": "affected", + "version": "13.0.7.0-r1", + "lessThanOrEqual": "13.0.9.0-r1", + "versionType": "custom" + } + ], + "cpes": [ + "cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:cd:12.0.11.1:*:*:*:*:*:*:*", + "cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:cd:13.0.1.0:*:*:*:*:*:*:*", + "cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:cd:12.0.12:*:*:*:*:*:*:*", + "cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:cd:13.0.7.0:*:*:*:*:*:*:*" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands is vulnerable to Log Forging on a request to create a resource.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands is vulnerable to Log Forging on a request to create a resource.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7296008", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "IBM strongly suggests the following:\nApp Connect Enterprise Certified Container CD and 13 LTS (Long Term Support)\nUpgrade to App Connect Enterprise Certified Container Operator version 13.7.0 or higher, and ensure that all components are at 13.0.9.1-r1 or higher. Documentation on the upgrade process is available at https://www.ibm.com/docs/en/app-connect/13.0?topic=releases-upgrading-operator\n\nApp Connect Enterprise Certified Container 12.0 LTS (Long Term Support)\nUpgrade to App Connect Enterprise Certified Container Operator version 12.0.29 or higher, and ensure that all components are at 12.0.12-r29 or higher. Documentation on the upgrade process is available at https://www.ibm.com/docs/en/app-connect/12.0?topic=umfpr-upgrading-operator-releases", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM strongly suggests the following:
App Connect Enterprise Certified Container CD and 13 LTS (Long Term Support)
Upgrade to App Connect Enterprise Certified Container Operator version 13.7.0 or higher, and ensure that all components are at 13.0.9.1-r1 or higher. Documentation on the upgrade process is available at https://www.ibm.com/docs/en/app-connect/13.0?topic=releases-upgrading-operator
App Connect Enterprise Certified Container 12.0 LTS (Long Term Support)
Upgrade to App Connect Enterprise Certified Container Operator version 12.0.29 or higher, and ensure that all components are at 12.0.12-r29 or higher. Documentation on the upgrade process is available at https://www.ibm.com/docs/en/app-connect/12.0?topic=umfpr-upgrading-operator-releases
" + } + ] + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123628.json b/data/2026/123xxx/CVE-2026-123628.json new file mode 100644 index 0000000000..3587fbe14d --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123628.json @@ -0,0 +1,119 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123628", + "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", + "state": "PUBLISHED", + "assignerShortName": "ibm", + "dateReserved": "2026-11-06T04:02:30.527Z", + "datePublished": "2026-11-13T21:50:13.487Z", + "dateUpdated": "2026-11-13T21:50:13.487Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", + "shortName": "ibm", + "dateUpdated": "2026-11-13T21:50:13.487Z" + }, + "title": "IBM webMethods Integration Server is vulnerable to sensitive information disclousure via admin/server/env API request.", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-200", + "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "IBM", + "product": "webMethods Integration Server", + "versions": [ + { + "status": "affected", + "version": "10.15", + "lessThanOrEqual": "10.15_Core_Fix2", + "versionType": "custom" + }, + { + "status": "affected", + "version": "11.1", + "lessThanOrEqual": "11.1_Core_Fix11", + "versionType": "custom" + } + ], + "cpes": [ + "cpe:2.3:a:ibm:webmethods_integration_server:10.15:*:*:*:*:*:*:*", + "cpe:2.3:a:ibm:webmethods_integration_server:11.1:*:*:*:*:*:*:*" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "IBM webMethods Integration Server 10.15 and 11.1 could allow a remote attacker to obtain sensitive information due to an exposure of sensitive server-side environment variables and Java runtime details.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM webMethods Integration Server 10.15 and 11.1 could allow a remote attacker to obtain sensitive information due to an exposure of sensitive server-side environment variables and Java runtime details.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7296466", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "IBM strongly recommends addressing the vulnerability now by applying the mentioned core fixes or later core fixes for the affected versions and following the respective fix readme document.\n\n\n\nIS_10.15_Core_Fix27 or later\n\nIS_11.1_Core_Fix12 or later\n\n\n\n\n\nFixes can be downloaded and installed via IBM webMethods Update Manager. Refer to How to Download webMethods Software https://www.ibm.com/support/pages/node/7232491", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "The HashiCorp cap JWT validation library before version 0.14.0 is vulnerable to a claims validation bypass that may cause downstream applications to make authorization decisions using claim values different from those validated. Exploitation requires attacker-controlled claims in a JWT signed by a key trusted by the application. This vulnerability (CVE-2026-19194) is fixed in cap 0.14.0.
IBM Bob 2.0.3 allows unauthorized extensions to retrieve session tokens via the authentication provider API. The token is exposed in the account identifier field during account enumeration, without requiring explicit user consent. This may allow malicious extensions to access sensitive session information and potentially perform unauthorized actions on behalf of the user.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7296454", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE", + "baseSeverity": "LOW", + "baseScore": 3.3, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "IBM strongly recommends addressing the vulnerability now by upgrading to the latest IBM Bob to V 2.0.4 https://internal.bob.ibm.com/docs/ide/getting-started/install#download-ibm-bob-1 \n\n\n\nWe recommend reviewing the documentation for guidance on installing IBM Bob IDE https://internal.bob.ibm.com/docs/ide", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM strongly recommends addressing the vulnerability now by upgrading to the latest IBM Bob to V 2.0.4
We recommend reviewing the documentation for guidance on installing IBM Bob IDE
" + } + ] + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/64xxx/CVE-2026-64675.json b/data/2026/64xxx/CVE-2026-64675.json index b1b2e37a9a..781a791484 100644 --- a/data/2026/64xxx/CVE-2026-64675.json +++ b/data/2026/64xxx/CVE-2026-64675.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-07-20T17:12:12.891Z", "datePublished": "2026-11-13T18:51:06.844Z", - "dateUpdated": "2026-11-13T18:51:06.844Z" + "dateUpdated": "2026-11-13T21:19:27.941Z" }, "containers": { "cna": { @@ -97,6 +97,48 @@ "advisory": "GHSA-mmg6-p4pr-cj6h", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-mmg6-p4pr-cj6h", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T21:19:09.622280Z", + "id": "CVE-2026-64675", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T21:19:27.941Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/68xxx/CVE-2026-68551.json b/data/2026/68xxx/CVE-2026-68551.json index 3976489a16..27d0303d0d 100644 --- a/data/2026/68xxx/CVE-2026-68551.json +++ b/data/2026/68xxx/CVE-2026-68551.json @@ -8,7 +8,7 @@ "assignerShortName": "GitHub_M", "dateReserved": "2026-07-30T19:56:44.102Z", "datePublished": "2026-11-13T19:14:35.246Z", - "dateUpdated": "2026-11-13T19:14:35.246Z" + "dateUpdated": "2026-11-13T21:20:37.560Z" }, "containers": { "cna": { @@ -113,6 +113,48 @@ "advisory": "GHSA-576g-r8m3-q9vp", "discovery": "UNKNOWN" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/teelur/budget-board/security/advisories/GHSA-576g-r8m3-q9vp", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T21:20:18.692189Z", + "id": "CVE-2026-68551", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T21:20:37.560Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/70xxx/CVE-2026-70640.json b/data/2026/70xxx/CVE-2026-70640.json index 2c30c45653..4e221d0ad1 100644 --- a/data/2026/70xxx/CVE-2026-70640.json +++ b/data/2026/70xxx/CVE-2026-70640.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-08-04T20:17:18.298Z", "datePublished": "2026-08-06T15:38:22.994Z", - "dateUpdated": "2026-11-08T14:08:33.530Z" + "dateUpdated": "2026-11-13T21:26:51.973Z" }, "containers": { "cna": { @@ -220,6 +220,25 @@ "shortName": "CISA-ADP", "dateUpdated": "2026-08-07T16:18:40.029Z" } + }, + { + "providerMetadata": { + "orgId": "af854a3a-2127-422b-91ae-364da2661108", + "shortName": "CVE", + "dateUpdated": "2026-11-13T21:26:51.973Z" + }, + "references": [ + { + "url": "https://www.youtube.com/watch?v=_FKX5hDwgVE&t=1079s" + }, + { + "url": "https://www.cyera.com/research/breaking-local-ai-runtimes-10-vulnerabilities-in-the-engine-behind-your-open-source-models" + } + ], + "title": "CVE Program Container", + "x_generator": { + "engine": "ADPogram 0.0.1" + } } ] } diff --git a/data/2026/82xxx/CVE-2026-82102.json b/data/2026/82xxx/CVE-2026-82102.json new file mode 100644 index 0000000000..1730ac4207 --- /dev/null +++ b/data/2026/82xxx/CVE-2026-82102.json @@ -0,0 +1,110 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-82102", + "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", + "state": "PUBLISHED", + "assignerShortName": "ibm", + "dateReserved": "2026-08-28T04:58:54.628Z", + "datePublished": "2026-11-13T22:08:09.210Z", + "dateUpdated": "2026-11-13T22:08:09.210Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", + "shortName": "ibm", + "dateUpdated": "2026-11-13T22:08:09.210Z" + }, + "title": "DataStage on Cloud Pak for Data has vulnerabilities due to open source software", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-918", + "description": "CWE-918 Server-Side Request Forgery", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "IBM", + "product": "DataStage on Cloud Pak for Data", + "versions": [ + { + "status": "affected", + "version": "5.4.0.0" + } + ], + "cpes": [ + "cpe:2.3:a:ibm:datastage_on_cloud_pak_for_data:5.4.0.0:*:*:*:*:*:*:*" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery vulnerability.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery vulnerability.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7296194", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseSeverity": "MEDIUM", + "baseScore": 6.4, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "IBM strongly recommends addressing the vulnerability now by upgrading DataStage on Cloud Pak for Data.\n\nProduct(s)Version(s) number and/or range Remediation/Fix/InstructionsDataStage on Cloud Pak for Data5.4.0.0\n\nUpgrade to 5.4 patch 9 or later by following these instructions https://www.ibm.com/docs/en/software-hub/5.4.x .", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM strongly recommends addressing the vulnerability now by upgrading DataStage on Cloud Pak for Data.
| Product(s) | Version(s) number and/or range | Remediation/Fix/Instructions |
| DataStage on Cloud Pak for Data | 5.4.0.0 | Upgrade to 5.4 patch 9 or later by following these instructions. |
IBM Security QRadar EDR 3.12 through 3.12.26 could allow a remote authenticated attacker to obtain sensitive information due to improper access control.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7296309", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "IBM encourages customers to update their systems promptly.\nProductFix versionIBM Security QRadar EDR3.12.27\nThe IBM Security QRadar EDR operator can be upgraded automatically when new compatible versions are available. However, you can control whether an operator is upgraded automatically by setting an approval strategy.\nTwo approval strategies are available:\nAutomatic (default) - New operator versions are installed automatically when they are available on the subscription channel.\nManual - When a new operator version is available on the subscription channel, the subscription indicates that an update is available, but you must approve the update manually.\nFor more information about the manual installation process, view Installing QRadar EDR", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM encourages customers to update their systems promptly.
| Product | Fix version |
| IBM Security QRadar EDR | 3.12.27 |
The IBM Security QRadar EDR operator can be upgraded automatically when new compatible versions are available. However, you can control whether an operator is upgraded automatically by setting an approval strategy.
Two approval strategies are available:
For more information about the manual installation process, view Installing QRadar EDR
IBM Security QRadar EDR 3.12 through 3.12.26 could allow a remote authenticated attacker to bypass security restrictions due to improper rate limiting on TOTP verification.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7296309", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "IBM encourages customers to update their systems promptly.\n\nProductFix versionIBM Security QRadar EDR3.12.27\n\n\n\n\n\n\n\nThe IBM Security QRadar EDR operator can be upgraded automatically when new compatible versions are available. However, you can control whether an operator is upgraded automatically by setting an approval strategy.\n\n\n\nTwo approval strategies are available:\n\n * Automatic (default) - New operator versions are installed automatically when they are available on the subscription channel.\n * Manual - When a new operator version is available on the subscription channel, the subscription indicates that an update is available, but you must approve the update manually.\n\n\n\n\nFor more information about the manual installation process, view Installing QRadar EDR https://www.ibm.com/docs/en/security-qradar-edr/3.12", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM encourages customers to update their systems promptly.
| Product | Fix version |
| IBM Security QRadar EDR | 3.12.27 |
The IBM Security QRadar EDR operator can be upgraded automatically when new compatible versions are available. However, you can control whether an operator is upgraded automatically by setting an approval strategy.
Two approval strategies are available:
For more information about the manual installation process, view Installing QRadar EDR
IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is potentially vulnerable to denial of service due to uncontrolled regular expression complexity (CWE-400 / ReDoS). An authenticated user with tool-registration privileges can embed catastrophically backtracking regex patterns in a tool's JSON Schema `pattern` field; when ContextForge validates arguments against that schema, the validation call may consume unbounded CPU, potentially degrading gateway availability.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7296667", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + } + ], + "workarounds": [ + { + "lang": "en", + "value": "None. IBM strongly recommends upgrading to the fixed version.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM strongly recommends addressing the vulnerability now.
| Product(s) | Version(s) number and/or range | Remediation/Fix/Instructions |
IBM ContextForge MCP Gateway | v1.0.0 - v1.0.11 | Upgrade to v1.1.0. See [v1.1.0 release notes] |
IBM Cyber Fraud 1.0.0 through 1.1.0 could allow a local attacker to bypass security restrictions due to a missing or misconfigured security context.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7295966", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseSeverity": "LOW", + "baseScore": 2.5, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "IBM strongly encourages customers to update their systems promptly.\n\n\n\nPlease upgrade to at least version 1.1.1 according to the following instructions:\n\n https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud \n\n\n\n https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM strongly encourages customers to update their systems promptly.
Please upgrade to at least version 1.1.1 according to the following instructions:
https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud
https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud
" + } + ] + } + ] + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T21:49:04.702035Z", + "id": "CVE-2026-97683", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T21:49:12.852Z" + } + } + ] + } +} \ No newline at end of file diff --git a/data/2026/9xxx/CVE-2026-9661.json b/data/2026/9xxx/CVE-2026-9661.json new file mode 100644 index 0000000000..439d805857 --- /dev/null +++ b/data/2026/9xxx/CVE-2026-9661.json @@ -0,0 +1,163 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-9661", + "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "state": "PUBLISHED", + "assignerShortName": "VulnCheck", + "dateReserved": "2026-05-26T21:50:46.277Z", + "datePublished": "2026-11-13T21:40:35.827Z", + "dateUpdated": "2026-11-13T22:10:14.165Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "shortName": "VulnCheck", + "dateUpdated": "2026-11-13T21:41:13.780Z" + }, + "title": "Postecert FIRMAOK! 1.6.29 Local Privilege Escalation via OpenSSL Search Path", + "descriptions": [ + { + "lang": "en", + "value": "Poste Italiane Postecert FIRMAOK! 1.6.29 on Windows contains a local privilege escalation vulnerability caused by an uncontrolled OpenSSL search path, where launcher.exe and dependent executables such as updater.exe and tslupdater.exe load OpenSSL configuration and library files from a hardcoded, user-writable directory that does not exist by default. A low-privileged local attacker can create this missing directory and place malicious OpenSSL configuration or library files inside it, causing the application to load and execute attacker-controlled code with the privileges of the user running it, enabling horizontal or, when a higher-privileged user runs the application, vertical privilege escalation up to full system compromise." + } + ], + "datePublic": "2026-11-13T00:00:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Uncontrolled Search Path Element", + "cweId": "CWE-427", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "defaultStatus": "unknown", + "vendor": "Poste Italiane", + "product": "Postecert FIRMAOK!", + "versions": [ + { + "status": "affected", + "version": "1.6.29", + "versionType": "semver" + } + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 7.3, + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" + } + }, + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + } + ], + "references": [ + { + "url": "https://seclists.org/fulldisclosure/2026/Nov/14", + "name": "Researcher Disclosure", + "tags": [ + "technical-description", + "exploit" + ] + }, + { + "url": "https://postecert.poste.it/firma/download.shtml", + "name": "Product Download", + "tags": [ + "product" + ] + }, + { + "url": "https://www.vulncheck.com/advisories/postecert-firmaok-local-privilege-escalation-via-openssl-search-path", + "name": "VulnCheck Advisory: Postecert FIRMAOK! 1.6.29 Local Privilege Escalation via OpenSSL Search Path", + "tags": [ + "third-party-advisory" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Andrea Intilangelo", + "type": "finder" + } + ], + "x_generator": { + "engine": "vulncheck" + } + }, + "adp": [ + { + "title": "CVE Program Container", + "references": [ + { + "url": "http://seclists.org/fulldisclosure/2026/Nov/14" + } + ], + "providerMetadata": { + "orgId": "af854a3a-2127-422b-91ae-364da2661108", + "shortName": "CVE", + "dateUpdated": "2026-11-13T22:10:14.165Z" + } + } + ] + } +} \ No newline at end of file diff --git a/data/2026/9xxx/CVE-2026-9821.json b/data/2026/9xxx/CVE-2026-9821.json new file mode 100644 index 0000000000..ff5299f8c1 --- /dev/null +++ b/data/2026/9xxx/CVE-2026-9821.json @@ -0,0 +1,113 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-9821", + "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", + "state": "PUBLISHED", + "assignerShortName": "ibm", + "dateReserved": "2026-05-28T11:27:43.155Z", + "datePublished": "2026-11-13T21:34:23.559Z", + "dateUpdated": "2026-11-13T21:34:23.559Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", + "shortName": "ibm", + "dateUpdated": "2026-11-13T21:34:23.559Z" + }, + "title": "IBM Cyber Fraud includes components with multiple known vulnerabilities", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-117", + "description": "CWE-117 Improper Output Neutralization for Logs", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "IBM", + "product": "Cyber Fraud", + "versions": [ + { + "status": "affected", + "version": "1.0.0", + "lessThanOrEqual": "1.1.0", + "versionType": "semver" + } + ], + "cpes": [ + "cpe:2.3:a:ibm:cyber_fraud:1.0.0:*:*:*:*:*:*:*", + "cpe:2.3:a:ibm:cyber_fraud:1.1.0:*:*:*:*:*:*:*" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7295966", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "IBM strongly encourages customers to update their systems promptly.\n\n\n\nPlease upgrade to at least version 1.1.1 according to the following instructions:\n\n https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud \n\n\n\n https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM strongly encourages customers to update their systems promptly.
Please upgrade to at least version 1.1.1 according to the following instructions:
https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud
https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud
" + } + ] + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/9xxx/CVE-2026-9870.json b/data/2026/9xxx/CVE-2026-9870.json new file mode 100644 index 0000000000..e262cc1779 --- /dev/null +++ b/data/2026/9xxx/CVE-2026-9870.json @@ -0,0 +1,113 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-9870", + "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", + "state": "PUBLISHED", + "assignerShortName": "ibm", + "dateReserved": "2026-05-28T17:18:38.929Z", + "datePublished": "2026-11-13T21:35:56.221Z", + "dateUpdated": "2026-11-13T21:35:56.221Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", + "shortName": "ibm", + "dateUpdated": "2026-11-13T21:35:56.221Z" + }, + "title": "IBM Cyber Fraud includes components with multiple known vulnerabilities", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-79", + "description": "CWE-79 Improper Neutralization of Input During Web Page Generation", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "IBM", + "product": "Cyber Fraud", + "versions": [ + { + "status": "affected", + "version": "1.0.0", + "lessThanOrEqual": "1.1.0", + "versionType": "semver" + } + ], + "cpes": [ + "cpe:2.3:a:ibm:cyber_fraud:1.0.0:*:*:*:*:*:*:*", + "cpe:2.3:a:ibm:cyber_fraud:1.1.0:*:*:*:*:*:*:*" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "IBM Cyber Fraud 1.0.0 through 1.1.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM Cyber Fraud 1.0.0 through 1.1.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7295966", + "tags": [ + "vendor-advisory", + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseSeverity": "MEDIUM", + "baseScore": 6.1, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "IBM strongly encourages customers to update their systems promptly.\n\n\n\nPlease upgrade to at least version 1.1.1 according to the following instructions:\n\n https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud \n\n\n\n https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "IBM strongly encourages customers to update their systems promptly.
Please upgrade to at least version 1.1.1 according to the following instructions:
https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=installing-cyber-fraud
https://www.ibm.com/docs/en/cyber-fraud/1.x?topic=upgrading-cyber-fraud
" + } + ] + } + ] + } + } +} \ No newline at end of file diff --git a/data/delta.json b/data/delta.json index 365687f66e..472807b4f6 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,98 +1,14 @@ { - "fetchTime": "2026-11-13T21:17:32.840Z", - "numberOfChanges": 15, - "new": [], - "updated": [ + "fetchTime": "2026-11-13T22:17:27.934Z", + "numberOfChanges": 1, + "new": [ { - "cveId": "CVE-2026-107398", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107398", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107398.json", - "dateUpdated": "2026-11-13T21:16:37.531Z" - }, - { - "cveId": "CVE-2026-128075", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128075", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128075.json", - "dateUpdated": "2026-11-13T21:16:08.311Z" - }, - { - "cveId": "CVE-2026-128082", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128082", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128082.json", - "dateUpdated": "2026-11-13T21:17:15.616Z" - }, - { - "cveId": "CVE-2026-128087", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128087", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128087.json", - "dateUpdated": "2026-11-13T21:15:30.367Z" - }, - { - "cveId": "CVE-2026-129119", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129119", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129119.json", - "dateUpdated": "2026-11-13T21:12:21.062Z" - }, - { - "cveId": "CVE-2026-129123", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129123", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129123.json", - "dateUpdated": "2026-11-13T21:11:40.850Z" - }, - { - "cveId": "CVE-2026-129152", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129152", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129152.json", - "dateUpdated": "2026-11-13T21:13:12.274Z" - }, - { - "cveId": "CVE-2026-129156", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129156", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129156.json", - "dateUpdated": "2026-11-13T21:14:46.139Z" - }, - { - "cveId": "CVE-2026-129161", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129161", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129161.json", - "dateUpdated": "2026-11-13T21:14:24.139Z" - }, - { - "cveId": "CVE-2026-129165", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129165", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129165.json", - "dateUpdated": "2026-11-13T21:13:56.649Z" - }, - { - "cveId": "CVE-2026-129169", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129169", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129169.json", - "dateUpdated": "2026-11-13T21:13:36.371Z" - }, - { - "cveId": "CVE-2026-63164", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63164", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63164.json", - "dateUpdated": "2026-11-13T21:12:40.343Z" - }, - { - "cveId": "CVE-2026-92735", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92735", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92735.json", - "dateUpdated": "2026-11-13T21:14:35.797Z" - }, - { - "cveId": "CVE-2026-93333", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-93333", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/93xxx/CVE-2026-93333.json", - "dateUpdated": "2026-11-13T21:12:09.496Z" - }, - { - "cveId": "CVE-2026-93335", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-93335", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/93xxx/CVE-2026-93335.json", - "dateUpdated": "2026-11-13T21:13:26.590Z" + "cveId": "CVE-2026-129173", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129173", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129173.json", + "dateUpdated": "2026-11-13T22:15:11.985Z" } ], + "updated": [], "error": [] } \ No newline at end of file diff --git a/data/deltaLog.json b/data/deltaLog.json index 400d355515..1526f4dd8a 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,480 @@ [ + { + "fetchTime": "2026-11-13T22:17:27.934Z", + "numberOfChanges": 1, + "new": [ + { + "cveId": "CVE-2026-129173", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129173", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129173.json", + "dateUpdated": "2026-11-13T22:15:11.985Z" + } + ], + "updated": [], + "error": [] + }, + { + "fetchTime": "2026-11-13T22:11:45.790Z", + "numberOfChanges": 7, + "new": [ + { + "cveId": "CVE-2026-109158", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109158", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109158.json", + "dateUpdated": "2026-11-13T22:03:27.115Z" + }, + { + "cveId": "CVE-2026-115788", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-115788", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/115xxx/CVE-2026-115788.json", + "dateUpdated": "2026-11-13T22:01:07.122Z" + }, + { + "cveId": "CVE-2026-82102", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82102", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82102.json", + "dateUpdated": "2026-11-13T22:08:09.210Z" + }, + { + "cveId": "CVE-2026-91868", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-91868", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/91xxx/CVE-2026-91868.json", + "dateUpdated": "2026-11-13T22:07:40.779Z" + }, + { + "cveId": "CVE-2026-91869", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-91869", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/91xxx/CVE-2026-91869.json", + "dateUpdated": "2026-11-13T22:07:38.289Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-114468", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114468", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114468.json", + "dateUpdated": "2026-11-13T22:01:38.463Z" + }, + { + "cveId": "CVE-2026-9661", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-9661", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9661.json", + "dateUpdated": "2026-11-13T22:10:14.165Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T22:00:19.969Z", + "numberOfChanges": 6, + "new": [ + { + "cveId": "CVE-2025-43874", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-43874", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43874.json", + "dateUpdated": "2026-11-13T21:59:57.409Z" + }, + { + "cveId": "CVE-2025-53700", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-53700", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53700.json", + "dateUpdated": "2026-11-13T21:56:12.492Z" + }, + { + "cveId": "CVE-2026-114468", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114468", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114468.json", + "dateUpdated": "2026-11-13T21:59:04.689Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-127916", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127916", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127916.json", + "dateUpdated": "2026-11-13T21:59:41.612Z" + }, + { + "cveId": "CVE-2026-16662", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16662", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16662.json", + "dateUpdated": "2026-11-13T21:59:04.545Z" + }, + { + "cveId": "CVE-2026-16664", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16664", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16664.json", + "dateUpdated": "2026-11-13T21:59:26.710Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T21:54:24.102Z", + "numberOfChanges": 6, + "new": [ + { + "cveId": "CVE-2025-53699", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-53699", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53699.json", + "dateUpdated": "2026-11-13T21:50:56.925Z" + }, + { + "cveId": "CVE-2026-123628", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123628", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123628.json", + "dateUpdated": "2026-11-13T21:50:13.487Z" + }, + { + "cveId": "CVE-2026-5514", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-5514", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5514.json", + "dateUpdated": "2026-11-13T21:51:23.679Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-110194", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110194", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110194.json", + "dateUpdated": "2026-11-13T21:52:31.533Z" + }, + { + "cveId": "CVE-2026-115501", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-115501", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/115xxx/CVE-2026-115501.json", + "dateUpdated": "2026-11-13T21:51:38.210Z" + }, + { + "cveId": "CVE-2026-97683", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97683", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97683.json", + "dateUpdated": "2026-11-13T21:49:12.852Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T21:48:23.813Z", + "numberOfChanges": 15, + "new": [ + { + "cveId": "CVE-2025-53698", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-53698", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53698.json", + "dateUpdated": "2026-11-13T21:46:48.829Z" + }, + { + "cveId": "CVE-2026-110178", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110178", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110178.json", + "dateUpdated": "2026-11-13T21:44:00.993Z" + }, + { + "cveId": "CVE-2026-110189", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110189", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110189.json", + "dateUpdated": "2026-11-13T21:43:26.623Z" + }, + { + "cveId": "CVE-2026-110194", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110194", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110194.json", + "dateUpdated": "2026-11-13T21:44:24.821Z" + }, + { + "cveId": "CVE-2026-110195", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110195", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110195.json", + "dateUpdated": "2026-11-13T21:43:18.359Z" + }, + { + "cveId": "CVE-2026-110199", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110199", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110199.json", + "dateUpdated": "2026-11-13T21:43:52.021Z" + }, + { + "cveId": "CVE-2026-110278", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110278", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110278.json", + "dateUpdated": "2026-11-13T21:43:09.800Z" + }, + { + "cveId": "CVE-2026-110279", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110279", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110279.json", + "dateUpdated": "2026-11-13T21:43:43.544Z" + }, + { + "cveId": "CVE-2026-115501", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-115501", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/115xxx/CVE-2026-115501.json", + "dateUpdated": "2026-11-13T21:46:28.286Z" + }, + { + "cveId": "CVE-2026-124020", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124020", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124020.json", + "dateUpdated": "2026-11-13T21:43:00.963Z" + }, + { + "cveId": "CVE-2026-124021", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124021", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124021.json", + "dateUpdated": "2026-11-13T21:43:13.762Z" + }, + { + "cveId": "CVE-2026-94407", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94407", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94407.json", + "dateUpdated": "2026-11-13T21:43:35.363Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-105622", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105622", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105622.json", + "dateUpdated": "2026-11-13T21:46:22.488Z" + }, + { + "cveId": "CVE-2026-105623", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105623", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105623.json", + "dateUpdated": "2026-11-13T21:43:33.794Z" + }, + { + "cveId": "CVE-2026-105624", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105624", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105624.json", + "dateUpdated": "2026-11-13T21:45:18.832Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T21:42:35.853Z", + "numberOfChanges": 5, + "new": [ + { + "cveId": "CVE-2025-53697", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-53697", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53697.json", + "dateUpdated": "2026-11-13T21:41:47.141Z" + }, + { + "cveId": "CVE-2026-128886", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128886", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128886.json", + "dateUpdated": "2026-11-13T21:42:20.482Z" + }, + { + "cveId": "CVE-2026-9661", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-9661", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9661.json", + "dateUpdated": "2026-11-13T21:41:13.780Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-16664", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16664", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16664.json", + "dateUpdated": "2026-11-13T21:39:18.571Z" + }, + { + "cveId": "CVE-2026-95379", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95379", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95379.json", + "dateUpdated": "2026-11-13T21:42:12.008Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T21:36:47.038Z", + "numberOfChanges": 6, + "new": [ + { + "cveId": "CVE-2026-108290", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108290", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108290.json", + "dateUpdated": "2026-11-13T21:35:45.225Z" + }, + { + "cveId": "CVE-2026-97683", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97683", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97683.json", + "dateUpdated": "2026-11-13T21:36:07.726Z" + }, + { + "cveId": "CVE-2026-9821", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-9821", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9821.json", + "dateUpdated": "2026-11-13T21:34:23.559Z" + }, + { + "cveId": "CVE-2026-9870", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-9870", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/9xxx/CVE-2026-9870.json", + "dateUpdated": "2026-11-13T21:35:56.221Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-106018", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106018", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106018.json", + "dateUpdated": "2026-11-13T21:32:54.410Z" + }, + { + "cveId": "CVE-2026-19194", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19194", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19194.json", + "dateUpdated": "2026-11-13T21:30:34.534Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T21:29:37.454Z", + "numberOfChanges": 7, + "new": [ + { + "cveId": "CVE-2026-110330", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110330", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110330.json", + "dateUpdated": "2026-11-13T21:26:06.206Z" + }, + { + "cveId": "CVE-2026-110331", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110331", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110331.json", + "dateUpdated": "2026-11-13T21:25:59.256Z" + } + ], + "updated": [ + { + "cveId": "CVE-2025-43867", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-43867", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43867.json", + "dateUpdated": "2026-11-13T21:27:33.159Z" + }, + { + "cveId": "CVE-2026-127216", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127216", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127216.json", + "dateUpdated": "2026-11-13T21:25:38.595Z" + }, + { + "cveId": "CVE-2026-128125", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128125", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128125.json", + "dateUpdated": "2026-11-13T21:24:58.089Z" + }, + { + "cveId": "CVE-2026-128129", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128129", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128129.json", + "dateUpdated": "2026-11-13T21:25:19.830Z" + }, + { + "cveId": "CVE-2026-70640", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-70640", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/70xxx/CVE-2026-70640.json", + "dateUpdated": "2026-11-13T21:26:51.973Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T21:23:47.415Z", + "numberOfChanges": 13, + "new": [ + { + "cveId": "CVE-2026-102632", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102632", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102632.json", + "dateUpdated": "2026-11-13T21:17:45.535Z" + }, + { + "cveId": "CVE-2026-129137", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129137", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129137.json", + "dateUpdated": "2026-11-13T21:22:47.164Z" + }, + { + "cveId": "CVE-2026-19194", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19194", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19194.json", + "dateUpdated": "2026-11-13T21:17:56.457Z" + } + ], + "updated": [ + { + "cveId": "CVE-2025-43867", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-43867", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/43xxx/CVE-2025-43867.json", + "dateUpdated": "2026-11-13T21:23:36.562Z" + }, + { + "cveId": "CVE-2026-104204", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104204", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104204.json", + "dateUpdated": "2026-11-13T21:18:52.182Z" + }, + { + "cveId": "CVE-2026-127213", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127213", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127213.json", + "dateUpdated": "2026-11-13T21:21:44.568Z" + }, + { + "cveId": "CVE-2026-128117", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128117", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128117.json", + "dateUpdated": "2026-11-13T21:22:10.163Z" + }, + { + "cveId": "CVE-2026-128121", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128121", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128121.json", + "dateUpdated": "2026-11-13T21:22:54.622Z" + }, + { + "cveId": "CVE-2026-128885", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128885", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128885.json", + "dateUpdated": "2026-11-13T21:19:18.067Z" + }, + { + "cveId": "CVE-2026-129142", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129142", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129142.json", + "dateUpdated": "2026-11-13T21:20:02.120Z" + }, + { + "cveId": "CVE-2026-64675", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-64675", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64675.json", + "dateUpdated": "2026-11-13T21:19:27.941Z" + }, + { + "cveId": "CVE-2026-68551", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-68551", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68551.json", + "dateUpdated": "2026-11-13T21:20:37.560Z" + }, + { + "cveId": "CVE-2026-82414", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82414", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82414.json", + "dateUpdated": "2026-11-13T21:18:08.561Z" + } + ], + "error": [] + }, { "fetchTime": "2026-11-13T21:17:32.840Z", "numberOfChanges": 15, @@ -777218,576 +777694,5 @@ } ], "error": [] - }, - { - "fetchTime": "2026-10-14T22:10:39.544Z", - "numberOfChanges": 5, - "new": [ - { - "cveId": "CVE-2026-110816", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110816", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110816.json", - "dateUpdated": "2026-10-14T22:05:24.015Z" - } - ], - "updated": [ - { - "cveId": "CVE-2023-5678", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-5678", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5678.json", - "dateUpdated": "2026-10-14T22:03:03.588Z" - }, - { - "cveId": "CVE-2023-5717", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-5717", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5717.json", - "dateUpdated": "2026-10-14T22:07:12.236Z" - }, - { - "cveId": "CVE-2023-5981", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-5981", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5981.json", - "dateUpdated": "2026-10-14T22:07:14.101Z" - }, - { - "cveId": "CVE-2023-6121", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-6121", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/6xxx/CVE-2023-6121.json", - "dateUpdated": "2026-10-14T22:07:16.115Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T21:58:19.205Z", - "numberOfChanges": 5, - "new": [ - { - "cveId": "CVE-2026-102298", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102298", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102298.json", - "dateUpdated": "2026-10-14T21:55:10.360Z" - } - ], - "updated": [ - { - "cveId": "CVE-2023-5156", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-5156", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5156.json", - "dateUpdated": "2026-10-14T21:54:12.207Z" - }, - { - "cveId": "CVE-2023-5178", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-5178", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5178.json", - "dateUpdated": "2026-10-14T21:54:13.573Z" - }, - { - "cveId": "CVE-2023-5197", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-5197", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5197.json", - "dateUpdated": "2026-10-14T21:54:14.918Z" - }, - { - "cveId": "CVE-2023-5363", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-5363", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/5xxx/CVE-2023-5363.json", - "dateUpdated": "2026-10-14T21:58:15.012Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T21:52:26.819Z", - "numberOfChanges": 2, - "new": [], - "updated": [ - { - "cveId": "CVE-2023-4273", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-4273", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4273.json", - "dateUpdated": "2026-10-14T21:50:17.655Z" - }, - { - "cveId": "CVE-2023-4921", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-4921", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4921.json", - "dateUpdated": "2026-10-14T21:49:38.794Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T21:46:40.715Z", - "numberOfChanges": 8, - "new": [ - { - "cveId": "CVE-2026-108336", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108336", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108336.json", - "dateUpdated": "2026-10-14T21:41:40.417Z" - }, - { - "cveId": "CVE-2026-108337", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108337", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108337.json", - "dateUpdated": "2026-10-14T21:43:08.247Z" - }, - { - "cveId": "CVE-2026-110698", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110698", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110698.json", - "dateUpdated": "2026-10-14T21:45:09.762Z" - } - ], - "updated": [ - { - "cveId": "CVE-2023-4806", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-4806", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4806.json", - "dateUpdated": "2026-10-14T21:40:57.569Z" - }, - { - "cveId": "CVE-2023-4807", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-4807", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4807.json", - "dateUpdated": "2026-10-14T21:40:59.783Z" - }, - { - "cveId": "CVE-2023-4813", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-4813", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4813.json", - "dateUpdated": "2026-10-14T21:41:01.502Z" - }, - { - "cveId": "CVE-2023-4911", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-4911", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4911.json", - "dateUpdated": "2026-10-14T21:45:37.956Z" - }, - { - "cveId": "CVE-2026-96596", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96596", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96596.json", - "dateUpdated": "2026-10-14T21:46:30.112Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T21:39:46.464Z", - "numberOfChanges": 11, - "new": [ - { - "cveId": "CVE-2026-108335", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108335", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108335.json", - "dateUpdated": "2026-10-14T21:39:17.470Z" - }, - { - "cveId": "CVE-2026-110696", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110696", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110696.json", - "dateUpdated": "2026-10-14T21:30:11.205Z" - } - ], - "updated": [ - { - "cveId": "CVE-2015-5345", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-5345", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5345.json", - "dateUpdated": "2026-10-14T21:30:18.101Z" - }, - { - "cveId": "CVE-2015-5346", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-5346", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5346.json", - "dateUpdated": "2026-10-14T21:30:52.242Z" - }, - { - "cveId": "CVE-2015-5351", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-5351", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5351.json", - "dateUpdated": "2026-10-14T21:31:34.728Z" - }, - { - "cveId": "CVE-2015-6093", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-6093", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/6xxx/CVE-2015-6093.json", - "dateUpdated": "2026-10-14T21:32:03.903Z" - }, - { - "cveId": "CVE-2015-6117", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-6117", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/6xxx/CVE-2015-6117.json", - "dateUpdated": "2026-10-14T21:32:31.430Z" - }, - { - "cveId": "CVE-2015-7575", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-7575", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/7xxx/CVE-2015-7575.json", - "dateUpdated": "2026-10-14T21:33:06.651Z" - }, - { - "cveId": "CVE-2015-8126", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-8126", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/8xxx/CVE-2015-8126.json", - "dateUpdated": "2026-10-14T21:33:50.530Z" - }, - { - "cveId": "CVE-2023-4527", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-4527", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4527.json", - "dateUpdated": "2026-10-14T21:32:18.501Z" - }, - { - "cveId": "CVE-2023-4623", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-4623", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4623.json", - "dateUpdated": "2026-10-14T21:36:21.987Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T21:29:42.425Z", - "numberOfChanges": 26, - "new": [], - "updated": [ - { - "cveId": "CVE-2015-4732", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4732", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4732.json", - "dateUpdated": "2026-10-14T21:19:42.241Z" - }, - { - "cveId": "CVE-2015-4734", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4734", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4734.json", - "dateUpdated": "2026-10-14T21:20:06.145Z" - }, - { - "cveId": "CVE-2015-4748", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4748", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4748.json", - "dateUpdated": "2026-10-14T21:20:34.656Z" - }, - { - "cveId": "CVE-2015-4760", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4760", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4760.json", - "dateUpdated": "2026-10-14T21:21:01.390Z" - }, - { - "cveId": "CVE-2015-4803", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4803", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4803.json", - "dateUpdated": "2026-10-14T21:21:30.326Z" - }, - { - "cveId": "CVE-2015-4805", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4805", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4805.json", - "dateUpdated": "2026-10-14T21:21:55.458Z" - }, - { - "cveId": "CVE-2015-4806", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4806", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4806.json", - "dateUpdated": "2026-10-14T21:22:39.092Z" - }, - { - "cveId": "CVE-2015-4835", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4835", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4835.json", - "dateUpdated": "2026-10-14T21:23:08.223Z" - }, - { - "cveId": "CVE-2015-4840", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4840", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4840.json", - "dateUpdated": "2026-10-14T21:23:35.659Z" - }, - { - "cveId": "CVE-2015-4842", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4842", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4842.json", - "dateUpdated": "2026-10-14T21:23:59.482Z" - }, - { - "cveId": "CVE-2015-4843", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4843", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4843.json", - "dateUpdated": "2026-10-14T21:24:25.077Z" - }, - { - "cveId": "CVE-2015-4844", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4844", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4844.json", - "dateUpdated": "2026-10-14T21:24:52.019Z" - }, - { - "cveId": "CVE-2015-4860", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4860", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4860.json", - "dateUpdated": "2026-10-14T21:25:23.302Z" - }, - { - "cveId": "CVE-2015-4872", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4872", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4872.json", - "dateUpdated": "2026-10-14T21:25:49.493Z" - }, - { - "cveId": "CVE-2015-4881", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4881", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4881.json", - "dateUpdated": "2026-10-14T21:26:19.045Z" - }, - { - "cveId": "CVE-2015-4882", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4882", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4882.json", - "dateUpdated": "2026-10-14T21:26:44.123Z" - }, - { - "cveId": "CVE-2015-4883", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4883", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4883.json", - "dateUpdated": "2026-10-14T21:27:12.186Z" - }, - { - "cveId": "CVE-2015-4893", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4893", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4893.json", - "dateUpdated": "2026-10-14T21:27:41.305Z" - }, - { - "cveId": "CVE-2015-4903", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4903", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4903.json", - "dateUpdated": "2026-10-14T21:28:23.875Z" - }, - { - "cveId": "CVE-2015-4911", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4911", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4911.json", - "dateUpdated": "2026-10-14T21:28:55.824Z" - }, - { - "cveId": "CVE-2015-5174", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-5174", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/5xxx/CVE-2015-5174.json", - "dateUpdated": "2026-10-14T21:29:38.832Z" - }, - { - "cveId": "CVE-2023-4015", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-4015", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4015.json", - "dateUpdated": "2026-10-14T21:23:00.520Z" - }, - { - "cveId": "CVE-2023-4016", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-4016", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4016.json", - "dateUpdated": "2026-10-14T21:23:02.292Z" - }, - { - "cveId": "CVE-2023-4039", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-4039", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4039.json", - "dateUpdated": "2026-10-14T21:23:13.065Z" - }, - { - "cveId": "CVE-2023-4273", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-4273", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4273.json", - "dateUpdated": "2026-10-14T21:27:44.076Z" - }, - { - "cveId": "CVE-2026-96596", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96596", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96596.json", - "dateUpdated": "2026-10-14T21:21:09.004Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T21:19:13.850Z", - "numberOfChanges": 28, - "new": [ - { - "cveId": "CVE-2026-110695", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110695", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110695.json", - "dateUpdated": "2026-10-14T21:15:09.917Z" - } - ], - "updated": [ - { - "cveId": "CVE-2015-0085", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-0085", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/0xxx/CVE-2015-0085.json", - "dateUpdated": "2026-10-14T21:04:24.379Z" - }, - { - "cveId": "CVE-2015-0204", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-0204", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/0xxx/CVE-2015-0204.json", - "dateUpdated": "2026-10-14T21:05:09.257Z" - }, - { - "cveId": "CVE-2015-0254", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-0254", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/0xxx/CVE-2015-0254.json", - "dateUpdated": "2026-10-14T21:06:41.314Z" - }, - { - "cveId": "CVE-2015-0469", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-0469", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/0xxx/CVE-2015-0469.json", - "dateUpdated": "2026-10-14T21:07:20.507Z" - }, - { - "cveId": "CVE-2015-1197", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-1197", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1197.json", - "dateUpdated": "2026-10-14T21:10:58.785Z" - }, - { - "cveId": "CVE-2015-1683", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-1683", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/1xxx/CVE-2015-1683.json", - "dateUpdated": "2026-10-14T21:11:36.769Z" - }, - { - "cveId": "CVE-2015-2423", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-2423", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/2xxx/CVE-2015-2423.json", - "dateUpdated": "2026-10-14T21:12:21.433Z" - }, - { - "cveId": "CVE-2015-2468", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-2468", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/2xxx/CVE-2015-2468.json", - "dateUpdated": "2026-10-14T21:13:18.024Z" - }, - { - "cveId": "CVE-2015-2469", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-2469", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/2xxx/CVE-2015-2469.json", - "dateUpdated": "2026-10-14T21:13:46.226Z" - }, - { - "cveId": "CVE-2015-2470", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-2470", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/2xxx/CVE-2015-2470.json", - "dateUpdated": "2026-10-14T21:14:15.477Z" - }, - { - "cveId": "CVE-2015-2477", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-2477", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/2xxx/CVE-2015-2477.json", - "dateUpdated": "2026-10-14T21:14:39.338Z" - }, - { - "cveId": "CVE-2015-2601", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-2601", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/2xxx/CVE-2015-2601.json", - "dateUpdated": "2026-10-14T21:15:17.990Z" - }, - { - "cveId": "CVE-2015-2621", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-2621", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/2xxx/CVE-2015-2621.json", - "dateUpdated": "2026-10-14T21:15:45.337Z" - }, - { - "cveId": "CVE-2015-2625", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-2625", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/2xxx/CVE-2015-2625.json", - "dateUpdated": "2026-10-14T21:16:30.124Z" - }, - { - "cveId": "CVE-2015-2627", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-2627", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/2xxx/CVE-2015-2627.json", - "dateUpdated": "2026-10-14T21:16:55.312Z" - }, - { - "cveId": "CVE-2015-2628", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-2628", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/2xxx/CVE-2015-2628.json", - "dateUpdated": "2026-10-14T21:17:21.578Z" - }, - { - "cveId": "CVE-2015-2637", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-2637", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/2xxx/CVE-2015-2637.json", - "dateUpdated": "2026-10-14T21:17:45.817Z" - }, - { - "cveId": "CVE-2015-2638", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-2638", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/2xxx/CVE-2015-2638.json", - "dateUpdated": "2026-10-14T21:18:14.350Z" - }, - { - "cveId": "CVE-2015-2664", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-2664", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/2xxx/CVE-2015-2664.json", - "dateUpdated": "2026-10-14T21:18:43.440Z" - }, - { - "cveId": "CVE-2015-4731", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2015-4731", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2015/4xxx/CVE-2015-4731.json", - "dateUpdated": "2026-10-14T21:19:12.984Z" - }, - { - "cveId": "CVE-2023-3611", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-3611", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/3xxx/CVE-2023-3611.json", - "dateUpdated": "2026-10-14T21:13:41.685Z" - }, - { - "cveId": "CVE-2023-3772", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-3772", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/3xxx/CVE-2023-3772.json", - "dateUpdated": "2026-10-14T21:13:43.266Z" - }, - { - "cveId": "CVE-2023-3773", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-3773", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/3xxx/CVE-2023-3773.json", - "dateUpdated": "2026-10-14T21:13:44.467Z" - }, - { - "cveId": "CVE-2023-3777", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-3777", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/3xxx/CVE-2023-3777.json", - "dateUpdated": "2026-10-14T21:13:45.609Z" - }, - { - "cveId": "CVE-2023-3817", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-3817", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/3xxx/CVE-2023-3817.json", - "dateUpdated": "2026-10-14T21:13:47.977Z" - }, - { - "cveId": "CVE-2023-4004", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-4004", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/4xxx/CVE-2023-4004.json", - "dateUpdated": "2026-10-14T21:18:25.038Z" - }, - { - "cveId": "CVE-2026-22222", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-22222", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/22xxx/CVE-2026-22222.json", - "dateUpdated": "2026-10-14T21:14:14.811Z" - } - ], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index 6c78ae6452..7319b6d8cc 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "b1c46be231e51f200b0eda663e1b44ed458e117b", + "upstream_commit": "9fa492e16a3e5b247f7dfd4017bd4de12fc74552", "since_year": 2017, - "records": 332510, - "synced_at_utc": "2026-11-13T21:26:41.730220+00:00" + "records": 332546, + "synced_at_utc": "2026-11-13T22:25:59.016848+00:00" }