CVE sync 2026-11-14T16:32:45Z
This commit is contained in:
Vulnerability Bot committed
1 parent
cd2440d069
commit
d844e20ccf
9 files changed
+1322
-2812
No files matched your search
@@ -0,0 +1,111 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-110531",
|
||||
"assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "Wordfence",
|
||||
"dateReserved": "2026-10-14T12:52:05.030Z",
|
||||
"datePublished": "2026-11-14T15:32:25.847Z",
|
||||
"dateUpdated": "2026-11-14T15:32:25.847Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
|
||||
"shortName": "Wordfence",
|
||||
"dateUpdated": "2026-11-14T15:32:25.847Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "foliovision",
|
||||
"product": "FV Player 8",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"status": "affected",
|
||||
"lessThanOrEqual": "8.1.9",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unaffected"
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The FV Player 8 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fv_player_videos' parameter in all versions up to, and including, 8.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires the administrator-controlled \"Allow visitors to upload videos to their profile\" setting to be enabled, without which the vulnerable save routine is inaccessible to Subscriber-level users."
|
||||
}
|
||||
],
|
||||
"title": "FV Player 8 <= 8.1.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'Popup' Shortcode Attribute via Profile Video",
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4d581f96-5a30-49f7-bddf-45dd581d7a24?source=cve"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/fv-player/trunk/freedom-video-player/modules/overlay-popup.module.js#L95"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/fv-player/trunk/models/fv-player-frontend.php#L1224"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/fv-player/trunk/models/custom-videos.php#L115"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/fv-player/trunk/models/custom-videos.php#L790"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/fv-player/trunk/models/custom-videos.php#L757"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/fv-player/trunk/models/email-subscription.php#L762"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/foliovision/fv-wordpress-flowplayer/commit/1c936e8100989c34e08415adfcb5ea3db2109902"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation",
|
||||
"cweId": "CWE-79",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
|
||||
"baseScore": 6.4,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "finder",
|
||||
"value": "braintx"
|
||||
}
|
||||
],
|
||||
"timeline": [
|
||||
{
|
||||
"time": "2026-10-14T13:07:21.000Z",
|
||||
"lang": "en",
|
||||
"value": "Vendor Notified"
|
||||
},
|
||||
{
|
||||
"time": "2026-11-14T03:00:57.000Z",
|
||||
"lang": "en",
|
||||
"value": "Disclosed"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,105 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-116753",
|
||||
"assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "Wordfence",
|
||||
"dateReserved": "2026-10-26T20:34:49.308Z",
|
||||
"datePublished": "2026-11-14T15:32:27.194Z",
|
||||
"dateUpdated": "2026-11-14T15:32:27.194Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
|
||||
"shortName": "Wordfence",
|
||||
"dateUpdated": "2026-11-14T15:32:27.194Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "ninjateam",
|
||||
"product": "Multi Step for Contact Form 7",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"status": "affected",
|
||||
"lessThanOrEqual": "2.9.1",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unaffected"
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The Multi Step for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'multipart field name (array key)' parameter in all versions up to, and including, 2.9.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Successful exploitation requires the target CF7 form to have the 'Save every step' option enabled and the Database for Contact Form 7 companion plugin to be active with its 'Expandable' table option enabled, both of which are disabled by default."
|
||||
}
|
||||
],
|
||||
"title": "Multi Step for Contact Form 7 <= 2.9.1 - Unauthenticated Stored Cross-Site Scripting via Multipart Field Name",
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b9700627-97f2-4da1-a984-934062bd5014?source=cve"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/cf7-multi-step/tags/2.9.1/inc/frontend/validation.php#L330"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/cf7-multi-step/tags/2.9.1/inc/frontend/validation.php#L291"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/cf7-multi-step/tags/2.9.1/inc/frontend/validation.php#L20"
|
||||
},
|
||||
{
|
||||
"url": "https://wordpress.org/plugins/cf7-multi-step/"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/cf7-multi-step/tags/2.9.2/inc/frontend/validation.php"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation",
|
||||
"cweId": "CWE-79",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "finder",
|
||||
"value": "R3D"
|
||||
}
|
||||
],
|
||||
"timeline": [
|
||||
{
|
||||
"time": "2026-10-27T16:31:07.000Z",
|
||||
"lang": "en",
|
||||
"value": "Vendor Notified"
|
||||
},
|
||||
{
|
||||
"time": "2026-11-14T02:53:46.000Z",
|
||||
"lang": "en",
|
||||
"value": "Disclosed"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,102 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-120687",
|
||||
"assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "Wordfence",
|
||||
"dateReserved": "2026-11-02T19:20:34.456Z",
|
||||
"datePublished": "2026-11-14T15:32:26.362Z",
|
||||
"dateUpdated": "2026-11-14T15:32:26.362Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
|
||||
"shortName": "Wordfence",
|
||||
"dateUpdated": "2026-11-14T15:32:26.362Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "fooplugins",
|
||||
"product": "Lightbox & Modal Popup WordPress Plugin – FooBox",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"status": "affected",
|
||||
"lessThanOrEqual": "2.8.7",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unaffected"
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The Lightbox & Modal Popup WordPress Plugin – FooBox plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'img alt attribute inside .wp-caption container' parameter in all versions up to, and including, 2.8.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable by Subscriber-level users when bbPress is installed, as its bbp_filter_kses filter chain permits img and pre tags while preserving numeric character references inside attribute values, allowing encoded payloads to bypass save-time sanitization and reach the vulnerable sink fully intact. Exploitation by attackers with subscriber-level access and above requires that bbPress 2.6.20 is installed, a public forum exists, and either the first topic has already been approved or subsequent topics clear moderation. On a default installation, where that is not configured, the vulnerability requires attackers with contributor-level access and above."
|
||||
}
|
||||
],
|
||||
"title": "Lightbox & Modal Popup WordPress Plugin <= 2.8.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Image Alt Attribute in .wp-caption Containers",
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/66b5a5a2-8f70-4a85-ad03-8bd159cafdf5?source=cve"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/foobox-image-lightbox/tags/2.8.7/free/js/foobox.free.min.js"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/foobox-image-lightbox/tags/2.8.7/free/includes/class-script-generator.php#L175"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/changeset/3789888/foobox-image-lightbox"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/changeset?reponame=&new=3789888%40foobox-image-lightbox%2Ftags%2F2.8.8&old=3741260%40foobox-image-lightbox%2Ftags%2F2.8.7"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation",
|
||||
"cweId": "CWE-79",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "finder",
|
||||
"value": "Adrien Brunner"
|
||||
}
|
||||
],
|
||||
"timeline": [
|
||||
{
|
||||
"time": "2026-11-02T19:37:50.000Z",
|
||||
"lang": "en",
|
||||
"value": "Vendor Notified"
|
||||
},
|
||||
{
|
||||
"time": "2026-11-14T03:02:01.000Z",
|
||||
"lang": "en",
|
||||
"value": "Disclosed"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,114 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-127115",
|
||||
"assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "Wordfence",
|
||||
"dateReserved": "2026-11-12T15:16:07.287Z",
|
||||
"datePublished": "2026-11-14T15:32:26.823Z",
|
||||
"dateUpdated": "2026-11-14T15:32:26.823Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
|
||||
"shortName": "Wordfence",
|
||||
"dateUpdated": "2026-11-14T15:32:26.823Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "themekraft",
|
||||
"product": "BuddyForms",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0",
|
||||
"status": "affected",
|
||||
"lessThanOrEqual": "2.10.6",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unaffected"
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The BuddyForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'buddyforms_form_content' parameter in all versions up to, and including, 2.10.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable when a form configured with the public_submit option is published — a condition met by the plugin's bundled Post Simple template out of the box."
|
||||
}
|
||||
],
|
||||
"title": "BuddyForms <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via 'title' Attribute of [bf_login_form] Shortcode",
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/9e2f180b-fd81-4dfd-b264-d9ca74fdd092?source=cve"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/buddyforms/tags/2.10.6/includes/functions.php#L270"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/buddyforms/tags/2.10.6/includes/functions.php#L2518"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/buddyforms/tags/2.10.6/includes/shortcodes.php#L464"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/buddyforms/tags/2.10.6/includes/form/form-control.php#L663"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/buddyforms/tags/2.10.6/includes/form/form-ajax.php#L140"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/buddyforms/tags/2.10.6/includes/form/form-ajax.php#L145"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/Themekraft/buddyforms/pull/783/files"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/buddyforms/tags/2.10.7/includes/functions.php"
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation",
|
||||
"cweId": "CWE-79",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
|
||||
"baseScore": 5.4,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "finder",
|
||||
"value": "Mohamed Amgad Khater (mamgad)"
|
||||
}
|
||||
],
|
||||
"timeline": [
|
||||
{
|
||||
"time": "2026-11-12T15:32:07.000Z",
|
||||
"lang": "en",
|
||||
"value": "Vendor Notified"
|
||||
},
|
||||
{
|
||||
"time": "2026-11-14T02:56:56.000Z",
|
||||
"lang": "en",
|
||||
"value": "Disclosed"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,401 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129260",
|
||||
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulDB",
|
||||
"dateReserved": "2026-11-13T20:03:13.655Z",
|
||||
"datePublished": "2026-11-14T15:45:17.921Z",
|
||||
"dateUpdated": "2026-11-14T15:45:17.921Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
|
||||
"shortName": "VulDB",
|
||||
"dateUpdated": "2026-11-14T15:45:17.921Z"
|
||||
},
|
||||
"title": "Mereithhh VanBlog Custom local.provider.ts fs.readFileSync path traversal",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-22",
|
||||
"lang": "en",
|
||||
"description": "Path Traversal"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Mereithhh",
|
||||
"product": "VanBlog",
|
||||
"versions": [
|
||||
{
|
||||
"version": "0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.2",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.4",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.5",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.9",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.10",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.12",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.13",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.14",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.15",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.16",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.17",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.18",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.19",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.20",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.21",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.22",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.23",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.24",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.25",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.26",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.27",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.28",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.29",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.30",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.31",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.32",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.33",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.34",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.35",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.36",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.37",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.38",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.39",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.40",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.41",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.42",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.43",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.44",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.45",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.46",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.47",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.48",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.49",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.50",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.51",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.52",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.53",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "0.54.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "test-20261013",
|
||||
"status": "unaffected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:2.3:a:mereithhh:vanblog:*:*:*:*:*:*:*:*"
|
||||
],
|
||||
"modules": [
|
||||
"Custom Page Handler"
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A security vulnerability has been detected in Mereithhh VanBlog up to 0.54.0. This vulnerability affects the function fs.readFileSync of the file local.provider.ts of the component Custom Page Handler. The manipulation of the argument path leads to path traversal. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. Upgrading to version test-20261013 is able to resolve this issue. The identifier of the patch is d63aa163f10b6dc1080e2368fe8e71aa95b765cb. Upgrading the affected component is advised."
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"baseScore": 5.1,
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P",
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
},
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"baseScore": 6.6,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
},
|
||||
{
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"baseScore": 6.6,
|
||||
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
},
|
||||
{
|
||||
"cvssV2_0": {
|
||||
"version": "2.0",
|
||||
"baseScore": 5.8,
|
||||
"vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:OF/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"timeline": [
|
||||
{
|
||||
"time": "2026-11-13T00:00:00.000Z",
|
||||
"lang": "en",
|
||||
"value": "Advisory disclosed"
|
||||
},
|
||||
{
|
||||
"time": "2026-11-13T01:00:00.000Z",
|
||||
"lang": "en",
|
||||
"value": "VulDB entry created"
|
||||
},
|
||||
{
|
||||
"time": "2026-11-13T21:08:18.000Z",
|
||||
"lang": "en",
|
||||
"value": "VulDB entry last update"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Geronimo (VulDB User)",
|
||||
"type": "reporter"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://vuldb.com/vuln/437298",
|
||||
"name": "VDB-437298 | Mereithhh VanBlog Custom local.provider.ts fs.readFileSync path traversal",
|
||||
"tags": [
|
||||
"vdb-entry",
|
||||
"technical-description"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/vuln/437298/cti",
|
||||
"name": "VDB-437298 | CTI Indicators (IOB, IOC, TTP, IOA)",
|
||||
"tags": [
|
||||
"signature",
|
||||
"permissions-required"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/cve/CVE-2026-129260",
|
||||
"name": "CVE-2026-129260 | CVE Analysis and Report",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/submit/1043274",
|
||||
"name": "Submit #1043274 | Mereithhh VanBlog 0.54.0 Path Traversal to RCE",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "http://note.geronimo.xin/post/71",
|
||||
"tags": [
|
||||
"exploit"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/Mereithhh/vanblog/pull/524",
|
||||
"tags": [
|
||||
"issue-tracking",
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/Mereithhh/vanblog/commit/d63aa163f10b6dc1080e2368fe8e71aa95b765cb",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/Mereithhh/vanblog/releases/tag/test-20261013",
|
||||
"tags": [
|
||||
"patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/Mereithhh/vanblog/",
|
||||
"tags": [
|
||||
"product"
|
||||
]
|
||||
}
|
||||
],
|
||||
"tags": [
|
||||
"x_open-source"
|
||||
],
|
||||
"x_generator": [
|
||||
"VulDB PVTS v202611"
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,419 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-129261",
|
||||
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "VulDB",
|
||||
"dateReserved": "2026-11-13T20:04:32.256Z",
|
||||
"datePublished": "2026-11-14T16:00:15.614Z",
|
||||
"dateUpdated": "2026-11-14T16:00:15.614Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
|
||||
"shortName": "VulDB",
|
||||
"dateUpdated": "2026-11-14T16:00:15.614Z"
|
||||
},
|
||||
"title": "Kingston FURY CTRL RGB Control Software IOCTL NTIOLib_X64.sys exposed ioctl with insufficient access control",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"type": "CWE",
|
||||
"cweId": "CWE-782",
|
||||
"lang": "en",
|
||||
"description": "Exposed IOCTL with Insufficient Access Control"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Kingston",
|
||||
"product": "FURY CTRL RGB Control Software",
|
||||
"versions": [
|
||||
{
|
||||
"version": "2.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.2",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.4",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.5",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.9",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.10",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.12",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.13",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.14",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.15",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.16",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.17",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.18",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.19",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.20",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.21",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.22",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.23",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.24",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.25",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.26",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.27",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.28",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.29",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.30",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.31",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.32",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.33",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.34",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.35",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.36",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.37",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.38",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.39",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.40",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.41",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.42",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.43",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.44",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.45",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.46",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.47",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.48",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.49",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.50",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.51",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.52",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.53",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.54",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.55",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.56",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.57",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.58",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.59",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.60",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.61",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.62",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.63",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.64",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.65",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "2.0.66.0",
|
||||
"status": "affected"
|
||||
}
|
||||
],
|
||||
"cpes": [
|
||||
"cpe:2.3:a:kingston:fury_ctrl_rgb_control_software:*:*:*:*:*:*:*:*"
|
||||
],
|
||||
"modules": [
|
||||
"IOCTL Handler"
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A vulnerability was found in Kingston FURY CTRL RGB Control Software up to 2.0.66.0. The impacted element is an unknown function in the library NTIOLib_X64.sys of the component IOCTL Handler. Performing a manipulation results in exposed ioctl with insufficient access control. The attack is only possible with local access."
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"baseScore": 9.3,
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X",
|
||||
"baseSeverity": "CRITICAL"
|
||||
}
|
||||
},
|
||||
{
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"baseScore": 8.2,
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:R",
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"cvssV3_0": {
|
||||
"version": "3.0",
|
||||
"baseScore": 8.2,
|
||||
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:R",
|
||||
"baseSeverity": "HIGH"
|
||||
}
|
||||
},
|
||||
{
|
||||
"cvssV2_0": {
|
||||
"version": "2.0",
|
||||
"baseScore": 6.5,
|
||||
"vectorString": "AV:L/AC:L/Au:M/C:C/I:C/A:C/E:ND/RL:ND/RC:UR"
|
||||
}
|
||||
}
|
||||
],
|
||||
"timeline": [
|
||||
{
|
||||
"time": "2026-11-13T00:00:00.000Z",
|
||||
"lang": "en",
|
||||
"value": "Advisory disclosed"
|
||||
},
|
||||
{
|
||||
"time": "2026-11-13T01:00:00.000Z",
|
||||
"lang": "en",
|
||||
"value": "VulDB entry created"
|
||||
},
|
||||
{
|
||||
"time": "2026-11-13T21:09:51.000Z",
|
||||
"lang": "en",
|
||||
"value": "VulDB entry last update"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Element2023H (VulDB User)",
|
||||
"type": "reporter"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "VulDB Vulnerability Moderation Team",
|
||||
"type": "coordinator"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://vuldb.com/vuln/437302",
|
||||
"name": "VDB-437302 | Kingston FURY CTRL RGB Control Software IOCTL NTIOLib_X64.sys exposed ioctl with insufficient access control",
|
||||
"tags": [
|
||||
"vdb-entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/vuln/437302/cti",
|
||||
"name": "VDB-437302 | CTI Indicators (IOB, IOC, IOA)",
|
||||
"tags": [
|
||||
"signature",
|
||||
"permissions-required"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/cve/CVE-2026-129261",
|
||||
"name": "CVE-2026-129261 | CVE Analysis and Report",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/submit/1043190",
|
||||
"name": "Submit #1043190 | Kingston FURY CTRL 2.0.66.0 Exposed IOCTL with Insufficient Access Control",
|
||||
"tags": [
|
||||
"third-party-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"x_generator": [
|
||||
"VulDB PVTS v202611"
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
+7
-7
@@ -1,14 +1,14 @@
|
||||
{
|
||||
"fetchTime": "2026-11-14T14:59:29.177Z",
|
||||
"fetchTime": "2026-11-14T16:04:17.430Z",
|
||||
"numberOfChanges": 1,
|
||||
"new": [],
|
||||
"updated": [
|
||||
"new": [
|
||||
{
|
||||
"cveId": "CVE-2026-120221",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120221",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120221.json",
|
||||
"dateUpdated": "2026-11-14T14:55:45.546Z"
|
||||
"cveId": "CVE-2026-129261",
|
||||
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129261",
|
||||
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129261.json",
|
||||
"dateUpdated": "2026-11-14T16:00:15.614Z"
|
||||
}
|
||||
],
|
||||
"updated": [],
|
||||
"error": []
|
||||
}
|
||||
+60
-2802
File diff suppressed because it is too large.
Load diff
+3
-3
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"source": "https://github.com/CVEProject/cvelistV5.git",
|
||||
"upstream_commit": "fac8b0437fc5a472f8cc1045ee8d051a01024780",
|
||||
"upstream_commit": "a02d9990d6994ad36fa352dd3564659a4834e066",
|
||||
"since_year": 2017,
|
||||
"records": 332599,
|
||||
"synced_at_utc": "2026-11-14T15:26:20.955581+00:00"
|
||||
"records": 332605,
|
||||
"synced_at_utc": "2026-11-14T16:26:49.024564+00:00"
|
||||
}
|
||||
Reference in new issue
Block a user