VULN/vuln-cve
1
0 Fork 0
Code Pull Requests Actions Activity

CVE sync 2026-11-14T13:32:39Z

Browse Source
This commit is contained in:
Vulnerability Bot committed 2026-11-14 14:32:44 +01:00
1 parent 6296a01627
commit fbe3083bc7
17 files changed
+2086 -195
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

data/2025/71xxx/CVE-2025-71464.json
+167
View File
@@ -0,0 +1,167 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2025-71464",
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"state": "PUBLISHED",
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-14T12:15:39.710Z",
"datePublished": "2026-11-14T12:32:57.503Z",
"dateUpdated": "2026-11-14T12:32:57.503Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck",
"dateUpdated": "2026-11-14T12:32:57.503Z"
},
"datePublic": "2025-04-10T00:00:00.000Z",
"title": "@kolkov/angular-editor before 3.0.4 XSS via toggleEditorMode()",
"descriptions": [
{
"lang": "en",
"value": "@kolkov/angular-editor before 3.0.4 contains a cross-site scripting vulnerability in toggleEditorMode() that assigns source view text to innerHTML without DomSanitizer sanitization. Attackers can induce users to paste HTML with event handlers such as img onerror into source mode, executing script in the application's origin when toggling views."
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
"cweId": "CWE-79",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "kolkov",
"product": "angular-editor",
"defaultStatus": "unaffected",
"packageURL": "pkg:npm/%40kolkov/angular-editor",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "semver",
"lessThan": "3.0.4"
},
{
"version": "3.0.4",
"status": "unaffected",
"versionType": "semver"
}
]
}
],
"metrics": [
{
"format": "CVSS",
"cvssV4_0": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"subAvailabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM"
}
},
{
"format": "CVSS",
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM"
}
}
],
"references": [
{
"url": "https://github.com/kolkov/angular-editor/issues/580",
"tags": [
"issue-tracking"
],
"name": "GitHub Issue #580"
},
{
"url": "https://github.com/kolkov/angular-editor/pull/587",
"tags": [
"issue-tracking",
"patch"
]
},
{
"url": "https://github.com/kolkov/angular-editor/commit/1b6ee6763ccc93cf0ddd4ab47380166b5efb8f5e",
"tags": [
"patch"
],
"name": "Patch Commit"
},
{
"url": "https://github.com/kolkov/angular-editor/blob/a56cc1672e29f058f1b28dba3f532b4040b56439/projects/angular-editor/src/lib/editor/angular-editor.component.ts#L354-L361",
"tags": [
"technical-description"
],
"name": "Unsanitized innerHTML in toggleEditorMode at v3.0.3"
},
{
"url": "https://github.com/kolkov/angular-editor/releases/tag/v3.0.4",
"tags": [
"release-notes"
],
"name": "angular-editor v3.0.4 Release Notes"
},
{
"url": "https://github.com/kolkov/angular-editor",
"tags": [
"product"
]
},
{
"name": "VulnCheck Advisory: @kolkov/angular-editor before 3.0.4 XSS via toggleEditorMode()",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/kolkov-angular-editor-before-3.0.4-xss-via-toggleeditormode"
}
],
"credits": [
{
"lang": "en",
"value": "Mario Tesoro",
"type": "finder"
},
{
"lang": "en",
"value": "Mario Tesoro",
"type": "remediation developer"
}
],
"x_generator": {
"engine": "vulncheck-endgame"
}
}
}
}
data/2025/71xxx/CVE-2025-71465.json
+160
View File
@@ -0,0 +1,160 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2025-71465",
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"state": "PUBLISHED",
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-14T12:15:40.062Z",
"datePublished": "2026-11-14T12:32:56.793Z",
"dateUpdated": "2026-11-14T12:32:56.793Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck",
"dateUpdated": "2026-11-14T12:32:56.793Z"
},
"datePublic": "2025-04-10T00:00:00.000Z",
"title": "@kolkov/angular-editor before 3.0.3 XSS via refreshView()",
"descriptions": [
{
"lang": "en",
"value": "@kolkov/angular-editor before 3.0.3 contains a cross-site scripting vulnerability in refreshView() that writes HTML from ngModel or reactive form controls to innerHTML without DomSanitizer, bypassing the default sanitize option. Attackers can store HTML with event-handler attributes in content later loaded into the editor to execute script in the application's origin for users opening it."
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
"cweId": "CWE-79",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "kolkov",
"product": "angular-editor",
"defaultStatus": "unaffected",
"packageURL": "pkg:npm/%40kolkov/angular-editor",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "semver",
"lessThan": "3.0.3"
},
{
"version": "3.0.3",
"status": "unaffected",
"versionType": "semver"
}
]
}
],
"metrics": [
{
"format": "CVSS",
"cvssV4_0": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"subAvailabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM"
}
},
{
"format": "CVSS",
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM"
}
}
],
"references": [
{
"url": "https://github.com/kolkov/angular-editor/issues/580",
"tags": [
"issue-tracking"
],
"name": "GitHub Issue #580"
},
{
"url": "https://github.com/kolkov/angular-editor/commit/774a97d0b30e257a07c5d426548c9b900c8a8975",
"tags": [
"patch"
],
"name": "Patch Commit"
},
{
"url": "https://github.com/kolkov/angular-editor/blob/a74a9b1900a0ecbfefbb701d7c272171101ff454/projects/angular-editor/src/lib/editor/angular-editor.component.ts#L276-L278",
"tags": [
"technical-description"
],
"name": "Unsanitized innerHTML in refreshView at v3.0.2"
},
{
"url": "https://github.com/kolkov/angular-editor/releases/tag/v3.0.3",
"tags": [
"release-notes"
],
"name": "angular-editor v3.0.3 Release Notes"
},
{
"url": "https://github.com/kolkov/angular-editor",
"tags": [
"product"
]
},
{
"name": "VulnCheck Advisory: @kolkov/angular-editor before 3.0.3 XSS via refreshView()",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/kolkov-angular-editor-before-3.0.3-xss-via-refreshview"
}
],
"credits": [
{
"lang": "en",
"value": "Mario Tesoro",
"type": "finder"
},
{
"lang": "en",
"value": "kolkov",
"type": "remediation developer"
}
],
"x_generator": {
"engine": "vulncheck-endgame"
}
}
}
}
data/2026/120xxx/CVE-2026-120522.json
+88
View File
@@ -0,0 +1,88 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-120522",
"assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
"state": "PUBLISHED",
"assignerShortName": "Wordfence",
"dateReserved": "2026-11-02T16:17:03.789Z",
"datePublished": "2026-11-14T12:33:22.808Z",
"dateUpdated": "2026-11-14T12:33:22.808Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
"shortName": "Wordfence",
"dateUpdated": "2026-11-14T12:33:22.808Z"
},
"affected": [
{
"vendor": "fluentwiz",
"product": "Cloud Storage Manager for Fluent Forms – Google Drive, Dropbox, OneDrive, S3 Uploads",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "1.2.0",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "The Cloud Storage Manager for Fluent Forms – Google Drive, Dropbox, OneDrive, S3 Uploads plugin for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 1.2.0. This is due to missing authorization checks on the `connection/{driver}/save` and `/download/single-file` REST endpoints, combined with insufficient path validation in the Google Drive `downloadFile()` function, where the Google Drive metadata `name` value is concatenated into a local path without `basename()`, `sanitize_file_name()`, or canonical path validation. This makes it possible for unauthenticated attackers to store attacker-controlled Google Drive credentials, trigger a download of an attacker-owned file whose provider-returned filename contains path traversal, and write attacker-controlled content outside the intended `downloads` directory. When the written file has a PHP extension and lands in a web-accessible location, this can lead to remote code execution."
}
],
"title": "Cloud Storage Manager for Fluent Forms <= 1.2.0 - Unauthenticated Arbitrary File Write via Google Drive Filename Path Traversal",
"references": [
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/58fd04ae-fff2-42b1-ae98-168195d84290?source=cve"
},
{
"url": "https://plugins.trac.wordpress.org/changeset/3656663/cloud-storage-manager"
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory",
"cweId": "CWE-22",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL"
}
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Adam Rayyan Aryasatya"
}
],
"timeline": [
{
"time": "2026-11-14T00:23:38.000Z",
"lang": "en",
"value": "Disclosed"
}
]
}
}
}
data/2026/126xxx/CVE-2026-126658.json
+9 -2
View File
@@ -8,14 +8,14 @@
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-11T11:58:21.462Z",
"datePublished": "2026-11-11T12:24:35.975Z",
"dateUpdated": "2026-11-13T17:11:57.941Z"
"dateUpdated": "2026-11-14T13:05:32.828Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck",
"dateUpdated": "2026-11-11T12:24:35.975Z"
"dateUpdated": "2026-11-14T13:05:32.828Z"
},
"datePublic": "2026-11-10T11:33:37.000Z",
"title": "ByteStash 1.5.10 before 1.6.2 Insufficient Session Expiration via API Keys",
@@ -125,6 +125,13 @@
"technical-description"
]
},
{
"url": "https://notes.netbytesec.com/2026/11/cve-2026-126658-bytestash-1510-before.html",
"name": "NetbyteSEC Advisory NBS-2026-0003",
"tags": [
"third-party-advisory"
]
},
{
"name": "VulnCheck Advisory: ByteStash 1.5.10 before 1.6.2 Insufficient Session Expiration via API Keys",
"tags": [
data/2026/129xxx/CVE-2026-129254.json
+198
View File
@@ -0,0 +1,198 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-129254",
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"state": "PUBLISHED",
"assignerShortName": "VulDB",
"dateReserved": "2026-11-13T19:36:32.033Z",
"datePublished": "2026-11-14T12:15:19.288Z",
"dateUpdated": "2026-11-14T12:15:19.288Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB",
"dateUpdated": "2026-11-14T12:15:19.288Z"
},
"title": "Opixido OCMS Admin TUI index.php cross site scripting",
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-79",
"lang": "en",
"description": "Cross Site Scripting"
}
]
},
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-94",
"lang": "en",
"description": "Code Injection"
}
]
}
],
"affected": [
{
"vendor": "Opixido",
"product": "OCMS",
"versions": [
{
"version": "b7c15660aba83d96677c1a9abaa69c082a24f21c",
"status": "affected"
}
],
"cpes": [
"cpe:2.3:a:opixido:ocms:*:*:*:*:*:*:*:*"
],
"modules": [
"Admin TUI"
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw has been found in Opixido OCMS up to b7c15660aba83d96677c1a9abaa69c082a24f21c. This impacts an unknown function of the file admin/TUI/index.php of the component Admin TUI. This manipulation of the argument img causes cross site scripting. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"version": "4.0",
"baseScore": 5.3,
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
"baseSeverity": "MEDIUM"
}
},
{
"cvssV3_1": {
"version": "3.1",
"baseScore": 4.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C",
"baseSeverity": "MEDIUM"
}
},
{
"cvssV3_0": {
"version": "3.0",
"baseScore": 4.3,
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C",
"baseSeverity": "MEDIUM"
}
},
{
"cvssV2_0": {
"version": "2.0",
"baseScore": 5,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:C"
}
}
],
"timeline": [
{
"time": "2026-10-19T00:00:00.000Z",
"lang": "en",
"value": "Vulnerability found"
},
{
"time": "2026-10-19T00:00:00.000Z",
"lang": "en",
"value": "Vendor informed"
},
{
"time": "2026-11-13T00:00:00.000Z",
"lang": "en",
"value": "Advisory disclosed"
},
{
"time": "2026-11-13T01:00:00.000Z",
"lang": "en",
"value": "VulDB entry created"
},
{
"time": "2026-11-14T07:39:15.000Z",
"lang": "en",
"value": "VulDB entry last update"
}
],
"credits": [
{
"lang": "en",
"value": "Usama Hanif",
"type": "finder"
},
{
"lang": "en",
"value": "Usama_Hanif (VulDB User)",
"type": "reporter"
},
{
"lang": "en",
"value": "Usama_Hanif (VulDB User)",
"type": "analyst"
},
{
"lang": "en",
"value": "VulDB CNA Team",
"type": "coordinator"
}
],
"references": [
{
"url": "https://vuldb.com/vuln/437282",
"name": "VDB-437282 | Opixido OCMS Admin TUI index.php cross site scripting",
"tags": [
"vdb-entry",
"technical-description"
]
},
{
"url": "https://vuldb.com/vuln/437282/cti",
"name": "VDB-437282 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
]
},
{
"url": "https://vuldb.com/cve/CVE-2026-129254",
"name": "CVE-2026-129254 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
]
},
{
"url": "https://vuldb.com/submit/1042949",
"name": "Submit #1042949 | Opixido Opixido OCMS 9a72ab891146a940ec02fb63ea26a344e5e59b77 Improper Neutralization of Alternate XSS Syntax",
"tags": [
"third-party-advisory"
]
},
{
"url": "https://github.com/Usama-Hanif131/CVE-2026-129254/blob/main/README.md",
"tags": [
"related"
]
},
{
"url": "https://drive.google.com/file/d/13Hq-o7MxVw-gw6gI1aZtelqIUt7hR3AE/view?usp=sharing",
"tags": [
"exploit"
]
}
],
"x_generator": [
"VulDB PVTS v202611"
]
}
}
}
data/2026/129xxx/CVE-2026-129255.json
+166
View File
@@ -0,0 +1,166 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-129255",
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"state": "PUBLISHED",
"assignerShortName": "VulDB",
"dateReserved": "2026-11-13T19:41:55.077Z",
"datePublished": "2026-11-14T12:30:17.941Z",
"dateUpdated": "2026-11-14T12:30:17.941Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB",
"dateUpdated": "2026-11-14T12:30:17.941Z"
},
"title": "CoolerMaster MASTERPLUS+ Device Driver WinRing0x64.sys sub_11504 default permission",
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-276",
"lang": "en",
"description": "Incorrect Default Permissions"
}
]
},
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-266",
"lang": "en",
"description": "Incorrect Privilege Assignment"
}
]
}
],
"affected": [
{
"vendor": "CoolerMaster",
"product": "MASTERPLUS+",
"versions": [
{
"version": "1.9.6",
"status": "affected"
}
],
"cpes": [
"cpe:2.3:a:coolermaster:masterplus_:*:*:*:*:*:*:*:*"
],
"modules": [
"Device Driver"
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in CoolerMaster MASTERPLUS+ 1.9.6. This affects the function sub_11504 in the library WinRing0x64.sys of the component Device Driver. The manipulation of the argument PhysicalAddress leads to incorrect default permissions. The attack can only be performed from a local environment. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"version": "4.0",
"baseScore": 9.3,
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X",
"baseSeverity": "CRITICAL"
}
},
{
"cvssV3_1": {
"version": "3.1",
"baseScore": 8.8,
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:C",
"baseSeverity": "HIGH"
}
},
{
"cvssV3_0": {
"version": "3.0",
"baseScore": 8.8,
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:C",
"baseSeverity": "HIGH"
}
},
{
"cvssV2_0": {
"version": "2.0",
"baseScore": 6.8,
"vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C/E:ND/RL:ND/RC:C"
}
}
],
"timeline": [
{
"time": "2026-11-13T00:00:00.000Z",
"lang": "en",
"value": "Advisory disclosed"
},
{
"time": "2026-11-13T01:00:00.000Z",
"lang": "en",
"value": "VulDB entry created"
},
{
"time": "2026-11-13T20:47:02.000Z",
"lang": "en",
"value": "VulDB entry last update"
}
],
"credits": [
{
"lang": "en",
"value": "Element2023H (VulDB User)",
"type": "reporter"
},
{
"lang": "en",
"value": "VulDB CNA Team",
"type": "coordinator"
}
],
"references": [
{
"url": "https://vuldb.com/vuln/437286",
"name": "VDB-437286 | CoolerMaster MASTERPLUS+ Device Driver WinRing0x64.sys sub_11504 default permission",
"tags": [
"vdb-entry",
"technical-description"
]
},
{
"url": "https://vuldb.com/vuln/437286/cti",
"name": "VDB-437286 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
]
},
{
"url": "https://vuldb.com/cve/CVE-2026-129255",
"name": "CVE-2026-129255 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
]
},
{
"url": "https://vuldb.com/submit/1042970",
"name": "Submit #1042970 | CoolerMaster MASTERPLUS+ 1.9.6 Incorrect Default Permissions",
"tags": [
"third-party-advisory"
]
}
],
"x_generator": [
"VulDB PVTS v202611"
]
}
}
}
data/2026/129xxx/CVE-2026-129428.json
+167
View File
@@ -0,0 +1,167 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-129428",
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"state": "PUBLISHED",
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-14T12:15:37.839Z",
"datePublished": "2026-11-14T12:32:56.082Z",
"dateUpdated": "2026-11-14T12:32:56.082Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck",
"dateUpdated": "2026-11-14T12:32:56.082Z"
},
"datePublic": "2026-11-13T00:00:00.000Z",
"title": "Pulse 5.0.17 before 6.8.0 Missing Authorization via AI Assistant Approval API",
"descriptions": [
{
"lang": "en",
"value": "Pulse from 5.0.17 before 6.8.0 contains a missing authorization vulnerability in the /api/ai/approvals endpoints that allows authenticated viewer-level users to manage approval requests. Attackers can list pending requests to expose proposed commands and targets, and approve or deny other users' requests, altering decision and audit state."
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Missing Authorization",
"cweId": "CWE-862",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "rcourtman",
"product": "Pulse",
"defaultStatus": "unaffected",
"packageURL": "pkg:golang/github.com/rcourtman/pulse-go-rewrite",
"versions": [
{
"version": "5.0.17",
"status": "affected",
"versionType": "semver",
"lessThan": "6.8.0"
},
{
"version": "6.8.0",
"status": "unaffected",
"versionType": "semver"
}
]
}
],
"metrics": [
{
"format": "CVSS",
"cvssV4_0": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM"
}
},
{
"format": "CVSS",
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM"
}
}
],
"references": [
{
"url": "https://github.com/rcourtman/Pulse/security/advisories/GHSA-9vxw-m79f-gxxr",
"tags": [
"vendor-advisory"
],
"name": "GitHub Security Advisory (GHSA-9vxw-m79f-gxxr)"
},
{
"url": "https://github.com/rcourtman/Pulse/pull/4127",
"tags": [
"issue-tracking",
"patch"
]
},
{
"url": "https://github.com/rcourtman/Pulse/commit/f05119d97ea3bc1980886d8c62dda7ce8fd39d4e",
"tags": [
"patch"
],
"name": "Patch Commit"
},
{
"url": "https://github.com/rcourtman/Pulse/blob/v6.7.0/internal/api/ai_handlers.go#L7686",
"tags": [
"technical-description"
],
"name": "Approve handler without role check at v6.7.0"
},
{
"url": "https://github.com/rcourtman/Pulse/releases/tag/v6.8.0",
"tags": [
"release-notes"
],
"name": "Pulse v6.8.0 Release Notes"
},
{
"url": "https://github.com/rcourtman/Pulse",
"tags": [
"product"
]
},
{
"name": "VulnCheck Advisory: Pulse 5.0.17 before 6.8.0 Missing Authorization via AI Assistant Approval API",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/pulse-5.0.17-before-6.8.0-missing-authorization-via-ai-assistant-approval-api"
}
],
"credits": [
{
"lang": "en",
"value": "naroSEC",
"type": "finder"
},
{
"lang": "en",
"value": "rcourtman",
"type": "remediation developer"
}
],
"x_generator": {
"engine": "vulncheck-endgame"
}
}
}
}
data/2026/129xxx/CVE-2026-129429.json
+167
View File
@@ -0,0 +1,167 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-129429",
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"state": "PUBLISHED",
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-14T12:15:38.215Z",
"datePublished": "2026-11-14T12:32:55.388Z",
"dateUpdated": "2026-11-14T12:32:55.388Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck",
"dateUpdated": "2026-11-14T12:32:55.388Z"
},
"datePublic": "2026-09-17T00:00:00.000Z",
"title": "Frappe india-payroll before 16.0.4 Missing Authorization via Tax Regime Selector",
"descriptions": [
{
"lang": "en",
"value": "Frappe india-payroll before 16.0.4 contains a missing authorization vulnerability in the get_employee_details, compute_tax_comparison and set_tax_regime methods of tax_regime_selector.py that allows authenticated low-privileged users to access other employees' payroll data. Attackers can supply another employee identifier to read base pay and earning and deduction components, or change the tax regime on draft Salary Structure Assignments to affect tax withholding."
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Missing Authorization",
"cweId": "CWE-862",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "frappe",
"product": "india-payroll",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "semver",
"lessThan": "16.0.4"
},
{
"version": "16.0.4",
"status": "unaffected",
"versionType": "semver"
}
],
"packageURL": "pkg:github/frappe/india-payroll"
}
],
"metrics": [
{
"format": "CVSS",
"cvssV4_0": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH"
}
},
{
"format": "CVSS",
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH"
}
}
],
"references": [
{
"url": "https://github.com/frappe/india-payroll/security/advisories/GHSA-758f-34xj-xvcc",
"tags": [
"vendor-advisory"
],
"name": "GitHub Security Advisory (GHSA-758f-34xj-xvcc)"
},
{
"url": "https://github.com/frappe/india-payroll/commit/78de736298a340ecb971826a5df10e7204773cef",
"tags": [
"patch"
],
"name": "Patch Commit (develop)"
},
{
"url": "https://github.com/frappe/india-payroll/commit/bdb988f172663db4054f9c3fc23833f10c3b60b0",
"tags": [
"patch"
],
"name": "Patch Commit (v16.0.4)"
},
{
"url": "https://github.com/frappe/india-payroll/blob/9c1fc91b34de8a55df58aa5f2dbabff95dedb4d1/india_payroll/india_payroll/page/tax_regime_selector/tax_regime_selector.py#L207-L215",
"tags": [
"technical-description"
],
"name": "set_tax_regime without permission check at v16.0.3"
},
{
"url": "https://github.com/frappe/india-payroll/releases/tag/v16.0.4",
"tags": [
"release-notes"
],
"name": "india-payroll v16.0.4 Release Notes"
},
{
"url": "https://github.com/frappe/india-payroll",
"tags": [
"product"
]
},
{
"name": "VulnCheck Advisory: Frappe india-payroll before 16.0.4 Missing Authorization via Tax Regime Selector",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/frappe-india-payroll-before-16.0.4-missing-authorization-via-tax-regime-selector"
}
],
"credits": [
{
"lang": "en",
"value": "Darshan U",
"type": "finder"
},
{
"lang": "en",
"value": "asmitahase",
"type": "remediation developer"
}
],
"x_generator": {
"engine": "vulncheck-endgame"
}
}
}
}
data/2026/129xxx/CVE-2026-129430.json
+167
View File
@@ -0,0 +1,167 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-129430",
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"state": "PUBLISHED",
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-14T12:15:38.594Z",
"datePublished": "2026-11-14T12:32:54.682Z",
"dateUpdated": "2026-11-14T12:32:54.682Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck",
"dateUpdated": "2026-11-14T12:32:54.682Z"
},
"datePublic": "2026-11-13T00:00:00.000Z",
"title": "axeloz filesharing before 2.14.3 Stored XSS via Bundle Description Markdown Links",
"descriptions": [
{
"lang": "en",
"value": "Axeloz Filesharing before 2.14.3 contains a stored cross-site scripting vulnerability that allows authenticated users to inject script by storing raw HTML or javascript: Markdown links in bundle descriptions. Recipients viewing the public bundle preview page execute the script via Alpine x-html, letting attackers steal the owner_token from localStorage and issue owner-scoped requests against victim bundles."
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
"cweId": "CWE-79",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "axeloz",
"product": "filesharing",
"defaultStatus": "unaffected",
"packageURL": "pkg:github/axeloz/filesharing",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "semver",
"lessThan": "2.14.3"
},
{
"version": "2.14.3",
"status": "unaffected",
"versionType": "semver"
}
]
}
],
"metrics": [
{
"format": "CVSS",
"cvssV4_0": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"subAvailabilityImpact": "NONE",
"baseScore": 5.1,
"baseSeverity": "MEDIUM"
}
},
{
"format": "CVSS",
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM"
}
}
],
"references": [
{
"url": "https://github.com/axeloz/filesharing/commit/eebc80a77c0e3fe3b8467245ba89fa49f2d35928",
"tags": [
"patch"
],
"name": "Patch Commit"
},
{
"url": "https://github.com/axeloz/filesharing/commit/366ee452aba636858d55b82068ecc35f6d08b6d6",
"tags": [
"patch"
],
"name": "Patch Commit (BundleResourceFiltered)"
},
{
"url": "https://github.com/axeloz/filesharing/pull/90",
"tags": [
"issue-tracking",
"patch"
]
},
{
"url": "https://github.com/axeloz/filesharing/blob/e865be1f09f8eb5a46c4b9a16635de892b093d8f/app/Http/Resources/BundleResource.php#L33",
"tags": [
"technical-description"
],
"name": "Unsafe Str::markdown rendering of description"
},
{
"url": "https://github.com/axeloz/filesharing/releases/tag/2.14.3",
"tags": [
"release-notes"
],
"name": "filesharing 2.14.3 Release Notes"
},
{
"url": "https://github.com/axeloz/filesharing",
"tags": [
"product"
]
},
{
"name": "VulnCheck Advisory: axeloz filesharing before 2.14.3 Stored XSS via Bundle Description Markdown Links",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/axeloz-filesharing-before-2.14.3-stored-xss-via-bundle-description-markdown-links"
}
],
"credits": [
{
"lang": "en",
"value": "Raqin Al-Asraar",
"type": "finder"
},
{
"lang": "en",
"value": "axeloz",
"type": "remediation developer"
}
],
"x_generator": {
"engine": "vulncheck-endgame"
}
}
}
}
data/2026/129xxx/CVE-2026-129431.json
+159
View File
@@ -0,0 +1,159 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-129431",
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"state": "PUBLISHED",
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-14T12:15:38.957Z",
"datePublished": "2026-11-14T12:32:53.988Z",
"dateUpdated": "2026-11-14T12:32:53.988Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck",
"dateUpdated": "2026-11-14T12:32:53.988Z"
},
"datePublic": "2026-11-13T00:00:00.000Z",
"title": "Ettercap through 0.8.5.1 Heap Out-of-Bounds Read via SOCKS5 Dissector",
"descriptions": [
{
"lang": "en",
"value": "Ettercap through 0.8.5.1 contains a heap out-of-bounds read vulnerability in dissector_socks() in src/dissectors/ec_socks.c that allows network-adjacent attackers to read heap memory via unchecked SOCKS5 username/password lengths. Attackers can send a crafted SOCKS5 authentication packet observed by Ettercap to read up to 255 bytes past the heap buffer, disclosing memory printed and logged as captured credentials."
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Out-of-bounds Read",
"cweId": "CWE-125",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Ettercap",
"product": "ettercap",
"defaultStatus": "unaffected",
"packageURL": "pkg:github/Ettercap/ettercap",
"versions": [
{
"version": "0",
"lessThanOrEqual": "0.8.5.1",
"status": "affected",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ettercap-project:ettercap:*:*:*:*:*:*:*:*",
"versionEndIncluding": "0.8.5.1"
}
]
}
]
}
],
"metrics": [
{
"format": "CVSS",
"cvssV4_0": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"attackVector": "ADJACENT",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH"
}
},
{
"format": "CVSS",
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM"
}
}
],
"references": [
{
"url": "https://github.com/Ettercap/ettercap/pull/1340",
"tags": [
"issue-tracking",
"patch"
],
"name": "Pull Request #1340"
},
{
"url": "https://github.com/Ettercap/ettercap/blob/v0.8.5.1/src/dissectors/ec_socks.c#L108-L124",
"tags": [
"technical-description"
],
"name": "Unchecked SOCKS5 credential copy at v0.8.5.1"
},
{
"url": "https://github.com/Ettercap/ettercap",
"tags": [
"product"
]
},
{
"name": "VulnCheck Advisory: Ettercap through 0.8.5.1 Heap Out-of-Bounds Read via SOCKS5 Dissector",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/ettercap-through-0.8.5.1-heap-out-of-bounds-read-via-socks5-dissector"
}
],
"credits": [
{
"lang": "en",
"value": "stilwel",
"type": "finder"
},
{
"lang": "en",
"value": "Emilio Escobar",
"type": "remediation developer"
}
],
"x_generator": {
"engine": "vulncheck-endgame"
}
}
}
}
data/2026/129xxx/CVE-2026-129432.json
+159
View File
@@ -0,0 +1,159 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-129432",
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"state": "PUBLISHED",
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-14T12:15:39.336Z",
"datePublished": "2026-11-14T12:32:53.320Z",
"dateUpdated": "2026-11-14T12:32:53.320Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck",
"dateUpdated": "2026-11-14T12:32:53.320Z"
},
"datePublic": "2026-11-13T00:00:00.000Z",
"title": "Ettercap through 0.8.5.1 Heap Out-of-Bounds Read in NFS mountd Dissector",
"descriptions": [
{
"lang": "en",
"value": "Ettercap through 0.8.5.1 contains a heap out-of-bounds read vulnerability in dissector_mountd() in src/dissectors/ec_mountd.c that validates RPC credential and directory lengths independently rather than against the packet end. Network-adjacent attackers can send a crafted MOUNT MNT call to read up to 100 bytes past the heap buffer, leaking memory to the console and logs."
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Out-of-bounds Read",
"cweId": "CWE-125",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Ettercap",
"product": "ettercap",
"defaultStatus": "unaffected",
"packageURL": "pkg:github/Ettercap/ettercap",
"versions": [
{
"version": "0",
"lessThanOrEqual": "0.8.5.1",
"status": "affected",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ettercap-project:ettercap:*:*:*:*:*:*:*:*",
"versionEndIncluding": "0.8.5.1"
}
]
}
]
}
],
"metrics": [
{
"format": "CVSS",
"cvssV4_0": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"attackVector": "ADJACENT",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH"
}
},
{
"format": "CVSS",
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM"
}
}
],
"references": [
{
"url": "https://github.com/Ettercap/ettercap/pull/1341",
"tags": [
"issue-tracking",
"patch"
],
"name": "Pull Request #1341"
},
{
"url": "https://github.com/Ettercap/ettercap/blob/v0.8.5.1/src/dissectors/ec_mountd.c#L88-L103",
"tags": [
"technical-description"
],
"name": "Unchecked mountd directory copy at v0.8.5.1"
},
{
"url": "https://github.com/Ettercap/ettercap",
"tags": [
"product"
]
},
{
"name": "VulnCheck Advisory: Ettercap through 0.8.5.1 Heap Out-of-Bounds Read in NFS mountd Dissector",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/ettercap-through-0.8.5.1-heap-out-of-bounds-read-in-nfs-mountd-dissector"
}
],
"credits": [
{
"lang": "en",
"value": "stilwel",
"type": "finder"
},
{
"lang": "en",
"value": "Emilio Escobar",
"type": "remediation developer"
}
],
"x_generator": {
"engine": "vulncheck-endgame"
}
}
}
}
data/2026/129xxx/CVE-2026-129433.json
+184
View File
@@ -0,0 +1,184 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-129433",
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"state": "PUBLISHED",
"assignerShortName": "VulnCheck",
"dateReserved": "2026-11-14T12:27:55.707Z",
"datePublished": "2026-11-14T12:32:52.619Z",
"dateUpdated": "2026-11-14T12:32:52.619Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck",
"dateUpdated": "2026-11-14T12:32:52.619Z"
},
"datePublic": "2026-11-12T00:00:00.000Z",
"title": "Dokploy before 0.31.1 OS Command Injection via Compose Backup serviceName",
"descriptions": [
{
"lang": "en",
"value": "Dokploy before 0.31.1 contains an OS command injection vulnerability in getComposeContainerCommand() that allows authenticated organization members to execute shell commands via the serviceName parameter. Attackers can store serviceName values with shell metacharacters through backup.create or backup.update tRPC procedures, executing commands as root when scheduled backups run and taking over the host via the mounted Docker socket."
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')",
"cweId": "CWE-78",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "Dokploy",
"product": "dokploy",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "semver",
"lessThan": "0.31.1"
},
{
"version": "0.31.1",
"status": "unaffected",
"versionType": "semver"
}
],
"packageURL": "pkg:github/Dokploy/dokploy"
}
],
"cpeApplicability": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:dokploy:dokploy:*:*:*:*:*:*:*:*",
"versionEndExcluding": "0.31.1"
}
]
}
]
}
],
"metrics": [
{
"format": "CVSS",
"cvssV4_0": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"baseScore": 9.4,
"baseSeverity": "CRITICAL"
}
},
{
"format": "CVSS",
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL"
}
}
],
"references": [
{
"url": "https://github.com/Dokploy/dokploy/security/advisories/GHSA-j329-jw7j-rxjm",
"tags": [
"vendor-advisory"
],
"name": "GitHub Security Advisory (GHSA-j329-jw7j-rxjm)"
},
{
"url": "https://github.com/Dokploy/dokploy/pull/5908",
"tags": [
"issue-tracking",
"patch"
]
},
{
"url": "https://github.com/Dokploy/dokploy/commit/b24006e16e95a10ce3daf739d06ac783e5c70ba0",
"tags": [
"patch"
],
"name": "Patch Commit"
},
{
"url": "https://github.com/Dokploy/dokploy/blob/v0.31.0/packages/server/src/utils/backups/utils.ts#L152",
"tags": [
"technical-description"
],
"name": "Unescaped serviceName in getComposeContainerCommand at v0.31.0"
},
{
"url": "https://github.com/Dokploy/dokploy/releases/tag/v0.31.1",
"tags": [
"release-notes"
],
"name": "Dokploy v0.31.1 Release Notes"
},
{
"url": "https://github.com/Dokploy/dokploy",
"tags": [
"product"
]
},
{
"name": "VulnCheck Advisory: Dokploy before 0.31.1 OS Command Injection via Compose Backup serviceName",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/dokploy-before-0.31.1-os-command-injection-via-compose-backup-servicename"
}
],
"credits": [
{
"lang": "en",
"value": "Jaime Ramírez (JaimeRamirez-coder)",
"type": "finder"
},
{
"lang": "en",
"value": "Siumauricio",
"type": "remediation developer"
}
],
"x_generator": {
"engine": "vulncheck-endgame"
}
}
}
}
data/2026/18xxx/CVE-2026-18053.json
+88
View File
@@ -0,0 +1,88 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-18053",
"assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
"state": "PUBLISHED",
"assignerShortName": "Wordfence",
"dateReserved": "2026-07-28T12:22:25.105Z",
"datePublished": "2026-11-14T12:33:23.333Z",
"dateUpdated": "2026-11-14T12:33:23.333Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
"shortName": "Wordfence",
"dateUpdated": "2026-11-14T12:33:23.333Z"
},
"affected": [
{
"vendor": "LearnDash",
"product": "MemberDash",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "1.8.7",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "The MemberDash plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.8.7. This is due to a mass-assignment vulnerability in the `user_account_manager()` function's edit_profile branch, where all submitted `$_POST` fields are iterated and directly assigned to the current member object via the `MS_Model` `__set()` magic method with no field allowlist and no capability or ownership check on the submitted `id` parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject an arbitrary user ID via the `id` parameter — overwriting any WordPress user's email address and password, including the site administrator's — and subsequently use those modified credentials to gain full administrative access to the site."
}
],
"title": "MemberDash <= 1.8.7 - Authenticated (Subscriber+) Privilege Escalation to Administrator via Edit Profile 'id' Parameter",
"references": [
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/70d0bc5e-8db6-4a42-af19-d41280ec1207?source=cve"
},
{
"url": "https://docs.nexcess.com/software/changelogs/learndash/memberdash/"
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "CWE-639 Authorization Bypass Through User-Controlled Key",
"cweId": "CWE-639",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH"
}
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "andrea bocchetti"
}
],
"timeline": [
{
"time": "2026-11-14T00:20:18.000Z",
"lang": "en",
"value": "Disclosed"
}
]
}
}
}
data/2026/19xxx/CVE-2026-19907.json
+88
View File
@@ -0,0 +1,88 @@
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-19907",
"assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
"state": "PUBLISHED",
"assignerShortName": "Wordfence",
"dateReserved": "2026-08-14T19:56:29.273Z",
"datePublished": "2026-11-14T12:33:23.699Z",
"dateUpdated": "2026-11-14T12:33:23.699Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
"shortName": "Wordfence",
"dateUpdated": "2026-11-14T12:33:23.699Z"
},
"affected": [
{
"vendor": "shipo",
"product": "Shipo",
"versions": [
{
"version": "1.6",
"status": "affected",
"lessThanOrEqual": "1.8.0",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "The Shipo plugin for WordPress is vulnerable to Authentication Bypass in versions 1.6 through 1.8.0. This is due to the `authenticate_rest_user()` function parsing the `LOGGED_IN_COOKIE` value and authenticating the named user without verifying the cookie's cryptographic signature. The function's intended `/wp-json/shipo/` route restriction can also be bypassed by placing that substring in the query string of an unrelated REST endpoint. This makes it possible for unauthenticated attackers who know an existing username to impersonate that user, including an administrator, and perform authorized actions through the REST API, including creating another administrator account."
}
],
"title": "Shipo 1.6 - 1.8.0 - Authentication Bypass to Administrator",
"references": [
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ce5ea515-5ae1-4771-9bfb-5a0f4b3fce22?source=cve"
},
{
"url": "https://plugins.trac.wordpress.org/changeset/3701532/shipo"
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "CWE-287 Improper Authentication",
"cweId": "CWE-287",
"type": "CWE"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL"
}
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Nabil Irawan"
}
],
"timeline": [
{
"time": "2026-11-14T00:33:13.000Z",
"lang": "en",
"value": "Disclosed"
}
]
}
}
}
data/delta.json
+8 -32
View File
@@ -1,38 +1,14 @@
{
"fetchTime": "2026-11-14T11:58:44.202Z",
"numberOfChanges": 5,
"new": [
"fetchTime": "2026-11-14T13:06:35.590Z",
"numberOfChanges": 1,
"new": [],
"updated": [
{
"cveId": "CVE-2026-124540",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124540",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124540.json",
"dateUpdated": "2026-11-14T11:52:57.348Z"
},
{
"cveId": "CVE-2026-124541",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124541",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124541.json",
"dateUpdated": "2026-11-14T11:53:12.301Z"
},
{
"cveId": "CVE-2026-129113",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129113",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129113.json",
"dateUpdated": "2026-11-14T11:53:37.474Z"
},
{
"cveId": "CVE-2026-129114",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129114",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129114.json",
"dateUpdated": "2026-11-14T11:53:52.483Z"
},
{
"cveId": "CVE-2026-129115",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129115",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129115.json",
"dateUpdated": "2026-11-14T11:54:10.777Z"
"cveId": "CVE-2026-126658",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126658",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126658.json",
"dateUpdated": "2026-11-14T13:05:32.828Z"
}
],
"updated": [],
"error": []
}
data/deltaLog.json
+108 -158
View File
@@ -1,4 +1,112 @@
[
{
"fetchTime": "2026-11-14T13:06:35.590Z",
"numberOfChanges": 1,
"new": [],
"updated": [
{
"cveId": "CVE-2026-126658",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-126658",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/126xxx/CVE-2026-126658.json",
"dateUpdated": "2026-11-14T13:05:32.828Z"
}
],
"error": []
},
{
"fetchTime": "2026-11-14T12:34:47.047Z",
"numberOfChanges": 12,
"new": [
{
"cveId": "CVE-2025-71464",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-71464",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/71xxx/CVE-2025-71464.json",
"dateUpdated": "2026-11-14T12:32:57.503Z"
},
{
"cveId": "CVE-2025-71465",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2025-71465",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/71xxx/CVE-2025-71465.json",
"dateUpdated": "2026-11-14T12:32:56.793Z"
},
{
"cveId": "CVE-2026-120522",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120522",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120522.json",
"dateUpdated": "2026-11-14T12:33:22.808Z"
},
{
"cveId": "CVE-2026-129255",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129255",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129255.json",
"dateUpdated": "2026-11-14T12:30:17.941Z"
},
{
"cveId": "CVE-2026-129428",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129428",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129428.json",
"dateUpdated": "2026-11-14T12:32:56.082Z"
},
{
"cveId": "CVE-2026-129429",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129429",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129429.json",
"dateUpdated": "2026-11-14T12:32:55.388Z"
},
{
"cveId": "CVE-2026-129430",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129430",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129430.json",
"dateUpdated": "2026-11-14T12:32:54.682Z"
},
{
"cveId": "CVE-2026-129431",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129431",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129431.json",
"dateUpdated": "2026-11-14T12:32:53.988Z"
},
{
"cveId": "CVE-2026-129432",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129432",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129432.json",
"dateUpdated": "2026-11-14T12:32:53.320Z"
},
{
"cveId": "CVE-2026-129433",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129433",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129433.json",
"dateUpdated": "2026-11-14T12:32:52.619Z"
},
{
"cveId": "CVE-2026-18053",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-18053",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18053.json",
"dateUpdated": "2026-11-14T12:33:23.333Z"
},
{
"cveId": "CVE-2026-19907",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-19907",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/19xxx/CVE-2026-19907.json",
"dateUpdated": "2026-11-14T12:33:23.699Z"
}
],
"updated": [],
"error": []
},
{
"fetchTime": "2026-11-14T12:20:34.919Z",
"numberOfChanges": 1,
"new": [
{
"cveId": "CVE-2026-129254",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-129254",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/129xxx/CVE-2026-129254.json",
"dateUpdated": "2026-11-14T12:15:19.288Z"
}
],
"updated": [],
"error": []
},
{
"fetchTime": "2026-11-14T11:58:44.202Z",
"numberOfChanges": 5,
@@ -758600,163 +758708,5 @@
}
],
"error": []
},
{
"fetchTime": "2026-10-15T13:00:27.264Z",
"numberOfChanges": 8,
"new": [
{
"cveId": "CVE-2026-102389",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102389",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102389.json",
"dateUpdated": "2026-10-15T13:00:23.730Z"
},
{
"cveId": "CVE-2026-105882",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105882",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105882.json",
"dateUpdated": "2026-10-15T13:00:23.484Z"
},
{
"cveId": "CVE-2026-107416",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107416",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107416.json",
"dateUpdated": "2026-10-15T13:00:23.199Z"
},
{
"cveId": "CVE-2026-109685",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109685",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109685.json",
"dateUpdated": "2026-10-15T13:00:23.963Z"
},
{
"cveId": "CVE-2026-109686",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109686",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109686.json",
"dateUpdated": "2026-10-15T13:00:24.207Z"
},
{
"cveId": "CVE-2026-109688",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109688",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109688.json",
"dateUpdated": "2026-10-15T13:00:23.246Z"
},
{
"cveId": "CVE-2026-109702",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109702",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109702.json",
"dateUpdated": "2026-10-15T13:00:23.016Z"
},
{
"cveId": "CVE-2026-109892",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109892",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109892.json",
"dateUpdated": "2026-10-15T13:00:23.774Z"
}
],
"updated": [],
"error": []
},
{
"fetchTime": "2026-10-15T12:44:04.887Z",
"numberOfChanges": 3,
"new": [
{
"cveId": "CVE-2026-88794",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88794",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88794.json",
"dateUpdated": "2026-10-15T12:24:54.903Z"
},
{
"cveId": "CVE-2026-99999",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99999",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99999.json",
"dateUpdated": "2026-10-15T12:19:22.784Z"
}
],
"updated": [
{
"cveId": "CVE-2026-98432",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98432",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98432.json",
"dateUpdated": "2026-10-15T12:19:54.582Z"
}
],
"error": []
},
{
"fetchTime": "2026-10-15T12:18:57.273Z",
"numberOfChanges": 11,
"new": [
{
"cveId": "CVE-2026-104025",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-104025",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104025.json",
"dateUpdated": "2026-10-15T12:00:49.995Z"
},
{
"cveId": "CVE-2026-109692",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109692",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109692.json",
"dateUpdated": "2026-10-15T12:09:05.084Z"
},
{
"cveId": "CVE-2026-109693",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109693",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109693.json",
"dateUpdated": "2026-10-15T12:09:04.952Z"
},
{
"cveId": "CVE-2026-109698",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109698",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109698.json",
"dateUpdated": "2026-10-15T12:09:05.215Z"
},
{
"cveId": "CVE-2026-110723",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110723",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110723.json",
"dateUpdated": "2026-10-15T12:14:08.140Z"
},
{
"cveId": "CVE-2026-110724",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110724",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110724.json",
"dateUpdated": "2026-10-15T12:11:37.639Z"
},
{
"cveId": "CVE-2026-79837",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-79837",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/79xxx/CVE-2026-79837.json",
"dateUpdated": "2026-10-15T12:07:43.057Z"
},
{
"cveId": "CVE-2026-98432",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98432",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98432.json",
"dateUpdated": "2026-10-15T12:08:22.205Z"
}
],
"updated": [
{
"cveId": "CVE-2024-11831",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-11831",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11831.json",
"dateUpdated": "2026-10-15T12:00:35.100Z"
},
{
"cveId": "CVE-2026-101258",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-101258",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/101xxx/CVE-2026-101258.json",
"dateUpdated": "2026-10-15T12:06:22.722Z"
},
{
"cveId": "CVE-2026-12912",
"cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-12912",
"githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12912.json",
"dateUpdated": "2026-10-15T12:06:33.174Z"
}
],
"error": []
}
]
state/sync.json
+3 -3
View File
@@ -1,7 +1,7 @@
{
"source": "https://github.com/CVEProject/cvelistV5.git",
"upstream_commit": "289c6e80157fa09b2573d00046216db1d71c7e23",
"upstream_commit": "924b00e6e4178ef41cdbc3ac8b58f608d7bd3290",
"since_year": 2017,
"records": 332584,
"synced_at_utc": "2026-11-14T12:27:53.891269+00:00"
"records": 332597,
"synced_at_utc": "2026-11-14T13:26:59.091460+00:00"
}