VULN/vuln-cve
1
0 Fork 0
Code Pull Requests Actions Activity

CVE sync 2026-11-14T11:31:35Z

Browse Source
This commit is contained in:
Vulnerability Bot committed 2026-11-14 12:31:40 +01:00
1 parent 6f794ca4bb
commit dabad14a33
5 files changed
+382 -2482
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

data/2026/129xxx/CVE-2026-129247.json
+168
View File
@@ -0,0 +1,168 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-129247",
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"state": "PUBLISHED",
"assignerShortName": "VulDB",
"dateReserved": "2026-11-13T19:28:36.903Z",
"datePublished": "2026-11-14T10:30:17.116Z",
"dateUpdated": "2026-11-14T10:30:17.116Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB",
"dateUpdated": "2026-11-14T10:30:17.116Z"
},
"title": "yangzongzhuan RuoYi Code Generator VelocityUtils.java VelocityUtils.getFileName path traversal",
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-22",
"lang": "en",
"description": "Path Traversal"
}
]
}
],
"affected": [
{
"vendor": "yangzongzhuan",
"product": "RuoYi",
"versions": [
{
"version": "4.8.0",
"status": "affected"
},
{
"version": "4.8.1",
"status": "affected"
},
{
"version": "4.8.2",
"status": "affected"
},
{
"version": "4.8.3",
"status": "affected"
}
],
"cpes": [
"cpe:2.3:a:ruoyi:ruoyi:*:*:*:*:*:*:*:*"
],
"modules": [
"Code Generator"
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.3. Impacted is the function VelocityUtils.getFileName of the file VelocityUtils.java of the component Code Generator. Performing a manipulation of the argument className results in path traversal. The attack is possible to be carried out remotely."
}
],
"metrics": [
{
"cvssV4_0": {
"version": "4.0",
"baseScore": 5.1,
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X",
"baseSeverity": "MEDIUM"
}
},
{
"cvssV3_1": {
"version": "3.1",
"baseScore": 4.7,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C",
"baseSeverity": "MEDIUM"
}
},
{
"cvssV3_0": {
"version": "3.0",
"baseScore": 4.7,
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C",
"baseSeverity": "MEDIUM"
}
},
{
"cvssV2_0": {
"version": "2.0",
"baseScore": 5.8,
"vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P/E:ND/RL:ND/RC:C"
}
}
],
"timeline": [
{
"time": "2026-11-13T00:00:00.000Z",
"lang": "en",
"value": "Advisory disclosed"
},
{
"time": "2026-11-13T01:00:00.000Z",
"lang": "en",
"value": "VulDB entry created"
},
{
"time": "2026-11-13T20:33:44.000Z",
"lang": "en",
"value": "VulDB entry last update"
}
],
"credits": [
{
"lang": "en",
"value": "poppingsnack (VulDB User)",
"type": "reporter"
},
{
"lang": "en",
"value": "VulDB Vulnerability Moderation Team",
"type": "coordinator"
}
],
"references": [
{
"url": "https://vuldb.com/vuln/437278",
"name": "VDB-437278 | yangzongzhuan RuoYi Code Generator VelocityUtils.java VelocityUtils.getFileName path traversal",
"tags": [
"vdb-entry",
"technical-description"
]
},
{
"url": "https://vuldb.com/vuln/437278/cti",
"name": "VDB-437278 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
]
},
{
"url": "https://vuldb.com/cve/CVE-2026-129247",
"name": "CVE-2026-129247 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
]
},
{
"url": "https://vuldb.com/submit/1042438",
"name": "Submit #1042438 | yangzongzhuan RuoYi 7995a83e04e1a88aaea5a8a7c50570dffcb145e0 Zip Slip / Path Traversal (CWE-22)",
"tags": [
"third-party-advisory"
]
}
],
"x_generator": [
"VulDB PVTS v202611"
]
}
}
}
data/2026/129xxx/CVE-2026-129248.json
+178
View File
@@ -0,0 +1,178 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-129248",
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"state": "PUBLISHED",
"assignerShortName": "VulDB",
"dateReserved": "2026-11-13T19:29:49.893Z",
"datePublished": "2026-11-14T10:45:18.570Z",
"dateUpdated": "2026-11-14T10:45:18.570Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB",
"dateUpdated": "2026-11-14T10:45:18.570Z"
},
"title": "Akaunting Invoice Item Validation helpers.php calculation_to_quantity numeric range comparison without minimum check",
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-839",
"lang": "en",
"description": "Numeric Range Comparison Without Minimum Check"
}
]
},
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-118",
"lang": "en",
"description": "Range Error"
}
]
}
],
"affected": [
{
"vendor": "n/a",
"product": "Akaunting",
"versions": [
{
"version": "3.0",
"status": "affected"
},
{
"version": "3.1",
"status": "affected"
},
{
"version": "3.2",
"status": "affected"
},
{
"version": "3.3.0",
"status": "affected"
}
],
"cpes": [
"cpe:2.3:a:akaunting:akaunting:*:*:*:*:*:*:*:*"
],
"modules": [
"Invoice Item Validation"
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in Akaunting up to 3.3.0. The affected element is the function calculation_to_quantity of the file helpers.php of the component Invoice Item Validation. Executing a manipulation of the argument quantity can lead to numeric range comparison without minimum check. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"version": "4.0",
"baseScore": 5.3,
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X",
"baseSeverity": "MEDIUM"
}
},
{
"cvssV3_1": {
"version": "3.1",
"baseScore": 4.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:X/RL:X/RC:C",
"baseSeverity": "MEDIUM"
}
},
{
"cvssV3_0": {
"version": "3.0",
"baseScore": 4.3,
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:X/RL:X/RC:C",
"baseSeverity": "MEDIUM"
}
},
{
"cvssV2_0": {
"version": "2.0",
"baseScore": 4,
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N/E:ND/RL:ND/RC:C"
}
}
],
"timeline": [
{
"time": "2026-11-13T00:00:00.000Z",
"lang": "en",
"value": "Advisory disclosed"
},
{
"time": "2026-11-13T01:00:00.000Z",
"lang": "en",
"value": "VulDB entry created"
},
{
"time": "2026-11-13T20:34:55.000Z",
"lang": "en",
"value": "VulDB entry last update"
}
],
"credits": [
{
"lang": "en",
"value": "Raygun (VulDB User)",
"type": "reporter"
},
{
"lang": "en",
"value": "VulDB CNA Team",
"type": "coordinator"
}
],
"references": [
{
"url": "https://vuldb.com/vuln/437279",
"name": "VDB-437279 | Akaunting Invoice Item Validation helpers.php calculation_to_quantity numeric range comparison without minimum check",
"tags": [
"vdb-entry",
"technical-description"
]
},
{
"url": "https://vuldb.com/vuln/437279/cti",
"name": "VDB-437279 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
]
},
{
"url": "https://vuldb.com/cve/CVE-2026-129248",
"name": "CVE-2026-129248 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
]
},
{
"url": "https://vuldb.com/submit/1025027",
"name": "Submit #1025027 | Akaunting akaunting (+ link https://akaunting.com / https://github.com/akaunting/akaunting 3.2.4 (tested); HEAD 06dfa47 (code-identical) Improper Input Validation (CWE-20, CWE-839): invoice quantity wi",
"tags": [
"third-party-advisory"
]
}
],
"x_generator": [
"VulDB PVTS v202611"
]
}
}
}
data/delta.json
+5 -5
View File
@@ -1,12 +1,12 @@
{
"fetchTime": "2026-11-14T08:34:34.622Z",
"fetchTime": "2026-11-14T10:48:48.615Z",
"numberOfChanges": 1,
"new": [
{
"cveId": "CVE-2026-18742",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-18742",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18742.json",
"dateUpdated": "2026-11-14T08:31:34.753Z"
"cveId": "CVE-2026-129248",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129248",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129248.json",
"dateUpdated": "2026-11-14T10:45:18.570Z"
}
],
"updated": [],
data/deltaLog.json
+28 -2474
View File
File diff suppressed because it is too large. Load diff
state/sync.json
+3 -3
View File
@@ -1,7 +1,7 @@
{
"source": "https://github.com/CVEProject/cvelistV5.git",
"upstream_commit": "eb0c25067b3bc03b5800a5af8b0a5c90e4c48b17",
"upstream_commit": "d05abc735ee1184ae314168551d04422533f7cfd",
"since_year": 2017,
"records": 332572,
"synced_at_utc": "2026-11-14T09:25:55.095768+00:00"
"records": 332574,
"synced_at_utc": "2026-11-14T11:25:51.362199+00:00"
}