From ee401d30f9216863fae8cd60ecf6cb1a50d8e210 Mon Sep 17 00:00:00 2001 From: Vulnerability Bot Date: Fri, 13 Nov 2026 16:29:56 +0100 Subject: [PATCH] CVE sync 2026-11-13T15:29:51Z --- data/2025/41xxx/CVE-2025-41725.json | 25 +- data/2026/0xxx/CVE-2026-0191.json | 40 +- data/2026/100xxx/CVE-2026-100080.json | 24 +- data/2026/100xxx/CVE-2026-100081.json | 25 +- data/2026/100xxx/CVE-2026-100082.json | 92 +- data/2026/103xxx/CVE-2026-103769.json | 139 ++ data/2026/105xxx/CVE-2026-105427.json | 38 +- data/2026/105xxx/CVE-2026-105669.json | 38 +- data/2026/107xxx/CVE-2026-107404.json | 38 +- data/2026/107xxx/CVE-2026-107522.json | 284 +++ data/2026/107xxx/CVE-2026-107523.json | 284 +++ data/2026/107xxx/CVE-2026-107524.json | 284 +++ data/2026/109xxx/CVE-2026-109092.json | 169 ++ data/2026/109xxx/CVE-2026-109093.json | 179 ++ data/2026/109xxx/CVE-2026-109094.json | 172 ++ data/2026/109xxx/CVE-2026-109097.json | 38 +- data/2026/109xxx/CVE-2026-109445.json | 142 ++ data/2026/109xxx/CVE-2026-109904.json | 10 +- data/2026/111xxx/CVE-2026-111545.json | 284 +++ data/2026/111xxx/CVE-2026-111547.json | 284 +++ data/2026/112xxx/CVE-2026-112306.json | 10 +- data/2026/114xxx/CVE-2026-114406.json | 66 +- data/2026/118xxx/CVE-2026-118383.json | 38 +- data/2026/118xxx/CVE-2026-118976.json | 112 ++ data/2026/119xxx/CVE-2026-119102.json | 120 ++ data/2026/119xxx/CVE-2026-119512.json | 139 ++ data/2026/119xxx/CVE-2026-119517.json | 139 ++ data/2026/119xxx/CVE-2026-119618.json | 50 +- data/2026/120xxx/CVE-2026-120326.json | 38 +- data/2026/120xxx/CVE-2026-120350.json | 38 +- data/2026/120xxx/CVE-2026-120835.json | 139 ++ data/2026/121xxx/CVE-2026-121191.json | 38 +- data/2026/121xxx/CVE-2026-121776.json | 139 ++ data/2026/123xxx/CVE-2026-123082.json | 38 +- data/2026/123xxx/CVE-2026-123181.json | 38 +- data/2026/123xxx/CVE-2026-123710.json | 38 +- data/2026/123xxx/CVE-2026-123975.json | 157 ++ data/2026/124xxx/CVE-2026-124002.json | 19 +- data/2026/124xxx/CVE-2026-124003.json | 12 +- data/2026/124xxx/CVE-2026-124004.json | 12 +- data/2026/124xxx/CVE-2026-124005.json | 12 +- data/2026/124xxx/CVE-2026-124006.json | 12 +- data/2026/124xxx/CVE-2026-124007.json | 12 +- data/2026/124xxx/CVE-2026-124008.json | 12 +- data/2026/124xxx/CVE-2026-124009.json | 12 +- data/2026/124xxx/CVE-2026-124010.json | 12 +- data/2026/124xxx/CVE-2026-124011.json | 12 +- data/2026/124xxx/CVE-2026-124012.json | 12 +- data/2026/124xxx/CVE-2026-124013.json | 12 +- data/2026/124xxx/CVE-2026-124014.json | 12 +- data/2026/124xxx/CVE-2026-124015.json | 12 +- data/2026/124xxx/CVE-2026-124260.json | 139 ++ data/2026/124xxx/CVE-2026-124265.json | 139 ++ data/2026/124xxx/CVE-2026-124267.json | 139 ++ data/2026/124xxx/CVE-2026-124272.json | 139 ++ data/2026/124xxx/CVE-2026-124409.json | 139 ++ data/2026/124xxx/CVE-2026-124410.json | 139 ++ data/2026/124xxx/CVE-2026-124412.json | 139 ++ data/2026/124xxx/CVE-2026-124414.json | 139 ++ data/2026/124xxx/CVE-2026-124415.json | 139 ++ data/2026/124xxx/CVE-2026-124418.json | 139 ++ data/2026/124xxx/CVE-2026-124420.json | 139 ++ data/2026/124xxx/CVE-2026-124965.json | 139 ++ data/2026/124xxx/CVE-2026-124970.json | 139 ++ data/2026/125xxx/CVE-2026-125077.json | 38 +- data/2026/125xxx/CVE-2026-125086.json | 38 +- data/2026/125xxx/CVE-2026-125378.json | 46 +- data/2026/125xxx/CVE-2026-125382.json | 38 +- data/2026/125xxx/CVE-2026-125386.json | 46 +- data/2026/125xxx/CVE-2026-125390.json | 38 +- data/2026/125xxx/CVE-2026-125394.json | 46 +- data/2026/125xxx/CVE-2026-125398.json | 46 +- data/2026/125xxx/CVE-2026-125406.json | 38 +- data/2026/125xxx/CVE-2026-125432.json | 139 ++ data/2026/125xxx/CVE-2026-125440.json | 139 ++ data/2026/125xxx/CVE-2026-125452.json | 139 ++ data/2026/125xxx/CVE-2026-125706.json | 38 +- data/2026/125xxx/CVE-2026-125715.json | 38 +- data/2026/125xxx/CVE-2026-125747.json | 46 +- data/2026/125xxx/CVE-2026-125751.json | 46 +- data/2026/125xxx/CVE-2026-125783.json | 139 ++ data/2026/125xxx/CVE-2026-125792.json | 139 ++ data/2026/125xxx/CVE-2026-125794.json | 139 ++ data/2026/125xxx/CVE-2026-125802.json | 139 ++ data/2026/125xxx/CVE-2026-125807.json | 139 ++ data/2026/125xxx/CVE-2026-125808.json | 139 ++ data/2026/125xxx/CVE-2026-125809.json | 139 ++ data/2026/125xxx/CVE-2026-125810.json | 139 ++ data/2026/125xxx/CVE-2026-125811.json | 139 ++ data/2026/125xxx/CVE-2026-125814.json | 6 +- data/2026/125xxx/CVE-2026-125819.json | 139 ++ data/2026/125xxx/CVE-2026-125821.json | 139 ++ data/2026/125xxx/CVE-2026-125824.json | 139 ++ data/2026/125xxx/CVE-2026-125825.json | 139 ++ data/2026/125xxx/CVE-2026-125827.json | 139 ++ data/2026/125xxx/CVE-2026-125831.json | 139 ++ data/2026/125xxx/CVE-2026-125834.json | 139 ++ data/2026/125xxx/CVE-2026-125835.json | 136 ++ data/2026/125xxx/CVE-2026-125837.json | 120 ++ data/2026/125xxx/CVE-2026-125851.json | 120 ++ data/2026/125xxx/CVE-2026-125852.json | 120 ++ data/2026/125xxx/CVE-2026-125853.json | 120 ++ data/2026/125xxx/CVE-2026-125854.json | 120 ++ data/2026/125xxx/CVE-2026-125855.json | 139 ++ data/2026/125xxx/CVE-2026-125856.json | 120 ++ data/2026/125xxx/CVE-2026-125858.json | 120 ++ data/2026/125xxx/CVE-2026-125880.json | 38 +- data/2026/125xxx/CVE-2026-125881.json | 38 +- data/2026/125xxx/CVE-2026-125882.json | 38 +- data/2026/127xxx/CVE-2026-127031.json | 109 + data/2026/127xxx/CVE-2026-127102.json | 145 ++ data/2026/127xxx/CVE-2026-127119.json | 10 +- data/2026/128xxx/CVE-2026-128907.json | 199 ++ data/2026/128xxx/CVE-2026-128908.json | 199 ++ data/2026/128xxx/CVE-2026-128909.json | 205 ++ data/2026/128xxx/CVE-2026-128910.json | 217 ++ data/2026/128xxx/CVE-2026-128970.json | 234 +++ data/2026/128xxx/CVE-2026-128990.json | 135 ++ data/2026/128xxx/CVE-2026-128991.json | 135 ++ data/2026/129xxx/CVE-2026-129092.json | 145 ++ data/2026/12xxx/CVE-2026-12266.json | 38 +- data/2026/12xxx/CVE-2026-12572.json | 38 +- data/2026/12xxx/CVE-2026-12573.json | 38 +- data/2026/12xxx/CVE-2026-12574.json | 38 +- data/2026/16xxx/CVE-2026-16709.json | 38 +- data/2026/16xxx/CVE-2026-16716.json | 38 +- data/2026/16xxx/CVE-2026-16720.json | 38 +- data/2026/17xxx/CVE-2026-17284.json | 38 +- data/2026/17xxx/CVE-2026-17290.json | 38 +- data/2026/17xxx/CVE-2026-17293.json | 38 +- data/2026/17xxx/CVE-2026-17299.json | 38 +- data/2026/17xxx/CVE-2026-17301.json | 38 +- data/2026/17xxx/CVE-2026-17326.json | 38 +- data/2026/17xxx/CVE-2026-17356.json | 38 +- data/2026/17xxx/CVE-2026-17390.json | 38 +- data/2026/17xxx/CVE-2026-17395.json | 38 +- data/2026/17xxx/CVE-2026-17407.json | 38 +- data/2026/17xxx/CVE-2026-17410.json | 38 +- data/2026/17xxx/CVE-2026-17411.json | 38 +- data/2026/19xxx/CVE-2026-19121.json | 38 +- data/2026/19xxx/CVE-2026-19122.json | 38 +- data/2026/19xxx/CVE-2026-19129.json | 38 +- data/2026/1xxx/CVE-2026-1502.json | 4 +- data/2026/21xxx/CVE-2026-21407.json | 38 +- data/2026/28xxx/CVE-2026-28743.json | 38 +- data/2026/28xxx/CVE-2026-28765.json | 38 +- data/2026/32xxx/CVE-2026-32672.json | 38 +- data/2026/33xxx/CVE-2026-33089.json | 38 +- data/2026/33xxx/CVE-2026-33270.json | 38 +- data/2026/33xxx/CVE-2026-33279.json | 38 +- data/2026/35xxx/CVE-2026-35060.json | 38 +- data/2026/35xxx/CVE-2026-35683.json | 38 +- data/2026/39xxx/CVE-2026-39456.json | 38 +- data/2026/40xxx/CVE-2026-40065.json | 38 +- data/2026/55xxx/CVE-2026-55311.json | 40 +- data/2026/55xxx/CVE-2026-55319.json | 40 +- data/2026/55xxx/CVE-2026-55360.json | 40 +- data/2026/55xxx/CVE-2026-55362.json | 40 +- data/2026/56xxx/CVE-2026-56898.json | 40 +- data/2026/56xxx/CVE-2026-56909.json | 40 +- data/2026/56xxx/CVE-2026-56912.json | 40 +- data/2026/56xxx/CVE-2026-56916.json | 66 +- data/2026/56xxx/CVE-2026-56919.json | 40 +- data/2026/56xxx/CVE-2026-56929.json | 40 +- data/2026/56xxx/CVE-2026-56934.json | 40 +- data/2026/56xxx/CVE-2026-56971.json | 40 +- data/2026/57xxx/CVE-2026-57004.json | 46 +- data/2026/57xxx/CVE-2026-57009.json | 40 +- data/2026/57xxx/CVE-2026-57036.json | 40 +- data/2026/57xxx/CVE-2026-57047.json | 46 +- data/2026/58xxx/CVE-2026-58681.json | 40 +- data/2026/58xxx/CVE-2026-58684.json | 40 +- data/2026/58xxx/CVE-2026-58722.json | 46 +- data/2026/58xxx/CVE-2026-58752.json | 66 +- data/2026/58xxx/CVE-2026-58796.json | 40 +- data/2026/58xxx/CVE-2026-58799.json | 46 +- data/2026/58xxx/CVE-2026-58808.json | 66 +- data/2026/58xxx/CVE-2026-58810.json | 66 +- data/2026/58xxx/CVE-2026-58811.json | 66 +- data/2026/58xxx/CVE-2026-58812.json | 66 +- data/2026/59xxx/CVE-2026-59082.json | 38 +- data/2026/59xxx/CVE-2026-59574.json | 78 +- data/2026/59xxx/CVE-2026-59575.json | 66 +- data/2026/59xxx/CVE-2026-59579.json | 66 +- data/2026/59xxx/CVE-2026-59580.json | 66 +- data/2026/59xxx/CVE-2026-59583.json | 66 +- data/2026/59xxx/CVE-2026-59586.json | 66 +- data/2026/59xxx/CVE-2026-59597.json | 40 +- data/2026/59xxx/CVE-2026-59601.json | 72 +- data/2026/59xxx/CVE-2026-59604.json | 66 +- data/2026/59xxx/CVE-2026-59606.json | 40 +- data/2026/59xxx/CVE-2026-59607.json | 40 +- data/2026/59xxx/CVE-2026-59614.json | 38 +- data/2026/59xxx/CVE-2026-59618.json | 66 +- data/2026/60xxx/CVE-2026-60035.json | 38 +- data/2026/60xxx/CVE-2026-60040.json | 38 +- data/2026/60xxx/CVE-2026-60045.json | 38 +- data/2026/66xxx/CVE-2026-66333.json | 38 +- data/2026/66xxx/CVE-2026-66334.json | 38 +- data/2026/66xxx/CVE-2026-66335.json | 38 +- data/2026/76xxx/CVE-2026-76844.json | 163 +- data/2026/76xxx/CVE-2026-76877.json | 38 +- data/2026/82xxx/CVE-2026-82175.json | 284 +++ data/2026/85xxx/CVE-2026-85091.json | 24 +- data/2026/92xxx/CVE-2026-92439.json | 38 +- data/2026/92xxx/CVE-2026-92441.json | 38 +- data/2026/92xxx/CVE-2026-92442.json | 38 +- data/2026/92xxx/CVE-2026-92545.json | 38 +- data/2026/96xxx/CVE-2026-96437.json | 38 +- data/2026/99xxx/CVE-2026-99286.json | 103 +- data/2026/99xxx/CVE-2026-99288.json | 25 +- data/delta.json | 160 +- data/deltaLog.json | 2684 +++++++++++++------------ state/sync.json | 6 +- 214 files changed, 17326 insertions(+), 1924 deletions(-) create mode 100644 data/2026/103xxx/CVE-2026-103769.json create mode 100644 data/2026/107xxx/CVE-2026-107522.json create mode 100644 data/2026/107xxx/CVE-2026-107523.json create mode 100644 data/2026/107xxx/CVE-2026-107524.json create mode 100644 data/2026/109xxx/CVE-2026-109092.json create mode 100644 data/2026/109xxx/CVE-2026-109093.json create mode 100644 data/2026/109xxx/CVE-2026-109094.json create mode 100644 data/2026/109xxx/CVE-2026-109445.json create mode 100644 data/2026/111xxx/CVE-2026-111545.json create mode 100644 data/2026/111xxx/CVE-2026-111547.json create mode 100644 data/2026/118xxx/CVE-2026-118976.json create mode 100644 data/2026/119xxx/CVE-2026-119102.json create mode 100644 data/2026/119xxx/CVE-2026-119512.json create mode 100644 data/2026/119xxx/CVE-2026-119517.json create mode 100644 data/2026/120xxx/CVE-2026-120835.json create mode 100644 data/2026/121xxx/CVE-2026-121776.json create mode 100644 data/2026/123xxx/CVE-2026-123975.json create mode 100644 data/2026/124xxx/CVE-2026-124260.json create mode 100644 data/2026/124xxx/CVE-2026-124265.json create mode 100644 data/2026/124xxx/CVE-2026-124267.json create mode 100644 data/2026/124xxx/CVE-2026-124272.json create mode 100644 data/2026/124xxx/CVE-2026-124409.json create mode 100644 data/2026/124xxx/CVE-2026-124410.json create mode 100644 data/2026/124xxx/CVE-2026-124412.json create mode 100644 data/2026/124xxx/CVE-2026-124414.json create mode 100644 data/2026/124xxx/CVE-2026-124415.json create mode 100644 data/2026/124xxx/CVE-2026-124418.json create mode 100644 data/2026/124xxx/CVE-2026-124420.json create mode 100644 data/2026/124xxx/CVE-2026-124965.json create mode 100644 data/2026/124xxx/CVE-2026-124970.json create mode 100644 data/2026/125xxx/CVE-2026-125432.json create mode 100644 data/2026/125xxx/CVE-2026-125440.json create mode 100644 data/2026/125xxx/CVE-2026-125452.json create mode 100644 data/2026/125xxx/CVE-2026-125783.json create mode 100644 data/2026/125xxx/CVE-2026-125792.json create mode 100644 data/2026/125xxx/CVE-2026-125794.json create mode 100644 data/2026/125xxx/CVE-2026-125802.json create mode 100644 data/2026/125xxx/CVE-2026-125807.json create mode 100644 data/2026/125xxx/CVE-2026-125808.json create mode 100644 data/2026/125xxx/CVE-2026-125809.json create mode 100644 data/2026/125xxx/CVE-2026-125810.json create mode 100644 data/2026/125xxx/CVE-2026-125811.json create mode 100644 data/2026/125xxx/CVE-2026-125819.json create mode 100644 data/2026/125xxx/CVE-2026-125821.json create mode 100644 data/2026/125xxx/CVE-2026-125824.json create mode 100644 data/2026/125xxx/CVE-2026-125825.json create mode 100644 data/2026/125xxx/CVE-2026-125827.json create mode 100644 data/2026/125xxx/CVE-2026-125831.json create mode 100644 data/2026/125xxx/CVE-2026-125834.json create mode 100644 data/2026/125xxx/CVE-2026-125835.json create mode 100644 data/2026/125xxx/CVE-2026-125837.json create mode 100644 data/2026/125xxx/CVE-2026-125851.json create mode 100644 data/2026/125xxx/CVE-2026-125852.json create mode 100644 data/2026/125xxx/CVE-2026-125853.json create mode 100644 data/2026/125xxx/CVE-2026-125854.json create mode 100644 data/2026/125xxx/CVE-2026-125855.json create mode 100644 data/2026/125xxx/CVE-2026-125856.json create mode 100644 data/2026/125xxx/CVE-2026-125858.json create mode 100644 data/2026/127xxx/CVE-2026-127031.json create mode 100644 data/2026/127xxx/CVE-2026-127102.json create mode 100644 data/2026/128xxx/CVE-2026-128907.json create mode 100644 data/2026/128xxx/CVE-2026-128908.json create mode 100644 data/2026/128xxx/CVE-2026-128909.json create mode 100644 data/2026/128xxx/CVE-2026-128910.json create mode 100644 data/2026/128xxx/CVE-2026-128970.json create mode 100644 data/2026/128xxx/CVE-2026-128990.json create mode 100644 data/2026/128xxx/CVE-2026-128991.json create mode 100644 data/2026/129xxx/CVE-2026-129092.json create mode 100644 data/2026/82xxx/CVE-2026-82175.json diff --git a/data/2025/41xxx/CVE-2025-41725.json b/data/2025/41xxx/CVE-2025-41725.json index c9b133ce8f..69acb3161e 100644 --- a/data/2025/41xxx/CVE-2025-41725.json +++ b/data/2025/41xxx/CVE-2025-41725.json @@ -8,7 +8,7 @@ "assignerShortName": "CERTVDE", "dateReserved": "2025-04-16T11:17:48.318Z", "datePublished": "2026-11-13T12:59:24.549Z", - "dateUpdated": "2026-11-13T12:59:24.549Z" + "dateUpdated": "2026-11-13T15:03:50.513Z" }, "containers": { "cna": { @@ -16,7 +16,7 @@ { "defaultStatus": "unaffected", "product": "Flip 4", - "vendor": "Harman International", + "vendor": "JBL", "versions": [ { "lessThan": "4.1.0", @@ -27,6 +27,25 @@ ] } ], + "cpeApplicability": [ + { + "nodes": [ + { + "cpeMatch": [ + { + "criteria": "cpe:2.3:a:jbl:flip_4:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.1.0", + "versionStartIncluding": "0.0.0", + "vulnerable": true + } + ], + "negate": false, + "operator": "OR" + } + ], + "operator": "OR" + } + ], "credits": [ { "lang": "en", @@ -87,7 +106,7 @@ "providerMetadata": { "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", - "dateUpdated": "2026-11-13T12:59:24.549Z" + "dateUpdated": "2026-11-13T15:03:50.513Z" }, "references": [ { diff --git a/data/2026/0xxx/CVE-2026-0191.json b/data/2026/0xxx/CVE-2026-0191.json index fccb0c059f..d83a4319a9 100644 --- a/data/2026/0xxx/CVE-2026-0191.json +++ b/data/2026/0xxx/CVE-2026-0191.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2025-10-23T08:45:43.329Z", "datePublished": "2026-11-10T19:20:12.706Z", - "dateUpdated": "2026-11-13T05:00:34.276Z" + "dateUpdated": "2026-11-13T14:42:28.969Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7.8, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "LOW", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:00:35.257827Z", + "id": "CVE-2026-0191", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-0191" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:00:34.276Z" + "dateUpdated": "2026-11-13T14:42:28.969Z" } } ] diff --git a/data/2026/100xxx/CVE-2026-100080.json b/data/2026/100xxx/CVE-2026-100080.json index 9076cd0728..076c036a6a 100644 --- a/data/2026/100xxx/CVE-2026-100080.json +++ b/data/2026/100xxx/CVE-2026-100080.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.456Z", "datePublished": "2026-11-06T18:23:01.824Z", - "dateUpdated": "2026-11-06T19:08:40.599Z" + "dateUpdated": "2026-11-13T14:17:19.465Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-06T18:23:01.824Z" + "dateUpdated": "2026-11-13T14:17:19.465Z" }, "descriptions": [ { @@ -75,6 +75,12 @@ "status": "affected", "versionType": "git" }, + { + "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "lessThan": "5fb756f1bbec7a3862dda5d79028bf656271804c", + "status": "affected", + "versionType": "git" + }, { "version": "0", "lessThan": "5.10.274", @@ -169,6 +175,12 @@ "lessThanOrEqual": "7.3.*", "status": "unaffected", "versionType": "semver" + }, + { + "version": "7.4-rc2", + "lessThanOrEqual": "*", + "status": "unaffected", + "versionType": "original_commit_for_fix" } ] } @@ -214,6 +226,11 @@ "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "7.3.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "7.4-rc2" } ] } @@ -241,6 +258,9 @@ }, { "url": "https://git.kernel.org/stable/c/4867687b6ad28ab84bc0811d8f8f9972e769da02" + }, + { + "url": "https://git.kernel.org/stable/c/5fb756f1bbec7a3862dda5d79028bf656271804c" } ], "title": "xen-netback: Fix UAF when reading statistics data", diff --git a/data/2026/100xxx/CVE-2026-100081.json b/data/2026/100xxx/CVE-2026-100081.json index f76b96b3fa..d9a318bed5 100644 --- a/data/2026/100xxx/CVE-2026-100081.json +++ b/data/2026/100xxx/CVE-2026-100081.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.456Z", "datePublished": "2026-11-06T18:23:02.185Z", - "dateUpdated": "2026-11-10T16:57:39.730Z" + "dateUpdated": "2026-11-13T14:17:19.978Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-10T16:57:39.730Z" + "dateUpdated": "2026-11-13T14:17:19.978Z" }, "descriptions": [ { @@ -91,6 +91,12 @@ "lessThan": "fb38fc58acb26d74fe8f7b19621fafaae3c040ff", "status": "affected", "versionType": "git" + }, + { + "version": "b17075d5c1988b83f840d272c795ac17d57ce804", + "lessThan": "bfddc420afe827d9f06458cdf8087cd602f8c9cb", + "status": "affected", + "versionType": "git" } ] }, @@ -155,6 +161,12 @@ "lessThanOrEqual": "7.3.*", "status": "unaffected", "versionType": "semver" + }, + { + "version": "7.4-rc2", + "lessThanOrEqual": "*", + "status": "unaffected", + "versionType": "original_commit_for_fix" } ] } @@ -207,6 +219,12 @@ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.11", "versionEndExcluding": "7.3.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.11", + "versionEndExcluding": "7.4-rc2" } ] } @@ -234,6 +252,9 @@ }, { "url": "https://git.kernel.org/stable/c/fb38fc58acb26d74fe8f7b19621fafaae3c040ff" + }, + { + "url": "https://git.kernel.org/stable/c/bfddc420afe827d9f06458cdf8087cd602f8c9cb" } ], "title": "xen-netback: defer xenvif_mcast_addr_list_free()", diff --git a/data/2026/100xxx/CVE-2026-100082.json b/data/2026/100xxx/CVE-2026-100082.json index 80137f2e90..320855c9c7 100644 --- a/data/2026/100xxx/CVE-2026-100082.json +++ b/data/2026/100xxx/CVE-2026-100082.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.456Z", "datePublished": "2026-11-06T18:23:02.627Z", - "dateUpdated": "2026-11-06T19:08:45.432Z" + "dateUpdated": "2026-11-13T14:17:20.531Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-06T18:23:02.627Z" + "dateUpdated": "2026-11-13T14:17:20.531Z" }, "descriptions": [ { @@ -35,88 +35,52 @@ ], "versions": [ { - "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "version": "db6fbc106786f26d95889c50c18b1f28aa543a17", "lessThan": "253cff0526781e28b1b0f9fdacd74ecdc23d3ab7", "status": "affected", "versionType": "git" }, { - "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "version": "db6fbc106786f26d95889c50c18b1f28aa543a17", "lessThan": "2c9ccbe0ffcff3615c7ad917c49b67571a41f21c", "status": "affected", "versionType": "git" }, { - "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "version": "db6fbc106786f26d95889c50c18b1f28aa543a17", "lessThan": "58ba056991dbcec8a75e6861cb4479ac947b69e6", "status": "affected", "versionType": "git" }, { - "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "version": "db6fbc106786f26d95889c50c18b1f28aa543a17", "lessThan": "fe9ead8c5bdb752e329cecfecbdb5dfca5e9996b", "status": "affected", "versionType": "git" }, { - "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "version": "db6fbc106786f26d95889c50c18b1f28aa543a17", "lessThan": "b764e17313534794aeb99c901869f213e36a16ef", "status": "affected", "versionType": "git" }, { - "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "version": "db6fbc106786f26d95889c50c18b1f28aa543a17", "lessThan": "c49934da934cf495faf782aa5d84f413221c9be6", "status": "affected", "versionType": "git" }, { - "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "version": "db6fbc106786f26d95889c50c18b1f28aa543a17", "lessThan": "b0378161c28e77e4d0e2eda3c9433ab4394d2a2f", "status": "affected", "versionType": "git" }, { - "version": "0", - "lessThan": "5.10.274", + "version": "db6fbc106786f26d95889c50c18b1f28aa543a17", + "lessThan": "a02926f7c89bfc798ee9514e09694ff4279928a1", "status": "affected", - "versionType": "semver" - }, - { - "version": "0", - "lessThan": "5.15.225", - "status": "affected", - "versionType": "semver" - }, - { - "version": "0", - "lessThan": "6.1.192", - "status": "affected", - "versionType": "semver" - }, - { - "version": "0", - "lessThan": "6.6.162", - "status": "affected", - "versionType": "semver" - }, - { - "version": "0", - "lessThan": "6.12.116", - "status": "affected", - "versionType": "semver" - }, - { - "version": "0", - "lessThan": "6.18.62", - "status": "affected", - "versionType": "semver" - }, - { - "version": "0", - "lessThan": "7.3.3", - "status": "affected", - "versionType": "semver" + "versionType": "git" } ] }, @@ -130,6 +94,16 @@ "drivers/block/xen-blkback/xenbus.c" ], "versions": [ + { + "version": "4.5", + "status": "affected" + }, + { + "version": "0", + "lessThan": "4.5", + "status": "unaffected", + "versionType": "semver" + }, { "version": "5.10.274", "lessThanOrEqual": "5.10.*", @@ -171,6 +145,12 @@ "lessThanOrEqual": "7.3.*", "status": "unaffected", "versionType": "semver" + }, + { + "version": "7.4-rc2", + "lessThanOrEqual": "*", + "status": "unaffected", + "versionType": "original_commit_for_fix" } ] } @@ -185,37 +165,50 @@ { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.5", "versionEndExcluding": "5.10.274" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.5", "versionEndExcluding": "5.15.225" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.5", "versionEndExcluding": "6.1.192" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.5", "versionEndExcluding": "6.6.162" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.5", "versionEndExcluding": "6.12.116" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.5", "versionEndExcluding": "6.18.62" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.5", "versionEndExcluding": "7.3.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.5", + "versionEndExcluding": "7.4-rc2" } ] } @@ -243,6 +236,9 @@ }, { "url": "https://git.kernel.org/stable/c/b0378161c28e77e4d0e2eda3c9433ab4394d2a2f" + }, + { + "url": "https://git.kernel.org/stable/c/a02926f7c89bfc798ee9514e09694ff4279928a1" } ], "title": "xen-blkback: Avoid UAF when reading I/O statistics", diff --git a/data/2026/103xxx/CVE-2026-103769.json b/data/2026/103xxx/CVE-2026-103769.json new file mode 100644 index 0000000000..7ab5fbd5fb --- /dev/null +++ b/data/2026/103xxx/CVE-2026-103769.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-103769", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-10-01T10:49:33.286Z", + "datePublished": "2026-11-13T15:08:38.923Z", + "dateUpdated": "2026-11-13T15:08:38.923Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:38.923Z" + }, + "title": "WordPress PDF Invoices and Packing Slips For WooCommerce plugin <= 1.4.10 - PHP Object Injection vulnerability", + "datePublic": "2026-11-11T14:03:23.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in Acowebs PDF Invoices and Packing Slips For WooCommerce pdf-invoices-and-packing-slips-for-woocommerce allows Object Injection.This issue affects PDF Invoices and Packing Slips For WooCommerce: from n/a through 1.4.10.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Deserialization of Untrusted Data vulnerability in Acowebs PDF Invoices and Packing Slips For WooCommerce pdf-invoices-and-packing-slips-for-woocommerce allows Object Injection.

This issue affects PDF Invoices and Packing Slips For WooCommerce: from n/a through 1.4.10.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Acowebs", + "product": "PDF Invoices and Packing Slips For WooCommerce", + "packageName": "pdf-invoices-and-packing-slips-for-woocommerce", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "1.4.10", + "changes": [ + { + "at": "1.4.11", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/pdf-invoices-and-packing-slips-for-woocommerce/vulnerability/wordpress-pdf-invoices-and-packing-slips-for-woocommerce-plugin-1-4-10-php-object-injection-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Ananda Dhakal (Patchstack)", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-502", + "description": "Deserialization of Untrusted Data", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-586", + "descriptions": [ + { + "lang": "en", + "value": "Object Injection" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress PDF Invoices and Packing Slips For WooCommerce plugin to the latest available version (at least 1.4.11).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress PDF Invoices and Packing Slips For WooCommerce plugin to the latest available version (at least 1.4.11)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105427.json b/data/2026/105xxx/CVE-2026-105427.json index 82c388acdf..20100348e5 100644 --- a/data/2026/105xxx/CVE-2026-105427.json +++ b/data/2026/105xxx/CVE-2026-105427.json @@ -8,7 +8,7 @@ "assignerShortName": "ivanti", "dateReserved": "2026-10-05T12:48:41.073Z", "datePublished": "2026-11-10T15:57:39.124Z", - "dateUpdated": "2026-11-10T17:29:09.471Z" + "dateUpdated": "2026-11-13T14:30:29.382Z" }, "containers": { "cna": { @@ -113,6 +113,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:18:43.876602Z", + "id": "CVE-2026-105427", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:30:29.382Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105669.json b/data/2026/105xxx/CVE-2026-105669.json index e902938f62..d68c39e4bd 100644 --- a/data/2026/105xxx/CVE-2026-105669.json +++ b/data/2026/105xxx/CVE-2026-105669.json @@ -8,7 +8,7 @@ "assignerShortName": "ivanti", "dateReserved": "2026-10-05T16:57:22.487Z", "datePublished": "2026-11-10T15:45:42.277Z", - "dateUpdated": "2026-11-10T17:32:18.042Z" + "dateUpdated": "2026-11-13T14:30:43.063Z" }, "containers": { "cna": { @@ -113,6 +113,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:18:39.429831Z", + "id": "CVE-2026-105669", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:30:43.063Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/107xxx/CVE-2026-107404.json b/data/2026/107xxx/CVE-2026-107404.json index 0abd199120..659a6eda22 100644 --- a/data/2026/107xxx/CVE-2026-107404.json +++ b/data/2026/107xxx/CVE-2026-107404.json @@ -8,7 +8,7 @@ "assignerShortName": "ivanti", "dateReserved": "2026-10-07T21:35:39.743Z", "datePublished": "2026-11-10T15:59:51.214Z", - "dateUpdated": "2026-11-10T17:29:46.336Z" + "dateUpdated": "2026-11-13T14:30:22.809Z" }, "containers": { "cna": { @@ -113,6 +113,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:18:46.340118Z", + "id": "CVE-2026-107404", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:30:22.809Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/107xxx/CVE-2026-107522.json b/data/2026/107xxx/CVE-2026-107522.json new file mode 100644 index 0000000000..7fff399218 --- /dev/null +++ b/data/2026/107xxx/CVE-2026-107522.json @@ -0,0 +1,284 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-107522", + "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "state": "PUBLISHED", + "assignerShortName": "dell", + "dateReserved": "2026-10-08T10:04:10.615Z", + "datePublished": "2026-11-13T14:59:55.571Z", + "dateUpdated": "2026-11-13T14:59:55.571Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "shortName": "dell", + "dateUpdated": "2026-11-13T14:59:55.571Z" + }, + "datePublic": "2026-10-30T06:30:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-863", + "description": "CWE-863: Incorrect Authorization", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Dell", + "product": "PowerStore 500T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 7000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Dell PowerStore contains an Improper Authorization vulnerability. An authenticated user could exploit this vulnerability, potentially leading to privilege escalation to administrator.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Dell PowerStore contains an Improper Authorization vulnerability. An authenticated user could exploit this vulnerability, potentially leading to privilege escalation to administrator." + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "HIGH", + "baseScore": 7.2, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/107xxx/CVE-2026-107523.json b/data/2026/107xxx/CVE-2026-107523.json new file mode 100644 index 0000000000..19d643a2e5 --- /dev/null +++ b/data/2026/107xxx/CVE-2026-107523.json @@ -0,0 +1,284 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-107523", + "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "state": "PUBLISHED", + "assignerShortName": "dell", + "dateReserved": "2026-10-08T10:04:10.615Z", + "datePublished": "2026-11-13T14:48:13.772Z", + "dateUpdated": "2026-11-13T14:48:13.772Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "shortName": "dell", + "dateUpdated": "2026-11-13T14:48:13.772Z" + }, + "datePublic": "2026-10-30T06:30:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-190", + "description": "CWE-190: Integer Overflow or Wraparound", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Dell", + "product": "PowerStore 500T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 7000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Dell PowerStore contains an integer overflow vulnerability. An adjacent attacker could exploit it to bypass volume bounds checks, potentially leading to data destruction or denial of service.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Dell PowerStore contains an integer overflow vulnerability. An adjacent attacker could exploit it to bypass volume bounds checks, potentially leading to data destruction or denial of service." + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "HIGH", + "baseScore": 8.7, + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/107xxx/CVE-2026-107524.json b/data/2026/107xxx/CVE-2026-107524.json new file mode 100644 index 0000000000..4e12b742b0 --- /dev/null +++ b/data/2026/107xxx/CVE-2026-107524.json @@ -0,0 +1,284 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-107524", + "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "state": "PUBLISHED", + "assignerShortName": "dell", + "dateReserved": "2026-10-08T10:04:10.615Z", + "datePublished": "2026-11-13T14:30:19.045Z", + "dateUpdated": "2026-11-13T14:30:19.045Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "shortName": "dell", + "dateUpdated": "2026-11-13T14:30:19.045Z" + }, + "datePublic": "2026-10-30T06:30:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-190", + "description": "CWE-190: Integer Overflow or Wraparound", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Dell", + "product": "PowerStore 500T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 7000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Dell PowerStore contains an integer overflow vulnerability. An authenticated storage host could exploit this vulnerability, potentially leading to out-of-bounds data access or denial of service.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Dell PowerStore contains an integer overflow vulnerability. An authenticated storage host could exploit this vulnerability, potentially leading to out-of-bounds data access or denial of service." + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109092.json b/data/2026/109xxx/CVE-2026-109092.json new file mode 100644 index 0000000000..64bca866fa --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109092.json @@ -0,0 +1,169 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109092", + "assignerOrgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", + "state": "PUBLISHED", + "assignerShortName": "suse", + "dateReserved": "2026-10-12T06:41:23.778Z", + "datePublished": "2026-11-13T15:00:03.444Z", + "dateUpdated": "2026-11-13T15:00:03.444Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", + "shortName": "suse", + "dateUpdated": "2026-11-13T15:00:03.444Z" + }, + "title": "X.Org Server XvShmPutImage Shared-Memory Bounds Overflow", + "datePublic": "2026-11-13T14:25:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-191", + "description": "CWE-191 Integer underflow (wrap or wraparound)", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-100", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-100 Overflow Buffers" + } + ] + } + ], + "affected": [ + { + "vendor": "X.Org", + "product": "xwayland", + "packageName": "xwayland", + "repo": "https://gitlab.freedesktop.org/xorg/xserver/", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "24.1.15", + "versionType": "rpm" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "X.Org", + "product": "xorg-x11-server", + "packageName": "xorg-x11-server", + "repo": "https://gitlab.freedesktop.org/xorg/xserver/", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "21.1.26", + "versionType": "rpm" + } + ], + "defaultStatus": "unaffected" + } + ], + "cpeApplicability": [ + { + "operator": "OR", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "24.1.15" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:x.org:xorg-x11-server:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "21.1.26" + } + ] + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Incorrectly handled negative sizes when processing ProcXvShmPutImage requests in the X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by local authenticated X clients to crash the X server or execute code.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Incorrectly handled negative sizes when processing ProcXvShmPutImage requests in the X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by local authenticated X clients to crash the X server or execute code." + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/a4d7800f0f56469a082e3755bfa6b148c707075c", + "tags": [ + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Acts1631 ", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109093.json b/data/2026/109xxx/CVE-2026-109093.json new file mode 100644 index 0000000000..36a2a41f20 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109093.json @@ -0,0 +1,179 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109093", + "assignerOrgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", + "state": "PUBLISHED", + "assignerShortName": "suse", + "dateReserved": "2026-10-12T06:41:23.778Z", + "datePublished": "2026-11-13T14:23:59.219Z", + "dateUpdated": "2026-11-13T14:23:59.219Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", + "shortName": "suse", + "dateUpdated": "2026-11-13T14:23:59.219Z" + }, + "title": "X.Org Server XTestFakeInput Valuator Stack Out-Of-Bounds Write", + "datePublic": "2026-11-13T14:20:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-121", + "description": "CWE-121 Stack-based buffer overflow", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-100", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-100 Overflow Buffers" + } + ] + } + ], + "affected": [ + { + "vendor": "X.Org", + "product": "xwayland", + "packageName": "xwayland", + "repo": "https://gitlab.freedesktop.org/xorg/xserver/", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "24.1.15", + "versionType": "rpm" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "X.Org", + "product": "xorg-x11-server", + "packageName": "xorg-x11-server", + "repo": "https://gitlab.freedesktop.org/xorg/xserver/", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "21.1.26", + "versionType": "rpm" + } + ], + "defaultStatus": "unaffected" + } + ], + "cpeApplicability": [ + { + "operator": "OR", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "24.1.15" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:x.org:xorg-x11-server:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "21.1.26" + } + ] + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A stack buffer overflow in  ProcXTestFakeInput DeviceValuator handling in X.Org xwayland before 24.1.15 and X server before 21.1.26 could be used by authenticated clients to crash or execute code in the X server.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "A stack buffer overflow in  ProcXTestFakeInput DeviceValuator handling in X.Org xwayland before 24.1.15 and X server before 21.1.26 could be used by authenticated clients to crash or execute code in the X server." + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/99ce069ae814b39048543062e073320f14723ee0", + "tags": [ + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 8.5, + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Acts1631 ", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109094.json b/data/2026/109xxx/CVE-2026-109094.json new file mode 100644 index 0000000000..63c4c6245a --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109094.json @@ -0,0 +1,172 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109094", + "assignerOrgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", + "state": "PUBLISHED", + "assignerShortName": "suse", + "dateReserved": "2026-10-12T06:41:23.778Z", + "datePublished": "2026-11-13T14:14:53.929Z", + "dateUpdated": "2026-11-13T14:25:11.368Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", + "shortName": "suse", + "dateUpdated": "2026-11-13T14:25:11.368Z" + }, + "title": "X.Org Server XRes QueryResourceBytes Swap Path Size Overflow", + "datePublic": "2026-11-13T13:53:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-190", + "description": "CWE-190 Integer overflow or wraparound", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-100", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-100 Overflow Buffers" + } + ] + } + ], + "affected": [ + { + "vendor": "X.Org", + "product": "xwayland", + "packageName": "xwayland", + "repo": "https://gitlab.freedesktop.org/xorg/xserver/", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "24.1.15", + "versionType": "rpm" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "X.Org", + "product": "xorg-x11-server", + "packageName": "xorg-x11-server", + "repo": "https://gitlab.freedesktop.org/xorg/xserver/", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "21.1.26", + "versionType": "rpm" + } + ], + "defaultStatus": "unaffected" + } + ], + "cpeApplicability": [ + { + "operator": "OR", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "24.1.15" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:x.org:xorg-x11-server:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "21.1.26" + } + ] + } + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A integer overflow that can lead to a buffer overrread in the XRes QueryResourceBytes Swap Path in the X.Org xwayland before 24.1.15 and X Server before 21.1.26 on 32bit systems could be used by authenticated clients to crash the X server.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "A integer overflow that can lead to a buffer overrread in the XRes QueryResourceBytes Swap Path in the X.Org xwayland before 24.1.15 and X Server before 21.1.26 on 32bit systems could be used by authenticated clients to crash the X server." + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/a59678e491a762e504829cac069cf37f4ccafe0d", + "tags": [ + "patch" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 8.5, + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" + } + } + ], + "source": { + "discovery": "INTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109097.json b/data/2026/109xxx/CVE-2026-109097.json index f3e880b8e0..61e04970c9 100644 --- a/data/2026/109xxx/CVE-2026-109097.json +++ b/data/2026/109xxx/CVE-2026-109097.json @@ -8,7 +8,7 @@ "assignerShortName": "siemens", "dateReserved": "2026-10-12T06:50:03.941Z", "datePublished": "2026-11-10T11:30:39.049Z", - "dateUpdated": "2026-11-10T11:30:39.049Z" + "dateUpdated": "2026-11-13T15:11:52.928Z" }, "containers": { "cna": { @@ -73,6 +73,40 @@ "url": "https://cert-portal.siemens.com/productcert/html/ssa-435267.html" } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T15:09:59.876452Z", + "id": "CVE-2026-109097", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T15:11:52.928Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109445.json b/data/2026/109xxx/CVE-2026-109445.json new file mode 100644 index 0000000000..9157e8ce43 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109445.json @@ -0,0 +1,142 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109445", + "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "state": "PUBLISHED", + "assignerShortName": "VulnCheck", + "dateReserved": "2026-10-12T15:52:36.683Z", + "datePublished": "2026-11-13T14:48:23.301Z", + "dateUpdated": "2026-11-13T14:48:23.301Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "shortName": "VulnCheck", + "dateUpdated": "2026-11-13T14:48:23.301Z" + }, + "title": "PLANET GS-5220-8P2T2S Stack Buffer Overflow via webstax_auth Cookie", + "descriptions": [ + { + "lang": "en", + "value": "PLANET GS-5220-8P2T2S (hardware version 3.0) firmware versions before 3.2412b261008 contains a stack-based buffer overflow vulnerability that allows unauthenticated attackers to corrupt stack memory by submitting an oversized webstax_auth HTTP Cookie value that is copied into a fixed-size stack buffer without length validation. Attackers can send a crafted unauthenticated HTTP request with an oversized cookie to overwrite the saved return address and corrupt stack memory, leading to memory corruption and potential denial of service on the device." + } + ], + "datePublic": "2026-11-13T00:00:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Stack-based Buffer Overflow", + "cweId": "CWE-121", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "defaultStatus": "unaffected", + "vendor": "PLANET Technology Corp.", + "product": "PLANET GS-5220-8P2T2S", + "versions": [ + { + "status": "affected", + "version": "0", + "versionType": "custom", + "lessThan": "3.2412b261008" + } + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "CRITICAL", + "baseScore": 9.3, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" + } + }, + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + } + ], + "references": [ + { + "url": "https://www.planet.com.tw/en/support/security-advisory/12", + "name": "Vendor Advisory", + "tags": [ + "vendor-advisory", + "patch" + ] + }, + { + "url": "https://www.vulncheck.com/advisories/planet-gs-5220-8p2t2s-stack-buffer-overflow-via-webstax-auth-cookie", + "name": "VulnCheck Advisory: PLANET GS-5220-8P2T2S Stack Buffer Overflow via webstax_auth Cookie", + "tags": [ + "third-party-advisory" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Tianchang Yang and Syed Rafiul Hussain (SyNSec Lab, Penn State University)", + "type": "finder" + } + ], + "x_generator": { + "engine": "vulncheck" + } + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109904.json b/data/2026/109xxx/CVE-2026-109904.json index 175e7acb15..5c22cede64 100644 --- a/data/2026/109xxx/CVE-2026-109904.json +++ b/data/2026/109xxx/CVE-2026-109904.json @@ -8,14 +8,14 @@ "assignerShortName": "suse", "dateReserved": "2026-10-13T09:50:30.690Z", "datePublished": "2026-11-13T10:27:48.418Z", - "dateUpdated": "2026-11-13T10:27:48.418Z" + "dateUpdated": "2026-11-13T15:13:55.307Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", - "dateUpdated": "2026-11-13T10:27:48.418Z" + "dateUpdated": "2026-11-13T15:13:55.307Z" }, "title": "X.Org Server XRes QueryClientIds Request Size Overflow", "datePublic": "2026-11-13T10:18:00.000Z", @@ -124,6 +124,12 @@ "tags": [ "patch" ] + }, + { + "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/a3899d75e180d73f2971af2a402e6fdf19c0339c", + "tags": [ + "patch" + ] } ], "metrics": [ diff --git a/data/2026/111xxx/CVE-2026-111545.json b/data/2026/111xxx/CVE-2026-111545.json new file mode 100644 index 0000000000..77289003f3 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111545.json @@ -0,0 +1,284 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111545", + "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "state": "PUBLISHED", + "assignerShortName": "dell", + "dateReserved": "2026-10-16T10:04:03.180Z", + "datePublished": "2026-11-13T15:15:45.253Z", + "dateUpdated": "2026-11-13T15:15:45.253Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "shortName": "dell", + "dateUpdated": "2026-11-13T15:15:45.253Z" + }, + "datePublic": "2026-10-30T06:30:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-89", + "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Dell", + "product": "PowerStore 500T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 7000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Dell PowerStore contains a SQL Injection vulnerability. An authenticated attacker could exploit this vulnerability, potentially leading to disclosure of stored private keys and tampering with trusted certificates.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Dell PowerStore contains a SQL Injection vulnerability. An authenticated attacker could exploit this vulnerability, potentially leading to disclosure of stored private keys and tampering with trusted certificates." + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111547.json b/data/2026/111xxx/CVE-2026-111547.json new file mode 100644 index 0000000000..97c292c634 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111547.json @@ -0,0 +1,284 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111547", + "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "state": "PUBLISHED", + "assignerShortName": "dell", + "dateReserved": "2026-10-16T10:04:03.181Z", + "datePublished": "2026-11-13T14:40:14.978Z", + "dateUpdated": "2026-11-13T14:40:14.978Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "shortName": "dell", + "dateUpdated": "2026-11-13T14:40:14.978Z" + }, + "datePublic": "2026-10-30T06:30:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-125", + "description": "CWE-125: Out-of-bounds Read", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Dell", + "product": "PowerStore 500T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 7000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Dell PowerStore contains an out-of-bounds read vulnerability. An attacker could exploit this vulnerability, potentially leading to denial of service or limited information disclosure.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Dell PowerStore contains an out-of-bounds read vulnerability. An attacker could exploit this vulnerability, potentially leading to denial of service or limited information disclosure." + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112306.json b/data/2026/112xxx/CVE-2026-112306.json index 14359da2da..48c68f88d3 100644 --- a/data/2026/112xxx/CVE-2026-112306.json +++ b/data/2026/112xxx/CVE-2026-112306.json @@ -8,21 +8,21 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-10-19T14:14:28.386Z", "datePublished": "2026-10-19T15:28:56.450Z", - "dateUpdated": "2026-10-19T16:33:44.883Z" + "dateUpdated": "2026-11-13T15:12:37.261Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", - "dateUpdated": "2026-10-19T15:28:56.450Z" + "dateUpdated": "2026-11-13T15:12:37.261Z" }, "datePublic": "2026-10-09T14:44:39.000Z", - "title": "NocoBase plugin-collection-sql through 2.2.28 SQL Injection via sqlCollection:setFields", + "title": "NocoBase plugin-collection-sql through 2.2.46 SQL Injection via sqlCollection:setFields", "descriptions": [ { "lang": "en", - "value": "NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL() through the sqlCollection:setFields action. Attackers holding the collection-sql snippet can replace a benign collection query with dangerous statements executed on reload, reading pg_shadow password hashes or calling pg_read_file." + "value": "NocoBase @nocobase/plugin-collection-sql through 2.2.46 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL() through the sqlCollection:setFields action. Attackers holding the collection-sql snippet can replace a benign collection query with dangerous statements executed on reload, reading pg_shadow password hashes or calling pg_read_file." } ], "problemTypes": [ @@ -45,7 +45,7 @@ "versions": [ { "version": "0", - "lessThanOrEqual": "2.2.28", + "lessThanOrEqual": "2.2.46", "status": "affected", "versionType": "semver" } diff --git a/data/2026/114xxx/CVE-2026-114406.json b/data/2026/114xxx/CVE-2026-114406.json index 891f599609..e5961d4aad 100644 --- a/data/2026/114xxx/CVE-2026-114406.json +++ b/data/2026/114xxx/CVE-2026-114406.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-10-21T11:57:07.758Z", "datePublished": "2026-10-21T20:56:26.866Z", - "dateUpdated": "2026-11-13T12:22:07.495Z" + "dateUpdated": "2026-11-13T14:55:05.860Z" }, "containers": { "cna": { @@ -1060,6 +1060,42 @@ "cpe:/a:redhat:cost_management_on_premise:1::el10" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Developer Hub 1.10", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhdh/rhdh-hub-rhel9", + "defaultStatus": "affected", + "versions": [ + { + "version": "1794341043", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:rhdh:1.10::el9" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Developer Hub 2.1", + "collectionURL": "https://catalog.redhat.com/software/containers/", + "packageName": "rhdh/rhdh-hub-rhel10", + "defaultStatus": "affected", + "versions": [ + { + "version": "1794002463", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:rhdh:2.1::el10" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Discovery 2", @@ -4968,16 +5004,6 @@ "cpe:/a:redhat:ai_inference_server:3" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Developer Hub 1", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "rhdh/rhdh-hub-rhel9", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:rhdh:1" - ] - }, { "vendor": "Red Hat", "product": "Red Hat Developer Hub 2", @@ -6190,6 +6216,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:96391", + "name": "RHSA-2026:96391", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/errata/RHSA-2026:96400", "name": "RHSA-2026:96400", @@ -6214,6 +6248,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:99044", + "name": "RHSA-2026:99044", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/errata/RHSA-2026:99787", "name": "RHSA-2026:99787", @@ -6313,7 +6355,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-13T12:22:07.495Z" + "dateUpdated": "2026-11-13T14:55:05.860Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/118xxx/CVE-2026-118383.json b/data/2026/118xxx/CVE-2026-118383.json index 394fe37398..a8fb1691db 100644 --- a/data/2026/118xxx/CVE-2026-118383.json +++ b/data/2026/118xxx/CVE-2026-118383.json @@ -8,7 +8,7 @@ "assignerShortName": "mongodb", "dateReserved": "2026-10-28T02:46:37.683Z", "datePublished": "2026-11-10T20:23:51.424Z", - "dateUpdated": "2026-11-10T20:23:51.424Z" + "dateUpdated": "2026-11-13T14:20:14.490Z" }, "containers": { "cna": { @@ -166,6 +166,40 @@ "x_generator": { "engine": "cve_record_builder.py" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:14:20.952752Z", + "id": "CVE-2026-118383", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:20:14.490Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118976.json b/data/2026/118xxx/CVE-2026-118976.json new file mode 100644 index 0000000000..7856d33de4 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118976.json @@ -0,0 +1,112 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118976", + "assignerOrgId": "f9fea0b6-671e-4eea-8fde-31911902ae05", + "state": "PUBLISHED", + "assignerShortName": "ProgressSoftware", + "dateReserved": "2026-10-29T09:13:28.520Z", + "datePublished": "2026-11-13T14:33:21.126Z", + "dateUpdated": "2026-11-13T14:33:21.126Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "f9fea0b6-671e-4eea-8fde-31911902ae05", + "shortName": "ProgressSoftware", + "dateUpdated": "2026-11-13T14:33:21.126Z" + }, + "title": "Path Traversal in Telerik UI for Blazor Demo's Chat AI Integration Example", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-23", + "description": "CWE-23 Relative path traversal", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "descriptions": [ + { + "lang": "en", + "value": "Path Traversal" + } + ] + } + ], + "affected": [ + { + "vendor": "Progress Software", + "product": "Telerik UI for Blazor", + "versions": [ + { + "status": "affected", + "version": "11.1.0", + "lessThan": "14.1.0", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "In Progress® Telerik® UI for Blazor versions v11.1.0 through v14.0.0, the demo application's Chat AI Integration example contains a relative path traversal vulnerability that could allow an attacker to read files outside of the chat attachments folder that are within the server's filesystem scope.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "In Progress® Telerik® UI for Blazor versions v11.1.0 through v14.0.0, the demo application's Chat AI Integration example contains a relative path traversal vulnerability that could allow an attacker to read files outside of the chat attachments folder that are within the server's filesystem scope." + } + ] + } + ], + "references": [ + { + "url": "https://www.telerik.com/blazor-ui/documentation/knowledge-base/kb-security-demo-path-traversal-cve-2026-118976", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } + } + ], + "source": { + "discovery": "INTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 0.2.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119102.json b/data/2026/119xxx/CVE-2026-119102.json new file mode 100644 index 0000000000..83ebb83c4f --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119102.json @@ -0,0 +1,120 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119102", + "assignerOrgId": "f9fea0b6-671e-4eea-8fde-31911902ae05", + "state": "PUBLISHED", + "assignerShortName": "ProgressSoftware", + "dateReserved": "2026-10-29T14:03:06.311Z", + "datePublished": "2026-11-13T14:36:49.832Z", + "dateUpdated": "2026-11-13T14:53:46.142Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "f9fea0b6-671e-4eea-8fde-31911902ae05", + "shortName": "ProgressSoftware", + "dateUpdated": "2026-11-13T14:53:46.142Z" + }, + "title": "AI Command Filters On Any Property Bypassing Column Allowlist", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-20", + "description": "CWE-20 Improper input validation", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-153", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-153 Input Data Manipulation" + } + ] + } + ], + "affected": [ + { + "vendor": "Progress Software", + "product": "Telerik UI for Blazor", + "versions": [ + { + "status": "affected", + "version": "12.0.0", + "lessThan": "16.0.0", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "In Telerik UI for Blazor, versions v12.0.0 through 15.2.0, an improper input validation vulnerability exists, where the Grid, TreeList and Gantt's AI command filters on any model property, bypassing the declared column allowlist.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "In Telerik UI for Blazor, versions v12.0.0 through 15.2.0, an improper input validation vulnerability exists, where the Grid, TreeList and Gantt's AI command filters on any model property, bypassing the declared column allowlist." + } + ] + } + ], + "references": [ + { + "url": "https://www.telerik.com/blazor-ui/documentation/knowledge-base/kb-security-improper-input-validation-cve-2026-119102", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Abhishek Nandkumar Bhaskar (Abhi-Hackz)", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 0.2.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119512.json b/data/2026/119xxx/CVE-2026-119512.json new file mode 100644 index 0000000000..55b2ee2f3b --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119512.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119512", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-10-30T09:20:18.657Z", + "datePublished": "2026-11-13T15:08:41.154Z", + "dateUpdated": "2026-11-13T15:08:41.154Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:41.154Z" + }, + "title": "WordPress Newsletters plugin <= 4.18.2 - PHP Object Injection vulnerability", + "datePublic": "2026-11-11T14:12:24.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injection.This issue affects Newsletters: from n/a through 4.18.2.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injection.

This issue affects Newsletters: from n/a through 4.18.2.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Tribulant Software", + "product": "Newsletters", + "packageName": "newsletters-lite", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "4.18.2", + "changes": [ + { + "at": "4.18.3", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/newsletters-lite/vulnerability/wordpress-newsletters-plugin-4-18-2-php-object-injection-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Nguyen Quang Tan | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-502", + "description": "Deserialization of Untrusted Data", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-586", + "descriptions": [ + { + "lang": "en", + "value": "Object Injection" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Newsletters plugin to the latest available version (at least 4.18.3).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Newsletters plugin to the latest available version (at least 4.18.3)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119517.json b/data/2026/119xxx/CVE-2026-119517.json new file mode 100644 index 0000000000..21b746420e --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119517.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119517", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-10-30T09:20:18.657Z", + "datePublished": "2026-11-13T15:08:43.236Z", + "dateUpdated": "2026-11-13T15:08:43.236Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:43.236Z" + }, + "title": "WordPress Catna – Woo Name Your Price and Offers plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-11T14:17:35.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Catna – Woo Name Your Price and Offers catna-woo-name-your-price-and-offers allows Reflected XSS.This issue affects Catna – Woo Name Your Price and Offers: from n/a through 2.0.3.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Catna – Woo Name Your Price and Offers catna-woo-name-your-price-and-offers allows Reflected XSS.

This issue affects Catna – Woo Name Your Price and Offers: from n/a through 2.0.3.

" + } + ] + } + ], + "affected": [ + { + "vendor": "VillaTheme", + "product": "Catna – Woo Name Your Price and Offers", + "packageName": "catna-woo-name-your-price-and-offers", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "2.0.3", + "changes": [ + { + "at": "2.0.4", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/catna-woo-name-your-price-and-offers/vulnerability/wordpress-catna-woo-name-your-price-and-offers-plugin-2-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Peter Tang | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-591", + "descriptions": [ + { + "lang": "en", + "value": "Reflected XSS" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Catna – Woo Name Your Price and Offers plugin to the latest available version (at least 2.0.4).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Catna – Woo Name Your Price and Offers plugin to the latest available version (at least 2.0.4)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119618.json b/data/2026/119xxx/CVE-2026-119618.json index a892c7cd88..e6174a027d 100644 --- a/data/2026/119xxx/CVE-2026-119618.json +++ b/data/2026/119xxx/CVE-2026-119618.json @@ -8,7 +8,7 @@ "assignerShortName": "apache", "dateReserved": "2026-10-30T12:32:13.904Z", "datePublished": "2026-11-11T14:54:08.155Z", - "dateUpdated": "2026-11-12T20:56:56.991Z" + "dateUpdated": "2026-11-13T14:17:19.945Z" }, "containers": { "cna": { @@ -147,6 +147,54 @@ "x_generator": { "engine": "ADPogram 0.0.1" } + }, + { + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.1, + "attackVector": "NETWORK", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "HIGH", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:17:15.903768Z", + "id": "CVE-2026-119618", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:17:19.945Z" + } } ] } diff --git a/data/2026/120xxx/CVE-2026-120326.json b/data/2026/120xxx/CVE-2026-120326.json index 0dc0e0855d..abff5acc91 100644 --- a/data/2026/120xxx/CVE-2026-120326.json +++ b/data/2026/120xxx/CVE-2026-120326.json @@ -8,7 +8,7 @@ "assignerShortName": "Vaadin", "dateReserved": "2026-11-01T13:24:59.528Z", "datePublished": "2026-11-10T11:49:52.046Z", - "dateUpdated": "2026-11-10T11:49:52.046Z" + "dateUpdated": "2026-11-13T14:31:13.918Z" }, "containers": { "cna": { @@ -279,6 +279,40 @@ "x_generator": { "engine": "Vulnogram 0.5.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:18:29.596217Z", + "id": "CVE-2026-120326", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:31:13.918Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120350.json b/data/2026/120xxx/CVE-2026-120350.json index 1e36de1a20..7e7249325e 100644 --- a/data/2026/120xxx/CVE-2026-120350.json +++ b/data/2026/120xxx/CVE-2026-120350.json @@ -8,7 +8,7 @@ "assignerShortName": "Vaadin", "dateReserved": "2026-11-01T19:47:45.740Z", "datePublished": "2026-11-10T11:50:08.635Z", - "dateUpdated": "2026-11-10T11:50:08.635Z" + "dateUpdated": "2026-11-13T14:31:06.419Z" }, "containers": { "cna": { @@ -262,6 +262,40 @@ "x_generator": { "engine": "Vulnogram 0.5.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:18:32.180656Z", + "id": "CVE-2026-120350", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:31:06.419Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120835.json b/data/2026/120xxx/CVE-2026-120835.json new file mode 100644 index 0000000000..f7a885df94 --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120835.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120835", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-03T00:24:21.836Z", + "datePublished": "2026-11-13T15:08:40.812Z", + "dateUpdated": "2026-11-13T15:08:40.812Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:40.812Z" + }, + "title": "WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.11 - PHP Object Injection vulnerability", + "datePublic": "2026-11-11T14:11:52.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI – Affiliate Marketing for WooCommerce: from n/a through 1.0.11.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.

This issue affects AFFI – Affiliate Marketing for WooCommerce: from n/a through 1.0.11.

" + } + ] + } + ], + "affected": [ + { + "vendor": "VillaTheme", + "product": "AFFI – Affiliate Marketing for WooCommerce", + "packageName": "affi-affiliate-marketing-for-woo", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "1.0.11", + "changes": [ + { + "at": "1.0.12", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/affi-affiliate-marketing-for-woo/vulnerability/wordpress-affi-affiliate-marketing-for-woocommerce-plugin-1-0-11-php-object-injection-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Siyang Wu | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-502", + "description": "Deserialization of Untrusted Data", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-586", + "descriptions": [ + { + "lang": "en", + "value": "Object Injection" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress AFFI – Affiliate Marketing for WooCommerce plugin to the latest available version (at least 1.0.12).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress AFFI – Affiliate Marketing for WooCommerce plugin to the latest available version (at least 1.0.12)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121191.json b/data/2026/121xxx/CVE-2026-121191.json index 5ff07f1561..54c699ae24 100644 --- a/data/2026/121xxx/CVE-2026-121191.json +++ b/data/2026/121xxx/CVE-2026-121191.json @@ -8,7 +8,7 @@ "assignerShortName": "TR-CERT", "dateReserved": "2026-11-03T10:21:47.171Z", "datePublished": "2026-11-10T11:52:12.493Z", - "dateUpdated": "2026-11-10T11:52:12.493Z" + "dateUpdated": "2026-11-13T14:30:58.317Z" }, "containers": { "cna": { @@ -120,6 +120,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:18:34.809192Z", + "id": "CVE-2026-121191", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:30:58.317Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121776.json b/data/2026/121xxx/CVE-2026-121776.json new file mode 100644 index 0000000000..627a8ee214 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121776.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121776", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-04T00:24:30.154Z", + "datePublished": "2026-11-13T15:08:41.752Z", + "dateUpdated": "2026-11-13T15:08:41.752Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:41.752Z" + }, + "title": "WordPress Passster plugin <= 4.3.20 - Broken Access Control vulnerability", + "datePublic": "2026-11-11T14:13:09.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Passster: from n/a through 4.3.20.

" + } + ] + } + ], + "affected": [ + { + "vendor": "WP Chill", + "product": "Passster", + "packageName": "content-protector", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "4.3.20", + "changes": [ + { + "at": "4.3.21", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/content-protector/vulnerability/wordpress-passster-plugin-4-3-20-broken-access-control-vulnerability-2?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Malvin Valerian Gultom | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-862", + "description": "Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-180", + "descriptions": [ + { + "lang": "en", + "value": "Exploiting Incorrectly Configured Access Control Security Levels" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Passster plugin to the latest available version (at least 4.3.21).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Passster plugin to the latest available version (at least 4.3.21)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123082.json b/data/2026/123xxx/CVE-2026-123082.json index 595d5e8f71..98a0549da4 100644 --- a/data/2026/123xxx/CVE-2026-123082.json +++ b/data/2026/123xxx/CVE-2026-123082.json @@ -8,7 +8,7 @@ "assignerShortName": "Docker", "dateReserved": "2026-11-05T10:56:32.202Z", "datePublished": "2026-11-10T14:37:24.600Z", - "dateUpdated": "2026-11-10T14:37:24.600Z" + "dateUpdated": "2026-11-13T14:30:51.277Z" }, "containers": { "cna": { @@ -110,6 +110,40 @@ "source": { "discovery": "INTERNAL" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:18:37.065673Z", + "id": "CVE-2026-123082", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:30:51.277Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123181.json b/data/2026/123xxx/CVE-2026-123181.json index 17ab728237..1aa5192d93 100644 --- a/data/2026/123xxx/CVE-2026-123181.json +++ b/data/2026/123xxx/CVE-2026-123181.json @@ -8,7 +8,7 @@ "assignerShortName": "ivanti", "dateReserved": "2026-11-05T16:55:42.443Z", "datePublished": "2026-11-10T15:52:01.338Z", - "dateUpdated": "2026-11-10T17:33:46.264Z" + "dateUpdated": "2026-11-13T14:30:35.722Z" }, "containers": { "cna": { @@ -111,6 +111,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:18:41.675760Z", + "id": "CVE-2026-123181", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:30:35.722Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123710.json b/data/2026/123xxx/CVE-2026-123710.json index bace9eb9e6..7b5dd9a0a5 100644 --- a/data/2026/123xxx/CVE-2026-123710.json +++ b/data/2026/123xxx/CVE-2026-123710.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-11-06T10:23:55.509Z", "datePublished": "2026-11-11T15:02:31.341Z", - "dateUpdated": "2026-11-13T00:21:58.960Z" + "dateUpdated": "2026-11-13T14:18:08.901Z" }, "containers": { "cna": { @@ -390,6 +390,40 @@ "x_generator": { "engine": "cvelib 1.8.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:17:57.069419Z", + "id": "CVE-2026-123710", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:18:08.901Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123975.json b/data/2026/123xxx/CVE-2026-123975.json new file mode 100644 index 0000000000..138627ea00 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123975.json @@ -0,0 +1,157 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123975", + "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "state": "PUBLISHED", + "assignerShortName": "VulnCheck", + "dateReserved": "2026-11-06T17:54:13.735Z", + "datePublished": "2026-11-13T15:01:44.332Z", + "dateUpdated": "2026-11-13T15:01:44.332Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "shortName": "VulnCheck", + "dateUpdated": "2026-11-13T15:01:44.332Z" + }, + "datePublic": "2026-11-11T00:00:00.000Z", + "title": "Grid Community Toolkit globus-gss-assist before 12.9 Pre-Authentication Heap Out-of-Bounds Write", + "descriptions": [ + { + "lang": "en", + "value": "Grid Community Toolkit before 6.2.20261111 (globus-gss-assist before 12.9) contains a heap out-of-bounds write in globus_gss_assist_token_get_fd() triggered by SSLv2 record lengths below 3. Remote unauthenticated clients can send a crafted GSI handshake record to services like globus-gatekeeper and myproxy to corrupt heap memory and crash the service." + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Out-of-bounds Write", + "cweId": "CWE-787", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Grid Community Forum", + "product": "Grid Community Toolkit", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "status": "affected", + "versionType": "custom", + "lessThan": "6.2.20261111" + } + ], + "packageURL": "pkg:github/gridcf/gct", + "repo": "https://github.com/gridcf/gct" + }, + { + "vendor": "Grid Community Forum", + "product": "globus-gss-assist", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "status": "affected", + "versionType": "custom", + "lessThan": "12.9" + } + ], + "packageURL": "pkg:github/gridcf/gct", + "repo": "https://github.com/gridcf/gct" + } + ], + "metrics": [ + { + "format": "CVSS", + "cvssV4_0": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "baseScore": 8.7, + "baseSeverity": "HIGH" + } + }, + { + "format": "CVSS", + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH", + "baseScore": 7.5, + "baseSeverity": "HIGH" + } + } + ], + "references": [ + { + "url": "https://gridcf.org/#2026-11-11", + "tags": [ + "vendor-advisory" + ] + }, + { + "url": "https://github.com/gridcf/gct/commit/3df2be4834c146bdcec90009a0f2e5771ff63cca", + "tags": [ + "patch" + ] + }, + { + "url": "https://github.com/gridcf/gct/releases/tag/v6.2.20261111", + "tags": [ + "release-notes" + ], + "name": "Grid Community Toolkit v6.2.20261111 Release Notes" + }, + { + "url": "https://github.com/gridcf/gct/blob/v6.2.20190829/gsi/gss_assist/source/tokens_f.c", + "tags": [ + "technical-description" + ] + }, + { + "name": "VulnCheck Advisory: Grid Community Toolkit globus-gss-assist before 12.9 Pre-Authentication Heap Out-of-Bounds Write", + "tags": [ + "third-party-advisory" + ], + "url": "https://www.vulncheck.com/advisories/grid-community-toolkit-globus-gss-assist-before-12.9-pre-authentication-heap-out-of-bounds-write" + } + ], + "credits": [ + { + "lang": "en", + "value": "Deus Rex", + "type": "finder" + } + ], + "x_generator": { + "engine": "vulncheck-endgame" + } + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124002.json b/data/2026/124xxx/CVE-2026-124002.json index 3f6a1f4a41..036c9a670c 100644 --- a/data/2026/124xxx/CVE-2026-124002.json +++ b/data/2026/124xxx/CVE-2026-124002.json @@ -8,14 +8,14 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T18:38:38.543Z", "datePublished": "2026-11-12T19:34:26.958Z", - "dateUpdated": "2026-11-12T19:55:42.192Z" + "dateUpdated": "2026-11-13T14:44:18.509Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", - "dateUpdated": "2026-11-12T19:55:42.192Z" + "dateUpdated": "2026-11-13T14:44:18.509Z" }, "title": "Dixell/Copeland XWEB EVO Pre-Auth OS Command Injection via Username", "descriptions": [ @@ -133,12 +133,27 @@ "product" ] }, + { + "url": "https://webapps.copeland.com/dixell/Content/Pages/AdvertisingMaterials/ProductNews/XWEB%20EVO%20EoS%20-%20Product_Bulletin_March_2026.pdf", + "name": "End of Support Announcement", + "tags": [ + "vendor-advisory" + ] + }, { "url": "https://www.vulncheck.com/advisories/dixell-copeland-xweb-evo-pre-authentication-os-command-injection-via-username", "name": "VulnCheck Advisory: Dixell/Copeland XWEB EVO Pre-Authentication OS Command Injection via Username", "tags": [ "third-party-advisory" ] + }, + { + "url": "https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root", + "name": "VulnCheck Blog", + "tags": [ + "exploit", + "technical-description" + ] } ], "credits": [ diff --git a/data/2026/124xxx/CVE-2026-124003.json b/data/2026/124xxx/CVE-2026-124003.json index 945964218f..a16c9d931f 100644 --- a/data/2026/124xxx/CVE-2026-124003.json +++ b/data/2026/124xxx/CVE-2026-124003.json @@ -8,14 +8,14 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T18:38:38.543Z", "datePublished": "2026-11-12T19:37:11.873Z", - "dateUpdated": "2026-11-13T00:24:39.423Z" + "dateUpdated": "2026-11-13T14:33:36.388Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", - "dateUpdated": "2026-11-12T19:40:00.629Z" + "dateUpdated": "2026-11-13T14:33:36.388Z" }, "title": "Dixell/Copeland XWEB Setuid Lua CGI Root Command Injection", "descriptions": [ @@ -140,6 +140,14 @@ "tags": [ "third-party-advisory" ] + }, + { + "url": "https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root", + "name": "VulnCheck Blog", + "tags": [ + "technical-description", + "exploit" + ] } ], "credits": [ diff --git a/data/2026/124xxx/CVE-2026-124004.json b/data/2026/124xxx/CVE-2026-124004.json index 280eff4f32..27250b957e 100644 --- a/data/2026/124xxx/CVE-2026-124004.json +++ b/data/2026/124xxx/CVE-2026-124004.json @@ -8,14 +8,14 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T18:38:38.543Z", "datePublished": "2026-11-12T19:41:02.897Z", - "dateUpdated": "2026-11-12T20:08:34.593Z" + "dateUpdated": "2026-11-13T14:33:54.784Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", - "dateUpdated": "2026-11-12T20:08:34.593Z" + "dateUpdated": "2026-11-13T14:33:54.784Z" }, "title": "Dixell/Copeland XWEB EVO Hardcoded Administrator Backdoor Password", "descriptions": [ @@ -140,6 +140,14 @@ "tags": [ "third-party-advisory" ] + }, + { + "url": "https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root", + "name": "VulnCheck Blog", + "tags": [ + "technical-description", + "exploit" + ] } ], "credits": [ diff --git a/data/2026/124xxx/CVE-2026-124005.json b/data/2026/124xxx/CVE-2026-124005.json index ed8106ac30..298f52aea4 100644 --- a/data/2026/124xxx/CVE-2026-124005.json +++ b/data/2026/124xxx/CVE-2026-124005.json @@ -8,14 +8,14 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T18:38:38.543Z", "datePublished": "2026-11-12T19:42:31.109Z", - "dateUpdated": "2026-11-12T20:08:44.853Z" + "dateUpdated": "2026-11-13T14:34:10.836Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", - "dateUpdated": "2026-11-12T20:08:44.853Z" + "dateUpdated": "2026-11-13T14:34:10.836Z" }, "title": "Dixell/Copeland XWEB EVO Predictable Administrator Password Generation", "descriptions": [ @@ -135,6 +135,14 @@ "tags": [ "third-party-advisory" ] + }, + { + "url": "https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root", + "name": "VulnCheck Blog", + "tags": [ + "technical-description", + "exploit" + ] } ], "credits": [ diff --git a/data/2026/124xxx/CVE-2026-124006.json b/data/2026/124xxx/CVE-2026-124006.json index 4ba007fa47..0904abc587 100644 --- a/data/2026/124xxx/CVE-2026-124006.json +++ b/data/2026/124xxx/CVE-2026-124006.json @@ -8,14 +8,14 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T18:38:38.543Z", "datePublished": "2026-11-12T19:44:23.841Z", - "dateUpdated": "2026-11-12T20:08:58.024Z" + "dateUpdated": "2026-11-13T14:34:42.790Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", - "dateUpdated": "2026-11-12T20:08:58.024Z" + "dateUpdated": "2026-11-13T14:34:42.790Z" }, "title": "Dixell/Copeland XWEB EVO Predictable Root Password Generation", "descriptions": [ @@ -141,6 +141,14 @@ "tags": [ "third-party-advisory" ] + }, + { + "url": "https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root", + "name": "VulnCheck Blog", + "tags": [ + "technical-description", + "exploit" + ] } ], "credits": [ diff --git a/data/2026/124xxx/CVE-2026-124007.json b/data/2026/124xxx/CVE-2026-124007.json index d3b4c62101..1c741d488b 100644 --- a/data/2026/124xxx/CVE-2026-124007.json +++ b/data/2026/124xxx/CVE-2026-124007.json @@ -8,14 +8,14 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T18:38:38.543Z", "datePublished": "2026-11-12T19:48:39.316Z", - "dateUpdated": "2026-11-13T00:26:01.605Z" + "dateUpdated": "2026-11-13T14:34:59.402Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", - "dateUpdated": "2026-11-12T20:09:08.569Z" + "dateUpdated": "2026-11-13T14:34:59.402Z" }, "title": "Dixell/Copeland XWEB EVO Pre-Auth OS Command Injection via Password Field", "descriptions": [ @@ -135,6 +135,14 @@ "tags": [ "third-party-advisory" ] + }, + { + "url": "https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root", + "name": "VulnCheck Blog", + "tags": [ + "technical-description", + "exploit" + ] } ], "credits": [ diff --git a/data/2026/124xxx/CVE-2026-124008.json b/data/2026/124xxx/CVE-2026-124008.json index bf335efe28..936a8f8c81 100644 --- a/data/2026/124xxx/CVE-2026-124008.json +++ b/data/2026/124xxx/CVE-2026-124008.json @@ -8,14 +8,14 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T18:38:38.543Z", "datePublished": "2026-11-12T19:53:16.327Z", - "dateUpdated": "2026-11-12T20:09:16.896Z" + "dateUpdated": "2026-11-13T14:35:18.051Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", - "dateUpdated": "2026-11-12T20:09:16.896Z" + "dateUpdated": "2026-11-13T14:35:18.051Z" }, "title": "Dixell/Copeland XWEB EVO OS Command Injection via devices.lua", "descriptions": [ @@ -135,6 +135,14 @@ "tags": [ "third-party-advisory" ] + }, + { + "url": "https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root", + "name": "VulnCheck Blog", + "tags": [ + "technical-description", + "exploit" + ] } ], "credits": [ diff --git a/data/2026/124xxx/CVE-2026-124009.json b/data/2026/124xxx/CVE-2026-124009.json index 11bae21660..a174582893 100644 --- a/data/2026/124xxx/CVE-2026-124009.json +++ b/data/2026/124xxx/CVE-2026-124009.json @@ -8,14 +8,14 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T18:38:38.543Z", "datePublished": "2026-11-12T19:54:31.046Z", - "dateUpdated": "2026-11-12T20:09:28.171Z" + "dateUpdated": "2026-11-13T14:35:35.464Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", - "dateUpdated": "2026-11-12T20:09:28.171Z" + "dateUpdated": "2026-11-13T14:35:35.464Z" }, "title": "Dixell/Copeland XWEB EVO OS Command Injection via backup.lua", "descriptions": [ @@ -135,6 +135,14 @@ "tags": [ "third-party-advisory" ] + }, + { + "url": "https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root", + "name": "VulnCheck Blog", + "tags": [ + "technical-description", + "exploit" + ] } ], "credits": [ diff --git a/data/2026/124xxx/CVE-2026-124010.json b/data/2026/124xxx/CVE-2026-124010.json index d556f0df7d..784b5415be 100644 --- a/data/2026/124xxx/CVE-2026-124010.json +++ b/data/2026/124xxx/CVE-2026-124010.json @@ -8,14 +8,14 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T18:38:38.543Z", "datePublished": "2026-11-12T19:58:13.919Z", - "dateUpdated": "2026-11-12T20:09:38.355Z" + "dateUpdated": "2026-11-13T14:35:53.821Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", - "dateUpdated": "2026-11-12T20:09:38.355Z" + "dateUpdated": "2026-11-13T14:35:53.821Z" }, "title": "Dixell/Copeland XWEB EVO Unauthenticated Command Injection via xwconsole.cgi", "descriptions": [ @@ -141,6 +141,14 @@ "tags": [ "third-party-advisory" ] + }, + { + "url": "https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root", + "name": "VulnCheck Blog", + "tags": [ + "technical-description", + "exploit" + ] } ], "credits": [ diff --git a/data/2026/124xxx/CVE-2026-124011.json b/data/2026/124xxx/CVE-2026-124011.json index 862d897672..89ddad6cfd 100644 --- a/data/2026/124xxx/CVE-2026-124011.json +++ b/data/2026/124xxx/CVE-2026-124011.json @@ -8,14 +8,14 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T18:38:38.543Z", "datePublished": "2026-11-12T19:59:37.292Z", - "dateUpdated": "2026-11-13T00:26:35.263Z" + "dateUpdated": "2026-11-13T14:36:10.099Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", - "dateUpdated": "2026-11-12T20:09:47.317Z" + "dateUpdated": "2026-11-13T14:36:10.099Z" }, "title": "Dixell/Copeland XWEB EVO Information Disclosure via sysinfo.lua", "descriptions": [ @@ -135,6 +135,14 @@ "tags": [ "third-party-advisory" ] + }, + { + "url": "https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root", + "name": "VulnCheck Blog", + "tags": [ + "technical-description", + "exploit" + ] } ], "credits": [ diff --git a/data/2026/124xxx/CVE-2026-124012.json b/data/2026/124xxx/CVE-2026-124012.json index 8952ac1bea..c399f7ae31 100644 --- a/data/2026/124xxx/CVE-2026-124012.json +++ b/data/2026/124xxx/CVE-2026-124012.json @@ -8,14 +8,14 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T18:38:38.543Z", "datePublished": "2026-11-12T20:01:03.642Z", - "dateUpdated": "2026-11-12T20:09:56.715Z" + "dateUpdated": "2026-11-13T14:36:28.267Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", - "dateUpdated": "2026-11-12T20:09:56.715Z" + "dateUpdated": "2026-11-13T14:36:28.267Z" }, "title": "Dixell/Copeland XWEB EVO Hardcoded Administrator Daily Password Authentication Bypass", "descriptions": [ @@ -135,6 +135,14 @@ "tags": [ "third-party-advisory" ] + }, + { + "url": "https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root", + "name": "VulnCheck Blog", + "tags": [ + "technical-description", + "exploit" + ] } ], "credits": [ diff --git a/data/2026/124xxx/CVE-2026-124013.json b/data/2026/124xxx/CVE-2026-124013.json index 8433729f6d..725ffe955e 100644 --- a/data/2026/124xxx/CVE-2026-124013.json +++ b/data/2026/124xxx/CVE-2026-124013.json @@ -8,14 +8,14 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T18:38:38.543Z", "datePublished": "2026-11-12T20:02:57.378Z", - "dateUpdated": "2026-11-12T20:10:06.208Z" + "dateUpdated": "2026-11-13T14:36:45.378Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", - "dateUpdated": "2026-11-12T20:10:06.208Z" + "dateUpdated": "2026-11-13T14:36:45.378Z" }, "title": "Dixell/Copeland XWEB EVO OS Command Injection via api.lua", "descriptions": [ @@ -135,6 +135,14 @@ "tags": [ "third-party-advisory" ] + }, + { + "url": "https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root", + "name": "VulnCheck Blog", + "tags": [ + "technical-description", + "exploit" + ] } ], "credits": [ diff --git a/data/2026/124xxx/CVE-2026-124014.json b/data/2026/124xxx/CVE-2026-124014.json index fc8ff3c0a3..50e9b0e67c 100644 --- a/data/2026/124xxx/CVE-2026-124014.json +++ b/data/2026/124xxx/CVE-2026-124014.json @@ -8,14 +8,14 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T18:38:38.544Z", "datePublished": "2026-11-12T20:05:59.683Z", - "dateUpdated": "2026-11-12T20:10:16.485Z" + "dateUpdated": "2026-11-13T14:37:05.009Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", - "dateUpdated": "2026-11-12T20:10:16.485Z" + "dateUpdated": "2026-11-13T14:37:05.009Z" }, "title": "Dixell/Copeland XWEB EVO Unauthenticated Configuration Write via config.lua", "descriptions": [ @@ -135,6 +135,14 @@ "tags": [ "third-party-advisory" ] + }, + { + "url": "https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root", + "name": "VulnCheck Blog", + "tags": [ + "technical-description", + "exploit" + ] } ], "credits": [ diff --git a/data/2026/124xxx/CVE-2026-124015.json b/data/2026/124xxx/CVE-2026-124015.json index dbb16e554f..86d12da9ea 100644 --- a/data/2026/124xxx/CVE-2026-124015.json +++ b/data/2026/124xxx/CVE-2026-124015.json @@ -8,14 +8,14 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T18:38:38.544Z", "datePublished": "2026-11-12T20:07:32.288Z", - "dateUpdated": "2026-11-13T00:40:02.514Z" + "dateUpdated": "2026-11-13T14:37:28.477Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", - "dateUpdated": "2026-11-12T20:10:25.011Z" + "dateUpdated": "2026-11-13T14:37:28.477Z" }, "title": "Dixell/Copeland XWEB EVO Authentication Bypass via users.lua", "descriptions": [ @@ -135,6 +135,14 @@ "tags": [ "third-party-advisory" ] + }, + { + "url": "https://www.vulncheck.com/blog/copeland-xweb-evo-unauthenticated-root", + "name": "VulnCheck Blog", + "tags": [ + "technical-description", + "exploit" + ] } ], "credits": [ diff --git a/data/2026/124xxx/CVE-2026-124260.json b/data/2026/124xxx/CVE-2026-124260.json new file mode 100644 index 0000000000..a735c796d9 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124260.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124260", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-07T00:30:09.635Z", + "datePublished": "2026-11-13T15:08:41.519Z", + "dateUpdated": "2026-11-13T15:08:41.519Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:41.519Z" + }, + "title": "WordPress WP Photo Album Plus plugin <= 9.3.06.001 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-11T14:13:01.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jacob N. Breetvelt WP Photo Album Plus wp-photo-album-plus allows Reflected XSS.This issue affects WP Photo Album Plus: from n/a through 9.3.06.001.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jacob N. Breetvelt WP Photo Album Plus wp-photo-album-plus allows Reflected XSS.

This issue affects WP Photo Album Plus: from n/a through 9.3.06.001.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Jacob N. Breetvelt", + "product": "WP Photo Album Plus", + "packageName": "wp-photo-album-plus", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "9.3.06.001", + "changes": [ + { + "at": "9.3.06.002", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-photo-album-plus/vulnerability/wordpress-wp-photo-album-plus-plugin-9-3-06-001-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "AndrewN | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-591", + "descriptions": [ + { + "lang": "en", + "value": "Reflected XSS" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress WP Photo Album Plus plugin to the latest available version (at least 9.3.06.002).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress WP Photo Album Plus plugin to the latest available version (at least 9.3.06.002)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124265.json b/data/2026/124xxx/CVE-2026-124265.json new file mode 100644 index 0000000000..fc96fbf700 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124265.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124265", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-07T00:30:09.635Z", + "datePublished": "2026-11-13T15:08:42.588Z", + "dateUpdated": "2026-11-13T15:08:42.588Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:42.588Z" + }, + "title": "WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability", + "datePublic": "2026-11-11T14:16:37.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software Newsletters newsletters-lite allows Blind SQL Injection.This issue affects Newsletters: from n/a through 4.18.1.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software Newsletters newsletters-lite allows Blind SQL Injection.

This issue affects Newsletters: from n/a through 4.18.1.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Tribulant Software", + "product": "Newsletters", + "packageName": "newsletters-lite", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "4.18.1", + "changes": [ + { + "at": "4.18.2", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/newsletters-lite/vulnerability/wordpress-newsletters-plugin-4-18-1-sql-injection-vulnerability-2?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Siyang Wu | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-89", + "description": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-7", + "descriptions": [ + { + "lang": "en", + "value": "Blind SQL Injection" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Newsletters plugin to the latest available version (at least 4.18.2).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Newsletters plugin to the latest available version (at least 4.18.2)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124267.json b/data/2026/124xxx/CVE-2026-124267.json new file mode 100644 index 0000000000..2bca6e7bee --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124267.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124267", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-07T00:30:09.635Z", + "datePublished": "2026-11-13T15:08:42.065Z", + "dateUpdated": "2026-11-13T15:08:42.065Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:42.065Z" + }, + "title": "WordPress Gmail SMTP plugin <= 1.2.3.23 - Broken Access Control vulnerability", + "datePublic": "2026-11-11T14:14:16.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Noor Alam Gmail SMTP gmail-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gmail SMTP: from n/a through 1.2.3.23.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Missing Authorization vulnerability in Noor Alam Gmail SMTP gmail-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Gmail SMTP: from n/a through 1.2.3.23.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Noor Alam", + "product": "Gmail SMTP", + "packageName": "gmail-smtp", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "1.2.3.23", + "changes": [ + { + "at": "1.2.3.24", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/gmail-smtp/vulnerability/wordpress-gmail-smtp-plugin-1-2-3-23-broken-access-control-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Peter Tang | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-862", + "description": "Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-180", + "descriptions": [ + { + "lang": "en", + "value": "Exploiting Incorrectly Configured Access Control Security Levels" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Gmail SMTP plugin to the latest available version (at least 1.2.3.24).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Gmail SMTP plugin to the latest available version (at least 1.2.3.24)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124272.json b/data/2026/124xxx/CVE-2026-124272.json new file mode 100644 index 0000000000..25901fca7a --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124272.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124272", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-07T00:30:09.636Z", + "datePublished": "2026-11-13T15:08:41.860Z", + "dateUpdated": "2026-11-13T15:08:41.860Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:41.860Z" + }, + "title": "WordPress Salon booking system plugin <= 10.31.14 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-11T14:13:52.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Reflected XSS.This issue affects Salon booking system: from n/a through 10.31.14.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Reflected XSS.

This issue affects Salon booking system: from n/a through 10.31.14.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Dimitri Grassi", + "product": "Salon booking system", + "packageName": "salon-booking-system", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "10.31.14", + "changes": [ + { + "at": "10.31.15", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/salon-booking-system/vulnerability/wordpress-salon-booking-system-plugin-10-31-14-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Pham Cong Lap (Clapboiz) of HPT VN | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-591", + "descriptions": [ + { + "lang": "en", + "value": "Reflected XSS" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Salon booking system plugin to the latest available version (at least 10.31.15).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Salon booking system plugin to the latest available version (at least 10.31.15)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124409.json b/data/2026/124xxx/CVE-2026-124409.json new file mode 100644 index 0000000000..bb60839260 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124409.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124409", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-08T00:26:41.330Z", + "datePublished": "2026-11-13T14:39:29.907Z", + "dateUpdated": "2026-11-13T14:40:31.659Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T14:40:31.659Z" + }, + "title": "WordPress CURCY plugin <= 2.2.21 - Broken Access Control vulnerability", + "datePublic": "2026-11-13T14:39:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CURCY: from n/a through 2.2.21.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects CURCY: from n/a through 2.2.21.

" + } + ] + } + ], + "affected": [ + { + "vendor": "VillaTheme", + "product": "CURCY", + "packageName": "woo-multi-currency", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "2.2.21", + "changes": [ + { + "at": "2.2.22", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/woo-multi-currency/vulnerability/wordpress-curcy-plugin-2-2-21-broken-access-control-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "hera-user | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-862", + "description": "Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-180", + "descriptions": [ + { + "lang": "en", + "value": "Exploiting Incorrectly Configured Access Control Security Levels" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress CURCY plugin to the latest available version (at least 2.2.22).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress CURCY plugin to the latest available version (at least 2.2.22)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124410.json b/data/2026/124xxx/CVE-2026-124410.json new file mode 100644 index 0000000000..b7904f7d97 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124410.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124410", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-08T00:26:41.330Z", + "datePublished": "2026-11-13T15:08:42.902Z", + "dateUpdated": "2026-11-13T15:08:42.902Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:42.902Z" + }, + "title": "WordPress Translate and boost SEO – Automatic AI translation – wpLingua plugin <= 3.1.1 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-11T14:17:06.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpLingua Translation Service Translate and boost SEO – Automatic AI translation – wpLingua wplingua allows Stored XSS.This issue affects Translate and boost SEO – Automatic AI translation – wpLingua: from n/a through 3.1.1.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpLingua Translation Service Translate and boost SEO – Automatic AI translation – wpLingua wplingua allows Stored XSS.

This issue affects Translate and boost SEO – Automatic AI translation – wpLingua: from n/a through 3.1.1.

" + } + ] + } + ], + "affected": [ + { + "vendor": "wpLingua Translation Service", + "product": "Translate and boost SEO РAutomatic AI translation РwpLingua", + "packageName": "wplingua", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "3.1.1", + "changes": [ + { + "at": "3.2.0", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wplingua/vulnerability/wordpress-translate-and-boost-seo-automatic-ai-translation-wplingua-plugin-3-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Alpaslan Fatih Șzer | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-592", + "descriptions": [ + { + "lang": "en", + "value": "Stored XSS" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Translate and boost SEO РAutomatic AI translation РwpLingua plugin to the latest available version (at least 3.2.0).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Translate and boost SEO РAutomatic AI translation РwpLingua plugin to the latest available version (at least 3.2.0)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124412.json b/data/2026/124xxx/CVE-2026-124412.json new file mode 100644 index 0000000000..cba582d190 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124412.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124412", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-08T00:26:41.330Z", + "datePublished": "2026-11-13T14:40:28.529Z", + "dateUpdated": "2026-11-13T14:41:28.379Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T14:41:28.379Z" + }, + "title": "WordPress Slim SEO plugin <= 4.11.5 - Content Injection vulnerability", + "datePublic": "2026-11-13T14:40:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in eLightUp Slim SEO slim-seo allows Code Injection.This issue affects Slim SEO: from n/a through 4.11.5.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in eLightUp Slim SEO slim-seo allows Code Injection.

This issue affects Slim SEO: from n/a through 4.11.5.

" + } + ] + } + ], + "affected": [ + { + "vendor": "eLightUp", + "product": "Slim SEO", + "packageName": "slim-seo", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "4.11.5", + "changes": [ + { + "at": "4.11.6", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/slim-seo/vulnerability/wordpress-slim-seo-plugin-4-11-5-content-injection-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "neurotx | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-80", + "description": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-242", + "descriptions": [ + { + "lang": "en", + "value": "Code Injection" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Slim SEO plugin to the latest available version (at least 4.11.6).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Slim SEO plugin to the latest available version (at least 4.11.6)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124414.json b/data/2026/124xxx/CVE-2026-124414.json new file mode 100644 index 0000000000..8632a9f3b1 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124414.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124414", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-08T00:26:41.330Z", + "datePublished": "2026-11-13T15:08:42.440Z", + "dateUpdated": "2026-11-13T15:08:42.440Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:42.440Z" + }, + "title": "WordPress Broadcast Live Video plugin <= 7.3.15 - Broken Authentication vulnerability", + "datePublic": "2026-11-11T14:16:32.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Weak Authentication vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Authentication Abuse.This issue affects Broadcast Live Video: from n/a through 7.3.15.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Weak Authentication vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Authentication Abuse.

This issue affects Broadcast Live Video: from n/a through 7.3.15.

" + } + ] + } + ], + "affected": [ + { + "vendor": "VideoWhisper.com", + "product": "Broadcast Live Video", + "packageName": "videowhisper-live-streaming-integration", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "7.3.15", + "changes": [ + { + "at": "7.3.16", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/videowhisper-live-streaming-integration/vulnerability/wordpress-broadcast-live-video-plugin-7-3-15-broken-authentication-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "ashv4ni | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-1390", + "description": "Weak Authentication", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-114", + "descriptions": [ + { + "lang": "en", + "value": "Authentication Abuse" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Broadcast Live Video plugin to the latest available version (at least 7.3.16).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Broadcast Live Video plugin to the latest available version (at least 7.3.16)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124415.json b/data/2026/124xxx/CVE-2026-124415.json new file mode 100644 index 0000000000..f28856c63a --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124415.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124415", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-08T00:26:41.330Z", + "datePublished": "2026-11-13T15:08:43.121Z", + "dateUpdated": "2026-11-13T15:08:43.121Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:43.121Z" + }, + "title": "WordPress Alex Reservations plugin <= 2.4.8 - SQL Injection vulnerability", + "datePublic": "2026-11-11T14:17:27.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alejandro Alex Reservations alex-reservations allows SQL Injection.This issue affects Alex Reservations: from n/a through 2.4.8.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alejandro Alex Reservations alex-reservations allows SQL Injection.

This issue affects Alex Reservations: from n/a through 2.4.8.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Alejandro", + "product": "Alex Reservations", + "packageName": "alex-reservations", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "2.4.8", + "changes": [ + { + "at": "2.4.9", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/alex-reservations/vulnerability/wordpress-alex-reservations-plugin-2-4-8-sql-injection-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Jayant Kamble | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-89", + "description": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-66", + "descriptions": [ + { + "lang": "en", + "value": "SQL Injection" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Alex Reservations plugin to the latest available version (at least 2.4.9).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Alex Reservations plugin to the latest available version (at least 2.4.9)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124418.json b/data/2026/124xxx/CVE-2026-124418.json new file mode 100644 index 0000000000..336128f460 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124418.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124418", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-08T00:26:41.331Z", + "datePublished": "2026-11-13T15:08:42.240Z", + "dateUpdated": "2026-11-13T15:08:42.240Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:42.240Z" + }, + "title": "WordPress WP Job Portal plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-11T14:14:22.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmad WP Job Portal wp-job-portal allows Stored XSS.This issue affects WP Job Portal: from n/a through 2.7.2.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmad WP Job Portal wp-job-portal allows Stored XSS.

This issue affects WP Job Portal: from n/a through 2.7.2.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Ahmad", + "product": "WP Job Portal", + "packageName": "wp-job-portal", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "2.7.2", + "changes": [ + { + "at": "2.8.0", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-job-portal/vulnerability/wordpress-wp-job-portal-plugin-2-7-2-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "elba.code | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-592", + "descriptions": [ + { + "lang": "en", + "value": "Stored XSS" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress WP Job Portal plugin to the latest available version (at least 2.8.0).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress WP Job Portal plugin to the latest available version (at least 2.8.0)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124420.json b/data/2026/124xxx/CVE-2026-124420.json new file mode 100644 index 0000000000..53f5cf568a --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124420.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124420", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-08T00:26:41.331Z", + "datePublished": "2026-11-13T15:08:41.418Z", + "dateUpdated": "2026-11-13T15:08:41.418Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:41.418Z" + }, + "title": "WordPress Woody ad snippets plugin <= 2.7.10 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-11T14:12:30.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Woody ad snippets insert-php allows Reflected XSS.This issue affects Woody ad snippets: from n/a through 2.7.10.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Woody ad snippets insert-php allows Reflected XSS.

This issue affects Woody ad snippets: from n/a through 2.7.10.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Themeisle", + "product": "Woody ad snippets", + "packageName": "insert-php", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "2.7.10", + "changes": [ + { + "at": "2.7.11", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/insert-php/vulnerability/wordpress-woody-ad-snippets-plugin-2-7-10-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "dzaku | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-591", + "descriptions": [ + { + "lang": "en", + "value": "Reflected XSS" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Woody ad snippets plugin to the latest available version (at least 2.7.11).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Woody ad snippets plugin to the latest available version (at least 2.7.11)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124965.json b/data/2026/124xxx/CVE-2026-124965.json new file mode 100644 index 0000000000..c71ea6e7ed --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124965.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124965", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-09T15:06:57.634Z", + "datePublished": "2026-11-13T15:08:42.786Z", + "dateUpdated": "2026-11-13T15:08:42.786Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:42.786Z" + }, + "title": "WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.16 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-11T14:16:47.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Stored XSS.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.16.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Stored XSS.

This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.16.

" + } + ] + } + ], + "affected": [ + { + "vendor": "rtCamp Inc.", + "product": "rtMedia for WordPress, BuddyPress and bbPress", + "packageName": "buddypress-media", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "4.7.16", + "changes": [ + { + "at": "4.7.17", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/buddypress-media/vulnerability/wordpress-rtmedia-for-wordpress-buddypress-and-bbpress-plugin-4-7-16-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "AndrewN | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-592", + "descriptions": [ + { + "lang": "en", + "value": "Stored XSS" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress rtMedia for WordPress, BuddyPress and bbPress plugin to the latest available version (at least 4.7.17).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress rtMedia for WordPress, BuddyPress and bbPress plugin to the latest available version (at least 4.7.17)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124970.json b/data/2026/124xxx/CVE-2026-124970.json new file mode 100644 index 0000000000..ac2823de07 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124970.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124970", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-09T15:12:36.503Z", + "datePublished": "2026-11-13T15:08:40.764Z", + "dateUpdated": "2026-11-13T15:08:40.764Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:40.764Z" + }, + "title": "WordPress WP BASE Booking plugin <= 6.5.2 - SQL Injection vulnerability", + "datePublic": "2026-11-11T14:08:13.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.5.2.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.

This issue affects WP BASE Booking: from n/a through 6.5.2.

" + } + ] + } + ], + "affected": [ + { + "vendor": "WP BASE", + "product": "WP BASE Booking", + "packageName": "wp-base-booking-of-appointments-services-and-events", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "6.5.2", + "changes": [ + { + "at": "6.6.1", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-base-booking-of-appointments-services-and-events/vulnerability/wordpress-wp-base-booking-plugin-6-5-2-sql-injection-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Khanh Nguyen | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-89", + "description": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-7", + "descriptions": [ + { + "lang": "en", + "value": "Blind SQL Injection" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress WP BASE Booking plugin to the latest available version (at least 6.6.1).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress WP BASE Booking plugin to the latest available version (at least 6.6.1)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125077.json b/data/2026/125xxx/CVE-2026-125077.json index aca6eaef66..8e76f436cc 100644 --- a/data/2026/125xxx/CVE-2026-125077.json +++ b/data/2026/125xxx/CVE-2026-125077.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-09T16:56:38.745Z", "datePublished": "2026-11-09T23:45:23.342Z", - "dateUpdated": "2026-11-09T23:45:23.342Z" + "dateUpdated": "2026-11-13T14:56:04.386Z" }, "containers": { "cna": { @@ -167,6 +167,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:55:21.444849Z", + "id": "CVE-2026-125077", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:56:04.386Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125086.json b/data/2026/125xxx/CVE-2026-125086.json index 1ec801397c..0e2946be02 100644 --- a/data/2026/125xxx/CVE-2026-125086.json +++ b/data/2026/125xxx/CVE-2026-125086.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-09T17:15:42.556Z", "datePublished": "2026-11-10T00:45:28.122Z", - "dateUpdated": "2026-11-10T00:45:28.122Z" + "dateUpdated": "2026-11-13T14:57:24.472Z" }, "containers": { "cna": { @@ -168,6 +168,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:56:34.756360Z", + "id": "CVE-2026-125086", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:57:24.472Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125378.json b/data/2026/125xxx/CVE-2026-125378.json index cd330c6961..2f82acdb21 100644 --- a/data/2026/125xxx/CVE-2026-125378.json +++ b/data/2026/125xxx/CVE-2026-125378.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T22:03:06.874Z", "datePublished": "2026-11-09T23:27:47.499Z", - "dateUpdated": "2026-11-09T23:27:47.499Z" + "dateUpdated": "2026-11-13T14:15:14.685Z" }, "containers": { "cna": { @@ -142,6 +142,48 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://hackmd.io/@hieuPenguinnn/cve-2026-125378-powerdns-admin-template-apply-missing-operator-authz", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:14:48.565167Z", + "id": "CVE-2026-125378", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:15:14.685Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125382.json b/data/2026/125xxx/CVE-2026-125382.json index 13537c96d0..fcd9a9a87c 100644 --- a/data/2026/125xxx/CVE-2026-125382.json +++ b/data/2026/125xxx/CVE-2026-125382.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T22:03:08.378Z", "datePublished": "2026-11-09T23:27:50.340Z", - "dateUpdated": "2026-11-09T23:27:50.340Z" + "dateUpdated": "2026-11-13T14:17:05.418Z" }, "containers": { "cna": { @@ -167,6 +167,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:16:32.371572Z", + "id": "CVE-2026-125382", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:17:05.418Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125386.json b/data/2026/125xxx/CVE-2026-125386.json index abe8474f36..8bef33ab62 100644 --- a/data/2026/125xxx/CVE-2026-125386.json +++ b/data/2026/125xxx/CVE-2026-125386.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T22:03:09.881Z", "datePublished": "2026-11-09T23:27:53.127Z", - "dateUpdated": "2026-11-09T23:27:53.127Z" + "dateUpdated": "2026-11-13T14:21:03.426Z" }, "containers": { "cna": { @@ -135,6 +135,48 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://hackmd.io/@hieuPenguinnn/cve-2026-121938-125386-langchain4j-aideepin-character-conversation-cross-user-idor", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:20:35.353749Z", + "id": "CVE-2026-125386", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:21:03.426Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125390.json b/data/2026/125xxx/CVE-2026-125390.json index b1304a3997..11751d2930 100644 --- a/data/2026/125xxx/CVE-2026-125390.json +++ b/data/2026/125xxx/CVE-2026-125390.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T22:03:11.388Z", "datePublished": "2026-11-09T23:27:55.891Z", - "dateUpdated": "2026-11-09T23:27:55.891Z" + "dateUpdated": "2026-11-13T14:48:20.431Z" }, "containers": { "cna": { @@ -184,6 +184,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:46:46.422646Z", + "id": "CVE-2026-125390", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:48:20.431Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125394.json b/data/2026/125xxx/CVE-2026-125394.json index 40bead6209..aeb8f8a1d5 100644 --- a/data/2026/125xxx/CVE-2026-125394.json +++ b/data/2026/125xxx/CVE-2026-125394.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T22:03:12.932Z", "datePublished": "2026-11-09T23:27:58.697Z", - "dateUpdated": "2026-11-09T23:27:58.697Z" + "dateUpdated": "2026-11-13T14:51:23.584Z" }, "containers": { "cna": { @@ -155,6 +155,48 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fw6x-h8gw-778w", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:50:45.522228Z", + "id": "CVE-2026-125394", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:51:23.584Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125398.json b/data/2026/125xxx/CVE-2026-125398.json index 77db59d533..e6495ae90c 100644 --- a/data/2026/125xxx/CVE-2026-125398.json +++ b/data/2026/125xxx/CVE-2026-125398.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T22:03:14.422Z", "datePublished": "2026-11-09T23:28:01.464Z", - "dateUpdated": "2026-11-09T23:28:01.464Z" + "dateUpdated": "2026-11-13T14:52:58.810Z" }, "containers": { "cna": { @@ -137,6 +137,48 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://github.com/CoreBunch/Instatic/security/advisories/GHSA-m425-wmrc-4v4v", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:52:38.628802Z", + "id": "CVE-2026-125398", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:52:58.810Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125406.json b/data/2026/125xxx/CVE-2026-125406.json index a5d5ae4d85..8b48b568b9 100644 --- a/data/2026/125xxx/CVE-2026-125406.json +++ b/data/2026/125xxx/CVE-2026-125406.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-09T22:03:17.371Z", "datePublished": "2026-11-09T23:28:07.044Z", - "dateUpdated": "2026-11-09T23:28:07.044Z" + "dateUpdated": "2026-11-13T14:55:00.856Z" }, "containers": { "cna": { @@ -160,6 +160,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:54:34.769856Z", + "id": "CVE-2026-125406", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:55:00.856Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125432.json b/data/2026/125xxx/CVE-2026-125432.json new file mode 100644 index 0000000000..fa5aa790a4 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125432.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125432", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T00:26:46.520Z", + "datePublished": "2026-11-13T15:08:43.468Z", + "dateUpdated": "2026-11-13T15:08:43.468Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:43.468Z" + }, + "title": "WordPress reCAPTCHA for WooCommerce plugin <= 1.4.7 - Broken Authentication vulnerability", + "datePublic": "2026-11-11T14:18:35.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Weak Password Recovery Mechanism for Forgotten Password vulnerability in RelyWP reCAPTCHA for WooCommerce recaptcha-woo allows Password Recovery Exploitation.This issue affects reCAPTCHA for WooCommerce: from n/a through 1.4.7.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Weak Password Recovery Mechanism for Forgotten Password vulnerability in RelyWP reCAPTCHA for WooCommerce recaptcha-woo allows Password Recovery Exploitation.

This issue affects reCAPTCHA for WooCommerce: from n/a through 1.4.7.

" + } + ] + } + ], + "affected": [ + { + "vendor": "RelyWP", + "product": "reCAPTCHA for WooCommerce", + "packageName": "recaptcha-woo", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "1.4.7", + "changes": [ + { + "at": "1.5.0", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/recaptcha-woo/vulnerability/wordpress-recaptcha-for-woocommerce-plugin-1-4-7-broken-authentication-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Peter Tang | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-640", + "description": "Weak Password Recovery Mechanism for Forgotten Password", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-50", + "descriptions": [ + { + "lang": "en", + "value": "Password Recovery Exploitation" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress reCAPTCHA for WooCommerce plugin to the latest available version (at least 1.5.0).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress reCAPTCHA for WooCommerce plugin to the latest available version (at least 1.5.0)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125440.json b/data/2026/125xxx/CVE-2026-125440.json new file mode 100644 index 0000000000..a6e6a3c54c --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125440.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125440", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T00:26:46.521Z", + "datePublished": "2026-11-13T14:41:09.092Z", + "dateUpdated": "2026-11-13T14:41:17.329Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T14:41:17.329Z" + }, + "title": "WordPress s2Member plugin <= 261106 - Content Injection vulnerability", + "datePublic": "2026-11-13T14:40:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Cristián Lávaque s2Member s2member allows Code Injection.This issue affects s2Member: from n/a through 261106.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Cristián Lávaque s2Member s2member allows Code Injection.

This issue affects s2Member: from n/a through 261106.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Cristián Lávaque", + "product": "s2Member", + "packageName": "s2member", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "261106", + "changes": [ + { + "at": "261110", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/s2member/vulnerability/wordpress-s2member-plugin-261106-content-injection-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Yusuf Ozturk | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-80", + "description": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-242", + "descriptions": [ + { + "lang": "en", + "value": "Code Injection" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress s2Member plugin to the latest available version (at least 261110).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress s2Member plugin to the latest available version (at least 261110)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125452.json b/data/2026/125xxx/CVE-2026-125452.json new file mode 100644 index 0000000000..4ded81dc21 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125452.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125452", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T00:26:46.522Z", + "datePublished": "2026-11-13T15:08:38.883Z", + "dateUpdated": "2026-11-13T15:08:38.883Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:38.883Z" + }, + "title": "WordPress WPJAM Basic plugin <= 7.1.2 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-11T14:02:55.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Denishua WPJAM Basic wpjam-basic allows Reflected XSS.This issue affects WPJAM Basic: from n/a through 7.1.2.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Denishua WPJAM Basic wpjam-basic allows Reflected XSS.

This issue affects WPJAM Basic: from n/a through 7.1.2.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Denishua", + "product": "WPJAM Basic", + "packageName": "wpjam-basic", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "7.1.2", + "changes": [ + { + "at": "7.1.4", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wpjam-basic/vulnerability/wordpress-wpjam-basic-plugin-7-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "John Ryan Albon | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-591", + "descriptions": [ + { + "lang": "en", + "value": "Reflected XSS" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress WPJAM Basic plugin to the latest available version (at least 7.1.4).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress WPJAM Basic plugin to the latest available version (at least 7.1.4)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125706.json b/data/2026/125xxx/CVE-2026-125706.json index 5f5ad1cb70..4fa8ae8e9b 100644 --- a/data/2026/125xxx/CVE-2026-125706.json +++ b/data/2026/125xxx/CVE-2026-125706.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-11-10T10:31:34.391Z", "datePublished": "2026-11-10T11:23:11.334Z", - "dateUpdated": "2026-11-12T17:27:40.860Z" + "dateUpdated": "2026-11-13T15:07:01.064Z" }, "containers": { "cna": { @@ -172,6 +172,40 @@ "x_generator": { "engine": "cvelib 1.8.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T15:05:09.932598Z", + "id": "CVE-2026-125706", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T15:07:01.064Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125715.json b/data/2026/125xxx/CVE-2026-125715.json index 0f650684c7..47fbf9cf32 100644 --- a/data/2026/125xxx/CVE-2026-125715.json +++ b/data/2026/125xxx/CVE-2026-125715.json @@ -8,7 +8,7 @@ "assignerShortName": "samsung.tv_appliance", "dateReserved": "2026-11-10T11:05:13.190Z", "datePublished": "2026-11-10T11:21:20.300Z", - "dateUpdated": "2026-11-10T11:21:20.300Z" + "dateUpdated": "2026-11-13T14:31:56.007Z" }, "containers": { "cna": { @@ -86,6 +86,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:18:24.511845Z", + "id": "CVE-2026-125715", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:31:56.007Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125747.json b/data/2026/125xxx/CVE-2026-125747.json index c96827ed85..0c81b9bb2b 100644 --- a/data/2026/125xxx/CVE-2026-125747.json +++ b/data/2026/125xxx/CVE-2026-125747.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-10T12:35:57.791Z", "datePublished": "2026-11-10T15:22:44.626Z", - "dateUpdated": "2026-11-10T15:22:44.626Z" + "dateUpdated": "2026-11-13T15:14:30.723Z" }, "containers": { "cna": { @@ -136,6 +136,48 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://hackmd.io/@hieund/zentaopms-build-missing-object-authorization-idor", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T15:13:41.940100Z", + "id": "CVE-2026-125747", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T15:14:30.723Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125751.json b/data/2026/125xxx/CVE-2026-125751.json index 622dff429b..6429ea1912 100644 --- a/data/2026/125xxx/CVE-2026-125751.json +++ b/data/2026/125xxx/CVE-2026-125751.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-10T12:36:07.711Z", "datePublished": "2026-11-10T15:22:47.272Z", - "dateUpdated": "2026-11-10T15:22:47.272Z" + "dateUpdated": "2026-11-13T15:18:00.883Z" }, "containers": { "cna": { @@ -137,6 +137,48 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "references": [ + { + "url": "https://hackmd.io/@hieund/meteroid-cross-tenant-apitoken-hash-and-coupon-status-idor", + "tags": [ + "exploit" + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T15:17:34.583365Z", + "id": "CVE-2026-125751", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T15:18:00.883Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125783.json b/data/2026/125xxx/CVE-2026-125783.json new file mode 100644 index 0000000000..15d67d7241 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125783.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125783", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.984Z", + "datePublished": "2026-11-13T15:08:41.100Z", + "dateUpdated": "2026-11-13T15:08:41.100Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:41.100Z" + }, + "title": "WordPress Custom Post Types and Custom Fields creator – WCK plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-11T14:12:18.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in madalin.ungureanu Custom Post Types and Custom Fields creator – WCK wck-custom-fields-and-custom-post-types-creator allows Reflected XSS.This issue affects Custom Post Types and Custom Fields creator – WCK: from n/a through 2.4.0.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in madalin.ungureanu Custom Post Types and Custom Fields creator – WCK wck-custom-fields-and-custom-post-types-creator allows Reflected XSS.

This issue affects Custom Post Types and Custom Fields creator – WCK: from n/a through 2.4.0.

" + } + ] + } + ], + "affected": [ + { + "vendor": "madalin.ungureanu", + "product": "Custom Post Types and Custom Fields creator – WCK", + "packageName": "wck-custom-fields-and-custom-post-types-creator", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "2.4.0", + "changes": [ + { + "at": "2.4.2", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wck-custom-fields-and-custom-post-types-creator/vulnerability/wordpress-custom-post-types-and-custom-fields-creator-wck-plugin-2-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Nguyen Viet Tin | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-591", + "descriptions": [ + { + "lang": "en", + "value": "Reflected XSS" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Custom Post Types and Custom Fields creator – WCK plugin to the latest available version (at least 2.4.2).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Custom Post Types and Custom Fields creator – WCK plugin to the latest available version (at least 2.4.2)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125792.json b/data/2026/125xxx/CVE-2026-125792.json new file mode 100644 index 0000000000..c5a055f8b2 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125792.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125792", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.985Z", + "datePublished": "2026-11-13T14:44:46.614Z", + "dateUpdated": "2026-11-13T14:45:47.454Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T14:45:47.454Z" + }, + "title": "WordPress Church Admin plugin <= 5.1.8 - Broken Access Control vulnerability", + "datePublic": "2026-11-13T14:44:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Andy Moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Church Admin: from n/a through 5.1.8.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Missing Authorization vulnerability in Andy Moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Church Admin: from n/a through 5.1.8.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Andy Moyle", + "product": "Church Admin", + "packageName": "church-admin", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "5.1.8", + "changes": [ + { + "at": "5.1.9", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/church-admin/vulnerability/wordpress-church-admin-plugin-5-1-8-broken-access-control-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "João Paulo de Oliveira | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-862", + "description": "Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-180", + "descriptions": [ + { + "lang": "en", + "value": "Exploiting Incorrectly Configured Access Control Security Levels" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Church Admin plugin to the latest available version (at least 5.1.9).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Church Admin plugin to the latest available version (at least 5.1.9)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125794.json b/data/2026/125xxx/CVE-2026-125794.json new file mode 100644 index 0000000000..1779f0966c --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125794.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125794", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.985Z", + "datePublished": "2026-11-13T14:45:32.012Z", + "dateUpdated": "2026-11-13T14:46:32.964Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T14:46:32.964Z" + }, + "title": "WordPress Extension for Leaflet Map plugin <= 6.1.1 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-13T14:45:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extension for Leaflet Map extensions-leaflet-map allows Stored XSS.This issue affects Extension for Leaflet Map: from n/a through 6.1.1.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extension for Leaflet Map extensions-leaflet-map allows Stored XSS.

This issue affects Extension for Leaflet Map: from n/a through 6.1.1.

" + } + ] + } + ], + "affected": [ + { + "vendor": "hupe13", + "product": "Extension for Leaflet Map", + "packageName": "extensions-leaflet-map", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "6.1.1", + "changes": [ + { + "at": "6.1.2", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/extensions-leaflet-map/vulnerability/wordpress-extension-for-leaflet-map-plugin-6-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Peter Tang | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-592", + "descriptions": [ + { + "lang": "en", + "value": "Stored XSS" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Extension for Leaflet Map plugin to the latest available version (at least 6.1.2).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Extension for Leaflet Map plugin to the latest available version (at least 6.1.2)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125802.json b/data/2026/125xxx/CVE-2026-125802.json new file mode 100644 index 0000000000..29faf18940 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125802.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125802", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.986Z", + "datePublished": "2026-11-13T14:49:06.308Z", + "dateUpdated": "2026-11-13T14:49:06.755Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T14:49:06.755Z" + }, + "title": "WordPress Spectra plugin <= 2.20.5 - Sensitive Data Exposure vulnerability", + "datePublic": "2026-11-13T14:48:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Retrieve Embedded Sensitive Data.This issue affects Spectra: from n/a through 2.20.5.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Retrieve Embedded Sensitive Data.

This issue affects Spectra: from n/a through 2.20.5.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Brainstorm Force", + "product": "Spectra", + "packageName": "ultimate-addons-for-gutenberg", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "2.20.5", + "changes": [ + { + "at": "2.20.6", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/ultimate-addons-for-gutenberg/vulnerability/wordpress-spectra-plugin-2-20-5-sensitive-data-exposure-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Malvin Valerian Gultom | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-201", + "description": "Insertion of Sensitive Information Into Sent Data", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-37", + "descriptions": [ + { + "lang": "en", + "value": "Retrieve Embedded Sensitive Data" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Spectra plugin to the latest available version (at least 2.20.6).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Spectra plugin to the latest available version (at least 2.20.6)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125807.json b/data/2026/125xxx/CVE-2026-125807.json new file mode 100644 index 0000000000..5628a8d3a1 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125807.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125807", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.987Z", + "datePublished": "2026-11-13T14:38:08.242Z", + "dateUpdated": "2026-11-13T14:38:08.621Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T14:38:08.621Z" + }, + "title": "WordPress HT Mega plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-13T14:37:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HTMega HT Mega ht-mega-for-elementor allows Stored XSS.This issue affects HT Mega: from n/a through 3.2.8.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HTMega HT Mega ht-mega-for-elementor allows Stored XSS.

This issue affects HT Mega: from n/a through 3.2.8.

" + } + ] + } + ], + "affected": [ + { + "vendor": "HTMega", + "product": "HT Mega", + "packageName": "ht-mega-for-elementor", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "3.2.8", + "changes": [ + { + "at": "3.2.9", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/ht-mega-for-elementor/vulnerability/wordpress-ht-mega-plugin-3-2-8-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "nh4tvd | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-592", + "descriptions": [ + { + "lang": "en", + "value": "Stored XSS" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress HT Mega plugin to the latest available version (at least 3.2.9).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress HT Mega plugin to the latest available version (at least 3.2.9)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125808.json b/data/2026/125xxx/CVE-2026-125808.json new file mode 100644 index 0000000000..be6287446f --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125808.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125808", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.987Z", + "datePublished": "2026-11-13T14:37:19.654Z", + "dateUpdated": "2026-11-13T14:37:26.063Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T14:37:26.063Z" + }, + "title": "WordPress HT Mega plugin <= 3.2.8 - Broken Access Control vulnerability", + "datePublic": "2026-11-13T14:37:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in HTMega HT Mega ht-mega-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HT Mega: from n/a through 3.2.8.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Missing Authorization vulnerability in HTMega HT Mega ht-mega-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects HT Mega: from n/a through 3.2.8.

" + } + ] + } + ], + "affected": [ + { + "vendor": "HTMega", + "product": "HT Mega", + "packageName": "ht-mega-for-elementor", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "3.2.8", + "changes": [ + { + "at": "3.2.9", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/ht-mega-for-elementor/vulnerability/wordpress-ht-mega-plugin-3-2-8-broken-access-control-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Malvin Valerian Gultom | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-862", + "description": "Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-180", + "descriptions": [ + { + "lang": "en", + "value": "Exploiting Incorrectly Configured Access Control Security Levels" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress HT Mega plugin to the latest available version (at least 3.2.9).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress HT Mega plugin to the latest available version (at least 3.2.9)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125809.json b/data/2026/125xxx/CVE-2026-125809.json new file mode 100644 index 0000000000..4a97941825 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125809.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125809", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.988Z", + "datePublished": "2026-11-13T14:41:21.896Z", + "dateUpdated": "2026-11-13T14:42:22.792Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T14:42:22.792Z" + }, + "title": "WordPress myCred plugin <= 4.0.2 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-13T14:41:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in myCred myCred mycred allows Stored XSS.This issue affects myCred: from n/a through 4.0.2.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in myCred myCred mycred allows Stored XSS.

This issue affects myCred: from n/a through 4.0.2.

" + } + ] + } + ], + "affected": [ + { + "vendor": "myCred", + "product": "myCred", + "packageName": "mycred", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "4.0.2", + "changes": [ + { + "at": "4.0.3", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/mycred/vulnerability/wordpress-mycred-plugin-4-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "dzaku | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-592", + "descriptions": [ + { + "lang": "en", + "value": "Stored XSS" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress myCred plugin to the latest available version (at least 4.0.3).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress myCred plugin to the latest available version (at least 4.0.3)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125810.json b/data/2026/125xxx/CVE-2026-125810.json new file mode 100644 index 0000000000..c2118e4148 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125810.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125810", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.988Z", + "datePublished": "2026-11-13T14:41:40.114Z", + "dateUpdated": "2026-11-13T14:42:41.233Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T14:42:41.233Z" + }, + "title": "WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability", + "datePublic": "2026-11-13T14:41:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects myCred: from n/a through 4.0.2.

" + } + ] + } + ], + "affected": [ + { + "vendor": "myCred", + "product": "myCred", + "packageName": "mycred", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "4.0.2", + "changes": [ + { + "at": "4.0.3", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/mycred/vulnerability/wordpress-mycred-plugin-4-0-2-broken-access-control-vulnerability-7?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "dzaku | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-862", + "description": "Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-180", + "descriptions": [ + { + "lang": "en", + "value": "Exploiting Incorrectly Configured Access Control Security Levels" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress myCred plugin to the latest available version (at least 4.0.3).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress myCred plugin to the latest available version (at least 4.0.3)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125811.json b/data/2026/125xxx/CVE-2026-125811.json new file mode 100644 index 0000000000..0346710d14 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125811.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125811", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.988Z", + "datePublished": "2026-11-13T14:42:07.515Z", + "dateUpdated": "2026-11-13T14:43:08.685Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T14:43:08.685Z" + }, + "title": "WordPress myCred plugin <= 4.0.2 - SQL Injection vulnerability", + "datePublic": "2026-11-13T14:41:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in myCred myCred mycred allows Blind SQL Injection.This issue affects myCred: from n/a through 4.0.2.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in myCred myCred mycred allows Blind SQL Injection.

This issue affects myCred: from n/a through 4.0.2.

" + } + ] + } + ], + "affected": [ + { + "vendor": "myCred", + "product": "myCred", + "packageName": "mycred", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "4.0.2", + "changes": [ + { + "at": "4.0.3", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/mycred/vulnerability/wordpress-mycred-plugin-4-0-2-sql-injection-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "dzaku | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-89", + "description": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-7", + "descriptions": [ + { + "lang": "en", + "value": "Blind SQL Injection" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress myCred plugin to the latest available version (at least 4.0.3).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress myCred plugin to the latest available version (at least 4.0.3)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125814.json b/data/2026/125xxx/CVE-2026-125814.json index 6e0e167670..c46a079b4c 100644 --- a/data/2026/125xxx/CVE-2026-125814.json +++ b/data/2026/125xxx/CVE-2026-125814.json @@ -8,17 +8,17 @@ "assignerShortName": "Patchstack", "dateReserved": "2026-11-10T12:37:30.988Z", "datePublished": "2026-11-13T12:58:27.612Z", - "dateUpdated": "2026-11-13T12:59:27.837Z" + "dateUpdated": "2026-11-13T14:30:05.493Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack", - "dateUpdated": "2026-11-13T12:59:27.837Z" + "dateUpdated": "2026-11-13T14:30:05.493Z" }, "title": "WordPress Product Feed PRO for WooCommerce plugin <= 13.5.8 - Content Injection vulnerability", - "datePublic": "2026-11-13T12:59:27.673Z", + "datePublic": "2026-11-13T14:15:00.000Z", "descriptions": [ { "lang": "en", diff --git a/data/2026/125xxx/CVE-2026-125819.json b/data/2026/125xxx/CVE-2026-125819.json new file mode 100644 index 0000000000..18bad2df1f --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125819.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125819", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.989Z", + "datePublished": "2026-11-13T14:36:42.484Z", + "dateUpdated": "2026-11-13T14:37:43.070Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T14:37:43.070Z" + }, + "title": "WordPress Gutenberg Blocks plugin <= 3.7.6 - Broken Access Control vulnerability", + "datePublic": "2026-11-13T14:36:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenberg Blocks: from n/a through 3.7.6.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Missing Authorization vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Gutenberg Blocks: from n/a through 3.7.6.

" + } + ] + } + ], + "affected": [ + { + "vendor": "PublishPress", + "product": "Gutenberg Blocks", + "packageName": "advanced-gutenberg", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "3.7.6", + "changes": [ + { + "at": "3.7.7", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/advanced-gutenberg/vulnerability/wordpress-gutenberg-blocks-plugin-3-7-6-broken-access-control-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Malvin Valerian Gultom | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-862", + "description": "Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-180", + "descriptions": [ + { + "lang": "en", + "value": "Exploiting Incorrectly Configured Access Control Security Levels" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Gutenberg Blocks plugin to the latest available version (at least 3.7.7).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Gutenberg Blocks plugin to the latest available version (at least 3.7.7)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125821.json b/data/2026/125xxx/CVE-2026-125821.json new file mode 100644 index 0000000000..0215f95d7d --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125821.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125821", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.990Z", + "datePublished": "2026-11-13T14:40:09.916Z", + "dateUpdated": "2026-11-13T14:41:13.773Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T14:41:13.773Z" + }, + "title": "WordPress MapSVG plugin <= 9.0.4 - Content Injection vulnerability", + "datePublic": "2026-11-13T14:39:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Code Injection.This issue affects MapSVG: from n/a through 9.0.4.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Code Injection.

This issue affects MapSVG: from n/a through 9.0.4.

" + } + ] + } + ], + "affected": [ + { + "vendor": "PT Norther Lights Production", + "product": "MapSVG", + "packageName": "mapsvg-lite-interactive-vector-maps", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "9.0.4", + "changes": [ + { + "at": "9.0.5", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/mapsvg-lite-interactive-vector-maps/vulnerability/wordpress-mapsvg-plugin-9-0-4-content-injection-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "SEONGMIN JO, IT Auditor in S.Korea. | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-80", + "description": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-242", + "descriptions": [ + { + "lang": "en", + "value": "Code Injection" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress MapSVG plugin to the latest available version (at least 9.0.5).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress MapSVG plugin to the latest available version (at least 9.0.5)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125824.json b/data/2026/125xxx/CVE-2026-125824.json new file mode 100644 index 0000000000..7fc9c041b2 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125824.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125824", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.990Z", + "datePublished": "2026-11-13T14:37:01.016Z", + "dateUpdated": "2026-11-13T14:38:01.756Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T14:38:01.756Z" + }, + "title": "WordPress WP Go Maps plugin <= 10.1.10 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-13T14:36:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Go Maps WP Go Maps wp-google-maps allows Stored XSS.This issue affects WP Go Maps: from n/a through 10.1.10.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Go Maps WP Go Maps wp-google-maps allows Stored XSS.

This issue affects WP Go Maps: from n/a through 10.1.10.

" + } + ] + } + ], + "affected": [ + { + "vendor": "WP Go Maps", + "product": "WP Go Maps", + "packageName": "wp-google-maps", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "10.1.10", + "changes": [ + { + "at": "10.1.11", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-google-maps/vulnerability/wordpress-wp-go-maps-plugin-10-1-10-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Khanh Nguyen | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-592", + "descriptions": [ + { + "lang": "en", + "value": "Stored XSS" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress WP Go Maps plugin to the latest available version (at least 10.1.11).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress WP Go Maps plugin to the latest available version (at least 10.1.11)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125825.json b/data/2026/125xxx/CVE-2026-125825.json new file mode 100644 index 0000000000..f407f1873c --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125825.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125825", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.990Z", + "datePublished": "2026-11-13T14:48:42.721Z", + "dateUpdated": "2026-11-13T14:49:43.300Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T14:49:43.300Z" + }, + "title": "WordPress RepairBuddy plugin <= 4.1236 - Broken Access Control vulnerability", + "datePublic": "2026-11-13T14:48:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RepairBuddy: from n/a through 4.1236.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects RepairBuddy: from n/a through 4.1236.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Webful Creations", + "product": "RepairBuddy", + "packageName": "computer-repair-shop", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "4.1236", + "changes": [ + { + "at": "4.1237", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/computer-repair-shop/vulnerability/wordpress-repairbuddy-plugin-4-1236-broken-access-control-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Nikita Mateo Volovik | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-862", + "description": "Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-180", + "descriptions": [ + { + "lang": "en", + "value": "Exploiting Incorrectly Configured Access Control Security Levels" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress RepairBuddy plugin to the latest available version (at least 4.1237).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress RepairBuddy plugin to the latest available version (at least 4.1237)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125827.json b/data/2026/125xxx/CVE-2026-125827.json new file mode 100644 index 0000000000..2e81079d5f --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125827.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125827", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.990Z", + "datePublished": "2026-11-13T14:42:34.956Z", + "dateUpdated": "2026-11-13T14:43:36.205Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T14:43:36.205Z" + }, + "title": "WordPress Event Tickets plugin <= 5.31.0 - Broken Access Control vulnerability", + "datePublic": "2026-11-13T14:42:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.31.0.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Event Tickets: from n/a through 5.31.0.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Liquid Web / StellarWP", + "product": "Event Tickets", + "packageName": "event-tickets", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "5.31.0", + "changes": [ + { + "at": "5.31.1", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/event-tickets/vulnerability/wordpress-event-tickets-plugin-5-31-0-broken-access-control-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Phuong Nguyen | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-862", + "description": "Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-180", + "descriptions": [ + { + "lang": "en", + "value": "Exploiting Incorrectly Configured Access Control Security Levels" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Event Tickets plugin to the latest available version (at least 5.31.1).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Event Tickets plugin to the latest available version (at least 5.31.1)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125831.json b/data/2026/125xxx/CVE-2026-125831.json new file mode 100644 index 0000000000..534884e6e2 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125831.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125831", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.990Z", + "datePublished": "2026-11-13T14:44:06.958Z", + "dateUpdated": "2026-11-13T14:45:08.045Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T14:45:08.045Z" + }, + "title": "WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-13T14:43:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver-builder allows Stored XSS.This issue affects PowerPack Lite for Beaver Builder: from n/a through 1.3.2.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver-builder allows Stored XSS.

This issue affects PowerPack Lite for Beaver Builder: from n/a through 1.3.2.

" + } + ] + } + ], + "affected": [ + { + "vendor": "IdeaBox Creations", + "product": "PowerPack Lite for Beaver Builder", + "packageName": "powerpack-addon-for-beaver-builder", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "1.3.2", + "changes": [ + { + "at": "1.3.3", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/powerpack-addon-for-beaver-builder/vulnerability/wordpress-powerpack-lite-for-beaver-builder-plugin-1-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "henise | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-592", + "descriptions": [ + { + "lang": "en", + "value": "Stored XSS" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress PowerPack Lite for Beaver Builder plugin to the latest available version (at least 1.3.3).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress PowerPack Lite for Beaver Builder plugin to the latest available version (at least 1.3.3)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125834.json b/data/2026/125xxx/CVE-2026-125834.json new file mode 100644 index 0000000000..d4ceca91a4 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125834.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125834", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.991Z", + "datePublished": "2026-11-13T14:43:27.039Z", + "dateUpdated": "2026-11-13T14:44:28.214Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T14:44:28.214Z" + }, + "title": "WordPress Imagify plugin <= 2.3.4 - Broken Access Control vulnerability", + "datePublic": "2026-11-13T14:43:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in WP Media Imagify imagify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Imagify: from n/a through 2.3.4.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Missing Authorization vulnerability in WP Media Imagify imagify allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Imagify: from n/a through 2.3.4.

" + } + ] + } + ], + "affected": [ + { + "vendor": "WP Media", + "product": "Imagify", + "packageName": "imagify", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "2.3.4", + "changes": [ + { + "at": "2.3.5", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/imagify/vulnerability/wordpress-imagify-plugin-2-3-4-broken-access-control-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "amonm | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-862", + "description": "Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-180", + "descriptions": [ + { + "lang": "en", + "value": "Exploiting Incorrectly Configured Access Control Security Levels" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress Imagify plugin to the latest available version (at least 2.3.5).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress Imagify plugin to the latest available version (at least 2.3.5)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125835.json b/data/2026/125xxx/CVE-2026-125835.json new file mode 100644 index 0000000000..3d853a4ddd --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125835.json @@ -0,0 +1,136 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125835", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.991Z", + "datePublished": "2026-11-13T14:39:51.449Z", + "dateUpdated": "2026-11-13T14:40:53.481Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T14:40:53.481Z" + }, + "title": "WordPress JetTabs plugin <= 2.3.5 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-13T14:39:00.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetTabs jet-tabs allows Stored XSS.This issue affects JetTabs: from n/a through 2.3.5.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetTabs jet-tabs allows Stored XSS.

This issue affects JetTabs: from n/a through 2.3.5.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Crocoblock", + "product": "JetTabs", + "packageName": "jet-tabs", + "collectionURL": "https://crocoblock.com", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "2.3.5", + "changes": [ + { + "at": "2.3.5.1", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/jet-tabs/vulnerability/wordpress-jettabs-plugin-2-3-5-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "nh4tvd | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-592", + "descriptions": [ + { + "lang": "en", + "value": "Stored XSS" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress JetTabs plugin to the latest available version (at least 2.3.5.1).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress JetTabs plugin to the latest available version (at least 2.3.5.1)." + } + ] + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125837.json b/data/2026/125xxx/CVE-2026-125837.json new file mode 100644 index 0000000000..9a36590b32 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125837.json @@ -0,0 +1,120 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125837", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.991Z", + "datePublished": "2026-11-13T15:08:39.612Z", + "dateUpdated": "2026-11-13T15:08:39.612Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:39.612Z" + }, + "title": "WordPress Make theme <= 1.10.10 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-11T14:04:37.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thethemefoundry Make make allows Reflected XSS.This issue affects Make: from n/a through 1.10.10.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thethemefoundry Make make allows Reflected XSS.

This issue affects Make: from n/a through 1.10.10.

" + } + ] + } + ], + "affected": [ + { + "vendor": "thethemefoundry", + "product": "Make", + "packageName": "make", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "1.10.10" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/make/vulnerability/wordpress-make-theme-1-10-10-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "dzaku | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-591", + "descriptions": [ + { + "lang": "en", + "value": "Reflected XSS" + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125851.json b/data/2026/125xxx/CVE-2026-125851.json new file mode 100644 index 0000000000..5e7b723df3 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125851.json @@ -0,0 +1,120 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125851", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.992Z", + "datePublished": "2026-11-13T15:08:40.381Z", + "dateUpdated": "2026-11-13T15:08:40.381Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:40.381Z" + }, + "title": "WordPress Hotel Booking Lite theme <= 2.5.1 - Arbitrary File Upload vulnerability", + "datePublic": "2026-11-11T14:07:18.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Hotel Booking Lite hotel-booking-lite allows Upload a Web Shell to a Web Server.This issue affects Hotel Booking Lite: from n/a through 2.5.1.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Hotel Booking Lite hotel-booking-lite allows Upload a Web Shell to a Web Server.

This issue affects Hotel Booking Lite: from n/a through 2.5.1.

" + } + ] + } + ], + "affected": [ + { + "vendor": "themagnifico52", + "product": "Hotel Booking Lite", + "packageName": "hotel-booking-lite", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "2.5.1" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/hotel-booking-lite/vulnerability/wordpress-hotel-booking-lite-theme-2-5-1-arbitrary-file-upload-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "beopseong.kim | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 9.9, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-434", + "description": "Unrestricted Upload of File with Dangerous Type", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-650", + "descriptions": [ + { + "lang": "en", + "value": "Upload a Web Shell to a Web Server" + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125852.json b/data/2026/125xxx/CVE-2026-125852.json new file mode 100644 index 0000000000..0139dd4f52 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125852.json @@ -0,0 +1,120 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125852", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.992Z", + "datePublished": "2026-11-13T15:08:39.232Z", + "dateUpdated": "2026-11-13T15:08:39.232Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:39.232Z" + }, + "title": "WordPress Realtyna Organic IDX plugin plugin <= 5.4.2 - Arbitrary File Deletion vulnerability", + "datePublic": "2026-11-11T14:03:33.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Path Traversal.This issue affects Realtyna Organic IDX plugin: from n/a through 5.5.0.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Path Traversal.

This issue affects Realtyna Organic IDX plugin: from n/a through 5.5.0.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Realtyna", + "product": "Realtyna Organic IDX plugin", + "packageName": "real-estate-listing-realtyna-wpl", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "5.5.0" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/real-estate-listing-realtyna-wpl/vulnerability/wordpress-realtyna-organic-idx-plugin-plugin-5-4-2-arbitrary-file-deletion-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "VanTastic | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", + "baseScore": 7.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-22", + "description": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-126", + "descriptions": [ + { + "lang": "en", + "value": "Path Traversal" + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125853.json b/data/2026/125xxx/CVE-2026-125853.json new file mode 100644 index 0000000000..0f0914734c --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125853.json @@ -0,0 +1,120 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125853", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.992Z", + "datePublished": "2026-11-13T15:08:39.265Z", + "dateUpdated": "2026-11-13T15:08:39.265Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:39.265Z" + }, + "title": "WordPress Everest Backup plugin <= 2.3.14 - Broken Access Control vulnerability", + "datePublic": "2026-11-11T14:04:11.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Everestthemes Everest Backup everest-backup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Everest Backup: from n/a through 2.3.15.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Missing Authorization vulnerability in Everestthemes Everest Backup everest-backup allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Everest Backup: from n/a through 2.3.15.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Everestthemes", + "product": "Everest Backup", + "packageName": "everest-backup", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "2.3.15" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/everest-backup/vulnerability/wordpress-everest-backup-plugin-2-3-14-broken-access-control-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "b3llj0n | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-862", + "description": "Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-180", + "descriptions": [ + { + "lang": "en", + "value": "Exploiting Incorrectly Configured Access Control Security Levels" + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125854.json b/data/2026/125xxx/CVE-2026-125854.json new file mode 100644 index 0000000000..e8c0422c1d --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125854.json @@ -0,0 +1,120 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125854", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.992Z", + "datePublished": "2026-11-13T15:08:39.982Z", + "dateUpdated": "2026-11-13T15:08:39.982Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:39.982Z" + }, + "title": "WordPress Unbounce Landing Pages plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-11T14:06:14.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unbounce Unbounce Landing Pages unbounce allows Stored XSS.This issue affects Unbounce Landing Pages: from n/a through 1.1.6.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unbounce Unbounce Landing Pages unbounce allows Stored XSS.

This issue affects Unbounce Landing Pages: from n/a through 1.1.6.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Unbounce", + "product": "Unbounce Landing Pages", + "packageName": "unbounce", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "1.1.6" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/unbounce/vulnerability/wordpress-unbounce-landing-pages-plugin-1-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Nguyen Viet Tin | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-592", + "descriptions": [ + { + "lang": "en", + "value": "Stored XSS" + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125855.json b/data/2026/125xxx/CVE-2026-125855.json new file mode 100644 index 0000000000..024a83069a --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125855.json @@ -0,0 +1,139 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125855", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.992Z", + "datePublished": "2026-11-13T15:08:39.659Z", + "dateUpdated": "2026-11-13T15:08:39.659Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:39.659Z" + }, + "title": "WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.9 - PHP Object Injection vulnerability", + "datePublic": "2026-11-11T14:06:02.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in Elextensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Object Injection.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from n/a through 3.3.9.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Deserialization of Untrusted Data vulnerability in Elextensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Object Injection.

This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from n/a through 3.3.9.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Elextensions", + "product": "ELEX WordPress HelpDesk & Customer Ticketing System", + "packageName": "elex-helpdesk-customer-support-ticket-system", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "3.3.9", + "changes": [ + { + "at": "3.4.0", + "status": "unaffected" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/elex-helpdesk-customer-support-ticket-system/vulnerability/wordpress-elex-wordpress-helpdesk-customer-ticketing-system-plugin-3-3-9-php-object-injection-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "hinhlx | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-502", + "description": "Deserialization of Untrusted Data", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-586", + "descriptions": [ + { + "lang": "en", + "value": "Object Injection" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Update the WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin to the latest available version (at least 3.4.0).", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Update the WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin to the latest available version (at least 3.4.0)." + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125856.json b/data/2026/125xxx/CVE-2026-125856.json new file mode 100644 index 0000000000..0fa85a595c --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125856.json @@ -0,0 +1,120 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125856", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.992Z", + "datePublished": "2026-11-13T15:08:40.002Z", + "dateUpdated": "2026-11-13T15:08:40.002Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:40.002Z" + }, + "title": "WordPress Dynamic User Directory plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability", + "datePublic": "2026-11-11T14:06:37.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Reflected XSS.This issue affects Dynamic User Directory: from n/a through 2.4.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Reflected XSS.

This issue affects Dynamic User Directory: from n/a through 2.4.

" + } + ] + } + ], + "affected": [ + { + "vendor": "Sarah Giles", + "product": "Dynamic User Directory", + "packageName": "dynamic-user-directory", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "2.4" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/dynamic-user-directory/vulnerability/wordpress-dynamic-user-directory-plugin-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Scott Lewis | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-79", + "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-591", + "descriptions": [ + { + "lang": "en", + "value": "Reflected XSS" + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125858.json b/data/2026/125xxx/CVE-2026-125858.json new file mode 100644 index 0000000000..6af7e95cc9 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125858.json @@ -0,0 +1,120 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125858", + "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "state": "PUBLISHED", + "assignerShortName": "Patchstack", + "dateReserved": "2026-11-10T12:37:30.992Z", + "datePublished": "2026-11-13T15:08:40.361Z", + "dateUpdated": "2026-11-13T15:08:40.361Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", + "shortName": "Patchstack", + "dateUpdated": "2026-11-13T15:08:40.361Z" + }, + "title": "WordPress CleverReach® WP plugin <= 1.5.26 - Broken Access Control vulnerability", + "datePublic": "2026-11-11T14:07:38.000Z", + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in CleverReach CleverReach® WP cleverreach-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CleverReach® WP: from n/a through 1.5.26.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Missing Authorization vulnerability in CleverReach CleverReach® WP cleverreach-wp allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects CleverReach® WP: from n/a through 1.5.26.

" + } + ] + } + ], + "affected": [ + { + "vendor": "CleverReach", + "product": "CleverReach® WP", + "packageName": "cleverreach-wp", + "collectionURL": "https://wordpress.org/plugins", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "versionType": "custom", + "status": "affected", + "lessThanOrEqual": "1.5.26" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/cleverreach-wp/vulnerability/wordpress-cleverreach-wp-plugin-1-5-26-broken-access-control-vulnerability?_s_id=cve", + "tags": [ + "vdb-entry" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "DERISK | Patchstack Bug Bounty Program", + "type": "finder" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-862", + "description": "Missing Authorization", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-180", + "descriptions": [ + { + "lang": "en", + "value": "Exploiting Incorrectly Configured Access Control Security Levels" + } + ] + } + ], + "tags": [ + "x_open-source" + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125880.json b/data/2026/125xxx/CVE-2026-125880.json index 9a21693321..750ec9c16b 100644 --- a/data/2026/125xxx/CVE-2026-125880.json +++ b/data/2026/125xxx/CVE-2026-125880.json @@ -8,7 +8,7 @@ "assignerShortName": "N-able", "dateReserved": "2026-11-10T12:55:11.705Z", "datePublished": "2026-11-10T21:26:05.050Z", - "dateUpdated": "2026-11-10T21:26:05.050Z" + "dateUpdated": "2026-11-13T14:34:49.820Z" }, "containers": { "cna": { @@ -118,6 +118,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:34:37.063694Z", + "id": "CVE-2026-125880", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:34:49.820Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125881.json b/data/2026/125xxx/CVE-2026-125881.json index 6d94cec400..bd2cf1b7cc 100644 --- a/data/2026/125xxx/CVE-2026-125881.json +++ b/data/2026/125xxx/CVE-2026-125881.json @@ -8,7 +8,7 @@ "assignerShortName": "N-able", "dateReserved": "2026-11-10T12:55:11.705Z", "datePublished": "2026-11-10T21:24:33.606Z", - "dateUpdated": "2026-11-10T21:24:33.606Z" + "dateUpdated": "2026-11-13T14:36:14.181Z" }, "containers": { "cna": { @@ -118,6 +118,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:35:56.812579Z", + "id": "CVE-2026-125881", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:36:14.181Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125882.json b/data/2026/125xxx/CVE-2026-125882.json index 7a99cf6cce..d7ba5afcd8 100644 --- a/data/2026/125xxx/CVE-2026-125882.json +++ b/data/2026/125xxx/CVE-2026-125882.json @@ -8,7 +8,7 @@ "assignerShortName": "N-able", "dateReserved": "2026-11-10T12:55:11.705Z", "datePublished": "2026-11-10T21:25:23.173Z", - "dateUpdated": "2026-11-10T21:25:23.173Z" + "dateUpdated": "2026-11-13T14:35:29.594Z" }, "containers": { "cna": { @@ -125,6 +125,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:35:16.668613Z", + "id": "CVE-2026-125882", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:35:29.594Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/127xxx/CVE-2026-127031.json b/data/2026/127xxx/CVE-2026-127031.json new file mode 100644 index 0000000000..f4a851a476 --- /dev/null +++ b/data/2026/127xxx/CVE-2026-127031.json @@ -0,0 +1,109 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-127031", + "assignerOrgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c", + "state": "PUBLISHED", + "assignerShortName": "eclipse", + "dateReserved": "2026-11-12T10:50:53.618Z", + "datePublished": "2026-11-13T14:28:08.365Z", + "dateUpdated": "2026-11-13T14:31:30.855Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c", + "shortName": "eclipse", + "dateUpdated": "2026-11-13T14:31:30.855Z" + }, + "affected": [ + { + "vendor": "Eclipse Foundation", + "product": "Eclipse AAS Model for Java (Eclipse AAS4J)", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "3.0.1", + "versionType": "custom" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "In Eclipse AAS4J before 3.0.1, `XmlSchemaValidator.validateSchema()` (and `AASXValidator.validateSchema()`, which calls it) validates untrusted XML with a default JAXP `Validator` that resolves external DTDs and external entities. An attacker who supplies a crafted AAS XML document or AASX package can read local files from the host, send their contents out-of-band to an attacker-controlled server, and make the validating process send arbitrary outbound requests (SSRF). Validation still returns no errors.\n\n\n\nDetails:\n\n\n\n- Vulnerable code: `dataformat-xml/src/main/java/org/eclipse/digitaltwin/aas4j/v3/dataformat/xml/XmlSchemaValidator.java`. `schema.newValidator().validate(new StreamSource(...))` runs without `ACCESS_EXTERNAL_DTD` / `ACCESS_EXTERNAL_SCHEMA` restrictions and without `disallow-doctype-decl`.\n\n\n\n- Second entry point: `dataformat-aasx/src/main/java/org/eclipse/digitaltwin/aas4j/v3/dataformat/aasx/AASXValidator.java`. The AAS XML part of an `.aasx` package is passed unchanged to the vulnerable validator.\n\n\n\n- `XmlDeserializer` (Jackson/Woodstox) is not affected, because DTD support is disabled by default there.\n\n\n\n- Present since the initial import of the code base (commit `cc9da52`).\n\n\n\n- Fix: harden the validator by setting `ACCESS_EXTERNAL_DTD` and `ACCESS_EXTERNAL_SCHEMA` to `\"\"` and rejecting `DOCTYPE` declarations. The bundled `AAS.xsd` does not need DTDs, so no functionality is lost.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

In Eclipse AAS4J before 3.0.1, `XmlSchemaValidator.validateSchema()` (and `AASXValidator.validateSchema()`, which calls it) validates untrusted XML with a default JAXP `Validator` that resolves external DTDs and external entities. An attacker who supplies a crafted AAS XML document or AASX package can read local files from the host, send their contents out-of-band to an attacker-controlled server, and make the validating process send arbitrary outbound requests (SSRF). Validation still returns no errors.

Details:

- Vulnerable code: `dataformat-xml/src/main/java/org/eclipse/digitaltwin/aas4j/v3/dataformat/xml/XmlSchemaValidator.java`. `schema.newValidator().validate(new StreamSource(...))` runs without `ACCESS_EXTERNAL_DTD` / `ACCESS_EXTERNAL_SCHEMA` restrictions and without `disallow-doctype-decl`.

- Second entry point: `dataformat-aasx/src/main/java/org/eclipse/digitaltwin/aas4j/v3/dataformat/aasx/AASXValidator.java`. The AAS XML part of an `.aasx` package is passed unchanged to the vulnerable validator.

- `XmlDeserializer` (Jackson/Woodstox) is not affected, because DTD support is disabled by default there.

- Present since the initial import of the code base (commit `cc9da52`).

- Fix: harden the validator by setting `ACCESS_EXTERNAL_DTD` and `ACCESS_EXTERNAL_SCHEMA` to `\"\"` and rejecting `DOCTYPE` declarations. The bundled `AAS.xsd` does not need DTDs, so no functionality is lost.

" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/eclipse-aas4j/aas4j" + }, + { + "url": "https://github.com/eclipse-aas4j/aas4j/blob/main/dataformat-xml/src/main/java/org/eclipse/digitaltwin/aas4j/v3/dataformat/xml/XmlSchemaValidator.java" + }, + { + "url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/571" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 7.7, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Eclipse Foundation Security Team", + "type": "finder" + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/127xxx/CVE-2026-127102.json b/data/2026/127xxx/CVE-2026-127102.json new file mode 100644 index 0000000000..110383d208 --- /dev/null +++ b/data/2026/127xxx/CVE-2026-127102.json @@ -0,0 +1,145 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-127102", + "assignerOrgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c", + "state": "PUBLISHED", + "assignerShortName": "eclipse", + "dateReserved": "2026-11-12T14:43:27.773Z", + "datePublished": "2026-11-13T14:22:11.926Z", + "dateUpdated": "2026-11-13T14:22:11.926Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c", + "shortName": "eclipse", + "dateUpdated": "2026-11-13T14:22:11.926Z" + }, + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-863", + "description": "CWE-863", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-200", + "description": "CWE-200", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "capecId": "CAPEC-1", + "descriptions": [ + { + "lang": "en", + "value": "CAPEC-1" + } + ] + } + ], + "affected": [ + { + "vendor": "Eclipse Foundation", + "product": "Eclipse BaSyx Go Components", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "1.1.3", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "In Eclipse BaSyx Go Components versions up to and including 1.1.2, ABAC-enabled deployments of the Submodel Repository and the AAS Environment return Submodel Elements that the caller is not authorized to read from `GET /submodels/{submodelIdentifier}/submodel-elements`.\n\n\n\nIf an access rule grants READ on a single Submodel Element through a `$sme` `REFERABLE` object, the list route returns every element of that Submodel, including its value, as soon as one element matches the caller's rules. The single-element route and the full Submodel read enforce the same rule and deny access to the other elements. An authenticated caller with a READ grant for one element of a Submodel can therefore read all other elements of that Submodel.\n\n\n\nThe issue is fixed in Eclipse BaSyx Go Components v1.1.3.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

In Eclipse BaSyx Go Components versions up to and including 1.1.2, ABAC-enabled deployments of the Submodel Repository and the AAS Environment return Submodel Elements that the caller is not authorized to read from `GET /submodels/{submodelIdentifier}/submodel-elements`.

If an access rule grants READ on a single Submodel Element through a `$sme` `REFERABLE` object, the list route returns every element of that Submodel, including its value, as soon as one element matches the caller's rules. The single-element route and the full Submodel read enforce the same rule and deny access to the other elements. An authenticated caller with a READ grant for one element of a Submodel can therefore read all other elements of that Submodel.

The issue is fixed in Eclipse BaSyx Go Components v1.1.3.

" + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/1371" + }, + { + "url": "https://github.com/eclipse-basyx/basyx-go-components/commit/693e3c72b0dbdaf2c36a1112fde4c77b5d1ead3f" + }, + { + "url": "https://github.com/eclipse-basyx/basyx-go-components/releases/tag/v1.1.3" + }, + { + "url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/574" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "subIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED", + "version": "4.0", + "baseSeverity": "HIGH", + "baseScore": 7.1, + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" + } + } + ], + "credits": [ + { + "lang": "en", + "value": "Eric Nowak", + "type": "finder" + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/127xxx/CVE-2026-127119.json b/data/2026/127xxx/CVE-2026-127119.json index 3d268c93df..4ea7c25ade 100644 --- a/data/2026/127xxx/CVE-2026-127119.json +++ b/data/2026/127xxx/CVE-2026-127119.json @@ -8,14 +8,14 @@ "assignerShortName": "AMZN", "dateReserved": "2026-11-12T15:23:43.752Z", "datePublished": "2026-11-12T18:49:21.317Z", - "dateUpdated": "2026-11-12T18:49:21.317Z" + "dateUpdated": "2026-11-13T15:10:43.331Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "ff89ba41-3aa1-4d27-914a-91399e9639e5", "shortName": "AMZN", - "dateUpdated": "2026-11-12T18:49:21.317Z" + "dateUpdated": "2026-11-13T15:10:43.331Z" }, "title": "Unverified ownership of the default EMR cluster log location in AWS SDK for pandas", "problemTypes": [ @@ -111,6 +111,12 @@ "tags": [ "vendor-advisory" ] + }, + { + "url": "https://github.com/aws/aws-sdk-pandas/security/advisories/GHSA-3rgm-255m-m9g5", + "tags": [ + "third-party-advisory" + ] } ], "metrics": [ diff --git a/data/2026/128xxx/CVE-2026-128907.json b/data/2026/128xxx/CVE-2026-128907.json new file mode 100644 index 0000000000..5e5a5fd385 --- /dev/null +++ b/data/2026/128xxx/CVE-2026-128907.json @@ -0,0 +1,199 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-128907", + "assignerOrgId": "455daabc-a392-441d-aa46-37d35189897c", + "state": "PUBLISHED", + "assignerShortName": "NCSC.ch", + "dateReserved": "2026-11-13T12:42:51.721Z", + "datePublished": "2026-11-13T14:26:41.668Z", + "dateUpdated": "2026-11-13T14:26:41.668Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "455daabc-a392-441d-aa46-37d35189897c", + "shortName": "NCSC.ch", + "dateUpdated": "2026-11-13T14:26:41.668Z" + }, + "title": "DJI AeroScope Mobile: Missing authentication on the management interface", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-306", + "description": "CWE-306 Missing Authentication for Critical Function", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "DJI", + "product": "AeroScope Mobile (TP703)", + "platforms": [ + "ARM" + ], + "collectionURL": "https://www.dji.com", + "modules": [ + "1300 DM810X communications board (uavmonitor_usbv1)" + ], + "programFiles": [ + "opt/dvr_rdk/ti810x/bin/uavmonitor_usbv1" + ], + "versions": [ + { + "status": "affected", + "version": "03.00.00.26", + "versionType": "custom" + } + ], + "defaultStatus": "unknown" + }, + { + "vendor": "DJI", + "product": "AeroScope Mobile (TP703) 1300 communications board firmware", + "platforms": [ + "ARM" + ], + "collectionURL": "https://www.dji.com", + "programFiles": [ + "opt/dvr_rdk/ti810x/bin/uavmonitor_usbv1" + ], + "versions": [ + { + "status": "affected", + "version": "02.00.07.12", + "lessThanOrEqual": "02.00.08.40", + "versionType": "custom" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Missing authentication for a critical function (CWE-306) in the management service (uavmonitor_usbv1) of the 1300 communications board in DJI AeroScope Mobile (TP703) firmware 03.00.00.26, with 1300 communications board firmware 02.00.07.12 through 02.00.08.40, allows an unauthenticated attacker on the local network to read device information, such as the serial number, MAC address, IP address and radio configuration, and to change configuration settings. The service accepts commands in DJI's proprietary DUML protocol without any authentication. Exploitation requires network access to TCP port 16000 on the board and that the unit is not connected to another controlling host. The same commands are also accepted over the USB operator port. Confirmed on a physical device.\n\n\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer. DJI has discontinued AeroScope Mobile and no fixed firmware is available.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Missing authentication for a critical function (CWE-306) in the management service (uavmonitor_usbv1) of the 1300 communications board in DJI AeroScope Mobile (TP703) firmware 03.00.00.26, with 1300 communications board firmware 02.00.07.12 through 02.00.08.40, allows an unauthenticated attacker on the local network to read device information, such as the serial number, MAC address, IP address and radio configuration, and to change configuration settings. The service accepts commands in DJI's proprietary DUML protocol without any authentication. Exploitation requires network access to TCP port 16000 on the board and that the unit is not connected to another controlling host. The same commands are also accepted over the USB operator port. Confirmed on a physical device.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer. DJI has discontinued AeroScope Mobile and no fixed firmware is available.

" + } + ] + } + ], + "tags": [ + "unsupported-when-assigned" + ], + "references": [ + { + "url": "https://cyber-defence-campus.github.io/projects/vulnerabilities/CVE-2026-128907/", + "name": "Cyber Defence Campus vulnerability advisories", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://www.dji.com/aeroscope", + "name": "DJI AeroScope product page", + "tags": [ + "product" + ] + }, + { + "url": "https://github.com/llorencroma/dji-aeroscope-root", + "name": "DJI AeroScope Mobile research repository (technical details)", + "tags": [ + "technical-description" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "Score agreed with the vendor for the standalone impact of the interface. Adjacent (AV:A) reach via the multicast discovery on 225.0.0.37:16001. C:N because the readable data is device identifiers and non-confidential configuration; I:L because configuration changes alone have limited impact; A:N. Command injection and firmware replacement through the same interface are scored in their own records. If the management interface is IP-routed, use AV:N -> CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N = 5.3 MEDIUM." + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseSeverity": "MEDIUM", + "baseScore": 4.3, + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" + } + } + ], + "workarounds": [ + { + "lang": "en", + "value": "Connect the unit's management Ethernet port only to an isolated network segment with no untrusted hosts, and do not route or bridge that segment to other networks, so that TCP port 16000 and the multicast discovery traffic (225.0.0.37, UDP port 16001) cannot be reached. Restrict physical access to the USB operator port.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Connect the unit's management Ethernet port only to an isolated network segment with no untrusted hosts, and do not route or bridge that segment to other networks, so that TCP port 16000 and the multicast discovery traffic (225.0.0.37, UDP port 16001) cannot be reached. Restrict physical access to the USB operator port.

" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "DJI AeroScope Mobile has been discontinued and is no longer supported by DJI. No fixed firmware is available. Operators should plan to replace affected units with a supported product and, until then, apply the workarounds.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

DJI AeroScope Mobile has been discontinued and is no longer supported by DJI. No fixed firmware is available. Operators should plan to replace affected units with a supported product and, until then, apply the workarounds.

" + } + ] + } + ], + "timeline": [ + { + "time": "2026-09-25T00:00:00.000Z", + "lang": "en", + "value": "Confirmed on a physical device" + }, + { + "time": "2026-09-25T00:00:00.000Z", + "lang": "en", + "value": "Reported to DJI" + }, + { + "time": "2026-11-04T00:00:00.000Z", + "lang": "en", + "value": "DJI acknowledged the vulnerability and provided its assessment" + } + ], + "credits": [ + { + "lang": "en", + "value": "Llorenç Romá Alvarez, Security Researcher, Cyber Defence Campus, Switzerland", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/128xxx/CVE-2026-128908.json b/data/2026/128xxx/CVE-2026-128908.json new file mode 100644 index 0000000000..3edaa32d75 --- /dev/null +++ b/data/2026/128xxx/CVE-2026-128908.json @@ -0,0 +1,199 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-128908", + "assignerOrgId": "455daabc-a392-441d-aa46-37d35189897c", + "state": "PUBLISHED", + "assignerShortName": "NCSC.ch", + "dateReserved": "2026-11-13T12:42:53.330Z", + "datePublished": "2026-11-13T14:29:28.584Z", + "dateUpdated": "2026-11-13T14:29:28.584Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "455daabc-a392-441d-aa46-37d35189897c", + "shortName": "NCSC.ch", + "dateUpdated": "2026-11-13T14:29:28.584Z" + }, + "title": "DJI AeroScope Mobile: OS command injection leads to root code execution", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-78", + "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "DJI", + "product": "AeroScope Mobile (TP703)", + "platforms": [ + "ARM" + ], + "collectionURL": "https://www.dji.com", + "modules": [ + "1300 DM810X communications board (uavmonitor_usbv1)" + ], + "programFiles": [ + "opt/dvr_rdk/ti810x/bin/uavmonitor_usbv1" + ], + "versions": [ + { + "status": "affected", + "version": "03.00.00.26", + "versionType": "custom" + } + ], + "defaultStatus": "unknown" + }, + { + "vendor": "DJI", + "product": "AeroScope Mobile (TP703) 1300 communications board firmware", + "platforms": [ + "ARM" + ], + "collectionURL": "https://www.dji.com", + "programFiles": [ + "opt/dvr_rdk/ti810x/bin/uavmonitor_usbv1" + ], + "versions": [ + { + "status": "affected", + "version": "02.00.07.12", + "lessThanOrEqual": "02.00.08.40", + "versionType": "custom" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "OS command injection (CWE-78) in the network-configuration handling of the management service (uavmonitor_usbv1) of the 1300 communications board in DJI AeroScope Mobile (TP703) firmware 03.00.00.26, with 1300 communications board firmware 02.00.07.12 through 02.00.08.40, allows an unauthenticated attacker on the local network to execute arbitrary commands as root. Configuration values that can be written without authentication over the management interface are inserted unquoted into shell commands. Exploitation requires network access to TCP port 16000 on the board and that the unit is not connected to another controlling host. The injected command persists across reboots. Confirmed on a physical device.\n\n\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer. DJI has discontinued AeroScope Mobile and no fixed firmware is available.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

OS command injection (CWE-78) in the network-configuration handling of the management service (uavmonitor_usbv1) of the 1300 communications board in DJI AeroScope Mobile (TP703) firmware 03.00.00.26, with 1300 communications board firmware 02.00.07.12 through 02.00.08.40, allows an unauthenticated attacker on the local network to execute arbitrary commands as root. Configuration values that can be written without authentication over the management interface are inserted unquoted into shell commands. Exploitation requires network access to TCP port 16000 on the board and that the unit is not connected to another controlling host. The injected command persists across reboots. Confirmed on a physical device.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer. DJI has discontinued AeroScope Mobile and no fixed firmware is available.

" + } + ] + } + ], + "tags": [ + "unsupported-when-assigned" + ], + "references": [ + { + "url": "https://cyber-defence-campus.github.io/projects/vulnerabilities/CVE-2026-128908/", + "name": "Cyber Defence Campus vulnerability advisories", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://www.dji.com/aeroscope", + "name": "DJI AeroScope product page", + "tags": [ + "product" + ] + }, + { + "url": "https://github.com/llorencroma/dji-aeroscope-root", + "name": "DJI AeroScope Mobile research repository (technical details)", + "tags": [ + "technical-description" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "Primary score assumes Adjacent (AV:A) reach via the L2 multicast arming handshake. If the management interface is IP-routed/bridged, use AV:N -> CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H = 9.8 CRITICAL." + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + } + ], + "workarounds": [ + { + "lang": "en", + "value": "Connect the unit's management Ethernet port only to an isolated network segment with no untrusted hosts, and do not route or bridge that segment to other networks, so that TCP port 16000 and the multicast discovery traffic (225.0.0.37, UDP port 16001) cannot be reached.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Connect the unit's management Ethernet port only to an isolated network segment with no untrusted hosts, and do not route or bridge that segment to other networks, so that TCP port 16000 and the multicast discovery traffic (225.0.0.37, UDP port 16001) cannot be reached.

" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "DJI AeroScope Mobile has been discontinued and is no longer supported by DJI. No fixed firmware is available. Operators should plan to replace affected units with a supported product and, until then, apply the workarounds.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

DJI AeroScope Mobile has been discontinued and is no longer supported by DJI. No fixed firmware is available. Operators should plan to replace affected units with a supported product and, until then, apply the workarounds.

" + } + ] + } + ], + "timeline": [ + { + "time": "2026-09-25T00:00:00.000Z", + "lang": "en", + "value": "Confirmed on a physical device" + }, + { + "time": "2026-09-25T00:00:00.000Z", + "lang": "en", + "value": "Reported to DJI" + }, + { + "time": "2026-11-04T00:00:00.000Z", + "lang": "en", + "value": "DJI acknowledged the vulnerability and provided its assessment" + } + ], + "credits": [ + { + "lang": "en", + "value": "Llorenç Romá Alvarez, Security Researcher, Cyber Defence Campus, Switzerland", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/128xxx/CVE-2026-128909.json b/data/2026/128xxx/CVE-2026-128909.json new file mode 100644 index 0000000000..72da6200a0 --- /dev/null +++ b/data/2026/128xxx/CVE-2026-128909.json @@ -0,0 +1,205 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-128909", + "assignerOrgId": "455daabc-a392-441d-aa46-37d35189897c", + "state": "PUBLISHED", + "assignerShortName": "NCSC.ch", + "dateReserved": "2026-11-13T12:42:54.791Z", + "datePublished": "2026-11-13T14:30:49.416Z", + "dateUpdated": "2026-11-13T14:30:49.416Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "455daabc-a392-441d-aa46-37d35189897c", + "shortName": "NCSC.ch", + "dateUpdated": "2026-11-13T14:30:49.416Z" + }, + "title": "DJI AeroScope Mobile: Firmware updates are not signature-verified", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-347", + "description": "CWE-347 Improper Verification of Cryptographic Signature", + "type": "CWE" + }, + { + "lang": "en", + "cweId": "CWE-494", + "description": "CWE-494 Download of Code Without Integrity Check", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "DJI", + "product": "AeroScope Mobile (TP703)", + "platforms": [ + "ARM" + ], + "collectionURL": "https://www.dji.com", + "modules": [ + "1300 DM810X communications board (uavmonitor_usbv1)" + ], + "programFiles": [ + "opt/dvr_rdk/ti810x/bin/uavmonitor_usbv1" + ], + "versions": [ + { + "status": "affected", + "version": "03.00.00.26", + "versionType": "custom" + } + ], + "defaultStatus": "unknown" + }, + { + "vendor": "DJI", + "product": "AeroScope Mobile (TP703) 1300 communications board firmware", + "platforms": [ + "ARM" + ], + "collectionURL": "https://www.dji.com", + "programFiles": [ + "opt/dvr_rdk/ti810x/bin/uavmonitor_usbv1" + ], + "versions": [ + { + "status": "affected", + "version": "02.00.07.12", + "lessThanOrEqual": "02.00.08.40", + "versionType": "custom" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Improper verification of cryptographic signature (CWE-347) in the firmware update handler of the management service (uavmonitor_usbv1) of the 1300 communications board in DJI AeroScope Mobile (TP703) firmware 03.00.00.26, with 1300 communications board firmware 02.00.07.12 through 02.00.08.40, allows an unauthenticated attacker on the local network to install modified firmware, which gives persistent code execution as root. The device accepts any image that matches an MD5 checksum supplied in the same request and does not verify a signature. Exploitation requires network access to TCP port 16000 on the board and that the unit is not connected to another controlling host. Reproduced by running the unmodified device binaries in emulation; not tested on a physical device.\n\n\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer. DJI has discontinued AeroScope Mobile and no fixed firmware is available.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Improper verification of cryptographic signature (CWE-347) in the firmware update handler of the management service (uavmonitor_usbv1) of the 1300 communications board in DJI AeroScope Mobile (TP703) firmware 03.00.00.26, with 1300 communications board firmware 02.00.07.12 through 02.00.08.40, allows an unauthenticated attacker on the local network to install modified firmware, which gives persistent code execution as root. The device accepts any image that matches an MD5 checksum supplied in the same request and does not verify a signature. Exploitation requires network access to TCP port 16000 on the board and that the unit is not connected to another controlling host. Reproduced by running the unmodified device binaries in emulation; not tested on a physical device.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer. DJI has discontinued AeroScope Mobile and no fixed firmware is available.

" + } + ] + } + ], + "tags": [ + "unsupported-when-assigned" + ], + "references": [ + { + "url": "https://cyber-defence-campus.github.io/projects/vulnerabilities/CVE-2026-128909/", + "name": "Cyber Defence Campus vulnerability advisories", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://www.dji.com/aeroscope", + "name": "DJI AeroScope product page", + "tags": [ + "product" + ] + }, + { + "url": "https://github.com/llorencroma/dji-aeroscope-root", + "name": "DJI AeroScope Mobile research repository (technical details)", + "tags": [ + "technical-description" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "Primary score assumes Adjacent (AV:A) reach via the L2 multicast arming handshake. If the management interface is IP-routed/bridged, the TCP 16000 firmware-flash dispatch is reachable at Network scope: use AV:N -> CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H = 9.8 CRITICAL." + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + } + ], + "workarounds": [ + { + "lang": "en", + "value": "Connect the unit's management Ethernet port only to an isolated network segment with no untrusted hosts, and do not route or bridge that segment to other networks, so that TCP port 16000 and the multicast discovery traffic (225.0.0.37, UDP port 16001) cannot be reached. The device has no setting that enables signature checking of firmware updates.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Connect the unit's management Ethernet port only to an isolated network segment with no untrusted hosts, and do not route or bridge that segment to other networks, so that TCP port 16000 and the multicast discovery traffic (225.0.0.37, UDP port 16001) cannot be reached. The device has no setting that enables signature checking of firmware updates.

" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "DJI AeroScope Mobile has been discontinued and is no longer supported by DJI. No fixed firmware is available. Operators should plan to replace affected units with a supported product and, until then, apply the workarounds.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

DJI AeroScope Mobile has been discontinued and is no longer supported by DJI. No fixed firmware is available. Operators should plan to replace affected units with a supported product and, until then, apply the workarounds.

" + } + ] + } + ], + "timeline": [ + { + "time": "2026-09-25T00:00:00.000Z", + "lang": "en", + "value": "Reproduced in emulation of the unmodified device binaries" + }, + { + "time": "2026-09-25T00:00:00.000Z", + "lang": "en", + "value": "Reported to DJI" + }, + { + "time": "2026-11-04T00:00:00.000Z", + "lang": "en", + "value": "DJI acknowledged the vulnerability and provided its assessment" + } + ], + "credits": [ + { + "lang": "en", + "value": "Llorenç Romá Alvarez, Security Researcher, Cyber Defence Campus, Switzerland", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/128xxx/CVE-2026-128910.json b/data/2026/128xxx/CVE-2026-128910.json new file mode 100644 index 0000000000..8ac8978937 --- /dev/null +++ b/data/2026/128xxx/CVE-2026-128910.json @@ -0,0 +1,217 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-128910", + "assignerOrgId": "455daabc-a392-441d-aa46-37d35189897c", + "state": "PUBLISHED", + "assignerShortName": "NCSC.ch", + "dateReserved": "2026-11-13T12:42:56.446Z", + "datePublished": "2026-11-13T14:31:31.193Z", + "dateUpdated": "2026-11-13T14:31:31.193Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "455daabc-a392-441d-aa46-37d35189897c", + "shortName": "NCSC.ch", + "dateUpdated": "2026-11-13T14:31:31.193Z" + }, + "title": "DJI AeroScope Mobile: Hard-coded root password on the serial console", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-798", + "description": "CWE-798 Use of Hard-coded Credentials", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-916", + "description": "CWE-916 Use of Password Hash With Insufficient Computational Effort", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-521", + "description": "CWE-521 Weak Password Requirements", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "DJI", + "product": "AeroScope Mobile (TP703)", + "platforms": [ + "ARM" + ], + "collectionURL": "https://www.dji.com", + "modules": [ + "1300 DM810X communications board (uavmonitor_usbv1; root console credential in /etc/shadow)" + ], + "programFiles": [ + "etc/shadow", + "etc/passwd" + ], + "versions": [ + { + "status": "affected", + "version": "03.00.00.26", + "versionType": "custom" + } + ], + "defaultStatus": "unknown" + }, + { + "vendor": "DJI", + "product": "AeroScope Mobile (TP703) 1300 communications board firmware", + "platforms": [ + "ARM" + ], + "collectionURL": "https://www.dji.com", + "versions": [ + { + "status": "affected", + "version": "02.00.07.12", + "lessThanOrEqual": "02.00.08.40", + "versionType": "custom" + } + ], + "defaultStatus": "unknown" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Use of hard-coded credentials (CWE-798) on the 1300 communications board in DJI AeroScope Mobile (TP703) firmware 03.00.00.26, with 1300 communications board firmware 02.00.07.12 through 02.00.08.40, allows an attacker with physical access to the board's serial console to log in as root. The same password hash is present on every unit and uses DES crypt, so the password can be recovered offline from the distributed firmware. No network login service accepts this password by default. Confirmed on a physical device.\n\n\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer. DJI has discontinued AeroScope Mobile and no fixed firmware is available.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Use of hard-coded credentials (CWE-798) on the 1300 communications board in DJI AeroScope Mobile (TP703) firmware 03.00.00.26, with 1300 communications board firmware 02.00.07.12 through 02.00.08.40, allows an attacker with physical access to the board's serial console to log in as root. The same password hash is present on every unit and uses DES crypt, so the password can be recovered offline from the distributed firmware. No network login service accepts this password by default. Confirmed on a physical device.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer. DJI has discontinued AeroScope Mobile and no fixed firmware is available.

" + } + ] + } + ], + "tags": [ + "unsupported-when-assigned" + ], + "references": [ + { + "url": "https://cyber-defence-campus.github.io/projects/vulnerabilities/CVE-2026-128910/", + "name": "Cyber Defence Campus vulnerability advisories", + "tags": [ + "third-party-advisory" + ] + }, + { + "url": "https://www.dji.com/aeroscope", + "name": "DJI AeroScope product page", + "tags": [ + "product" + ] + }, + { + "url": "https://github.com/llorencroma/dji-aeroscope-root", + "name": "DJI AeroScope Mobile research repository (technical details)", + "tags": [ + "technical-description" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "Scored on the only login channel that accepts the credential: the board's serial console, which requires physical access, so AV:P. No network login service (SSH/telnet) runs on the board by default. The credential is not an escalation on a host where code execution has already been achieved. BLAST RADIUS: the credential is image-wide, not per-device, so a single recovery applies to every affected unit and an operator cannot contain a leak. The vendor should also determine whether the same credential is reused in other DJI product lines; reuse was not verified in this engagement." + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "PHYSICAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + } + ], + "workarounds": [ + { + "lang": "en", + "value": "Restrict physical access to deployed units and their serial console, and treat any unit that has left controlled custody as having a known root password. Network isolation does not mitigate this issue.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Restrict physical access to deployed units and their serial console, and treat any unit that has left controlled custody as having a known root password. Network isolation does not mitigate this issue.

" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "DJI AeroScope Mobile has been discontinued and is no longer supported by DJI. No fixed firmware is available. Operators should plan to replace affected units with a supported product and, until then, apply the workarounds.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

DJI AeroScope Mobile has been discontinued and is no longer supported by DJI. No fixed firmware is available. Operators should plan to replace affected units with a supported product and, until then, apply the workarounds.

" + } + ] + } + ], + "timeline": [ + { + "time": "2026-09-25T00:00:00.000Z", + "lang": "en", + "value": "Confirmed on a physical device" + }, + { + "time": "2026-09-25T00:00:00.000Z", + "lang": "en", + "value": "Reported to DJI" + }, + { + "time": "2026-11-04T00:00:00.000Z", + "lang": "en", + "value": "DJI acknowledged the vulnerability and provided its assessment" + } + ], + "credits": [ + { + "lang": "en", + "value": "Llorenç Romá Alvarez, Security Researcher, Cyber Defence Campus, Switzerland", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/128xxx/CVE-2026-128970.json b/data/2026/128xxx/CVE-2026-128970.json new file mode 100644 index 0000000000..4696708f39 --- /dev/null +++ b/data/2026/128xxx/CVE-2026-128970.json @@ -0,0 +1,234 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-128970", + "assignerOrgId": "fdf66990-8419-4c8c-8848-ec15d75773b4", + "state": "PUBLISHED", + "assignerShortName": "esaqa", + "dateReserved": "2026-11-13T13:45:01.621Z", + "datePublished": "2026-11-13T14:25:45.811Z", + "dateUpdated": "2026-11-13T14:25:45.811Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "fdf66990-8419-4c8c-8848-ec15d75773b4", + "shortName": "esaqa", + "dateUpdated": "2026-11-13T14:25:45.811Z" + }, + "title": "Missing membership acceptance check permits group share-right deletion by invitees in Psono Server", + "datePublic": "2026-11-13T14:22:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-863", + "description": "CWE-863 Incorrect Authorization", + "type": "CWE" + } + ] + } + ], + "impacts": [ + { + "descriptions": [ + { + "lang": "en", + "value": "An authenticated user with a pending or declined group invitation carrying share_admin=True can delete the group's share-right records, revoking that group's access to the affected shares and their contained secrets for all accepted group members. The underlying shares and secrets are not deleted, and secret contents are not disclosed." + } + ] + } + ], + "affected": [ + { + "vendor": "esaqa GmbH", + "product": "Psono", + "repo": "https://gitlab.com/esaqa/psono/psono-server", + "modules": [ + "Psono Server Community Edition" + ], + "programFiles": [ + "psono/restapi/serializers/delete_share_right.py" + ], + "versions": [ + { + "status": "affected", + "version": "1.12.6", + "lessThan": "7.5.1", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "esaqa GmbH", + "product": "Psono", + "modules": [ + "Psono Server Enterprise Edition" + ], + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "7.5.1", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Psono Server Community Edition versions 1.12.6 through 7.5.0 and Psono Server Enterprise Edition before 7.5.1 do not require accepted group membership when authorizing deletion of group share-rights. The DELETE /share/right/ endpoint checks for a membership matching the target group, the authenticated user, and share_admin=True, but omits accepted=True. An authenticated remote attacker who has been invited to a group with share-admin privileges, and who knows a group share-right UUID, can therefore delete that group's share-right record without accepting the invitation or after declining it. Pending invitations have accepted=None, while declined invitations retain accepted=False and the share_admin flag. Deletion revokes the group's access to the affected share and its contained secrets for all accepted group members, without deleting the underlying data or disclosing secret contents. The issue was fixed in version 7.5.1 of both editions, released on 2026-10-13.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Psono Server Community Edition versions 1.12.6 through 7.5.0 and Psono Server Enterprise Edition before 7.5.1 do not require accepted group membership when authorizing deletion of group share-rights. The DELETE /share/right/ endpoint checks for a membership matching the target group, the authenticated user, and share_admin=True, but omits accepted=True. An authenticated remote attacker who has been invited to a group with share-admin privileges, and who knows a group share-right UUID, can therefore delete that group's share-right record without accepting the invitation or after declining it. Pending invitations have accepted=None, while declined invitations retain accepted=False and the share_admin flag. Deletion revokes the group's access to the affected share and its contained secrets for all accepted group members, without deleting the underlying data or disclosing secret contents. The issue was fixed in version 7.5.1 of both editions, released on 2026-10-13.

" + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.com/esaqa/psono/psono-server/-/commit/86e7ce7fdbb04fc4ae3430cc434179630948d48d", + "name": "Vendor fix", + "tags": [ + "patch" + ] + }, + { + "url": "https://gitlab.com/esaqa/psono/psono-server/-/releases/v7.5.1", + "name": "Psono 7.5.1 release", + "tags": [ + "release-notes" + ] + }, + { + "url": "https://gitlab.com/esaqa/esaqa/security-advisories/-/blob/master/advisories/CVE-2026-128970.md", + "name": "Vendor security advisory for CVE-2026-128970", + "tags": [ + "vendor-advisory" + ] + }, + { + "url": "https://gitlab.com/esaqa/psono/psono-server/-/blob/v7.5.0/psono/restapi/serializers/delete_share_right.py", + "name": "Affected Community Edition deletion authorization in Psono 7.5.0", + "tags": [ + "technical-description" + ] + }, + { + "url": "https://gitlab.com/esaqa/psono/psono-server/-/blob/v7.5.0/psono/restapi/serializers/create_share_right.py", + "name": "Community Edition create-path acceptance check in Psono 7.5.0", + "tags": [ + "technical-description" + ] + }, + { + "url": "https://gitlab.com/esaqa/psono/psono-server/-/blob/v7.5.0/psono/restapi/views/membership_decline.py", + "name": "Community Edition membership decline behavior in Psono 7.5.0", + "tags": [ + "technical-description" + ] + }, + { + "url": "https://gitlab.com/esaqa/psono/psono-server/-/commit/11f9aa69dae370cd4f0213f4d03d1b1cc4df36dd", + "name": "Introduction of the Community Edition invite-only deletion authorization path", + "tags": [ + "technical-description" + ] + }, + { + "url": "https://gitlab.com/esaqa/psono/psono-server", + "name": "Psono Server Community Edition source repository", + "tags": [ + "product" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "Authenticated user with a pending or declined group invitation carrying share_admin=True and knowledge of a target group share-right UUID. Unauthorized deletion modifies access-control records and removes the group's access to affected shared data." + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "LOW", + "baseSeverity": "MEDIUM", + "baseScore": 5.4, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" + } + } + ], + "workarounds": [ + { + "lang": "en", + "value": "Until the patch is deployed, use authorized group administration to remove pending and declined group memberships carrying share-admin privileges, or clear their share_admin flag. Avoid granting share-admin privileges to unaccepted invitees on affected versions.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Until the patch is deployed, use authorized group administration to remove pending and declined group memberships carrying share-admin privileges, or clear their share_admin flag. Avoid granting share-admin privileges to unaccepted invitees on affected versions.

" + } + ] + } + ], + "solutions": [ + { + "lang": "en", + "value": "Upgrade Psono Server Community Edition and Psono Server Enterprise Edition to version 7.5.1 or later. Version 7.5.1 was released for both editions on 2026-10-13. The patch adds accepted=True to the User_Group_Membership authorization query in DeleteShareRightSerializer.validate, making group share-right deletion require both accepted membership and share_admin=True, matching the group authorization check in the create path.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "

Upgrade Psono Server Community Edition and Psono Server Enterprise Edition to version 7.5.1 or later. Version 7.5.1 was released for both editions on 2026-10-13. The patch adds accepted=True to the User_Group_Membership authorization query in DeleteShareRightSerializer.validate, making group share-right deletion require both accepted membership and share_admin=True, matching the group authorization check in the create path.

" + } + ] + } + ], + "timeline": [ + { + "time": "2026-10-12T19:45:00.000Z", + "lang": "en", + "value": "Vulnerability reported to esaqa GmbH by Nicholas Mullenski / K70n0s510 (2026-10-12 21:45 CEST, UTC+02:00)" + }, + { + "time": "2026-10-13T05:18:00.000Z", + "lang": "en", + "value": "Vendor fix implemented in commit 86e7ce7fdbb04fc4ae3430cc434179630948d48d, included in version 7.5.1 of both editions." + } + ], + "credits": [ + { + "lang": "en", + "value": "Nicholas Mullenski / K70n0s510", + "type": "finder" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + }, + "x_internal": { + "note": "The organization/user UUIDs are placeholders. The PUBLISHED state selects the full-record schema and does not indicate actual publication. Replace placeholders and remove this internal note before submission. Version 7.5.1 was released for both Community Edition and Enterprise Edition on 2026-10-13 and includes fix commit 86e7ce7fdbb04fc4ae3430cc434179630948d48d, verified in both local repositories. The first Community Edition release containing the invite-only deletion authorization path is 1.12.6; release 1.12.5 still required independent grant rights on the share. Enterprise Edition is closed source; no Enterprise Edition source repository links are included. Its version lower bound of 0 denotes releases before the fixed boundary rather than an independently established introduction version." + } + } + } +} \ No newline at end of file diff --git a/data/2026/128xxx/CVE-2026-128990.json b/data/2026/128xxx/CVE-2026-128990.json new file mode 100644 index 0000000000..010b364e2b --- /dev/null +++ b/data/2026/128xxx/CVE-2026-128990.json @@ -0,0 +1,135 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-128990", + "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "state": "PUBLISHED", + "assignerShortName": "VulnCheck", + "dateReserved": "2026-11-13T14:31:49.944Z", + "datePublished": "2026-11-13T15:01:43.598Z", + "dateUpdated": "2026-11-13T15:01:43.598Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "shortName": "VulnCheck", + "dateUpdated": "2026-11-13T15:01:43.598Z" + }, + "datePublic": "2026-10-29T00:00:00.000Z", + "title": "xschem 2.9.9 through 3.4.7 Heap Out-of-Bounds Write via rawtovcd read_dataset()", + "descriptions": [ + { + "lang": "en", + "value": "xschem 2.9.9 through 3.4.7 contains a heap out-of-bounds write vulnerability in read_dataset() in src/rawtovcd.c due to an unchecked variable index. Attackers can supply a crafted ngspice .raw file that, when converted with rawtovcd, writes file-controlled heap pointers at chosen signed offsets, corrupting heap memory." + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Out-of-bounds Write", + "cweId": "CWE-787", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Stefan Schippers", + "product": "xschem", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "2.9.9", + "status": "affected", + "versionType": "custom", + "lessThanOrEqual": "3.4.7" + } + ], + "packageURL": "pkg:github/stefanschippers/xschem", + "repo": "https://github.com/StefanSchippers/xschem" + } + ], + "metrics": [ + { + "format": "CVSS", + "cvssV4_0": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "baseScore": 8.5, + "baseSeverity": "HIGH" + } + }, + { + "format": "CVSS", + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseScore": 7.8, + "baseSeverity": "HIGH" + } + } + ], + "references": [ + { + "url": "https://github.com/StefanSchippers/xschem/commit/e29af39c6133c36bdaf66603fd663231e75517f1", + "tags": [ + "patch" + ] + }, + { + "url": "https://github.com/StefanSchippers/xschem/blob/3.4.7/src/rawtovcd.c#L124-L148", + "tags": [ + "technical-description" + ] + }, + { + "url": "https://github.com/StefanSchippers/xschem", + "tags": [ + "product" + ] + }, + { + "name": "VulnCheck Advisory: xschem 2.9.9 through 3.4.7 Heap Out-of-Bounds Write via rawtovcd read_dataset()", + "tags": [ + "third-party-advisory" + ], + "url": "https://www.vulncheck.com/advisories/xschem-2.9.9-through-3.4.7-heap-out-of-bounds-write-via-rawtovcd-read-dataset" + } + ], + "credits": [ + { + "lang": "en", + "value": "Deus Rex", + "type": "finder" + } + ], + "x_generator": { + "engine": "vulncheck-endgame" + } + } + } +} \ No newline at end of file diff --git a/data/2026/128xxx/CVE-2026-128991.json b/data/2026/128xxx/CVE-2026-128991.json new file mode 100644 index 0000000000..f7cc41d301 --- /dev/null +++ b/data/2026/128xxx/CVE-2026-128991.json @@ -0,0 +1,135 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-128991", + "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "state": "PUBLISHED", + "assignerShortName": "VulnCheck", + "dateReserved": "2026-11-13T14:31:49.944Z", + "datePublished": "2026-11-13T15:01:41.369Z", + "dateUpdated": "2026-11-13T15:01:41.369Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "shortName": "VulnCheck", + "dateUpdated": "2026-11-13T15:01:41.369Z" + }, + "datePublic": "2026-10-29T00:00:00.000Z", + "title": "xschem 2.9.9 through 3.4.7 Out-of-Bounds Read via read_xschem_file() Embedded-Symbol Record", + "descriptions": [ + { + "lang": "en", + "value": "xschem 2.9.9 through 3.4.7 contains an out-of-bounds read vulnerability in read_xschem_file() in src/save.c that mishandles embedded-symbol records lacking a preceding instance. Attackers can supply a crafted schematic beginning with a \"[\" record, causing xschem to read and dereference memory below the instance array and crash." + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Out-of-bounds Read", + "cweId": "CWE-125", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Stefan Schippers", + "product": "xschem", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "2.9.9", + "status": "affected", + "versionType": "custom", + "lessThanOrEqual": "3.4.7" + } + ], + "packageURL": "pkg:github/stefanschippers/xschem", + "repo": "https://github.com/StefanSchippers/xschem" + } + ], + "metrics": [ + { + "format": "CVSS", + "cvssV4_0": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "baseScore": 5.8, + "baseSeverity": "MEDIUM" + } + }, + { + "format": "CVSS", + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "HIGH", + "baseScore": 5.3, + "baseSeverity": "MEDIUM" + } + } + ], + "references": [ + { + "url": "https://github.com/StefanSchippers/xschem/commit/e29af39c6133c36bdaf66603fd663231e75517f1", + "tags": [ + "patch" + ] + }, + { + "url": "https://github.com/StefanSchippers/xschem/blob/3.4.7/src/save.c#L3138-L3141", + "tags": [ + "technical-description" + ] + }, + { + "url": "https://github.com/StefanSchippers/xschem", + "tags": [ + "product" + ] + }, + { + "name": "VulnCheck Advisory: xschem 2.9.9 through 3.4.7 Out-of-Bounds Read via read_xschem_file() Embedded-Symbol Record", + "tags": [ + "third-party-advisory" + ], + "url": "https://www.vulncheck.com/advisories/xschem-2.9.9-through-3.4.7-out-of-bounds-read-via-read-xschem-file-embedded-symbol-record" + } + ], + "credits": [ + { + "lang": "en", + "value": "Deus Rex", + "type": "finder" + } + ], + "x_generator": { + "engine": "vulncheck-endgame" + } + } + } +} \ No newline at end of file diff --git a/data/2026/129xxx/CVE-2026-129092.json b/data/2026/129xxx/CVE-2026-129092.json new file mode 100644 index 0000000000..98d0f58038 --- /dev/null +++ b/data/2026/129xxx/CVE-2026-129092.json @@ -0,0 +1,145 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-129092", + "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "state": "PUBLISHED", + "assignerShortName": "VulnCheck", + "dateReserved": "2026-11-13T15:08:47.490Z", + "datePublished": "2026-11-13T15:11:13.522Z", + "dateUpdated": "2026-11-13T15:11:13.522Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", + "shortName": "VulnCheck", + "dateUpdated": "2026-11-13T15:11:13.522Z" + }, + "datePublic": "2026-10-17T00:00:00.000Z", + "title": "CCC Attestation SIG attested-tls-poc through commit 731ca82 TOCTOU via Handshake-Only Attestation", + "descriptions": [ + { + "lang": "en", + "value": "CCC Attestation SIG attested-tls-poc through commit 731ca82 contains a time-of-check time-of-use vulnerability because Evidence is appraised only once during the TLS handshake, without post-handshake re-attestation. Attackers with local access to the attesting endpoint can alter workload code, data, configuration, or attached devices like GPUs while peers keep trusting the original Evidence." + } + ], + "tags": [ + "unsupported-when-assigned" + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "Time-of-check Time-of-use (TOCTOU) Race Condition", + "cweId": "CWE-367", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "CCC-Attestation", + "product": "attested-tls-poc", + "defaultStatus": "unaffected", + "versions": [ + { + "version": "0", + "lessThanOrEqual": "731ca82ed533fc7a1092be980887ae2e34261da2", + "status": "affected", + "versionType": "git" + } + ], + "packageURL": "pkg:github/ccc-attestation/attested-tls-poc", + "collectionURL": "https://github.com/CCC-Attestation/attested-tls-poc", + "repo": "https://github.com/CCC-Attestation/attested-tls-poc" + } + ], + "metrics": [ + { + "format": "CVSS", + "cvssV4_0": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "baseScore": 7, + "baseSeverity": "HIGH" + } + }, + { + "format": "CVSS", + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE", + "baseScore": 5.7, + "baseSeverity": "MEDIUM" + } + } + ], + "references": [ + { + "url": "https://doi.org/10.1145/3779208.3785387", + "tags": [ + "technical-description" + ] + }, + { + "url": "https://github.com/CCC-Attestation/formal-spec-id-crisis", + "tags": [ + "technical-description" + ] + }, + { + "url": "https://github.com/ionut-arm/mbedtls/blob/f4ac7593826a506fc509c83cad73786acab1d442/library/ssl_tls13_generic.c#L430-L436", + "tags": [ + "technical-description" + ] + }, + { + "url": "https://github.com/CCC-Attestation/attested-tls-poc", + "tags": [ + "product" + ] + }, + { + "name": "VulnCheck Advisory: CCC Attestation SIG attested-tls-poc through commit 731ca82 TOCTOU via Handshake-Only Attestation", + "tags": [ + "third-party-advisory" + ], + "url": "https://www.vulncheck.com/advisories/ccc-attestation-sig-attested-tls-poc-through-commit-731ca82-toctou-via-handshake-only-attestation" + } + ], + "credits": [ + { + "lang": "en", + "value": "Muhammad Usama Sardar", + "type": "finder" + } + ], + "x_generator": { + "engine": "vulncheck-endgame" + } + } + } +} \ No newline at end of file diff --git a/data/2026/12xxx/CVE-2026-12266.json b/data/2026/12xxx/CVE-2026-12266.json index 3b5d3fccf5..89cf4e269d 100644 --- a/data/2026/12xxx/CVE-2026-12266.json +++ b/data/2026/12xxx/CVE-2026-12266.json @@ -8,7 +8,7 @@ "assignerShortName": "Zohocorp", "dateReserved": "2026-06-15T10:38:44.125Z", "datePublished": "2026-11-10T11:44:09.958Z", - "dateUpdated": "2026-11-10T11:44:09.958Z" + "dateUpdated": "2026-11-13T14:31:26.531Z" }, "containers": { "cna": { @@ -124,6 +124,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:18:27.200920Z", + "id": "CVE-2026-12266", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:31:26.531Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/12xxx/CVE-2026-12572.json b/data/2026/12xxx/CVE-2026-12572.json index f265fc84d2..78feed3a5f 100644 --- a/data/2026/12xxx/CVE-2026-12572.json +++ b/data/2026/12xxx/CVE-2026-12572.json @@ -8,7 +8,7 @@ "assignerShortName": "Zohocorp", "dateReserved": "2026-06-18T05:18:28.398Z", "datePublished": "2026-11-10T11:16:44.702Z", - "dateUpdated": "2026-11-10T11:16:44.702Z" + "dateUpdated": "2026-11-13T14:33:38.561Z" }, "containers": { "cna": { @@ -124,6 +124,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:26:43.776810Z", + "id": "CVE-2026-12572", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:33:38.561Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/12xxx/CVE-2026-12573.json b/data/2026/12xxx/CVE-2026-12573.json index c3c492b2bb..313ab698dc 100644 --- a/data/2026/12xxx/CVE-2026-12573.json +++ b/data/2026/12xxx/CVE-2026-12573.json @@ -8,7 +8,7 @@ "assignerShortName": "Zohocorp", "dateReserved": "2026-06-18T05:18:33.646Z", "datePublished": "2026-11-10T11:22:34.589Z", - "dateUpdated": "2026-11-10T11:22:34.589Z" + "dateUpdated": "2026-11-13T14:31:46.702Z" }, "containers": { "cna": { @@ -124,6 +124,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:26:47.910799Z", + "id": "CVE-2026-12573", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:31:46.702Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/12xxx/CVE-2026-12574.json b/data/2026/12xxx/CVE-2026-12574.json index 500ac2138d..8a8e2decf9 100644 --- a/data/2026/12xxx/CVE-2026-12574.json +++ b/data/2026/12xxx/CVE-2026-12574.json @@ -8,7 +8,7 @@ "assignerShortName": "Zohocorp", "dateReserved": "2026-06-18T05:20:13.781Z", "datePublished": "2026-11-10T11:29:49.717Z", - "dateUpdated": "2026-11-10T11:29:49.717Z" + "dateUpdated": "2026-11-13T14:31:36.687Z" }, "containers": { "cna": { @@ -124,6 +124,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:26:51.163054Z", + "id": "CVE-2026-12574", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:31:36.687Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/16xxx/CVE-2026-16709.json b/data/2026/16xxx/CVE-2026-16709.json index edeec21dbe..23493325c7 100644 --- a/data/2026/16xxx/CVE-2026-16709.json +++ b/data/2026/16xxx/CVE-2026-16709.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-23T02:03:37.770Z", "datePublished": "2026-11-07T04:31:18.520Z", - "dateUpdated": "2026-11-07T04:31:18.520Z" + "dateUpdated": "2026-11-13T14:41:56.794Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:41:48.467858Z", + "id": "CVE-2026-16709", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:41:56.794Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/16xxx/CVE-2026-16716.json b/data/2026/16xxx/CVE-2026-16716.json index 2e4bebd50e..d331914979 100644 --- a/data/2026/16xxx/CVE-2026-16716.json +++ b/data/2026/16xxx/CVE-2026-16716.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-23T02:27:09.118Z", "datePublished": "2026-11-07T04:31:24.692Z", - "dateUpdated": "2026-11-07T04:31:24.692Z" + "dateUpdated": "2026-11-13T14:49:10.605Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:49:00.981436Z", + "id": "CVE-2026-16716", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:49:10.605Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/16xxx/CVE-2026-16720.json b/data/2026/16xxx/CVE-2026-16720.json index 5da5da75be..92b538640b 100644 --- a/data/2026/16xxx/CVE-2026-16720.json +++ b/data/2026/16xxx/CVE-2026-16720.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-23T02:35:22.281Z", "datePublished": "2026-11-07T04:31:28.976Z", - "dateUpdated": "2026-11-07T04:31:28.976Z" + "dateUpdated": "2026-11-13T14:53:20.336Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:53:10.291645Z", + "id": "CVE-2026-16720", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:53:20.336Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17284.json b/data/2026/17xxx/CVE-2026-17284.json index 85849fcbec..1b9ef649dc 100644 --- a/data/2026/17xxx/CVE-2026-17284.json +++ b/data/2026/17xxx/CVE-2026-17284.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T00:14:43.547Z", "datePublished": "2026-11-07T04:32:36.159Z", - "dateUpdated": "2026-11-07T04:32:36.159Z" + "dateUpdated": "2026-11-13T14:33:40.887Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:33:30.405352Z", + "id": "CVE-2026-17284", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:33:40.887Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17290.json b/data/2026/17xxx/CVE-2026-17290.json index 72280f6f9e..1950a85f78 100644 --- a/data/2026/17xxx/CVE-2026-17290.json +++ b/data/2026/17xxx/CVE-2026-17290.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T00:31:09.929Z", "datePublished": "2026-11-07T04:32:42.506Z", - "dateUpdated": "2026-11-07T04:32:42.506Z" + "dateUpdated": "2026-11-13T14:43:04.184Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:42:50.082453Z", + "id": "CVE-2026-17290", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:43:04.184Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17293.json b/data/2026/17xxx/CVE-2026-17293.json index 70448f5648..6ca97f4584 100644 --- a/data/2026/17xxx/CVE-2026-17293.json +++ b/data/2026/17xxx/CVE-2026-17293.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T00:38:57.025Z", "datePublished": "2026-11-07T04:32:45.631Z", - "dateUpdated": "2026-11-07T04:32:45.631Z" + "dateUpdated": "2026-11-13T14:38:24.583Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:38:16.318196Z", + "id": "CVE-2026-17293", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:38:24.583Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17299.json b/data/2026/17xxx/CVE-2026-17299.json index 3cd6120bf9..a16aa9eb99 100644 --- a/data/2026/17xxx/CVE-2026-17299.json +++ b/data/2026/17xxx/CVE-2026-17299.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T00:54:34.942Z", "datePublished": "2026-11-07T04:32:51.868Z", - "dateUpdated": "2026-11-07T04:32:51.868Z" + "dateUpdated": "2026-11-13T14:37:24.646Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:37:16.786058Z", + "id": "CVE-2026-17299", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:37:24.646Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17301.json b/data/2026/17xxx/CVE-2026-17301.json index 32b3abba12..c3540fe36c 100644 --- a/data/2026/17xxx/CVE-2026-17301.json +++ b/data/2026/17xxx/CVE-2026-17301.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T00:59:34.617Z", "datePublished": "2026-11-07T04:32:52.887Z", - "dateUpdated": "2026-11-07T04:32:52.887Z" + "dateUpdated": "2026-11-13T14:54:26.379Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:54:15.999209Z", + "id": "CVE-2026-17301", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:54:26.379Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17326.json b/data/2026/17xxx/CVE-2026-17326.json index 5741bccbe7..5a0dab8dec 100644 --- a/data/2026/17xxx/CVE-2026-17326.json +++ b/data/2026/17xxx/CVE-2026-17326.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T02:07:20.349Z", "datePublished": "2026-11-07T04:33:18.823Z", - "dateUpdated": "2026-11-07T04:33:18.823Z" + "dateUpdated": "2026-11-13T14:50:10.540Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:50:00.946695Z", + "id": "CVE-2026-17326", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:50:10.540Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17356.json b/data/2026/17xxx/CVE-2026-17356.json index 96b55b1e88..d4a0a02534 100644 --- a/data/2026/17xxx/CVE-2026-17356.json +++ b/data/2026/17xxx/CVE-2026-17356.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T03:05:55.638Z", "datePublished": "2026-11-07T04:33:43.885Z", - "dateUpdated": "2026-11-07T04:33:43.885Z" + "dateUpdated": "2026-11-13T14:32:39.448Z" }, "containers": { "cna": { @@ -101,6 +101,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:32:30.666822Z", + "id": "CVE-2026-17356", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:32:39.448Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17390.json b/data/2026/17xxx/CVE-2026-17390.json index 620781e0ff..3245979ec2 100644 --- a/data/2026/17xxx/CVE-2026-17390.json +++ b/data/2026/17xxx/CVE-2026-17390.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T04:31:30.054Z", "datePublished": "2026-11-07T04:34:15.550Z", - "dateUpdated": "2026-11-07T04:34:15.550Z" + "dateUpdated": "2026-11-13T15:00:20.215Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T15:00:10.553047Z", + "id": "CVE-2026-17390", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T15:00:20.215Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17395.json b/data/2026/17xxx/CVE-2026-17395.json index b7194636f7..7632a15375 100644 --- a/data/2026/17xxx/CVE-2026-17395.json +++ b/data/2026/17xxx/CVE-2026-17395.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T04:43:40.425Z", "datePublished": "2026-11-07T04:34:19.647Z", - "dateUpdated": "2026-11-07T04:34:19.647Z" + "dateUpdated": "2026-11-13T14:51:19.148Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:51:10.892215Z", + "id": "CVE-2026-17395", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:51:19.148Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17407.json b/data/2026/17xxx/CVE-2026-17407.json index 550f10426b..e25a890d29 100644 --- a/data/2026/17xxx/CVE-2026-17407.json +++ b/data/2026/17xxx/CVE-2026-17407.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T05:09:57.374Z", "datePublished": "2026-11-07T04:34:31.881Z", - "dateUpdated": "2026-11-07T04:34:31.881Z" + "dateUpdated": "2026-11-13T14:39:49.137Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:39:40.657862Z", + "id": "CVE-2026-17407", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:39:49.137Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17410.json b/data/2026/17xxx/CVE-2026-17410.json index 2dae21f3cc..4ed0b5cfe8 100644 --- a/data/2026/17xxx/CVE-2026-17410.json +++ b/data/2026/17xxx/CVE-2026-17410.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T05:19:11.575Z", "datePublished": "2026-11-07T04:34:35.021Z", - "dateUpdated": "2026-11-07T04:34:35.021Z" + "dateUpdated": "2026-11-13T14:52:15.232Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:52:07.276315Z", + "id": "CVE-2026-17410", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:52:15.232Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/17xxx/CVE-2026-17411.json b/data/2026/17xxx/CVE-2026-17411.json index e66dfed454..ac8ab4a238 100644 --- a/data/2026/17xxx/CVE-2026-17411.json +++ b/data/2026/17xxx/CVE-2026-17411.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-07-25T05:21:58.880Z", "datePublished": "2026-11-07T04:34:36.082Z", - "dateUpdated": "2026-11-07T04:34:36.082Z" + "dateUpdated": "2026-11-13T15:01:16.286Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T15:01:08.941190Z", + "id": "CVE-2026-17411", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T15:01:16.286Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/19xxx/CVE-2026-19121.json b/data/2026/19xxx/CVE-2026-19121.json index d03cfe9b1e..f277237bb2 100644 --- a/data/2026/19xxx/CVE-2026-19121.json +++ b/data/2026/19xxx/CVE-2026-19121.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-08-06T15:41:31.318Z", "datePublished": "2026-11-07T04:34:41.297Z", - "dateUpdated": "2026-11-07T04:34:41.297Z" + "dateUpdated": "2026-11-13T14:23:43.208Z" }, "containers": { "cna": { @@ -101,6 +101,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:23:34.705753Z", + "id": "CVE-2026-19121", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:23:43.208Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/19xxx/CVE-2026-19122.json b/data/2026/19xxx/CVE-2026-19122.json index e686a180a5..6b4c4bb271 100644 --- a/data/2026/19xxx/CVE-2026-19122.json +++ b/data/2026/19xxx/CVE-2026-19122.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-08-06T15:44:07.905Z", "datePublished": "2026-11-07T04:34:42.809Z", - "dateUpdated": "2026-11-07T04:34:42.809Z" + "dateUpdated": "2026-11-13T14:21:50.819Z" }, "containers": { "cna": { @@ -101,6 +101,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:21:42.217966Z", + "id": "CVE-2026-19122", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:21:50.819Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/19xxx/CVE-2026-19129.json b/data/2026/19xxx/CVE-2026-19129.json index 25938ff53b..bf2bcc9999 100644 --- a/data/2026/19xxx/CVE-2026-19129.json +++ b/data/2026/19xxx/CVE-2026-19129.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-08-06T15:54:34.757Z", "datePublished": "2026-11-07T04:34:45.969Z", - "dateUpdated": "2026-11-07T04:34:45.969Z" + "dateUpdated": "2026-11-13T14:59:18.483Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ } ], "title": "Multiple Vulnerabilities in IBM API Connect" - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:59:10.791401Z", + "id": "CVE-2026-19129", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:59:18.483Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/1xxx/CVE-2026-1502.json b/data/2026/1xxx/CVE-2026-1502.json index 60fa519aaf..68bdbee591 100644 --- a/data/2026/1xxx/CVE-2026-1502.json +++ b/data/2026/1xxx/CVE-2026-1502.json @@ -8,7 +8,7 @@ "assignerShortName": "PSF", "dateReserved": "2026-01-27T19:10:37.711Z", "datePublished": "2026-04-10T17:54:44.121Z", - "dateUpdated": "2026-11-10T12:40:27.275Z" + "dateUpdated": "2026-11-13T14:40:31.978Z" }, "containers": { "cna": { @@ -242,7 +242,7 @@ "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-05-10T20:05:37.267Z" + "dateUpdated": "2026-11-13T14:40:31.978Z" } }, { diff --git a/data/2026/21xxx/CVE-2026-21407.json b/data/2026/21xxx/CVE-2026-21407.json index ac789f82df..2c39954660 100644 --- a/data/2026/21xxx/CVE-2026-21407.json +++ b/data/2026/21xxx/CVE-2026-21407.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-03-20T03:00:17.050Z", "datePublished": "2026-11-10T16:28:06.314Z", - "dateUpdated": "2026-11-10T16:28:06.314Z" + "dateUpdated": "2026-11-13T14:29:51.198Z" }, "containers": { "cna": { @@ -86,6 +86,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:18:55.464295Z", + "id": "CVE-2026-21407", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:29:51.198Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/28xxx/CVE-2026-28743.json b/data/2026/28xxx/CVE-2026-28743.json index 50bda4ce6a..e66112e53a 100644 --- a/data/2026/28xxx/CVE-2026-28743.json +++ b/data/2026/28xxx/CVE-2026-28743.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-04-11T03:00:25.895Z", "datePublished": "2026-11-10T16:28:19.156Z", - "dateUpdated": "2026-11-10T16:28:19.156Z" + "dateUpdated": "2026-11-13T14:29:44.272Z" }, "containers": { "cna": { @@ -86,6 +86,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:18:57.740989Z", + "id": "CVE-2026-28743", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:29:44.272Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/28xxx/CVE-2026-28765.json b/data/2026/28xxx/CVE-2026-28765.json index b16a9fa540..edd1453b49 100644 --- a/data/2026/28xxx/CVE-2026-28765.json +++ b/data/2026/28xxx/CVE-2026-28765.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-04-02T03:00:20.870Z", "datePublished": "2026-11-10T16:28:24.742Z", - "dateUpdated": "2026-11-10T16:28:24.742Z" + "dateUpdated": "2026-11-13T14:29:37.431Z" }, "containers": { "cna": { @@ -86,6 +86,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:18:59.992173Z", + "id": "CVE-2026-28765", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:29:37.431Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/32xxx/CVE-2026-32672.json b/data/2026/32xxx/CVE-2026-32672.json index 825c0b17fc..ddbf0c1939 100644 --- a/data/2026/32xxx/CVE-2026-32672.json +++ b/data/2026/32xxx/CVE-2026-32672.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-04-18T03:00:24.854Z", "datePublished": "2026-11-10T16:28:35.433Z", - "dateUpdated": "2026-11-10T16:28:35.433Z" + "dateUpdated": "2026-11-13T14:29:30.714Z" }, "containers": { "cna": { @@ -86,6 +86,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:19:02.783915Z", + "id": "CVE-2026-32672", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:29:30.714Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/33xxx/CVE-2026-33089.json b/data/2026/33xxx/CVE-2026-33089.json index ccab6ff137..d3106819d0 100644 --- a/data/2026/33xxx/CVE-2026-33089.json +++ b/data/2026/33xxx/CVE-2026-33089.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-04-18T03:00:24.888Z", "datePublished": "2026-11-10T16:28:39.218Z", - "dateUpdated": "2026-11-10T16:28:39.218Z" + "dateUpdated": "2026-11-13T14:29:23.688Z" }, "containers": { "cna": { @@ -86,6 +86,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:19:05.419516Z", + "id": "CVE-2026-33089", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:29:23.688Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/33xxx/CVE-2026-33270.json b/data/2026/33xxx/CVE-2026-33270.json index 8a1f927d09..f17d325af8 100644 --- a/data/2026/33xxx/CVE-2026-33270.json +++ b/data/2026/33xxx/CVE-2026-33270.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-04-11T03:00:25.938Z", "datePublished": "2026-11-10T16:28:45.105Z", - "dateUpdated": "2026-11-10T16:28:45.105Z" + "dateUpdated": "2026-11-13T14:29:16.806Z" }, "containers": { "cna": { @@ -86,6 +86,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:19:08.016609Z", + "id": "CVE-2026-33270", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:29:16.806Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/33xxx/CVE-2026-33279.json b/data/2026/33xxx/CVE-2026-33279.json index 8cd07b3292..89efdf6903 100644 --- a/data/2026/33xxx/CVE-2026-33279.json +++ b/data/2026/33xxx/CVE-2026-33279.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-04-02T03:00:20.832Z", "datePublished": "2026-11-10T16:28:51.008Z", - "dateUpdated": "2026-11-10T16:28:51.008Z" + "dateUpdated": "2026-11-13T14:29:09.874Z" }, "containers": { "cna": { @@ -86,6 +86,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:19:10.526749Z", + "id": "CVE-2026-33279", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:29:09.874Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/35xxx/CVE-2026-35060.json b/data/2026/35xxx/CVE-2026-35060.json index b4daac9525..cf5319b89a 100644 --- a/data/2026/35xxx/CVE-2026-35060.json +++ b/data/2026/35xxx/CVE-2026-35060.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-04-15T03:00:23.227Z", "datePublished": "2026-11-10T16:29:18.086Z", - "dateUpdated": "2026-11-10T16:29:18.086Z" + "dateUpdated": "2026-11-13T14:29:01.591Z" }, "containers": { "cna": { @@ -86,6 +86,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:19:12.729800Z", + "id": "CVE-2026-35060", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:29:01.591Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/35xxx/CVE-2026-35683.json b/data/2026/35xxx/CVE-2026-35683.json index 9c4896e461..e0b65b148a 100644 --- a/data/2026/35xxx/CVE-2026-35683.json +++ b/data/2026/35xxx/CVE-2026-35683.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-04-11T03:00:25.919Z", "datePublished": "2026-11-10T16:29:27.085Z", - "dateUpdated": "2026-11-10T16:29:27.085Z" + "dateUpdated": "2026-11-13T14:28:54.549Z" }, "containers": { "cna": { @@ -86,6 +86,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:19:14.958636Z", + "id": "CVE-2026-35683", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:28:54.549Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/39xxx/CVE-2026-39456.json b/data/2026/39xxx/CVE-2026-39456.json index a9c1528380..aa185b06f4 100644 --- a/data/2026/39xxx/CVE-2026-39456.json +++ b/data/2026/39xxx/CVE-2026-39456.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-04-11T03:00:25.876Z", "datePublished": "2026-11-10T16:29:33.086Z", - "dateUpdated": "2026-11-10T16:29:33.086Z" + "dateUpdated": "2026-11-13T14:28:47.566Z" }, "containers": { "cna": { @@ -86,6 +86,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:19:17.237296Z", + "id": "CVE-2026-39456", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:28:47.566Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/40xxx/CVE-2026-40065.json b/data/2026/40xxx/CVE-2026-40065.json index 6b98928fec..a039bd187a 100644 --- a/data/2026/40xxx/CVE-2026-40065.json +++ b/data/2026/40xxx/CVE-2026-40065.json @@ -8,7 +8,7 @@ "assignerShortName": "intel", "dateReserved": "2026-04-18T03:00:24.836Z", "datePublished": "2026-11-10T16:29:42.242Z", - "dateUpdated": "2026-11-10T16:29:42.242Z" + "dateUpdated": "2026-11-13T14:28:40.111Z" }, "containers": { "cna": { @@ -86,6 +86,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:26:54.894798Z", + "id": "CVE-2026-40065", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:28:40.111Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/55xxx/CVE-2026-55311.json b/data/2026/55xxx/CVE-2026-55311.json index 22780d4ea9..f20c7a8fda 100644 --- a/data/2026/55xxx/CVE-2026-55311.json +++ b/data/2026/55xxx/CVE-2026-55311.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-16T17:48:40.352Z", "datePublished": "2026-11-10T19:20:18.443Z", - "dateUpdated": "2026-11-13T05:00:35.603Z" + "dateUpdated": "2026-11-13T14:41:59.487Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.4, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:00:36.390388Z", + "id": "CVE-2026-55311", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-55311" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:00:35.603Z" + "dateUpdated": "2026-11-13T14:41:59.487Z" } } ] diff --git a/data/2026/55xxx/CVE-2026-55319.json b/data/2026/55xxx/CVE-2026-55319.json index e48d550eaa..0f2f340442 100644 --- a/data/2026/55xxx/CVE-2026-55319.json +++ b/data/2026/55xxx/CVE-2026-55319.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-16T17:49:57.525Z", "datePublished": "2026-11-10T19:20:21.303Z", - "dateUpdated": "2026-11-13T05:02:16.859Z" + "dateUpdated": "2026-11-13T14:41:28.743Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-119", + "lang": "en", + "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.4, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:02:17.659604Z", + "id": "CVE-2026-55319", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-55319" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:02:16.859Z" + "dateUpdated": "2026-11-13T14:41:28.743Z" } } ] diff --git a/data/2026/55xxx/CVE-2026-55360.json b/data/2026/55xxx/CVE-2026-55360.json index c6af5a19a0..16860165e5 100644 --- a/data/2026/55xxx/CVE-2026-55360.json +++ b/data/2026/55xxx/CVE-2026-55360.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-16T17:55:41.478Z", "datePublished": "2026-11-10T19:20:27.049Z", - "dateUpdated": "2026-11-13T05:02:26.042Z" + "dateUpdated": "2026-11-13T14:39:21.215Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.4, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:02:26.804692Z", + "id": "CVE-2026-55360", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-55360" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:02:26.042Z" + "dateUpdated": "2026-11-13T14:39:21.215Z" } } ] diff --git a/data/2026/55xxx/CVE-2026-55362.json b/data/2026/55xxx/CVE-2026-55362.json index dd8ba7b3a2..c153ee6dcf 100644 --- a/data/2026/55xxx/CVE-2026-55362.json +++ b/data/2026/55xxx/CVE-2026-55362.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-16T17:55:41.478Z", "datePublished": "2026-11-10T19:20:28.029Z", - "dateUpdated": "2026-11-13T05:02:35.537Z" + "dateUpdated": "2026-11-13T14:38:29.587Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-119", + "lang": "en", + "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 9.8, + "attackVector": "NETWORK", + "baseSeverity": "CRITICAL", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:02:36.292588Z", + "id": "CVE-2026-55362", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-55362" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:02:35.537Z" + "dateUpdated": "2026-11-13T14:38:29.587Z" } } ] diff --git a/data/2026/56xxx/CVE-2026-56898.json b/data/2026/56xxx/CVE-2026-56898.json index 32d27d055d..1935c2b3f3 100644 --- a/data/2026/56xxx/CVE-2026-56898.json +++ b/data/2026/56xxx/CVE-2026-56898.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-23T16:07:18.916Z", "datePublished": "2026-11-10T19:20:31.168Z", - "dateUpdated": "2026-11-13T05:02:27.140Z" + "dateUpdated": "2026-11-13T14:38:02.388Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-327", + "lang": "en", + "description": "CWE-327 Use of a Broken or Risky Cryptographic Algorithm" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.4, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:02:27.896571Z", + "id": "CVE-2026-56898", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-56898" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:02:27.140Z" + "dateUpdated": "2026-11-13T14:38:02.388Z" } } ] diff --git a/data/2026/56xxx/CVE-2026-56909.json b/data/2026/56xxx/CVE-2026-56909.json index 1d9c1039db..1e1bd7d38c 100644 --- a/data/2026/56xxx/CVE-2026-56909.json +++ b/data/2026/56xxx/CVE-2026-56909.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-23T16:08:36.835Z", "datePublished": "2026-11-10T19:20:33.139Z", - "dateUpdated": "2026-11-13T05:02:28.215Z" + "dateUpdated": "2026-11-13T14:36:20.837Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-284", + "lang": "en", + "description": "CWE-284 Improper Access Control" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 6.7, + "attackVector": "LOCAL", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "HIGH", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:02:29.010725Z", + "id": "CVE-2026-56909", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-56909" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:02:28.215Z" + "dateUpdated": "2026-11-13T14:36:20.837Z" } } ] diff --git a/data/2026/56xxx/CVE-2026-56912.json b/data/2026/56xxx/CVE-2026-56912.json index 742907f79e..daecfc5161 100644 --- a/data/2026/56xxx/CVE-2026-56912.json +++ b/data/2026/56xxx/CVE-2026-56912.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-23T16:08:36.835Z", "datePublished": "2026-11-10T19:20:36.044Z", - "dateUpdated": "2026-11-13T05:02:21.443Z" + "dateUpdated": "2026-11-13T14:35:30.923Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7.8, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "LOW", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:02:22.208422Z", + "id": "CVE-2026-56912", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-56912" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:02:21.443Z" + "dateUpdated": "2026-11-13T14:35:30.923Z" } } ] diff --git a/data/2026/56xxx/CVE-2026-56916.json b/data/2026/56xxx/CVE-2026-56916.json index 1a16b2ccdb..128df8b091 100644 --- a/data/2026/56xxx/CVE-2026-56916.json +++ b/data/2026/56xxx/CVE-2026-56916.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-23T16:08:36.835Z", "datePublished": "2026-11-10T19:20:37.009Z", - "dateUpdated": "2026-11-10T19:20:37.009Z" + "dateUpdated": "2026-11-13T14:53:35.272Z" }, "containers": { "cna": { @@ -54,6 +54,68 @@ "x_generator": { "engine": "cvelib 1.7.1" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-367", + "lang": "en", + "description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7.8, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "LOW", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:53:32.195635Z", + "id": "CVE-2026-56916", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:53:35.272Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/56xxx/CVE-2026-56919.json b/data/2026/56xxx/CVE-2026-56919.json index d9248cb5b9..01bfdd099b 100644 --- a/data/2026/56xxx/CVE-2026-56919.json +++ b/data/2026/56xxx/CVE-2026-56919.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-23T16:10:45.837Z", "datePublished": "2026-11-10T19:20:38.107Z", - "dateUpdated": "2026-11-13T05:01:07.764Z" + "dateUpdated": "2026-11-13T14:34:53.184Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-441", + "lang": "en", + "description": "CWE-441 Unintended Proxy or Intermediary ('Confused Deputy')" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.8, + "attackVector": "NETWORK", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "REQUIRED", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:01:08.543258Z", + "id": "CVE-2026-56919", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-56919" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:01:07.764Z" + "dateUpdated": "2026-11-13T14:34:53.184Z" } } ] diff --git a/data/2026/56xxx/CVE-2026-56929.json b/data/2026/56xxx/CVE-2026-56929.json index 18e85e7edb..5705fd2e5a 100644 --- a/data/2026/56xxx/CVE-2026-56929.json +++ b/data/2026/56xxx/CVE-2026-56929.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-23T16:12:13.078Z", "datePublished": "2026-11-10T19:20:40.032Z", - "dateUpdated": "2026-11-13T05:01:10.004Z" + "dateUpdated": "2026-11-13T14:49:51.734Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7.8, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "LOW", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:01:10.791921Z", + "id": "CVE-2026-56929", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-56929" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:01:10.004Z" + "dateUpdated": "2026-11-13T14:49:51.734Z" } } ] diff --git a/data/2026/56xxx/CVE-2026-56934.json b/data/2026/56xxx/CVE-2026-56934.json index 59b94887a1..aaf219e435 100644 --- a/data/2026/56xxx/CVE-2026-56934.json +++ b/data/2026/56xxx/CVE-2026-56934.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-23T16:12:13.079Z", "datePublished": "2026-11-10T19:20:44.878Z", - "dateUpdated": "2026-11-13T05:01:13.439Z" + "dateUpdated": "2026-11-13T14:31:20.466Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7.8, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "LOW", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:01:14.236051Z", + "id": "CVE-2026-56934", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-56934" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:01:13.439Z" + "dateUpdated": "2026-11-13T14:31:20.466Z" } } ] diff --git a/data/2026/56xxx/CVE-2026-56971.json b/data/2026/56xxx/CVE-2026-56971.json index 4ff651b23d..25cc6a0278 100644 --- a/data/2026/56xxx/CVE-2026-56971.json +++ b/data/2026/56xxx/CVE-2026-56971.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-23T16:20:45.087Z", "datePublished": "2026-11-10T19:20:57.614Z", - "dateUpdated": "2026-11-13T05:00:48.403Z" + "dateUpdated": "2026-11-13T14:49:06.770Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-415", + "lang": "en", + "description": "CWE-415 Double Free" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 9.8, + "attackVector": "NETWORK", + "baseSeverity": "CRITICAL", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:00:49.168374Z", + "id": "CVE-2026-56971", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-56971" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:00:48.403Z" + "dateUpdated": "2026-11-13T14:49:06.770Z" } } ] diff --git a/data/2026/57xxx/CVE-2026-57004.json b/data/2026/57xxx/CVE-2026-57004.json index e349cd1535..1aa69269b8 100644 --- a/data/2026/57xxx/CVE-2026-57004.json +++ b/data/2026/57xxx/CVE-2026-57004.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-23T16:25:16.340Z", "datePublished": "2026-11-10T19:21:00.495Z", - "dateUpdated": "2026-11-13T05:01:15.742Z" + "dateUpdated": "2026-11-13T14:30:46.022Z" }, "containers": { "cna": { @@ -57,13 +57,47 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-787", + "lang": "en", + "description": "CWE-787 Out-of-bounds Write" + }, + { + "type": "CWE", + "cweId": "CWE-119", + "lang": "en", + "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.4, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:01:16.505723Z", + "id": "CVE-2026-57004", "options": [ { "Exploitation": "none" @@ -76,16 +110,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-57004" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:01:15.742Z" + "dateUpdated": "2026-11-13T14:30:46.022Z" } } ] diff --git a/data/2026/57xxx/CVE-2026-57009.json b/data/2026/57xxx/CVE-2026-57009.json index ea3eb3913c..99ad863e0c 100644 --- a/data/2026/57xxx/CVE-2026-57009.json +++ b/data/2026/57xxx/CVE-2026-57009.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-23T16:26:29.783Z", "datePublished": "2026-11-10T19:21:02.406Z", - "dateUpdated": "2026-11-13T05:01:17.980Z" + "dateUpdated": "2026-11-13T14:48:36.801Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.4, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:01:18.861881Z", + "id": "CVE-2026-57009", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-57009" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:01:17.980Z" + "dateUpdated": "2026-11-13T14:48:36.801Z" } } ] diff --git a/data/2026/57xxx/CVE-2026-57036.json b/data/2026/57xxx/CVE-2026-57036.json index 77a1fa781a..3e950ec438 100644 --- a/data/2026/57xxx/CVE-2026-57036.json +++ b/data/2026/57xxx/CVE-2026-57036.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-23T16:28:17.723Z", "datePublished": "2026-11-10T19:21:05.264Z", - "dateUpdated": "2026-11-13T05:00:42.446Z" + "dateUpdated": "2026-11-13T14:48:06.954Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.4, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:00:43.289301Z", + "id": "CVE-2026-57036", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-57036" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:00:42.446Z" + "dateUpdated": "2026-11-13T14:48:06.954Z" } } ] diff --git a/data/2026/57xxx/CVE-2026-57047.json b/data/2026/57xxx/CVE-2026-57047.json index af0a8656f8..e44f5606dc 100644 --- a/data/2026/57xxx/CVE-2026-57047.json +++ b/data/2026/57xxx/CVE-2026-57047.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-06-23T16:29:58.946Z", "datePublished": "2026-11-10T19:21:08.133Z", - "dateUpdated": "2026-11-13T05:02:20.363Z" + "dateUpdated": "2026-11-13T14:47:38.950Z" }, "containers": { "cna": { @@ -57,13 +57,47 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-787", + "lang": "en", + "description": "CWE-787 Out-of-bounds Write" + }, + { + "type": "CWE", + "cweId": "CWE-119", + "lang": "en", + "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 9.8, + "attackVector": "NETWORK", + "baseSeverity": "CRITICAL", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:02:21.124818Z", + "id": "CVE-2026-57047", "options": [ { "Exploitation": "none" @@ -76,16 +110,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-57047" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:02:20.363Z" + "dateUpdated": "2026-11-13T14:47:38.950Z" } } ] diff --git a/data/2026/58xxx/CVE-2026-58681.json b/data/2026/58xxx/CVE-2026-58681.json index 18af36ad9b..0b6b32edf5 100644 --- a/data/2026/58xxx/CVE-2026-58681.json +++ b/data/2026/58xxx/CVE-2026-58681.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-02T05:34:02.657Z", "datePublished": "2026-11-10T19:21:11.995Z", - "dateUpdated": "2026-11-13T05:02:22.566Z" + "dateUpdated": "2026-11-13T14:47:08.725Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-190", + "lang": "en", + "description": "CWE-190 Integer Overflow or Wraparound" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 9.8, + "attackVector": "NETWORK", + "baseSeverity": "CRITICAL", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:02:23.463896Z", + "id": "CVE-2026-58681", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-58681" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:02:22.566Z" + "dateUpdated": "2026-11-13T14:47:08.725Z" } } ] diff --git a/data/2026/58xxx/CVE-2026-58684.json b/data/2026/58xxx/CVE-2026-58684.json index 3fdcac564b..c011a86ea5 100644 --- a/data/2026/58xxx/CVE-2026-58684.json +++ b/data/2026/58xxx/CVE-2026-58684.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-02T05:35:39.176Z", "datePublished": "2026-11-10T19:21:12.954Z", - "dateUpdated": "2026-11-13T05:00:44.743Z" + "dateUpdated": "2026-11-13T14:46:38.479Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.4, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:00:45.494473Z", + "id": "CVE-2026-58684", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-58684" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:00:44.743Z" + "dateUpdated": "2026-11-13T14:46:38.479Z" } } ] diff --git a/data/2026/58xxx/CVE-2026-58722.json b/data/2026/58xxx/CVE-2026-58722.json index df69c09086..3ca90d0939 100644 --- a/data/2026/58xxx/CVE-2026-58722.json +++ b/data/2026/58xxx/CVE-2026-58722.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-02T05:39:38.720Z", "datePublished": "2026-11-10T19:21:19.907Z", - "dateUpdated": "2026-11-13T05:01:21.425Z" + "dateUpdated": "2026-11-13T14:46:09.611Z" }, "containers": { "cna": { @@ -57,13 +57,47 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-122", + "lang": "en", + "description": "CWE-122 Heap-based Buffer Overflow" + }, + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 9.8, + "attackVector": "NETWORK", + "baseSeverity": "CRITICAL", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:01:22.242244Z", + "id": "CVE-2026-58722", "options": [ { "Exploitation": "none" @@ -76,16 +110,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-58722" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:01:21.425Z" + "dateUpdated": "2026-11-13T14:46:09.611Z" } } ] diff --git a/data/2026/58xxx/CVE-2026-58752.json b/data/2026/58xxx/CVE-2026-58752.json index 7efe72bca6..f67d1c0a0c 100644 --- a/data/2026/58xxx/CVE-2026-58752.json +++ b/data/2026/58xxx/CVE-2026-58752.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-02T05:43:30.494Z", "datePublished": "2026-11-10T19:21:23.747Z", - "dateUpdated": "2026-11-10T19:21:23.747Z" + "dateUpdated": "2026-11-13T14:59:25.030Z" }, "containers": { "cna": { @@ -54,6 +54,68 @@ "x_generator": { "engine": "cvelib 1.7.1" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-20", + "lang": "en", + "description": "CWE-20 Improper Input Validation" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 6.2, + "attackVector": "LOCAL", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "NONE" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:59:20.562679Z", + "id": "CVE-2026-58752", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:59:25.030Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/58xxx/CVE-2026-58796.json b/data/2026/58xxx/CVE-2026-58796.json index 3734725008..d7d5996940 100644 --- a/data/2026/58xxx/CVE-2026-58796.json +++ b/data/2026/58xxx/CVE-2026-58796.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-02T05:51:13.096Z", "datePublished": "2026-11-10T19:21:40.076Z", - "dateUpdated": "2026-11-13T05:02:09.881Z" + "dateUpdated": "2026-11-13T14:45:35.998Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-119", + "lang": "en", + "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.4, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:02:10.730260Z", + "id": "CVE-2026-58796", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-58796" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:02:09.881Z" + "dateUpdated": "2026-11-13T14:45:35.998Z" } } ] diff --git a/data/2026/58xxx/CVE-2026-58799.json b/data/2026/58xxx/CVE-2026-58799.json index e33f2d6cd2..dbf60cea3b 100644 --- a/data/2026/58xxx/CVE-2026-58799.json +++ b/data/2026/58xxx/CVE-2026-58799.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-02T05:51:13.097Z", "datePublished": "2026-11-10T19:21:42.956Z", - "dateUpdated": "2026-11-13T05:02:23.801Z" + "dateUpdated": "2026-11-13T14:45:08.183Z" }, "containers": { "cna": { @@ -57,13 +57,47 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-787", + "lang": "en", + "description": "CWE-787 Out-of-bounds Write" + }, + { + "type": "CWE", + "cweId": "CWE-119", + "lang": "en", + "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 9.8, + "attackVector": "NETWORK", + "baseSeverity": "CRITICAL", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:02:24.562212Z", + "id": "CVE-2026-58799", "options": [ { "Exploitation": "none" @@ -76,16 +110,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-58799" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:02:23.801Z" + "dateUpdated": "2026-11-13T14:45:08.183Z" } } ] diff --git a/data/2026/58xxx/CVE-2026-58808.json b/data/2026/58xxx/CVE-2026-58808.json index 00477e2069..8eaf2cb071 100644 --- a/data/2026/58xxx/CVE-2026-58808.json +++ b/data/2026/58xxx/CVE-2026-58808.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-02T05:52:23.114Z", "datePublished": "2026-11-10T19:21:50.655Z", - "dateUpdated": "2026-11-10T19:21:50.655Z" + "dateUpdated": "2026-11-13T15:18:50.036Z" }, "containers": { "cna": { @@ -54,6 +54,68 @@ "x_generator": { "engine": "cvelib 1.7.1" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-863", + "lang": "en", + "description": "CWE-863 Incorrect Authorization" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 2.3, + "attackVector": "LOCAL", + "baseSeverity": "LOW", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "HIGH", + "confidentialityImpact": "LOW" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T15:18:47.302212Z", + "id": "CVE-2026-58808", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T15:18:50.036Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/58xxx/CVE-2026-58810.json b/data/2026/58xxx/CVE-2026-58810.json index c586187174..af46a03cd8 100644 --- a/data/2026/58xxx/CVE-2026-58810.json +++ b/data/2026/58xxx/CVE-2026-58810.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-02T05:52:23.114Z", "datePublished": "2026-11-10T19:21:52.571Z", - "dateUpdated": "2026-11-10T19:21:52.571Z" + "dateUpdated": "2026-11-13T15:02:52.147Z" }, "containers": { "cna": { @@ -54,6 +54,68 @@ "x_generator": { "engine": "cvelib 1.7.1" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-457", + "lang": "en", + "description": "CWE-457 Use of Uninitialized Variable" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 2.3, + "attackVector": "LOCAL", + "baseSeverity": "LOW", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "HIGH", + "confidentialityImpact": "LOW" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T15:02:48.017926Z", + "id": "CVE-2026-58810", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T15:02:52.147Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/58xxx/CVE-2026-58811.json b/data/2026/58xxx/CVE-2026-58811.json index bc2430ad13..3bc9469389 100644 --- a/data/2026/58xxx/CVE-2026-58811.json +++ b/data/2026/58xxx/CVE-2026-58811.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-02T05:52:23.114Z", "datePublished": "2026-11-10T19:21:53.527Z", - "dateUpdated": "2026-11-10T19:21:53.527Z" + "dateUpdated": "2026-11-13T15:17:51.334Z" }, "containers": { "cna": { @@ -54,6 +54,68 @@ "x_generator": { "engine": "cvelib 1.7.1" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 4, + "attackVector": "LOCAL", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "NONE", + "confidentialityImpact": "LOW" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T15:17:47.014831Z", + "id": "CVE-2026-58811", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T15:17:51.334Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/58xxx/CVE-2026-58812.json b/data/2026/58xxx/CVE-2026-58812.json index 568db1fae0..1e3e96b5f1 100644 --- a/data/2026/58xxx/CVE-2026-58812.json +++ b/data/2026/58xxx/CVE-2026-58812.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-02T05:52:23.115Z", "datePublished": "2026-11-10T19:21:54.481Z", - "dateUpdated": "2026-11-10T19:21:54.481Z" + "dateUpdated": "2026-11-13T15:17:20.052Z" }, "containers": { "cna": { @@ -54,6 +54,68 @@ "x_generator": { "engine": "cvelib 1.7.1" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 3.3, + "attackVector": "LOCAL", + "baseSeverity": "LOW", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "LOW", + "confidentialityImpact": "LOW" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T15:17:16.394810Z", + "id": "CVE-2026-58812", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T15:17:20.052Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59082.json b/data/2026/59xxx/CVE-2026-59082.json index 33d1bf9dd8..26172b745a 100644 --- a/data/2026/59xxx/CVE-2026-59082.json +++ b/data/2026/59xxx/CVE-2026-59082.json @@ -8,7 +8,7 @@ "assignerShortName": "siemens", "dateReserved": "2026-07-02T09:52:48.830Z", "datePublished": "2026-11-10T11:30:35.304Z", - "dateUpdated": "2026-11-10T11:30:35.304Z" + "dateUpdated": "2026-11-13T15:09:20.429Z" }, "containers": { "cna": { @@ -99,6 +99,40 @@ "url": "https://cert-portal.siemens.com/productcert/html/ssa-979641.html" } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T15:08:17.448657Z", + "id": "CVE-2026-59082", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T15:09:20.429Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59574.json b/data/2026/59xxx/CVE-2026-59574.json index 53decb6dd3..b73371fe03 100644 --- a/data/2026/59xxx/CVE-2026-59574.json +++ b/data/2026/59xxx/CVE-2026-59574.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-06T06:21:53.235Z", "datePublished": "2026-11-10T19:21:57.345Z", - "dateUpdated": "2026-11-10T19:21:57.345Z" + "dateUpdated": "2026-11-13T15:02:13.287Z" }, "containers": { "cna": { @@ -54,6 +54,80 @@ "x_generator": { "engine": "cvelib 1.7.1" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-125", + "lang": "en", + "description": "CWE-125 Out-of-bounds Read" + }, + { + "type": "CWE", + "cweId": "CWE-787", + "lang": "en", + "description": "CWE-787 Out-of-bounds Write" + }, + { + "type": "CWE", + "cweId": "CWE-119", + "lang": "en", + "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 2.4, + "attackVector": "PHYSICAL", + "baseSeverity": "LOW", + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "NONE", + "confidentialityImpact": "LOW" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T15:02:10.748445Z", + "id": "CVE-2026-59574", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T15:02:13.287Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59575.json b/data/2026/59xxx/CVE-2026-59575.json index c035099cd1..5195a78515 100644 --- a/data/2026/59xxx/CVE-2026-59575.json +++ b/data/2026/59xxx/CVE-2026-59575.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-06T06:21:53.236Z", "datePublished": "2026-11-10T19:21:58.301Z", - "dateUpdated": "2026-11-10T19:21:58.301Z" + "dateUpdated": "2026-11-13T14:58:50.790Z" }, "containers": { "cna": { @@ -54,6 +54,68 @@ "x_generator": { "engine": "cvelib 1.7.1" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 6.2, + "attackVector": "LOCAL", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "NONE" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:58:46.819733Z", + "id": "CVE-2026-59575", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:58:50.790Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59579.json b/data/2026/59xxx/CVE-2026-59579.json index 831aaad91d..e125a952d5 100644 --- a/data/2026/59xxx/CVE-2026-59579.json +++ b/data/2026/59xxx/CVE-2026-59579.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-06T06:21:53.236Z", "datePublished": "2026-11-10T19:22:00.213Z", - "dateUpdated": "2026-11-10T19:22:00.213Z" + "dateUpdated": "2026-11-13T15:01:30.443Z" }, "containers": { "cna": { @@ -54,6 +54,68 @@ "x_generator": { "engine": "cvelib 1.7.1" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 4, + "attackVector": "LOCAL", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "NONE", + "confidentialityImpact": "LOW" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T15:01:24.286720Z", + "id": "CVE-2026-59579", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T15:01:30.443Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59580.json b/data/2026/59xxx/CVE-2026-59580.json index f49531c3e0..9704b13965 100644 --- a/data/2026/59xxx/CVE-2026-59580.json +++ b/data/2026/59xxx/CVE-2026-59580.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-06T06:21:53.236Z", "datePublished": "2026-11-10T19:22:01.166Z", - "dateUpdated": "2026-11-10T19:22:01.166Z" + "dateUpdated": "2026-11-13T15:00:59.205Z" }, "containers": { "cna": { @@ -54,6 +54,68 @@ "x_generator": { "engine": "cvelib 1.7.1" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 3.3, + "attackVector": "LOCAL", + "baseSeverity": "LOW", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "LOW", + "confidentialityImpact": "LOW" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T15:00:56.150594Z", + "id": "CVE-2026-59580", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T15:00:59.205Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59583.json b/data/2026/59xxx/CVE-2026-59583.json index ace20bbbd1..73576e3b31 100644 --- a/data/2026/59xxx/CVE-2026-59583.json +++ b/data/2026/59xxx/CVE-2026-59583.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-06T06:23:27.542Z", "datePublished": "2026-11-10T19:22:03.094Z", - "dateUpdated": "2026-11-10T19:22:03.094Z" + "dateUpdated": "2026-11-13T15:16:42.485Z" }, "containers": { "cna": { @@ -54,6 +54,68 @@ "x_generator": { "engine": "cvelib 1.7.1" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-20", + "lang": "en", + "description": "CWE-20 Improper Input Validation" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 2.7, + "attackVector": "NETWORK", + "baseSeverity": "LOW", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "HIGH", + "confidentialityImpact": "LOW" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T15:16:38.470035Z", + "id": "CVE-2026-59583", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T15:16:42.485Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59586.json b/data/2026/59xxx/CVE-2026-59586.json index 40ac9b256b..e427ae4fec 100644 --- a/data/2026/59xxx/CVE-2026-59586.json +++ b/data/2026/59xxx/CVE-2026-59586.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-06T06:23:27.542Z", "datePublished": "2026-11-10T19:22:05.040Z", - "dateUpdated": "2026-11-10T19:22:05.040Z" + "dateUpdated": "2026-11-13T15:00:25.993Z" }, "containers": { "cna": { @@ -54,6 +54,68 @@ "x_generator": { "engine": "cvelib 1.7.1" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-325", + "lang": "en", + "description": "CWE-325 Missing Cryptographic Step" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 4, + "attackVector": "LOCAL", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "NONE", + "confidentialityImpact": "LOW" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T15:00:22.012049Z", + "id": "CVE-2026-59586", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T15:00:25.993Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59597.json b/data/2026/59xxx/CVE-2026-59597.json index 6fdfee6fbd..f3279b7c73 100644 --- a/data/2026/59xxx/CVE-2026-59597.json +++ b/data/2026/59xxx/CVE-2026-59597.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-06T06:25:53.894Z", "datePublished": "2026-11-10T19:22:11.834Z", - "dateUpdated": "2026-11-13T05:02:12.200Z" + "dateUpdated": "2026-11-13T14:44:29.342Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.4, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:02:13.043597Z", + "id": "CVE-2026-59597", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-59597" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:02:12.200Z" + "dateUpdated": "2026-11-13T14:44:29.342Z" } } ] diff --git a/data/2026/59xxx/CVE-2026-59601.json b/data/2026/59xxx/CVE-2026-59601.json index bbc7233ffb..6b1ce4c6d1 100644 --- a/data/2026/59xxx/CVE-2026-59601.json +++ b/data/2026/59xxx/CVE-2026-59601.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-06T06:25:53.895Z", "datePublished": "2026-11-10T19:22:14.705Z", - "dateUpdated": "2026-11-10T19:22:14.705Z" + "dateUpdated": "2026-11-13T15:16:10.142Z" }, "containers": { "cna": { @@ -54,6 +54,74 @@ "x_generator": { "engine": "cvelib 1.7.1" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-122", + "lang": "en", + "description": "CWE-122 Heap-based Buffer Overflow" + }, + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 5.3, + "attackVector": "NETWORK", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "NONE", + "confidentialityImpact": "LOW" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T15:16:07.344635Z", + "id": "CVE-2026-59601", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T15:16:10.142Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59604.json b/data/2026/59xxx/CVE-2026-59604.json index 0737c00b8f..5b790e5a31 100644 --- a/data/2026/59xxx/CVE-2026-59604.json +++ b/data/2026/59xxx/CVE-2026-59604.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-06T06:27:19.075Z", "datePublished": "2026-11-10T19:22:16.628Z", - "dateUpdated": "2026-11-10T19:22:16.628Z" + "dateUpdated": "2026-11-13T14:58:19.702Z" }, "containers": { "cna": { @@ -54,6 +54,68 @@ "x_generator": { "engine": "cvelib 1.7.1" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 6.2, + "attackVector": "LOCAL", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "NONE" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:58:16.084393Z", + "id": "CVE-2026-59604", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:58:19.702Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59606.json b/data/2026/59xxx/CVE-2026-59606.json index e01d986131..f36e02c14a 100644 --- a/data/2026/59xxx/CVE-2026-59606.json +++ b/data/2026/59xxx/CVE-2026-59606.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-06T06:27:19.075Z", "datePublished": "2026-11-10T19:22:17.585Z", - "dateUpdated": "2026-11-13T05:02:31.853Z" + "dateUpdated": "2026-11-13T14:43:55.170Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-284", + "lang": "en", + "description": "CWE-284 Improper Access Control" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 6.7, + "attackVector": "LOCAL", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "HIGH", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:02:32.678698Z", + "id": "CVE-2026-59606", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-59606" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:02:31.853Z" + "dateUpdated": "2026-11-13T14:43:55.170Z" } } ] diff --git a/data/2026/59xxx/CVE-2026-59607.json b/data/2026/59xxx/CVE-2026-59607.json index 8722bb640c..519825d8cf 100644 --- a/data/2026/59xxx/CVE-2026-59607.json +++ b/data/2026/59xxx/CVE-2026-59607.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-06T06:27:19.075Z", "datePublished": "2026-11-10T19:22:18.533Z", - "dateUpdated": "2026-11-13T05:01:43.125Z" + "dateUpdated": "2026-11-13T14:43:10.286Z" }, "containers": { "cna": { @@ -57,13 +57,41 @@ }, "adp": [ { - "title": "CISA ADP Vulnrichment", + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-693", + "lang": "en", + "description": "CWE-693 Protection Mechanism Failure" + } + ] + } + ], "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7.8, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "LOW", + "confidentialityImpact": "HIGH" + } + }, { "other": { "type": "ssvc", "content": { - "timestamp": "2026-11-12T00:00:00+00:00", + "timestamp": "2026-11-13T05:01:43.905180Z", + "id": "CVE-2026-59607", "options": [ { "Exploitation": "none" @@ -76,16 +104,16 @@ } ], "role": "CISA Coordinator", - "version": "2.0.3", - "id": "CVE-2026-59607" + "version": "2.0.3" } } } ], + "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", - "dateUpdated": "2026-11-13T05:01:43.125Z" + "dateUpdated": "2026-11-13T14:43:10.286Z" } } ] diff --git a/data/2026/59xxx/CVE-2026-59614.json b/data/2026/59xxx/CVE-2026-59614.json index 85aa245ef8..7865afaca0 100644 --- a/data/2026/59xxx/CVE-2026-59614.json +++ b/data/2026/59xxx/CVE-2026-59614.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-06T06:28:31.381Z", "datePublished": "2026-11-10T19:22:25.301Z", - "dateUpdated": "2026-11-10T19:22:25.301Z" + "dateUpdated": "2026-11-13T14:56:56.090Z" }, "containers": { "cna": { @@ -54,6 +54,40 @@ "x_generator": { "engine": "cvelib 1.7.1" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:56:51.906810Z", + "id": "CVE-2026-59614", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:56:56.090Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/59xxx/CVE-2026-59618.json b/data/2026/59xxx/CVE-2026-59618.json index 5832d732e4..e63c4b745b 100644 --- a/data/2026/59xxx/CVE-2026-59618.json +++ b/data/2026/59xxx/CVE-2026-59618.json @@ -8,7 +8,7 @@ "assignerShortName": "Google_Devices", "dateReserved": "2026-07-06T06:29:35.785Z", "datePublished": "2026-11-10T19:22:27.235Z", - "dateUpdated": "2026-11-10T19:22:27.235Z" + "dateUpdated": "2026-11-13T14:54:24.309Z" }, "containers": { "cna": { @@ -54,6 +54,68 @@ "x_generator": { "engine": "cvelib 1.7.1" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-190", + "lang": "en", + "description": "CWE-190 Integer Overflow or Wraparound" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 4, + "attackVector": "LOCAL", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "NONE", + "privilegesRequired": "NONE", + "confidentialityImpact": "LOW" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:54:19.432885Z", + "id": "CVE-2026-59618", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:54:24.309Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/60xxx/CVE-2026-60035.json b/data/2026/60xxx/CVE-2026-60035.json index 1e50085ba7..4b4b9a7e54 100644 --- a/data/2026/60xxx/CVE-2026-60035.json +++ b/data/2026/60xxx/CVE-2026-60035.json @@ -8,7 +8,7 @@ "assignerShortName": "CERTVDE", "dateReserved": "2026-07-08T08:31:07.978Z", "datePublished": "2026-11-10T08:35:06.319Z", - "dateUpdated": "2026-11-10T08:35:06.319Z" + "dateUpdated": "2026-11-13T15:02:19.956Z" }, "containers": { "cna": { @@ -249,6 +249,40 @@ "x_generator": { "engine": "Vulnogram 0.4.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T15:00:57.434582Z", + "id": "CVE-2026-60035", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T15:02:19.956Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/60xxx/CVE-2026-60040.json b/data/2026/60xxx/CVE-2026-60040.json index 4dd19a7d9d..ba1de3e0e9 100644 --- a/data/2026/60xxx/CVE-2026-60040.json +++ b/data/2026/60xxx/CVE-2026-60040.json @@ -8,7 +8,7 @@ "assignerShortName": "CERTVDE", "dateReserved": "2026-07-08T08:31:07.979Z", "datePublished": "2026-11-10T08:36:20.325Z", - "dateUpdated": "2026-11-10T08:36:20.325Z" + "dateUpdated": "2026-11-13T15:03:38.938Z" }, "containers": { "cna": { @@ -249,6 +249,40 @@ "x_generator": { "engine": "Vulnogram 0.4.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T15:03:25.333211Z", + "id": "CVE-2026-60040", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T15:03:38.938Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/60xxx/CVE-2026-60045.json b/data/2026/60xxx/CVE-2026-60045.json index 08a5a03c44..a2a86e62b5 100644 --- a/data/2026/60xxx/CVE-2026-60045.json +++ b/data/2026/60xxx/CVE-2026-60045.json @@ -8,7 +8,7 @@ "assignerShortName": "CERTVDE", "dateReserved": "2026-07-08T08:31:07.979Z", "datePublished": "2026-11-10T08:38:08.612Z", - "dateUpdated": "2026-11-10T08:38:08.612Z" + "dateUpdated": "2026-11-13T15:04:25.952Z" }, "containers": { "cna": { @@ -249,6 +249,40 @@ "x_generator": { "engine": "Vulnogram 0.4.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T15:04:05.878203Z", + "id": "CVE-2026-60045", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T15:04:25.952Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/66xxx/CVE-2026-66333.json b/data/2026/66xxx/CVE-2026-66333.json index cdd1506cbd..741471e0fd 100644 --- a/data/2026/66xxx/CVE-2026-66333.json +++ b/data/2026/66xxx/CVE-2026-66333.json @@ -8,7 +8,7 @@ "assignerShortName": "AMI", "dateReserved": "2026-07-24T21:31:28.218Z", "datePublished": "2026-11-10T16:22:00.305Z", - "dateUpdated": "2026-11-10T16:22:00.305Z" + "dateUpdated": "2026-11-13T14:30:16.380Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:18:48.607394Z", + "id": "CVE-2026-66333", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:30:16.380Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/66xxx/CVE-2026-66334.json b/data/2026/66xxx/CVE-2026-66334.json index ec16a34ada..2413a3f090 100644 --- a/data/2026/66xxx/CVE-2026-66334.json +++ b/data/2026/66xxx/CVE-2026-66334.json @@ -8,7 +8,7 @@ "assignerShortName": "AMI", "dateReserved": "2026-07-24T21:31:28.218Z", "datePublished": "2026-11-10T16:22:38.610Z", - "dateUpdated": "2026-11-10T16:22:38.610Z" + "dateUpdated": "2026-11-13T14:30:08.554Z" }, "containers": { "cna": { @@ -116,6 +116,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:18:50.898658Z", + "id": "CVE-2026-66334", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:30:08.554Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/66xxx/CVE-2026-66335.json b/data/2026/66xxx/CVE-2026-66335.json index 5ae3ca602d..eae6a4db09 100644 --- a/data/2026/66xxx/CVE-2026-66335.json +++ b/data/2026/66xxx/CVE-2026-66335.json @@ -8,7 +8,7 @@ "assignerShortName": "AMI", "dateReserved": "2026-07-24T21:31:28.218Z", "datePublished": "2026-11-10T16:23:12.686Z", - "dateUpdated": "2026-11-10T16:23:12.686Z" + "dateUpdated": "2026-11-13T14:29:58.195Z" }, "containers": { "cna": { @@ -102,6 +102,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-12T19:18:53.197614Z", + "id": "CVE-2026-66335", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:29:58.195Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/76xxx/CVE-2026-76844.json b/data/2026/76xxx/CVE-2026-76844.json index de00974cf1..4863fb26ec 100644 --- a/data/2026/76xxx/CVE-2026-76844.json +++ b/data/2026/76xxx/CVE-2026-76844.json @@ -8,21 +8,21 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-08-19T20:34:19.724Z", "datePublished": "2026-08-24T13:12:01.148Z", - "dateUpdated": "2026-10-01T11:03:59.221Z" + "dateUpdated": "2026-11-13T14:15:54.676Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", - "dateUpdated": "2026-10-01T11:03:59.221Z" + "dateUpdated": "2026-11-13T14:15:54.676Z" }, - "datePublic": "2026-09-02T00:00:00.000Z", - "title": "zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write", + "datePublic": "2026-08-20T00:00:00.000Z", + "title": "webpack-dev-middleware before 7.4.6 and 8.3.0 Path Traversal via Non-Slash-Terminated publicPath", "descriptions": [ { "lang": "en", - "value": "zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the caller's buffer. A later gz* write call then derives a position from the stale pointer and writes past a heap allocation; any write() failure reaches it, including EPIPE on a blocking descriptor, and in versions before 1.3.1.2 the failed write must be followed by a gzclearerr() call." + "value": "webpack-dev-middleware 5.3.4, 6.1.2 through 6.1.3, 7.1.0 before 7.4.6, and 8.0.0 before 8.3.0 contains a path traversal vulnerability in getFilenameFromUrl that bypasses the fix for CVE-2024-29180: a publicPath without a trailing slash is matched by string prefix, and the '..' guard runs before that prefix is stripped. Unauthenticated attackers can request a path such as /assets../secret to read files one directory above the output directory when the middleware serves from the physical filesystem through writeToDisk or a custom outputFileSystem." } ], "problemTypes": [ @@ -30,8 +30,8 @@ "descriptions": [ { "lang": "en", - "description": "Out-of-bounds Write", - "cweId": "CWE-787", + "cweId": "CWE-22", + "description": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "type": "CWE" } ] @@ -39,16 +39,46 @@ ], "affected": [ { - "vendor": "zlib", - "product": "zlib", + "vendor": "webpack", + "product": "webpack-dev-middleware", + "collectionURL": "https://www.npmjs.com/package/webpack-dev-middleware", + "packageName": "webpack-dev-middleware", + "packageURL": "pkg:npm/webpack-dev-middleware", "defaultStatus": "unaffected", - "packageURL": "pkg:github/madler/zlib", "versions": [ { - "version": "1.2.11", - "lessThanOrEqual": "1.3.2", + "version": "5.3.4", "status": "affected", - "versionType": "custom" + "versionType": "semver", + "lessThanOrEqual": "5.3.4" + }, + { + "version": "6.1.2", + "status": "affected", + "versionType": "semver", + "lessThanOrEqual": "6.1.3" + }, + { + "version": "7.1.0", + "status": "affected", + "versionType": "semver", + "lessThan": "7.4.6" + }, + { + "version": "7.4.6", + "status": "unaffected", + "versionType": "semver" + }, + { + "version": "8.0.0", + "status": "affected", + "versionType": "semver", + "lessThan": "8.3.0" + }, + { + "version": "8.3.0", + "status": "unaffected", + "versionType": "semver" } ] } @@ -62,9 +92,27 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*", - "versionStartIncluding": "1.2.11", - "versionEndIncluding": "1.3.2" + "criteria": "cpe:2.3:a:webpack.js:webpack-dev-middleware:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.3.4", + "versionEndIncluding": "5.3.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:webpack.js:webpack-dev-middleware:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1.2", + "versionEndIncluding": "6.1.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:webpack.js:webpack-dev-middleware:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.1.0", + "versionEndExcluding": "7.4.6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:webpack.js:webpack-dev-middleware:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.3.0" } ] } @@ -73,86 +121,109 @@ ], "metrics": [ { + "format": "CVSS", "cvssV4_0": { "version": "4.0", - "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N", "baseScore": 8.3, "baseSeverity": "HIGH", "attackVector": "NETWORK", - "attackComplexity": "HIGH", + "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", - "userInteraction": "NONE", - "vulnConfidentialityImpact": "NONE", - "vulnIntegrityImpact": "HIGH", - "vulnAvailabilityImpact": "HIGH", - "subConfidentialityImpact": "NONE", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE" } }, { + "format": "CVSS", "cvssV3_1": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "NETWORK", - "attackComplexity": "HIGH", + "attackComplexity": "LOW", "privilegesRequired": "NONE", - "userInteraction": "NONE", - "scope": "UNCHANGED", - "confidentialityImpact": "NONE", - "integrityImpact": "HIGH", - "availabilityImpact": "HIGH" + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" } } ], "references": [ { - "url": "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490", - "name": "Technical report and proof of concept", + "url": "https://github.com/webpack/webpack-dev-middleware", "tags": [ - "technical-description", - "exploit" + "product" ] }, { - "url": "https://github.com/madler/zlib/commit/df84af25dc1942490e1d1c899a07619152a46148", + "url": "https://github.com/webpack/webpack-dev-middleware/security/advisories/GHSA-g84c-rxfj-3j2c", + "name": "GitHub Security Advisory (GHSA-g84c-rxfj-3j2c)", + "tags": [ + "vendor-advisory" + ] + }, + { + "url": "https://github.com/webpack/webpack-dev-middleware/commit/13344e78b26d88fe9b7c8381a3860e248a52359b", "name": "Patch Commit", "tags": [ "patch" ] }, { - "url": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393", + "url": "https://github.com/webpack/webpack-dev-middleware/commit/cefccbac330c29052fc6dffe85fd292ea2ac782b", + "name": "Patch Commit", + "tags": [ + "patch" + ] + }, + { + "url": "https://github.com/webpack/webpack-dev-middleware/releases/tag/v8.3.0", + "name": "Release Notes", + "tags": [ + "release-notes" + ] + }, + { + "url": "https://github.com/webpack/webpack-dev-middleware/releases/tag/v7.4.6", + "name": "Release Notes", + "tags": [ + "release-notes" + ] + }, + { + "url": "https://github.com/webpack/webpack-dev-middleware/blob/v8.1.1/src/middleware.js", "tags": [ "technical-description" ] }, { - "url": "https://github.com/madler/zlib", + "url": "https://github.com/advisories/GHSA-wr3j-pwj9-hqq6", "tags": [ - "product" + "related" ] }, { - "name": "VulnCheck Advisory: zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate", + "name": "VulnCheck Advisory: webpack-dev-middleware Path Traversal via Offset Slice on a Non-Slash-Terminated publicPath", "tags": [ "third-party-advisory" ], - "url": "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate" + "url": "https://www.vulncheck.com/advisories/webpack-dev-middleware-path-traversal-via-offset-slice-on-a-non-slash-terminated-publicpath" } ], "credits": [ { "lang": "en", - "value": "Ali Firas (thesmartshadow)", - "type": "finder" - }, - { - "lang": "en", - "value": "Michael Mullins", + "value": "Muhammad Sobirov", "type": "finder" } ], diff --git a/data/2026/76xxx/CVE-2026-76877.json b/data/2026/76xxx/CVE-2026-76877.json index 3f65c30429..fc17cc7e2d 100644 --- a/data/2026/76xxx/CVE-2026-76877.json +++ b/data/2026/76xxx/CVE-2026-76877.json @@ -8,7 +8,7 @@ "assignerShortName": "Wordfence", "dateReserved": "2026-08-19T22:01:11.520Z", "datePublished": "2026-11-10T06:47:00.496Z", - "dateUpdated": "2026-11-11T14:52:59.092Z" + "dateUpdated": "2026-11-13T14:59:23.969Z" }, "containers": { "cna": { @@ -91,6 +91,40 @@ "value": "Disclosed" } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:58:15.838219Z", + "id": "CVE-2026-76877", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:59:23.969Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/82xxx/CVE-2026-82175.json b/data/2026/82xxx/CVE-2026-82175.json new file mode 100644 index 0000000000..382c1c4017 --- /dev/null +++ b/data/2026/82xxx/CVE-2026-82175.json @@ -0,0 +1,284 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-82175", + "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "state": "PUBLISHED", + "assignerShortName": "dell", + "dateReserved": "2026-08-28T07:04:31.457Z", + "datePublished": "2026-11-13T15:08:17.835Z", + "dateUpdated": "2026-11-13T15:08:17.835Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", + "shortName": "dell", + "dateUpdated": "2026-11-13T15:08:17.835Z" + }, + "datePublic": "2026-10-30T06:30:00.000Z", + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "cweId": "CWE-918", + "description": "CWE-918: Server-Side Request Forgery (SSRF)", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Dell", + "product": "PowerStore 500T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 3200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200Q", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 7000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9000T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9200T", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 1500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 5500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + }, + { + "vendor": "Dell", + "product": "PowerStore 9500", + "versions": [ + { + "status": "affected", + "version": "0", + "lessThan": "5.1.0.0-2798105 or later", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "Dell PowerStore contains a Server-Side Request Forgery (SSRF) vulnerability. A high-privileged attacker could exploit this vulnerability to reach internal network services from the appliance.", + "supportingMedia": [ + { + "type": "text/html", + "base64": false, + "value": "Dell PowerStore contains a Server-Side Request Forgery (SSRF) vulnerability. A high-privileged attacker could exploit this vulnerability to reach internal network services from the appliance." + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities", + "tags": [ + "vendor-advisory" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseSeverity": "LOW", + "baseScore": 3.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N" + } + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "x_generator": { + "engine": "Vulnogram 1.0.5" + } + } + } +} \ No newline at end of file diff --git a/data/2026/85xxx/CVE-2026-85091.json b/data/2026/85xxx/CVE-2026-85091.json index 2688033713..81c203790f 100644 --- a/data/2026/85xxx/CVE-2026-85091.json +++ b/data/2026/85xxx/CVE-2026-85091.json @@ -8,21 +8,21 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-09-02T23:53:05.582Z", "datePublished": "2026-09-03T01:04:44.460Z", - "dateUpdated": "2026-09-03T13:21:30.355Z" + "dateUpdated": "2026-11-13T14:15:55.362Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", - "dateUpdated": "2026-09-03T01:04:44.460Z" + "dateUpdated": "2026-11-13T14:15:55.362Z" }, "datePublic": "2026-09-02T00:00:00.000Z", - "title": "zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate", + "title": "zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write", "descriptions": [ { "lang": "en", - "value": "zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary." + "value": "zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the caller's buffer. A later gz* write call then derives a position from the stale pointer and writes past a heap allocation; any write() failure reaches it, including EPIPE on a blocking descriptor, and in versions before 1.3.1.2 the failed write must be followed by a gzclearerr() call." } ], "problemTypes": [ @@ -45,7 +45,7 @@ "packageURL": "pkg:github/madler/zlib", "versions": [ { - "version": "1.3.1.2", + "version": "1.2.11", "lessThanOrEqual": "1.3.2", "status": "affected", "versionType": "custom" @@ -63,7 +63,7 @@ { "vulnerable": true, "criteria": "cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*", - "versionStartIncluding": "1.3.1.2", + "versionStartIncluding": "1.2.11", "versionEndIncluding": "1.3.2" } ] @@ -117,6 +117,13 @@ "exploit" ] }, + { + "url": "https://github.com/madler/zlib/commit/df84af25dc1942490e1d1c899a07619152a46148", + "name": "Patch Commit", + "tags": [ + "patch" + ] + }, { "url": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393", "tags": [ @@ -142,6 +149,11 @@ "lang": "en", "value": "Ali Firas (thesmartshadow)", "type": "finder" + }, + { + "lang": "en", + "value": "Michael Mullins", + "type": "finder" } ], "x_generator": { diff --git a/data/2026/92xxx/CVE-2026-92439.json b/data/2026/92xxx/CVE-2026-92439.json index ec830b67c1..f57c12d8c4 100644 --- a/data/2026/92xxx/CVE-2026-92439.json +++ b/data/2026/92xxx/CVE-2026-92439.json @@ -8,7 +8,7 @@ "assignerShortName": "Kong", "dateReserved": "2026-09-16T10:24:50.014Z", "datePublished": "2026-11-10T21:36:59.579Z", - "dateUpdated": "2026-11-10T21:36:59.579Z" + "dateUpdated": "2026-11-13T14:32:24.427Z" }, "containers": { "cna": { @@ -168,6 +168,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:32:01.854693Z", + "id": "CVE-2026-92439", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:32:24.427Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/92xxx/CVE-2026-92441.json b/data/2026/92xxx/CVE-2026-92441.json index a78702d6b8..f4d31d826f 100644 --- a/data/2026/92xxx/CVE-2026-92441.json +++ b/data/2026/92xxx/CVE-2026-92441.json @@ -8,7 +8,7 @@ "assignerShortName": "Kong", "dateReserved": "2026-09-16T10:24:54.270Z", "datePublished": "2026-11-10T21:40:14.596Z", - "dateUpdated": "2026-11-10T21:40:14.596Z" + "dateUpdated": "2026-11-13T14:31:40.161Z" }, "containers": { "cna": { @@ -168,6 +168,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:31:26.298323Z", + "id": "CVE-2026-92441", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:31:40.161Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/92xxx/CVE-2026-92442.json b/data/2026/92xxx/CVE-2026-92442.json index d69162e811..eaca187481 100644 --- a/data/2026/92xxx/CVE-2026-92442.json +++ b/data/2026/92xxx/CVE-2026-92442.json @@ -8,7 +8,7 @@ "assignerShortName": "Kong", "dateReserved": "2026-09-16T10:24:55.906Z", "datePublished": "2026-11-10T21:26:47.098Z", - "dateUpdated": "2026-11-10T21:26:47.098Z" + "dateUpdated": "2026-11-13T14:34:09.203Z" }, "containers": { "cna": { @@ -168,6 +168,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:33:46.740282Z", + "id": "CVE-2026-92442", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:34:09.203Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/92xxx/CVE-2026-92545.json b/data/2026/92xxx/CVE-2026-92545.json index d985d72d6b..e6827e9b74 100644 --- a/data/2026/92xxx/CVE-2026-92545.json +++ b/data/2026/92xxx/CVE-2026-92545.json @@ -8,7 +8,7 @@ "assignerShortName": "Kong", "dateReserved": "2026-09-16T13:01:33.075Z", "datePublished": "2026-11-10T21:23:34.313Z", - "dateUpdated": "2026-11-10T21:23:34.313Z" + "dateUpdated": "2026-11-13T14:37:39.362Z" }, "containers": { "cna": { @@ -168,6 +168,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:37:03.824963Z", + "id": "CVE-2026-92545", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:37:39.362Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96437.json b/data/2026/96xxx/CVE-2026-96437.json index fc85c7e045..a1f4839e62 100644 --- a/data/2026/96xxx/CVE-2026-96437.json +++ b/data/2026/96xxx/CVE-2026-96437.json @@ -8,7 +8,7 @@ "assignerShortName": "Kong", "dateReserved": "2026-09-23T08:00:41.055Z", "datePublished": "2026-11-10T21:33:48.224Z", - "dateUpdated": "2026-11-10T21:33:48.224Z" + "dateUpdated": "2026-11-13T14:33:17.106Z" }, "containers": { "cna": { @@ -142,6 +142,40 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-13T14:32:42.622798Z", + "id": "CVE-2026-96437", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-13T14:33:17.106Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/99xxx/CVE-2026-99286.json b/data/2026/99xxx/CVE-2026-99286.json index 053b76a7c9..6f6b6b3990 100644 --- a/data/2026/99xxx/CVE-2026-99286.json +++ b/data/2026/99xxx/CVE-2026-99286.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.405Z", "datePublished": "2026-11-10T18:16:53.997Z", - "dateUpdated": "2026-11-10T21:05:24.916Z" + "dateUpdated": "2026-11-13T14:17:21.441Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-10T18:16:53.997Z" + "dateUpdated": "2026-11-13T14:17:21.441Z" }, "descriptions": [ { @@ -34,40 +34,89 @@ ], "versions": [ { - "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "version": "6cd611d2abdd8623a554e14145f82c1cb4e4467a", "lessThan": "ade3082dcdee17c5767069883936d64ff83f6c9f", "status": "affected", "versionType": "git" }, { - "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "version": "37d5a73170579b30e67cc8b19ec69715eea3a6b6", "lessThan": "a97aa838903d15f865d80809f5198ff459c6634a", "status": "affected", "versionType": "git" }, { - "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "version": "4867687b6ad28ab84bc0811d8f8f9972e769da02", "lessThan": "07aca7d25ce8578fedde49855983a01c537a782b", "status": "affected", "versionType": "git" }, { - "version": "0", + "version": "5fb756f1bbec7a3862dda5d79028bf656271804c", + "status": "affected", + "versionType": "git" + }, + { + "version": "4223b33be49ee09acb6f1d26beb4a36dd3b8d63a", + "status": "affected", + "versionType": "git" + }, + { + "version": "ab9cdf1291be551da999510b30216a2886074d7a", + "status": "affected", + "versionType": "git" + }, + { + "version": "36f858f228e3f955b9336af7f94634747c221518", + "status": "affected", + "versionType": "git" + }, + { + "version": "89e534265b62c94749639350200b10370564bb3a", + "status": "affected", + "versionType": "git" + }, + { + "version": "6.12.116", "lessThan": "6.12.117", "status": "affected", "versionType": "semver" }, { - "version": "0", + "version": "6.18.62", "lessThan": "6.18.63", "status": "affected", "versionType": "semver" }, { - "version": "0", + "version": "7.3.3", "lessThan": "7.3.4", "status": "affected", "versionType": "semver" + }, + { + "version": "5.10.274", + "lessThan": "5.11", + "status": "affected", + "versionType": "semver" + }, + { + "version": "5.15.225", + "lessThan": "5.16", + "status": "affected", + "versionType": "semver" + }, + { + "version": "6.1.192", + "lessThan": "6.2", + "status": "affected", + "versionType": "semver" + }, + { + "version": "6.6.162", + "lessThan": "6.7", + "status": "affected", + "versionType": "semver" } ] }, @@ -80,6 +129,16 @@ "drivers/net/xen-netback/xenbus.c" ], "versions": [ + { + "version": "7.4-rc2", + "status": "affected" + }, + { + "version": "0", + "lessThan": "7.4-rc2", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.12.117", "lessThanOrEqual": "6.12.*", @@ -111,17 +170,45 @@ { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.12.116", "versionEndExcluding": "6.12.117" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.18.62", "versionEndExcluding": "6.18.63" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.3.3", "versionEndExcluding": "7.3.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.4-rc2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.274" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.225" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1.192" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6.162" } ] } diff --git a/data/2026/99xxx/CVE-2026-99288.json b/data/2026/99xxx/CVE-2026-99288.json index a8cfc7540c..2e9a8dfb84 100644 --- a/data/2026/99xxx/CVE-2026-99288.json +++ b/data/2026/99xxx/CVE-2026-99288.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.405Z", "datePublished": "2026-11-10T18:19:08.557Z", - "dateUpdated": "2026-11-10T18:19:08.557Z" + "dateUpdated": "2026-11-13T14:17:22.151Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-10T18:19:08.557Z" + "dateUpdated": "2026-11-13T14:17:22.151Z" }, "descriptions": [ { @@ -54,6 +54,12 @@ "lessThan": "eb8a2d156f2c1d862fffdfd1b3432bfbcd939879", "status": "affected", "versionType": "git" + }, + { + "version": "079096f103faca2dd87342cca6f23d4b34da8871", + "lessThan": "4e2b3ef19e0e04adca38442f07dd6bc93c712bf1", + "status": "affected", + "versionType": "git" } ] }, @@ -97,6 +103,12 @@ "lessThanOrEqual": "7.3.*", "status": "unaffected", "versionType": "semver" + }, + { + "version": "7.4-rc2", + "lessThanOrEqual": "*", + "status": "unaffected", + "versionType": "original_commit_for_fix" } ] } @@ -125,6 +137,12 @@ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.4", "versionEndExcluding": "7.3.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.4", + "versionEndExcluding": "7.4-rc2" } ] } @@ -140,6 +158,9 @@ }, { "url": "https://git.kernel.org/stable/c/eb8a2d156f2c1d862fffdfd1b3432bfbcd939879" + }, + { + "url": "https://git.kernel.org/stable/c/4e2b3ef19e0e04adca38442f07dd6bc93c712bf1" } ], "title": "inet: reject unhashed sockets during established lookups", diff --git a/data/delta.json b/data/delta.json index 780742cdb6..9b4019b69e 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,146 +1,62 @@ { - "fetchTime": "2026-11-13T14:14:46.205Z", - "numberOfChanges": 23, + "fetchTime": "2026-11-13T15:19:10.090Z", + "numberOfChanges": 9, "new": [ { - "cveId": "CVE-2026-116411", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116411", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116411.json", - "dateUpdated": "2026-11-13T14:03:41.940Z" - }, - { - "cveId": "CVE-2026-128790", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128790", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128790.json", - "dateUpdated": "2026-11-13T14:12:17.843Z" - }, - { - "cveId": "CVE-2026-77706", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-77706", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/77xxx/CVE-2026-77706.json", - "dateUpdated": "2026-11-13T14:05:57.591Z" - }, - { - "cveId": "CVE-2026-82177", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82177", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82177.json", - "dateUpdated": "2026-11-13T14:13:13.256Z" - }, - { - "cveId": "CVE-2026-92241", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92241", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92241.json", - "dateUpdated": "2026-11-13T14:03:47.349Z" + "cveId": "CVE-2026-111545", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111545", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111545.json", + "dateUpdated": "2026-11-13T15:15:45.253Z" } ], "updated": [ { - "cveId": "CVE-2026-112318", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112318", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112318.json", - "dateUpdated": "2026-11-13T14:10:28.200Z" + "cveId": "CVE-2026-109904", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109904", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109904.json", + "dateUpdated": "2026-11-13T15:13:55.307Z" }, { - "cveId": "CVE-2026-123811", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123811", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123811.json", - "dateUpdated": "2026-11-13T14:13:56.947Z" + "cveId": "CVE-2026-125747", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125747", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125747.json", + "dateUpdated": "2026-11-13T15:14:30.723Z" }, { - "cveId": "CVE-2026-125214", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125214", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125214.json", - "dateUpdated": "2026-11-13T14:12:48.298Z" + "cveId": "CVE-2026-125751", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125751", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125751.json", + "dateUpdated": "2026-11-13T15:18:00.883Z" }, { - "cveId": "CVE-2026-126213", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126213", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126213.json", - "dateUpdated": "2026-11-13T14:08:31.246Z" + "cveId": "CVE-2026-58808", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58808", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58808.json", + "dateUpdated": "2026-11-13T15:18:50.036Z" }, { - "cveId": "CVE-2026-56938", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56938", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56938.json", - "dateUpdated": "2026-11-13T14:06:27.924Z" + "cveId": "CVE-2026-58811", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58811", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58811.json", + "dateUpdated": "2026-11-13T15:17:51.334Z" }, { - "cveId": "CVE-2026-56944", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56944", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56944.json", - "dateUpdated": "2026-11-13T14:08:07.470Z" + "cveId": "CVE-2026-58812", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58812", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58812.json", + "dateUpdated": "2026-11-13T15:17:20.052Z" }, { - "cveId": "CVE-2026-56969", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56969", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56969.json", - "dateUpdated": "2026-11-13T14:05:36.154Z" + "cveId": "CVE-2026-59583", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59583", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59583.json", + "dateUpdated": "2026-11-13T15:16:42.485Z" }, { - "cveId": "CVE-2026-57010", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57010", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57010.json", - "dateUpdated": "2026-11-13T14:12:16.289Z" - }, - { - "cveId": "CVE-2026-57048", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57048", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57048.json", - "dateUpdated": "2026-11-13T14:11:31.845Z" - }, - { - "cveId": "CVE-2026-58680", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58680", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58680.json", - "dateUpdated": "2026-11-13T14:11:06.752Z" - }, - { - "cveId": "CVE-2026-58736", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58736", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58736.json", - "dateUpdated": "2026-11-13T14:07:37.403Z" - }, - { - "cveId": "CVE-2026-58780", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58780", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58780.json", - "dateUpdated": "2026-11-13T14:10:19.874Z" - }, - { - "cveId": "CVE-2026-58787", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58787", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58787.json", - "dateUpdated": "2026-11-13T14:09:44.710Z" - }, - { - "cveId": "CVE-2026-58798", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58798", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58798.json", - "dateUpdated": "2026-11-13T14:08:57.207Z" - }, - { - "cveId": "CVE-2026-58800", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58800", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58800.json", - "dateUpdated": "2026-11-13T14:04:41.074Z" - }, - { - "cveId": "CVE-2026-59598", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59598", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59598.json", - "dateUpdated": "2026-11-13T14:02:54.173Z" - }, - { - "cveId": "CVE-2026-59609", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59609", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59609.json", - "dateUpdated": "2026-11-13T14:02:08.579Z" - }, - { - "cveId": "CVE-2026-91094", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-91094", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/91xxx/CVE-2026-91094.json", - "dateUpdated": "2026-11-13T14:14:35.366Z" + "cveId": "CVE-2026-59601", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59601", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59601.json", + "dateUpdated": "2026-11-13T15:16:10.142Z" } ], "error": [] diff --git a/data/deltaLog.json b/data/deltaLog.json index 1d500e8e5e..152c3bd3f0 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,1383 @@ [ + { + "fetchTime": "2026-11-13T15:19:10.090Z", + "numberOfChanges": 9, + "new": [ + { + "cveId": "CVE-2026-111545", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111545", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111545.json", + "dateUpdated": "2026-11-13T15:15:45.253Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-109904", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109904", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109904.json", + "dateUpdated": "2026-11-13T15:13:55.307Z" + }, + { + "cveId": "CVE-2026-125747", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125747", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125747.json", + "dateUpdated": "2026-11-13T15:14:30.723Z" + }, + { + "cveId": "CVE-2026-125751", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125751", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125751.json", + "dateUpdated": "2026-11-13T15:18:00.883Z" + }, + { + "cveId": "CVE-2026-58808", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58808", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58808.json", + "dateUpdated": "2026-11-13T15:18:50.036Z" + }, + { + "cveId": "CVE-2026-58811", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58811", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58811.json", + "dateUpdated": "2026-11-13T15:17:51.334Z" + }, + { + "cveId": "CVE-2026-58812", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58812", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58812.json", + "dateUpdated": "2026-11-13T15:17:20.052Z" + }, + { + "cveId": "CVE-2026-59583", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59583", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59583.json", + "dateUpdated": "2026-11-13T15:16:42.485Z" + }, + { + "cveId": "CVE-2026-59601", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59601", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59601.json", + "dateUpdated": "2026-11-13T15:16:10.142Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T15:13:26.851Z", + "numberOfChanges": 39, + "new": [ + { + "cveId": "CVE-2026-103769", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103769", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103769.json", + "dateUpdated": "2026-11-13T15:08:38.923Z" + }, + { + "cveId": "CVE-2026-119512", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119512", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119512.json", + "dateUpdated": "2026-11-13T15:08:41.154Z" + }, + { + "cveId": "CVE-2026-119517", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119517", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119517.json", + "dateUpdated": "2026-11-13T15:08:43.236Z" + }, + { + "cveId": "CVE-2026-120835", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120835", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120835.json", + "dateUpdated": "2026-11-13T15:08:40.812Z" + }, + { + "cveId": "CVE-2026-121776", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121776", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121776.json", + "dateUpdated": "2026-11-13T15:08:41.752Z" + }, + { + "cveId": "CVE-2026-124260", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124260", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124260.json", + "dateUpdated": "2026-11-13T15:08:41.519Z" + }, + { + "cveId": "CVE-2026-124265", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124265", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124265.json", + "dateUpdated": "2026-11-13T15:08:42.588Z" + }, + { + "cveId": "CVE-2026-124267", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124267", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124267.json", + "dateUpdated": "2026-11-13T15:08:42.065Z" + }, + { + "cveId": "CVE-2026-124272", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124272", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124272.json", + "dateUpdated": "2026-11-13T15:08:41.860Z" + }, + { + "cveId": "CVE-2026-124410", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124410", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124410.json", + "dateUpdated": "2026-11-13T15:08:42.902Z" + }, + { + "cveId": "CVE-2026-124414", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124414", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124414.json", + "dateUpdated": "2026-11-13T15:08:42.440Z" + }, + { + "cveId": "CVE-2026-124415", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124415", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124415.json", + "dateUpdated": "2026-11-13T15:08:43.121Z" + }, + { + "cveId": "CVE-2026-124418", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124418", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124418.json", + "dateUpdated": "2026-11-13T15:08:42.240Z" + }, + { + "cveId": "CVE-2026-124420", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124420", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124420.json", + "dateUpdated": "2026-11-13T15:08:41.418Z" + }, + { + "cveId": "CVE-2026-124965", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124965", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124965.json", + "dateUpdated": "2026-11-13T15:08:42.786Z" + }, + { + "cveId": "CVE-2026-124970", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124970", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124970.json", + "dateUpdated": "2026-11-13T15:08:40.764Z" + }, + { + "cveId": "CVE-2026-125432", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125432", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125432.json", + "dateUpdated": "2026-11-13T15:08:43.468Z" + }, + { + "cveId": "CVE-2026-125452", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125452", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125452.json", + "dateUpdated": "2026-11-13T15:08:38.883Z" + }, + { + "cveId": "CVE-2026-125783", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125783", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125783.json", + "dateUpdated": "2026-11-13T15:08:41.100Z" + }, + { + "cveId": "CVE-2026-125837", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125837", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125837.json", + "dateUpdated": "2026-11-13T15:08:39.612Z" + }, + { + "cveId": "CVE-2026-125851", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125851", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125851.json", + "dateUpdated": "2026-11-13T15:08:40.381Z" + }, + { + "cveId": "CVE-2026-125852", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125852", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125852.json", + "dateUpdated": "2026-11-13T15:08:39.232Z" + }, + { + "cveId": "CVE-2026-125853", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125853", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125853.json", + "dateUpdated": "2026-11-13T15:08:39.265Z" + }, + { + "cveId": "CVE-2026-125854", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125854", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125854.json", + "dateUpdated": "2026-11-13T15:08:39.982Z" + }, + { + "cveId": "CVE-2026-125855", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125855", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125855.json", + "dateUpdated": "2026-11-13T15:08:39.659Z" + }, + { + "cveId": "CVE-2026-125856", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125856", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125856.json", + "dateUpdated": "2026-11-13T15:08:40.002Z" + }, + { + "cveId": "CVE-2026-125858", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125858", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125858.json", + "dateUpdated": "2026-11-13T15:08:40.361Z" + }, + { + "cveId": "CVE-2026-129092", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129092", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129092.json", + "dateUpdated": "2026-11-13T15:11:13.522Z" + }, + { + "cveId": "CVE-2026-82175", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-82175", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/82xxx/CVE-2026-82175.json", + "dateUpdated": "2026-11-13T15:08:17.835Z" + } + ], + "updated": [ + { + "cveId": "CVE-2025-41725", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-41725", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/41xxx/CVE-2025-41725.json", + "dateUpdated": "2026-11-13T15:03:50.513Z" + }, + { + "cveId": "CVE-2026-109097", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109097", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109097.json", + "dateUpdated": "2026-11-13T15:11:52.928Z" + }, + { + "cveId": "CVE-2026-112306", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112306", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112306.json", + "dateUpdated": "2026-11-13T15:12:37.261Z" + }, + { + "cveId": "CVE-2026-125706", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125706", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125706.json", + "dateUpdated": "2026-11-13T15:07:01.064Z" + }, + { + "cveId": "CVE-2026-127119", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127119", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127119.json", + "dateUpdated": "2026-11-13T15:10:43.331Z" + }, + { + "cveId": "CVE-2026-58810", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58810", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58810.json", + "dateUpdated": "2026-11-13T15:02:52.147Z" + }, + { + "cveId": "CVE-2026-59082", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59082", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59082.json", + "dateUpdated": "2026-11-13T15:09:20.429Z" + }, + { + "cveId": "CVE-2026-60035", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60035", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60035.json", + "dateUpdated": "2026-11-13T15:02:19.956Z" + }, + { + "cveId": "CVE-2026-60040", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60040", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60040.json", + "dateUpdated": "2026-11-13T15:03:38.938Z" + }, + { + "cveId": "CVE-2026-60045", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60045", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60045.json", + "dateUpdated": "2026-11-13T15:04:25.952Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T15:02:19.561Z", + "numberOfChanges": 18, + "new": [ + { + "cveId": "CVE-2026-107522", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107522", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107522.json", + "dateUpdated": "2026-11-13T14:59:55.571Z" + }, + { + "cveId": "CVE-2026-109092", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109092", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109092.json", + "dateUpdated": "2026-11-13T15:00:03.444Z" + }, + { + "cveId": "CVE-2026-123975", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123975", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123975.json", + "dateUpdated": "2026-11-13T15:01:44.332Z" + }, + { + "cveId": "CVE-2026-128990", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128990", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128990.json", + "dateUpdated": "2026-11-13T15:01:43.598Z" + }, + { + "cveId": "CVE-2026-128991", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128991", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128991.json", + "dateUpdated": "2026-11-13T15:01:41.369Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-125086", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125086", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125086.json", + "dateUpdated": "2026-11-13T14:57:24.472Z" + }, + { + "cveId": "CVE-2026-17390", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17390", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17390.json", + "dateUpdated": "2026-11-13T15:00:20.215Z" + }, + { + "cveId": "CVE-2026-17411", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17411", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17411.json", + "dateUpdated": "2026-11-13T15:01:16.286Z" + }, + { + "cveId": "CVE-2026-19129", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19129", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19129.json", + "dateUpdated": "2026-11-13T14:59:18.483Z" + }, + { + "cveId": "CVE-2026-58752", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58752", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58752.json", + "dateUpdated": "2026-11-13T14:59:25.030Z" + }, + { + "cveId": "CVE-2026-59574", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59574", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59574.json", + "dateUpdated": "2026-11-13T15:02:13.287Z" + }, + { + "cveId": "CVE-2026-59575", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59575", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59575.json", + "dateUpdated": "2026-11-13T14:58:50.790Z" + }, + { + "cveId": "CVE-2026-59579", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59579", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59579.json", + "dateUpdated": "2026-11-13T15:01:30.443Z" + }, + { + "cveId": "CVE-2026-59580", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59580", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59580.json", + "dateUpdated": "2026-11-13T15:00:59.205Z" + }, + { + "cveId": "CVE-2026-59586", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59586", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59586.json", + "dateUpdated": "2026-11-13T15:00:25.993Z" + }, + { + "cveId": "CVE-2026-59604", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59604", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59604.json", + "dateUpdated": "2026-11-13T14:58:19.702Z" + }, + { + "cveId": "CVE-2026-59614", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59614", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59614.json", + "dateUpdated": "2026-11-13T14:56:56.090Z" + }, + { + "cveId": "CVE-2026-76877", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-76877", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76877.json", + "dateUpdated": "2026-11-13T14:59:23.969Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T14:56:19.230Z", + "numberOfChanges": 12, + "new": [], + "updated": [ + { + "cveId": "CVE-2026-114406", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114406", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114406.json", + "dateUpdated": "2026-11-13T14:55:05.860Z" + }, + { + "cveId": "CVE-2026-119102", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119102", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119102.json", + "dateUpdated": "2026-11-13T14:53:46.142Z" + }, + { + "cveId": "CVE-2026-125077", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125077", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125077.json", + "dateUpdated": "2026-11-13T14:56:04.386Z" + }, + { + "cveId": "CVE-2026-125394", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125394", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125394.json", + "dateUpdated": "2026-11-13T14:51:23.584Z" + }, + { + "cveId": "CVE-2026-125398", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125398", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125398.json", + "dateUpdated": "2026-11-13T14:52:58.810Z" + }, + { + "cveId": "CVE-2026-125406", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125406", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125406.json", + "dateUpdated": "2026-11-13T14:55:00.856Z" + }, + { + "cveId": "CVE-2026-16720", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16720", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16720.json", + "dateUpdated": "2026-11-13T14:53:20.336Z" + }, + { + "cveId": "CVE-2026-17301", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17301", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17301.json", + "dateUpdated": "2026-11-13T14:54:26.379Z" + }, + { + "cveId": "CVE-2026-17395", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17395", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17395.json", + "dateUpdated": "2026-11-13T14:51:19.148Z" + }, + { + "cveId": "CVE-2026-17410", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17410", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17410.json", + "dateUpdated": "2026-11-13T14:52:15.232Z" + }, + { + "cveId": "CVE-2026-56916", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56916", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56916.json", + "dateUpdated": "2026-11-13T14:53:35.272Z" + }, + { + "cveId": "CVE-2026-59618", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59618", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59618.json", + "dateUpdated": "2026-11-13T14:54:24.309Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T14:50:49.546Z", + "numberOfChanges": 20, + "new": [ + { + "cveId": "CVE-2026-107523", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107523", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107523.json", + "dateUpdated": "2026-11-13T14:48:13.772Z" + }, + { + "cveId": "CVE-2026-109445", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109445", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109445.json", + "dateUpdated": "2026-11-13T14:48:23.301Z" + }, + { + "cveId": "CVE-2026-125792", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125792", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125792.json", + "dateUpdated": "2026-11-13T14:45:47.454Z" + }, + { + "cveId": "CVE-2026-125794", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125794", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125794.json", + "dateUpdated": "2026-11-13T14:46:32.964Z" + }, + { + "cveId": "CVE-2026-125802", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125802", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125802.json", + "dateUpdated": "2026-11-13T14:49:06.755Z" + }, + { + "cveId": "CVE-2026-125825", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125825", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125825.json", + "dateUpdated": "2026-11-13T14:49:43.300Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-125390", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125390", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125390.json", + "dateUpdated": "2026-11-13T14:48:20.431Z" + }, + { + "cveId": "CVE-2026-125831", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125831", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125831.json", + "dateUpdated": "2026-11-13T14:45:08.045Z" + }, + { + "cveId": "CVE-2026-16716", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16716", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16716.json", + "dateUpdated": "2026-11-13T14:49:10.605Z" + }, + { + "cveId": "CVE-2026-17326", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17326", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17326.json", + "dateUpdated": "2026-11-13T14:50:10.540Z" + }, + { + "cveId": "CVE-2026-56929", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56929", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56929.json", + "dateUpdated": "2026-11-13T14:49:51.734Z" + }, + { + "cveId": "CVE-2026-56971", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56971", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56971.json", + "dateUpdated": "2026-11-13T14:49:06.770Z" + }, + { + "cveId": "CVE-2026-57009", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57009", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57009.json", + "dateUpdated": "2026-11-13T14:48:36.801Z" + }, + { + "cveId": "CVE-2026-57036", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57036", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57036.json", + "dateUpdated": "2026-11-13T14:48:06.954Z" + }, + { + "cveId": "CVE-2026-57047", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57047", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57047.json", + "dateUpdated": "2026-11-13T14:47:38.950Z" + }, + { + "cveId": "CVE-2026-58681", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58681", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58681.json", + "dateUpdated": "2026-11-13T14:47:08.725Z" + }, + { + "cveId": "CVE-2026-58684", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58684", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58684.json", + "dateUpdated": "2026-11-13T14:46:38.479Z" + }, + { + "cveId": "CVE-2026-58722", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58722", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58722.json", + "dateUpdated": "2026-11-13T14:46:09.611Z" + }, + { + "cveId": "CVE-2026-58796", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58796", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58796.json", + "dateUpdated": "2026-11-13T14:45:35.998Z" + }, + { + "cveId": "CVE-2026-58799", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-58799", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58799.json", + "dateUpdated": "2026-11-13T14:45:08.183Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T14:44:36.558Z", + "numberOfChanges": 24, + "new": [ + { + "cveId": "CVE-2026-111547", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111547", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111547.json", + "dateUpdated": "2026-11-13T14:40:14.978Z" + }, + { + "cveId": "CVE-2026-124409", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124409", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124409.json", + "dateUpdated": "2026-11-13T14:40:31.659Z" + }, + { + "cveId": "CVE-2026-124412", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124412", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124412.json", + "dateUpdated": "2026-11-13T14:41:28.379Z" + }, + { + "cveId": "CVE-2026-125440", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125440", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125440.json", + "dateUpdated": "2026-11-13T14:41:17.329Z" + }, + { + "cveId": "CVE-2026-125809", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125809", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125809.json", + "dateUpdated": "2026-11-13T14:42:22.792Z" + }, + { + "cveId": "CVE-2026-125810", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125810", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125810.json", + "dateUpdated": "2026-11-13T14:42:41.233Z" + }, + { + "cveId": "CVE-2026-125811", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125811", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125811.json", + "dateUpdated": "2026-11-13T14:43:08.685Z" + }, + { + "cveId": "CVE-2026-125821", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125821", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125821.json", + "dateUpdated": "2026-11-13T14:41:13.773Z" + }, + { + "cveId": "CVE-2026-125827", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125827", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125827.json", + "dateUpdated": "2026-11-13T14:43:36.205Z" + }, + { + "cveId": "CVE-2026-125831", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125831", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125831.json", + "dateUpdated": "2026-11-13T14:44:06.958Z" + }, + { + "cveId": "CVE-2026-125834", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125834", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125834.json", + "dateUpdated": "2026-11-13T14:44:28.214Z" + }, + { + "cveId": "CVE-2026-125835", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125835", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125835.json", + "dateUpdated": "2026-11-13T14:40:53.481Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-0191", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-0191", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0191.json", + "dateUpdated": "2026-11-13T14:42:28.969Z" + }, + { + "cveId": "CVE-2026-124002", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124002", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124002.json", + "dateUpdated": "2026-11-13T14:44:18.509Z" + }, + { + "cveId": "CVE-2026-16709", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16709", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16709.json", + "dateUpdated": "2026-11-13T14:41:56.794Z" + }, + { + "cveId": "CVE-2026-17290", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17290", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17290.json", + "dateUpdated": "2026-11-13T14:43:04.184Z" + }, + { + "cveId": "CVE-2026-17407", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17407", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17407.json", + "dateUpdated": "2026-11-13T14:39:49.137Z" + }, + { + "cveId": "CVE-2026-1502", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-1502", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/1xxx/CVE-2026-1502.json", + "dateUpdated": "2026-11-13T14:40:31.978Z" + }, + { + "cveId": "CVE-2026-55311", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55311", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55311.json", + "dateUpdated": "2026-11-13T14:41:59.487Z" + }, + { + "cveId": "CVE-2026-55319", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55319", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55319.json", + "dateUpdated": "2026-11-13T14:41:28.743Z" + }, + { + "cveId": "CVE-2026-55360", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55360", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55360.json", + "dateUpdated": "2026-11-13T14:39:21.215Z" + }, + { + "cveId": "CVE-2026-59597", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59597", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59597.json", + "dateUpdated": "2026-11-13T14:44:29.342Z" + }, + { + "cveId": "CVE-2026-59606", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59606", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59606.json", + "dateUpdated": "2026-11-13T14:43:55.170Z" + }, + { + "cveId": "CVE-2026-59607", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59607", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59607.json", + "dateUpdated": "2026-11-13T14:43:10.286Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T14:38:48.081Z", + "numberOfChanges": 33, + "new": [ + { + "cveId": "CVE-2026-118976", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118976", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118976.json", + "dateUpdated": "2026-11-13T14:33:21.126Z" + }, + { + "cveId": "CVE-2026-119102", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119102", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119102.json", + "dateUpdated": "2026-11-13T14:36:49.832Z" + }, + { + "cveId": "CVE-2026-125807", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125807", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125807.json", + "dateUpdated": "2026-11-13T14:38:08.621Z" + }, + { + "cveId": "CVE-2026-125808", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125808", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125808.json", + "dateUpdated": "2026-11-13T14:37:26.063Z" + }, + { + "cveId": "CVE-2026-125819", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125819", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125819.json", + "dateUpdated": "2026-11-13T14:37:43.070Z" + }, + { + "cveId": "CVE-2026-125824", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125824", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125824.json", + "dateUpdated": "2026-11-13T14:38:01.756Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-124003", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124003", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124003.json", + "dateUpdated": "2026-11-13T14:33:36.388Z" + }, + { + "cveId": "CVE-2026-124004", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124004", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124004.json", + "dateUpdated": "2026-11-13T14:33:54.784Z" + }, + { + "cveId": "CVE-2026-124005", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124005", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124005.json", + "dateUpdated": "2026-11-13T14:34:10.836Z" + }, + { + "cveId": "CVE-2026-124006", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124006", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124006.json", + "dateUpdated": "2026-11-13T14:34:42.790Z" + }, + { + "cveId": "CVE-2026-124007", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124007", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124007.json", + "dateUpdated": "2026-11-13T14:34:59.402Z" + }, + { + "cveId": "CVE-2026-124008", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124008", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124008.json", + "dateUpdated": "2026-11-13T14:35:18.051Z" + }, + { + "cveId": "CVE-2026-124009", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124009", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124009.json", + "dateUpdated": "2026-11-13T14:35:35.464Z" + }, + { + "cveId": "CVE-2026-124010", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124010", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124010.json", + "dateUpdated": "2026-11-13T14:35:53.821Z" + }, + { + "cveId": "CVE-2026-124011", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124011", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124011.json", + "dateUpdated": "2026-11-13T14:36:10.099Z" + }, + { + "cveId": "CVE-2026-124012", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124012", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124012.json", + "dateUpdated": "2026-11-13T14:36:28.267Z" + }, + { + "cveId": "CVE-2026-124013", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124013", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124013.json", + "dateUpdated": "2026-11-13T14:36:45.378Z" + }, + { + "cveId": "CVE-2026-124014", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124014", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124014.json", + "dateUpdated": "2026-11-13T14:37:05.009Z" + }, + { + "cveId": "CVE-2026-124015", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124015", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124015.json", + "dateUpdated": "2026-11-13T14:37:28.477Z" + }, + { + "cveId": "CVE-2026-125880", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125880", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125880.json", + "dateUpdated": "2026-11-13T14:34:49.820Z" + }, + { + "cveId": "CVE-2026-125881", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125881", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125881.json", + "dateUpdated": "2026-11-13T14:36:14.181Z" + }, + { + "cveId": "CVE-2026-125882", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125882", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125882.json", + "dateUpdated": "2026-11-13T14:35:29.594Z" + }, + { + "cveId": "CVE-2026-12572", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-12572", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12572.json", + "dateUpdated": "2026-11-13T14:33:38.561Z" + }, + { + "cveId": "CVE-2026-17284", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17284", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17284.json", + "dateUpdated": "2026-11-13T14:33:40.887Z" + }, + { + "cveId": "CVE-2026-17293", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17293", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17293.json", + "dateUpdated": "2026-11-13T14:38:24.583Z" + }, + { + "cveId": "CVE-2026-17299", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17299", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17299.json", + "dateUpdated": "2026-11-13T14:37:24.646Z" + }, + { + "cveId": "CVE-2026-55362", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55362", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55362.json", + "dateUpdated": "2026-11-13T14:38:29.587Z" + }, + { + "cveId": "CVE-2026-56898", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56898", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56898.json", + "dateUpdated": "2026-11-13T14:38:02.388Z" + }, + { + "cveId": "CVE-2026-56909", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56909", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56909.json", + "dateUpdated": "2026-11-13T14:36:20.837Z" + }, + { + "cveId": "CVE-2026-56912", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56912", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56912.json", + "dateUpdated": "2026-11-13T14:35:30.923Z" + }, + { + "cveId": "CVE-2026-56919", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56919", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56919.json", + "dateUpdated": "2026-11-13T14:34:53.184Z" + }, + { + "cveId": "CVE-2026-92442", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92442", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92442.json", + "dateUpdated": "2026-11-13T14:34:09.203Z" + }, + { + "cveId": "CVE-2026-92545", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92545", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92545.json", + "dateUpdated": "2026-11-13T14:37:39.362Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T14:33:20.232Z", + "numberOfChanges": 39, + "new": [ + { + "cveId": "CVE-2026-107524", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107524", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107524.json", + "dateUpdated": "2026-11-13T14:30:19.045Z" + }, + { + "cveId": "CVE-2026-127031", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127031", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127031.json", + "dateUpdated": "2026-11-13T14:31:30.855Z" + }, + { + "cveId": "CVE-2026-128908", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128908", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128908.json", + "dateUpdated": "2026-11-13T14:29:28.584Z" + }, + { + "cveId": "CVE-2026-128909", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128909", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128909.json", + "dateUpdated": "2026-11-13T14:30:49.416Z" + }, + { + "cveId": "CVE-2026-128910", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128910", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128910.json", + "dateUpdated": "2026-11-13T14:31:31.193Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-105427", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105427", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105427.json", + "dateUpdated": "2026-11-13T14:30:29.382Z" + }, + { + "cveId": "CVE-2026-105669", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105669", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105669.json", + "dateUpdated": "2026-11-13T14:30:43.063Z" + }, + { + "cveId": "CVE-2026-107404", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107404", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107404.json", + "dateUpdated": "2026-11-13T14:30:22.809Z" + }, + { + "cveId": "CVE-2026-120326", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120326", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120326.json", + "dateUpdated": "2026-11-13T14:31:13.918Z" + }, + { + "cveId": "CVE-2026-120350", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120350", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120350.json", + "dateUpdated": "2026-11-13T14:31:06.419Z" + }, + { + "cveId": "CVE-2026-121191", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121191", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121191.json", + "dateUpdated": "2026-11-13T14:30:58.317Z" + }, + { + "cveId": "CVE-2026-123082", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123082", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123082.json", + "dateUpdated": "2026-11-13T14:30:51.277Z" + }, + { + "cveId": "CVE-2026-123181", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123181", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123181.json", + "dateUpdated": "2026-11-13T14:30:35.722Z" + }, + { + "cveId": "CVE-2026-124002", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124002", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124002.json", + "dateUpdated": "2026-11-13T14:33:05.521Z" + }, + { + "cveId": "CVE-2026-125715", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125715", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125715.json", + "dateUpdated": "2026-11-13T14:31:56.007Z" + }, + { + "cveId": "CVE-2026-125814", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125814", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125814.json", + "dateUpdated": "2026-11-13T14:30:05.493Z" + }, + { + "cveId": "CVE-2026-12266", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-12266", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12266.json", + "dateUpdated": "2026-11-13T14:31:26.531Z" + }, + { + "cveId": "CVE-2026-12573", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-12573", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12573.json", + "dateUpdated": "2026-11-13T14:31:46.702Z" + }, + { + "cveId": "CVE-2026-12574", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-12574", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12574.json", + "dateUpdated": "2026-11-13T14:31:36.687Z" + }, + { + "cveId": "CVE-2026-17356", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-17356", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/17xxx/CVE-2026-17356.json", + "dateUpdated": "2026-11-13T14:32:39.448Z" + }, + { + "cveId": "CVE-2026-21407", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-21407", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/21xxx/CVE-2026-21407.json", + "dateUpdated": "2026-11-13T14:29:51.198Z" + }, + { + "cveId": "CVE-2026-28743", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-28743", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28743.json", + "dateUpdated": "2026-11-13T14:29:44.272Z" + }, + { + "cveId": "CVE-2026-28765", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-28765", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28765.json", + "dateUpdated": "2026-11-13T14:29:37.431Z" + }, + { + "cveId": "CVE-2026-32672", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-32672", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/32xxx/CVE-2026-32672.json", + "dateUpdated": "2026-11-13T14:29:30.714Z" + }, + { + "cveId": "CVE-2026-33089", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-33089", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33089.json", + "dateUpdated": "2026-11-13T14:29:23.688Z" + }, + { + "cveId": "CVE-2026-33270", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-33270", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33270.json", + "dateUpdated": "2026-11-13T14:29:16.806Z" + }, + { + "cveId": "CVE-2026-33279", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-33279", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33279.json", + "dateUpdated": "2026-11-13T14:29:09.874Z" + }, + { + "cveId": "CVE-2026-35060", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-35060", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35060.json", + "dateUpdated": "2026-11-13T14:29:01.591Z" + }, + { + "cveId": "CVE-2026-35683", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-35683", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35683.json", + "dateUpdated": "2026-11-13T14:28:54.549Z" + }, + { + "cveId": "CVE-2026-39456", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-39456", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/39xxx/CVE-2026-39456.json", + "dateUpdated": "2026-11-13T14:28:47.566Z" + }, + { + "cveId": "CVE-2026-40065", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40065", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40065.json", + "dateUpdated": "2026-11-13T14:28:40.111Z" + }, + { + "cveId": "CVE-2026-56934", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56934", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56934.json", + "dateUpdated": "2026-11-13T14:31:20.466Z" + }, + { + "cveId": "CVE-2026-57004", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57004", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57004.json", + "dateUpdated": "2026-11-13T14:30:46.022Z" + }, + { + "cveId": "CVE-2026-66333", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66333", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66333.json", + "dateUpdated": "2026-11-13T14:30:16.380Z" + }, + { + "cveId": "CVE-2026-66334", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66334", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66334.json", + "dateUpdated": "2026-11-13T14:30:08.554Z" + }, + { + "cveId": "CVE-2026-66335", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66335", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66335.json", + "dateUpdated": "2026-11-13T14:29:58.195Z" + }, + { + "cveId": "CVE-2026-92439", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92439", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92439.json", + "dateUpdated": "2026-11-13T14:32:24.427Z" + }, + { + "cveId": "CVE-2026-92441", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92441", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92441.json", + "dateUpdated": "2026-11-13T14:31:40.161Z" + }, + { + "cveId": "CVE-2026-96437", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96437", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96437.json", + "dateUpdated": "2026-11-13T14:33:17.106Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T14:27:04.165Z", + "numberOfChanges": 7, + "new": [ + { + "cveId": "CVE-2026-109093", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109093", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109093.json", + "dateUpdated": "2026-11-13T14:23:59.219Z" + }, + { + "cveId": "CVE-2026-127102", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-127102", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/127xxx/CVE-2026-127102.json", + "dateUpdated": "2026-11-13T14:22:11.926Z" + }, + { + "cveId": "CVE-2026-128907", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128907", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128907.json", + "dateUpdated": "2026-11-13T14:26:41.668Z" + }, + { + "cveId": "CVE-2026-128970", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-128970", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/128xxx/CVE-2026-128970.json", + "dateUpdated": "2026-11-13T14:25:45.811Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-109094", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109094", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109094.json", + "dateUpdated": "2026-11-13T14:25:11.368Z" + }, + { + "cveId": "CVE-2026-19121", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19121", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19121.json", + "dateUpdated": "2026-11-13T14:23:43.208Z" + }, + { + "cveId": "CVE-2026-19122", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19122", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19122.json", + "dateUpdated": "2026-11-13T14:21:50.819Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-13T14:21:07.166Z", + "numberOfChanges": 14, + "new": [ + { + "cveId": "CVE-2026-109094", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109094", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109094.json", + "dateUpdated": "2026-11-13T14:15:53.012Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-100080", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-100080", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/100xxx/CVE-2026-100080.json", + "dateUpdated": "2026-11-13T14:17:19.465Z" + }, + { + "cveId": "CVE-2026-100081", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-100081", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/100xxx/CVE-2026-100081.json", + "dateUpdated": "2026-11-13T14:17:19.978Z" + }, + { + "cveId": "CVE-2026-100082", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-100082", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/100xxx/CVE-2026-100082.json", + "dateUpdated": "2026-11-13T14:17:20.531Z" + }, + { + "cveId": "CVE-2026-118383", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118383", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118383.json", + "dateUpdated": "2026-11-13T14:20:14.490Z" + }, + { + "cveId": "CVE-2026-119618", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119618", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119618.json", + "dateUpdated": "2026-11-13T14:17:19.945Z" + }, + { + "cveId": "CVE-2026-123710", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123710", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123710.json", + "dateUpdated": "2026-11-13T14:18:08.901Z" + }, + { + "cveId": "CVE-2026-125378", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125378", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125378.json", + "dateUpdated": "2026-11-13T14:15:14.685Z" + }, + { + "cveId": "CVE-2026-125382", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125382", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125382.json", + "dateUpdated": "2026-11-13T14:17:05.418Z" + }, + { + "cveId": "CVE-2026-125386", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125386", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125386.json", + "dateUpdated": "2026-11-13T14:21:03.426Z" + }, + { + "cveId": "CVE-2026-76844", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-76844", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76844.json", + "dateUpdated": "2026-11-13T14:15:54.676Z" + }, + { + "cveId": "CVE-2026-85091", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85091", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85091.json", + "dateUpdated": "2026-11-13T14:15:55.362Z" + }, + { + "cveId": "CVE-2026-99286", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99286", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99286.json", + "dateUpdated": "2026-11-13T14:17:21.441Z" + }, + { + "cveId": "CVE-2026-99288", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99288", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99288.json", + "dateUpdated": "2026-11-13T14:17:22.151Z" + } + ], + "error": [] + }, { "fetchTime": "2026-11-13T14:14:46.205Z", "numberOfChanges": 23, @@ -806215,1310 +807594,5 @@ } ], "error": [] - }, - { - "fetchTime": "2026-10-14T15:01:02.965Z", - "numberOfChanges": 5, - "new": [ - { - "cveId": "CVE-2026-101895", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101895", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101895.json", - "dateUpdated": "2026-10-14T15:00:14.385Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-103028", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103028", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103028.json", - "dateUpdated": "2026-10-14T14:58:43.810Z" - }, - { - "cveId": "CVE-2026-109523", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109523", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109523.json", - "dateUpdated": "2026-10-14T14:56:53.425Z" - }, - { - "cveId": "CVE-2026-110359", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110359", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110359.json", - "dateUpdated": "2026-10-14T14:55:46.179Z" - }, - { - "cveId": "CVE-2026-81507", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-81507", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/81xxx/CVE-2026-81507.json", - "dateUpdated": "2026-10-14T15:00:34.785Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T14:54:50.885Z", - "numberOfChanges": 34, - "new": [ - { - "cveId": "CVE-2026-107381", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107381", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107381.json", - "dateUpdated": "2026-10-14T14:53:40.415Z" - }, - { - "cveId": "CVE-2026-53612", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-53612", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/53xxx/CVE-2026-53612.json", - "dateUpdated": "2026-10-14T14:47:25.523Z" - }, - { - "cveId": "CVE-2026-53613", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-53613", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/53xxx/CVE-2026-53613.json", - "dateUpdated": "2026-10-14T14:52:56.063Z" - } - ], - "updated": [ - { - "cveId": "CVE-2022-20421", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-20421", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/20xxx/CVE-2022-20421.json", - "dateUpdated": "2026-10-14T14:53:09.981Z" - }, - { - "cveId": "CVE-2026-100126", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-100126", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/100xxx/CVE-2026-100126.json", - "dateUpdated": "2026-10-14T14:53:04.785Z" - }, - { - "cveId": "CVE-2026-100130", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-100130", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/100xxx/CVE-2026-100130.json", - "dateUpdated": "2026-10-14T14:53:06.492Z" - }, - { - "cveId": "CVE-2026-100131", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-100131", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/100xxx/CVE-2026-100131.json", - "dateUpdated": "2026-10-14T14:53:06.368Z" - }, - { - "cveId": "CVE-2026-103820", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103820", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103820.json", - "dateUpdated": "2026-10-14T14:53:04.661Z" - }, - { - "cveId": "CVE-2026-103822", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103822", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103822.json", - "dateUpdated": "2026-10-14T14:53:04.909Z" - }, - { - "cveId": "CVE-2026-103823", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103823", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103823.json", - "dateUpdated": "2026-10-14T14:53:05.156Z" - }, - { - "cveId": "CVE-2026-103824", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103824", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103824.json", - "dateUpdated": "2026-10-14T14:53:05.280Z" - }, - { - "cveId": "CVE-2026-103825", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103825", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103825.json", - "dateUpdated": "2026-10-14T14:53:05.033Z" - }, - { - "cveId": "CVE-2026-103826", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103826", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103826.json", - "dateUpdated": "2026-10-14T14:53:05.416Z" - }, - { - "cveId": "CVE-2026-103827", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103827", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103827.json", - "dateUpdated": "2026-10-14T14:53:05.535Z" - }, - { - "cveId": "CVE-2026-103828", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103828", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103828.json", - "dateUpdated": "2026-10-14T14:53:05.786Z" - }, - { - "cveId": "CVE-2026-103829", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103829", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103829.json", - "dateUpdated": "2026-10-14T14:53:06.234Z" - }, - { - "cveId": "CVE-2026-105896", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105896", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105896.json", - "dateUpdated": "2026-10-14T14:53:06.926Z" - }, - { - "cveId": "CVE-2026-105900", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105900", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105900.json", - "dateUpdated": "2026-10-14T14:53:04.540Z" - }, - { - "cveId": "CVE-2026-105994", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105994", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105994.json", - "dateUpdated": "2026-10-14T14:53:07.178Z" - }, - { - "cveId": "CVE-2026-106616", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106616", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106616.json", - "dateUpdated": "2026-10-14T14:53:07.048Z" - }, - { - "cveId": "CVE-2026-106620", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106620", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106620.json", - "dateUpdated": "2026-10-14T14:53:04.016Z" - }, - { - "cveId": "CVE-2026-109963", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109963", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109963.json", - "dateUpdated": "2026-10-14T14:48:02.226Z" - }, - { - "cveId": "CVE-2026-110451", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110451", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110451.json", - "dateUpdated": "2026-10-14T14:54:42.999Z" - }, - { - "cveId": "CVE-2026-71385", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-71385", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/71xxx/CVE-2026-71385.json", - "dateUpdated": "2026-10-14T14:53:04.421Z" - }, - { - "cveId": "CVE-2026-73795", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73795", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73795.json", - "dateUpdated": "2026-10-14T14:53:07.537Z" - }, - { - "cveId": "CVE-2026-73796", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73796", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73796.json", - "dateUpdated": "2026-10-14T14:53:07.654Z" - }, - { - "cveId": "CVE-2026-73797", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73797", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73797.json", - "dateUpdated": "2026-10-14T14:53:07.770Z" - }, - { - "cveId": "CVE-2026-73798", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73798", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73798.json", - "dateUpdated": "2026-10-14T14:53:07.890Z" - }, - { - "cveId": "CVE-2026-75748", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-75748", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75748.json", - "dateUpdated": "2026-10-14T14:53:04.156Z" - }, - { - "cveId": "CVE-2026-75995", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-75995", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75995.json", - "dateUpdated": "2026-10-14T14:53:04.289Z" - }, - { - "cveId": "CVE-2026-75996", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-75996", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/75xxx/CVE-2026-75996.json", - "dateUpdated": "2026-10-14T14:53:07.302Z" - }, - { - "cveId": "CVE-2026-76655", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-76655", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/76xxx/CVE-2026-76655.json", - "dateUpdated": "2026-10-14T14:53:08.004Z" - }, - { - "cveId": "CVE-2026-90530", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-90530", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/90xxx/CVE-2026-90530.json", - "dateUpdated": "2026-10-14T14:53:07.419Z" - }, - { - "cveId": "CVE-2026-95640", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95640", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95640.json", - "dateUpdated": "2026-10-14T14:53:06.613Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T14:47:23.926Z", - "numberOfChanges": 35, - "new": [ - { - "cveId": "CVE-2026-101019", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101019", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101019.json", - "dateUpdated": "2026-10-14T14:40:29.685Z" - }, - { - "cveId": "CVE-2026-101025", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101025", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101025.json", - "dateUpdated": "2026-10-14T14:40:29.324Z" - }, - { - "cveId": "CVE-2026-104939", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104939", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104939.json", - "dateUpdated": "2026-10-14T14:40:30.052Z" - }, - { - "cveId": "CVE-2026-15176", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-15176", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/15xxx/CVE-2026-15176.json", - "dateUpdated": "2026-10-14T14:40:26.374Z" - }, - { - "cveId": "CVE-2026-73535", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73535", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73535.json", - "dateUpdated": "2026-10-14T14:37:39.073Z" - }, - { - "cveId": "CVE-2026-73539", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73539", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73539.json", - "dateUpdated": "2026-10-14T14:37:44.243Z" - }, - { - "cveId": "CVE-2026-73800", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73800", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73800.json", - "dateUpdated": "2026-10-14T14:37:49.783Z" - }, - { - "cveId": "CVE-2026-73802", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73802", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73802.json", - "dateUpdated": "2026-10-14T14:37:55.141Z" - }, - { - "cveId": "CVE-2026-73804", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73804", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73804.json", - "dateUpdated": "2026-10-14T14:38:00.292Z" - }, - { - "cveId": "CVE-2026-73814", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73814", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73814.json", - "dateUpdated": "2026-10-14T14:38:05.476Z" - }, - { - "cveId": "CVE-2026-78231", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-78231", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/78xxx/CVE-2026-78231.json", - "dateUpdated": "2026-10-14T14:38:10.532Z" - }, - { - "cveId": "CVE-2026-78433", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-78433", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/78xxx/CVE-2026-78433.json", - "dateUpdated": "2026-10-14T14:38:17.247Z" - }, - { - "cveId": "CVE-2026-91184", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-91184", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/91xxx/CVE-2026-91184.json", - "dateUpdated": "2026-10-14T14:40:27.849Z" - }, - { - "cveId": "CVE-2026-93479", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-93479", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/93xxx/CVE-2026-93479.json", - "dateUpdated": "2026-10-14T14:40:27.107Z" - }, - { - "cveId": "CVE-2026-94197", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94197", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94197.json", - "dateUpdated": "2026-10-14T14:40:28.582Z" - }, - { - "cveId": "CVE-2026-95101", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95101", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95101.json", - "dateUpdated": "2026-10-14T14:40:28.955Z" - }, - { - "cveId": "CVE-2026-96615", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96615", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96615.json", - "dateUpdated": "2026-10-14T14:40:28.213Z" - }, - { - "cveId": "CVE-2026-97205", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97205", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97205.json", - "dateUpdated": "2026-10-14T14:40:27.487Z" - }, - { - "cveId": "CVE-2026-97629", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97629", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97629.json", - "dateUpdated": "2026-10-14T14:40:26.740Z" - } - ], - "updated": [ - { - "cveId": "CVE-2022-4450", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-4450", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/4xxx/CVE-2022-4450.json", - "dateUpdated": "2026-10-14T14:39:44.108Z" - }, - { - "cveId": "CVE-2022-4662", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-4662", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/4xxx/CVE-2022-4662.json", - "dateUpdated": "2026-10-14T14:44:16.709Z" - }, - { - "cveId": "CVE-2026-100137", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-100137", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/100xxx/CVE-2026-100137.json", - "dateUpdated": "2026-10-14T14:42:59.587Z" - }, - { - "cveId": "CVE-2026-100138", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-100138", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/100xxx/CVE-2026-100138.json", - "dateUpdated": "2026-10-14T14:42:59.339Z" - }, - { - "cveId": "CVE-2026-100139", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-100139", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/100xxx/CVE-2026-100139.json", - "dateUpdated": "2026-10-14T14:42:59.936Z" - }, - { - "cveId": "CVE-2026-102603", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102603", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102603.json", - "dateUpdated": "2026-10-14T14:45:36.133Z" - }, - { - "cveId": "CVE-2026-105898", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105898", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105898.json", - "dateUpdated": "2026-10-14T14:43:00.867Z" - }, - { - "cveId": "CVE-2026-105902", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105902", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105902.json", - "dateUpdated": "2026-10-14T14:42:59.820Z" - }, - { - "cveId": "CVE-2026-106614", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106614", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106614.json", - "dateUpdated": "2026-10-14T14:43:00.743Z" - }, - { - "cveId": "CVE-2026-106627", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-106627", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106627.json", - "dateUpdated": "2026-10-14T14:42:59.467Z" - }, - { - "cveId": "CVE-2026-34633", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-34633", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34633.json", - "dateUpdated": "2026-10-14T14:43:00.627Z" - }, - { - "cveId": "CVE-2026-83965", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-83965", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/83xxx/CVE-2026-83965.json", - "dateUpdated": "2026-10-14T14:43:00.361Z" - }, - { - "cveId": "CVE-2026-83966", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-83966", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/83xxx/CVE-2026-83966.json", - "dateUpdated": "2026-10-14T14:43:00.235Z" - }, - { - "cveId": "CVE-2026-92909", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92909", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92909.json", - "dateUpdated": "2026-10-14T14:43:00.076Z" - }, - { - "cveId": "CVE-2026-95634", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95634", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95634.json", - "dateUpdated": "2026-10-14T14:42:59.703Z" - }, - { - "cveId": "CVE-2026-95641", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95641", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95641.json", - "dateUpdated": "2026-10-14T14:43:00.509Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T14:37:39.194Z", - "numberOfChanges": 31, - "new": [ - { - "cveId": "CVE-2026-25946", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-25946", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/25xxx/CVE-2026-25946.json", - "dateUpdated": "2026-10-14T14:28:15.535Z" - }, - { - "cveId": "CVE-2026-59766", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59766", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59766.json", - "dateUpdated": "2026-10-14T14:28:20.687Z" - }, - { - "cveId": "CVE-2026-59774", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59774", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59774.json", - "dateUpdated": "2026-10-14T14:28:25.862Z" - }, - { - "cveId": "CVE-2026-60008", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60008", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60008.json", - "dateUpdated": "2026-10-14T14:28:31.043Z" - }, - { - "cveId": "CVE-2026-60010", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60010", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60010.json", - "dateUpdated": "2026-10-14T14:28:36.203Z" - }, - { - "cveId": "CVE-2026-60018", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60018", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60018.json", - "dateUpdated": "2026-10-14T14:28:41.327Z" - }, - { - "cveId": "CVE-2026-60021", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60021", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60021.json", - "dateUpdated": "2026-10-14T14:28:46.424Z" - }, - { - "cveId": "CVE-2026-62925", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62925", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62925.json", - "dateUpdated": "2026-10-14T14:28:51.472Z" - }, - { - "cveId": "CVE-2026-63021", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63021", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63021.json", - "dateUpdated": "2026-10-14T14:28:56.909Z" - }, - { - "cveId": "CVE-2026-63792", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63792", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63792.json", - "dateUpdated": "2026-10-14T14:29:01.896Z" - }, - { - "cveId": "CVE-2026-66849", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66849", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66849.json", - "dateUpdated": "2026-10-14T14:35:55.956Z" - }, - { - "cveId": "CVE-2026-66853", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66853", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66853.json", - "dateUpdated": "2026-10-14T14:36:01.009Z" - }, - { - "cveId": "CVE-2026-66874", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66874", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66874.json", - "dateUpdated": "2026-10-14T14:36:06.090Z" - }, - { - "cveId": "CVE-2026-66877", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66877", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66877.json", - "dateUpdated": "2026-10-14T14:36:11.356Z" - }, - { - "cveId": "CVE-2026-67577", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-67577", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/67xxx/CVE-2026-67577.json", - "dateUpdated": "2026-10-14T14:36:16.540Z" - }, - { - "cveId": "CVE-2026-68957", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-68957", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68957.json", - "dateUpdated": "2026-10-14T14:36:22.950Z" - }, - { - "cveId": "CVE-2026-68964", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-68964", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68964.json", - "dateUpdated": "2026-10-14T14:36:28.026Z" - }, - { - "cveId": "CVE-2026-70396", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-70396", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/70xxx/CVE-2026-70396.json", - "dateUpdated": "2026-10-14T14:36:36.550Z" - }, - { - "cveId": "CVE-2026-70400", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-70400", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/70xxx/CVE-2026-70400.json", - "dateUpdated": "2026-10-14T14:36:41.612Z" - }, - { - "cveId": "CVE-2026-70402", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-70402", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/70xxx/CVE-2026-70402.json", - "dateUpdated": "2026-10-14T14:36:46.774Z" - }, - { - "cveId": "CVE-2026-70406", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-70406", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/70xxx/CVE-2026-70406.json", - "dateUpdated": "2026-10-14T14:36:53.729Z" - }, - { - "cveId": "CVE-2026-70407", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-70407", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/70xxx/CVE-2026-70407.json", - "dateUpdated": "2026-10-14T14:36:59.167Z" - }, - { - "cveId": "CVE-2026-71184", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-71184", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/71xxx/CVE-2026-71184.json", - "dateUpdated": "2026-10-14T14:37:05.020Z" - }, - { - "cveId": "CVE-2026-71301", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-71301", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/71xxx/CVE-2026-71301.json", - "dateUpdated": "2026-10-14T14:37:10.214Z" - }, - { - "cveId": "CVE-2026-73126", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73126", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73126.json", - "dateUpdated": "2026-10-14T14:37:15.283Z" - }, - { - "cveId": "CVE-2026-73130", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73130", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73130.json", - "dateUpdated": "2026-10-14T14:37:20.391Z" - }, - { - "cveId": "CVE-2026-73135", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73135", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73135.json", - "dateUpdated": "2026-10-14T14:37:25.479Z" - }, - { - "cveId": "CVE-2026-73273", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73273", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73273.json", - "dateUpdated": "2026-10-14T14:37:30.614Z" - }, - { - "cveId": "CVE-2026-84471", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84471", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84471.json", - "dateUpdated": "2026-10-14T14:29:04.851Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-104761", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104761", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104761.json", - "dateUpdated": "2026-10-14T14:28:13.716Z" - }, - { - "cveId": "CVE-2026-107650", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107650", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107650.json", - "dateUpdated": "2026-10-14T14:27:08.058Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-14T14:26:58.959Z", - "numberOfChanges": 105, - "new": [ - { - "cveId": "CVE-2016-20099", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2016-20099", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2016/20xxx/CVE-2016-20099.json", - "dateUpdated": "2026-10-14T14:16:26.855Z" - }, - { - "cveId": "CVE-2017-20286", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2017-20286", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2017/20xxx/CVE-2017-20286.json", - "dateUpdated": "2026-10-14T14:16:27.547Z" - }, - { - "cveId": "CVE-2020-37281", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-37281", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/37xxx/CVE-2020-37281.json", - "dateUpdated": "2026-10-14T14:16:28.167Z" - }, - { - "cveId": "CVE-2020-37282", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-37282", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/37xxx/CVE-2020-37282.json", - "dateUpdated": "2026-10-14T14:16:28.862Z" - }, - { - "cveId": "CVE-2024-58392", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-58392", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/58xxx/CVE-2024-58392.json", - "dateUpdated": "2026-10-14T14:16:29.553Z" - }, - { - "cveId": "CVE-2025-71433", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-71433", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/71xxx/CVE-2025-71433.json", - "dateUpdated": "2026-10-14T14:16:30.251Z" - }, - { - "cveId": "CVE-2026-110257", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110257", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110257.json", - "dateUpdated": "2026-10-14T14:16:30.933Z" - }, - { - "cveId": "CVE-2026-110258", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110258", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110258.json", - "dateUpdated": "2026-10-14T14:16:31.636Z" - }, - { - "cveId": "CVE-2026-110259", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110259", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110259.json", - "dateUpdated": "2026-10-14T14:16:32.252Z" - }, - { - "cveId": "CVE-2026-110260", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110260", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110260.json", - "dateUpdated": "2026-10-14T14:16:32.915Z" - }, - { - "cveId": "CVE-2026-110261", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110261", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110261.json", - "dateUpdated": "2026-10-14T14:16:33.613Z" - }, - { - "cveId": "CVE-2026-110262", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110262", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110262.json", - "dateUpdated": "2026-10-14T14:16:34.273Z" - }, - { - "cveId": "CVE-2026-110263", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110263", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110263.json", - "dateUpdated": "2026-10-14T14:16:34.949Z" - }, - { - "cveId": "CVE-2026-110270", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110270", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110270.json", - "dateUpdated": "2026-10-14T14:16:35.587Z" - }, - { - "cveId": "CVE-2026-110591", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110591", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110591.json", - "dateUpdated": "2026-10-14T14:16:36.219Z" - }, - { - "cveId": "CVE-2026-110592", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110592", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110592.json", - "dateUpdated": "2026-10-14T14:16:37.199Z" - }, - { - "cveId": "CVE-2026-110593", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110593", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110593.json", - "dateUpdated": "2026-10-14T14:16:37.842Z" - }, - { - "cveId": "CVE-2026-110594", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110594", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110594.json", - "dateUpdated": "2026-10-14T14:16:38.449Z" - }, - { - "cveId": "CVE-2026-110595", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110595", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110595.json", - "dateUpdated": "2026-10-14T14:16:39.045Z" - }, - { - "cveId": "CVE-2026-110596", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110596", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110596.json", - "dateUpdated": "2026-10-14T14:16:39.681Z" - }, - { - "cveId": "CVE-2026-110597", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110597", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110597.json", - "dateUpdated": "2026-10-14T14:16:40.331Z" - }, - { - "cveId": "CVE-2026-110598", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110598", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110598.json", - "dateUpdated": "2026-10-14T14:16:40.986Z" - }, - { - "cveId": "CVE-2026-110599", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110599", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110599.json", - "dateUpdated": "2026-10-14T14:16:41.692Z" - }, - { - "cveId": "CVE-2026-110600", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110600", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110600.json", - "dateUpdated": "2026-10-14T14:16:42.374Z" - }, - { - "cveId": "CVE-2026-110601", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110601", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110601.json", - "dateUpdated": "2026-10-14T14:16:43.022Z" - }, - { - "cveId": "CVE-2026-110602", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110602", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110602.json", - "dateUpdated": "2026-10-14T14:16:43.661Z" - }, - { - "cveId": "CVE-2026-110603", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110603", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110603.json", - "dateUpdated": "2026-10-14T14:16:44.360Z" - }, - { - "cveId": "CVE-2026-110604", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110604", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110604.json", - "dateUpdated": "2026-10-14T14:16:44.995Z" - }, - { - "cveId": "CVE-2026-110605", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110605", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110605.json", - "dateUpdated": "2026-10-14T14:16:45.714Z" - }, - { - "cveId": "CVE-2026-110606", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110606", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110606.json", - "dateUpdated": "2026-10-14T14:16:46.382Z" - }, - { - "cveId": "CVE-2026-110607", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110607", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110607.json", - "dateUpdated": "2026-10-14T14:16:47.014Z" - }, - { - "cveId": "CVE-2026-110608", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110608", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110608.json", - "dateUpdated": "2026-10-14T14:16:49.839Z" - }, - { - "cveId": "CVE-2026-110609", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110609", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110609.json", - "dateUpdated": "2026-10-14T14:16:50.552Z" - }, - { - "cveId": "CVE-2026-110610", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110610", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110610.json", - "dateUpdated": "2026-10-14T14:16:51.176Z" - }, - { - "cveId": "CVE-2026-110611", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110611", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110611.json", - "dateUpdated": "2026-10-14T14:16:51.948Z" - }, - { - "cveId": "CVE-2026-110612", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110612", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110612.json", - "dateUpdated": "2026-10-14T14:16:52.666Z" - }, - { - "cveId": "CVE-2026-110613", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110613", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110613.json", - "dateUpdated": "2026-10-14T14:16:53.257Z" - }, - { - "cveId": "CVE-2026-110614", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110614", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110614.json", - "dateUpdated": "2026-10-14T14:16:53.888Z" - }, - { - "cveId": "CVE-2026-110615", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110615", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110615.json", - "dateUpdated": "2026-10-14T14:16:54.603Z" - }, - { - "cveId": "CVE-2026-110616", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110616", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110616.json", - "dateUpdated": "2026-10-14T14:16:55.237Z" - }, - { - "cveId": "CVE-2026-110617", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110617", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110617.json", - "dateUpdated": "2026-10-14T14:16:55.915Z" - }, - { - "cveId": "CVE-2026-110618", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110618", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110618.json", - "dateUpdated": "2026-10-14T14:16:56.635Z" - }, - { - "cveId": "CVE-2026-110619", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110619", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110619.json", - "dateUpdated": "2026-10-14T14:16:57.271Z" - }, - { - "cveId": "CVE-2026-110620", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110620", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110620.json", - "dateUpdated": "2026-10-14T14:16:57.917Z" - }, - { - "cveId": "CVE-2026-110621", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110621", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110621.json", - "dateUpdated": "2026-10-14T14:16:58.557Z" - }, - { - "cveId": "CVE-2026-110622", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110622", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110622.json", - "dateUpdated": "2026-10-14T14:16:59.250Z" - }, - { - "cveId": "CVE-2026-110623", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110623", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110623.json", - "dateUpdated": "2026-10-14T14:16:59.957Z" - }, - { - "cveId": "CVE-2026-110624", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110624", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110624.json", - "dateUpdated": "2026-10-14T14:17:00.623Z" - }, - { - "cveId": "CVE-2026-110625", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110625", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110625.json", - "dateUpdated": "2026-10-14T14:17:01.287Z" - }, - { - "cveId": "CVE-2026-110626", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110626", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110626.json", - "dateUpdated": "2026-10-14T14:17:01.968Z" - }, - { - "cveId": "CVE-2026-110627", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110627", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110627.json", - "dateUpdated": "2026-10-14T14:17:02.639Z" - }, - { - "cveId": "CVE-2026-110628", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110628", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110628.json", - "dateUpdated": "2026-10-14T14:17:03.232Z" - }, - { - "cveId": "CVE-2026-110629", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110629", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110629.json", - "dateUpdated": "2026-10-14T14:17:03.868Z" - }, - { - "cveId": "CVE-2026-110630", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110630", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110630.json", - "dateUpdated": "2026-10-14T14:17:04.557Z" - }, - { - "cveId": "CVE-2026-110631", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110631", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110631.json", - "dateUpdated": "2026-10-14T14:17:05.199Z" - }, - { - "cveId": "CVE-2026-110632", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110632", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110632.json", - "dateUpdated": "2026-10-14T14:17:05.863Z" - }, - { - "cveId": "CVE-2026-110633", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110633", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110633.json", - "dateUpdated": "2026-10-14T14:17:06.454Z" - }, - { - "cveId": "CVE-2026-110634", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110634", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110634.json", - "dateUpdated": "2026-10-14T14:17:07.089Z" - }, - { - "cveId": "CVE-2026-110635", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110635", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110635.json", - "dateUpdated": "2026-10-14T14:17:07.752Z" - }, - { - "cveId": "CVE-2026-110636", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110636", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110636.json", - "dateUpdated": "2026-10-14T14:17:08.465Z" - }, - { - "cveId": "CVE-2026-110637", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110637", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110637.json", - "dateUpdated": "2026-10-14T14:17:09.098Z" - }, - { - "cveId": "CVE-2026-110638", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110638", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110638.json", - "dateUpdated": "2026-10-14T14:17:09.820Z" - }, - { - "cveId": "CVE-2026-110639", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110639", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110639.json", - "dateUpdated": "2026-10-14T14:17:10.540Z" - }, - { - "cveId": "CVE-2026-110640", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110640", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110640.json", - "dateUpdated": "2026-10-14T14:17:11.249Z" - }, - { - "cveId": "CVE-2026-110641", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110641", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110641.json", - "dateUpdated": "2026-10-14T14:17:11.966Z" - }, - { - "cveId": "CVE-2026-110642", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110642", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110642.json", - "dateUpdated": "2026-10-14T14:17:12.576Z" - }, - { - "cveId": "CVE-2026-110643", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110643", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110643.json", - "dateUpdated": "2026-10-14T14:17:13.152Z" - }, - { - "cveId": "CVE-2026-110644", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110644", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110644.json", - "dateUpdated": "2026-10-14T14:17:13.817Z" - }, - { - "cveId": "CVE-2026-110645", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110645", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110645.json", - "dateUpdated": "2026-10-14T14:17:14.471Z" - }, - { - "cveId": "CVE-2026-110646", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110646", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110646.json", - "dateUpdated": "2026-10-14T14:17:15.120Z" - }, - { - "cveId": "CVE-2026-110647", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110647", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110647.json", - "dateUpdated": "2026-10-14T14:17:15.770Z" - }, - { - "cveId": "CVE-2026-110648", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110648", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110648.json", - "dateUpdated": "2026-10-14T14:17:16.381Z" - }, - { - "cveId": "CVE-2026-110649", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110649", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110649.json", - "dateUpdated": "2026-10-14T14:17:16.991Z" - }, - { - "cveId": "CVE-2026-110650", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110650", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110650.json", - "dateUpdated": "2026-10-14T14:17:17.646Z" - } - ], - "updated": [ - { - "cveId": "CVE-2022-4304", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2022-4304", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/4xxx/CVE-2022-4304.json", - "dateUpdated": "2026-10-14T14:17:49.943Z" - }, - { - "cveId": "CVE-2026-100153", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-100153", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/100xxx/CVE-2026-100153.json", - "dateUpdated": "2026-10-14T14:21:49.327Z" - }, - { - "cveId": "CVE-2026-101294", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101294", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101294.json", - "dateUpdated": "2026-10-14T14:16:19.586Z" - }, - { - "cveId": "CVE-2026-103369", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103369", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103369.json", - "dateUpdated": "2026-10-14T14:22:44.025Z" - }, - { - "cveId": "CVE-2026-103422", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103422", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103422.json", - "dateUpdated": "2026-10-14T14:19:27.126Z" - }, - { - "cveId": "CVE-2026-103671", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103671", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103671.json", - "dateUpdated": "2026-10-14T14:15:44.172Z" - }, - { - "cveId": "CVE-2026-107757", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107757", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107757.json", - "dateUpdated": "2026-10-14T14:18:40.709Z" - }, - { - "cveId": "CVE-2026-109519", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109519", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109519.json", - "dateUpdated": "2026-10-14T14:24:30.730Z" - }, - { - "cveId": "CVE-2026-109970", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109970", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109970.json", - "dateUpdated": "2026-10-14T14:12:15.165Z" - }, - { - "cveId": "CVE-2026-110449", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110449", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110449.json", - "dateUpdated": "2026-10-14T14:22:22.609Z" - }, - { - "cveId": "CVE-2026-110454", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110454", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110454.json", - "dateUpdated": "2026-10-14T14:23:15.157Z" - }, - { - "cveId": "CVE-2026-110455", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110455", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110455.json", - "dateUpdated": "2026-10-14T14:23:53.811Z" - }, - { - "cveId": "CVE-2026-110457", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110457", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110457.json", - "dateUpdated": "2026-10-14T14:24:32.381Z" - }, - { - "cveId": "CVE-2026-14851", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-14851", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14851.json", - "dateUpdated": "2026-10-14T14:14:57.687Z" - }, - { - "cveId": "CVE-2026-14909", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-14909", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/14xxx/CVE-2026-14909.json", - "dateUpdated": "2026-10-14T14:18:01.406Z" - }, - { - "cveId": "CVE-2026-16495", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16495", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16495.json", - "dateUpdated": "2026-10-14T14:19:50.767Z" - }, - { - "cveId": "CVE-2026-35072", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-35072", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35072.json", - "dateUpdated": "2026-10-14T14:13:43.751Z" - }, - { - "cveId": "CVE-2026-35073", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-35073", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35073.json", - "dateUpdated": "2026-10-14T14:14:07.944Z" - }, - { - "cveId": "CVE-2026-35074", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-35074", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35074.json", - "dateUpdated": "2026-10-14T14:13:16.140Z" - }, - { - "cveId": "CVE-2026-35153", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-35153", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35153.json", - "dateUpdated": "2026-10-14T14:12:43.083Z" - }, - { - "cveId": "CVE-2026-35154", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-35154", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35154.json", - "dateUpdated": "2026-10-14T14:14:34.508Z" - }, - { - "cveId": "CVE-2026-73790", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73790", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73790.json", - "dateUpdated": "2026-10-14T14:14:19.983Z" - }, - { - "cveId": "CVE-2026-73791", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73791", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73791.json", - "dateUpdated": "2026-10-14T14:13:47.223Z" - }, - { - "cveId": "CVE-2026-73792", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73792", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73792.json", - "dateUpdated": "2026-10-14T14:13:06.186Z" - }, - { - "cveId": "CVE-2026-73794", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-73794", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/73xxx/CVE-2026-73794.json", - "dateUpdated": "2026-10-14T14:12:40.834Z" - }, - { - "cveId": "CVE-2026-74041", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-74041", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74041.json", - "dateUpdated": "2026-10-14T14:14:38.913Z" - }, - { - "cveId": "CVE-2026-87855", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-87855", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/87xxx/CVE-2026-87855.json", - "dateUpdated": "2026-10-14T14:21:17.303Z" - }, - { - "cveId": "CVE-2026-93347", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-93347", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/93xxx/CVE-2026-93347.json", - "dateUpdated": "2026-10-14T14:19:36.384Z" - }, - { - "cveId": "CVE-2026-95808", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95808", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95808.json", - "dateUpdated": "2026-10-14T14:20:19.066Z" - }, - { - "cveId": "CVE-2026-97287", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97287", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97287.json", - "dateUpdated": "2026-10-14T14:14:25.599Z" - }, - { - "cveId": "CVE-2026-97398", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97398", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97398.json", - "dateUpdated": "2026-10-14T14:20:48.386Z" - } - ], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index 77b497f961..664d952670 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "21db06d5f7f7ac12f8a5573d27e8825f177289e1", + "upstream_commit": "f6ec93cfa585fddfed3d236faedbc6f6ebd68a57", "since_year": 2017, - "records": 332255, - "synced_at_utc": "2026-11-13T14:25:08.314292+00:00" + "records": 332324, + "synced_at_utc": "2026-11-13T15:25:19.534096+00:00" }