NVD update 2026-11-14T16:48:03Z
This commit is contained in:
Vulnerability Bot committed
1 parent
402582e95b
commit
870bb1ea64
14 files changed
+14
-6
No files matched your search
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"FV Player 8","vendor":"foliovision","versions":[{"lessThanOrEqual":"8.1.9","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The FV Player 8 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fv_player_videos' parameter in all versions up to, and including, 8.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires the administrator-controlled \"Allow visitors to upload videos to their profile\" setting to be enabled, without which the vulnerable save routine is inaccessible to Subscriber-level users."}],"id":"CVE-2026-110531","lastModified":"2026-11-14T16:17:03.750","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":3.1,"impactScore":2.7,"source":"security@wordfence.com","type":"Primary"}]},"published":"2026-11-14T16:17:02.753","references":[{"source":"security@wordfence.com","url":"https://github.com/foliovision/fv-wordpress-flowplayer/commit/1c936e8100989c34e08415adfcb5ea3db2109902"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/fv-player/trunk/freedom-video-player/modules/overlay-popup.module.js#L95"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/fv-player/trunk/models/custom-videos.php#L115"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/fv-player/trunk/models/custom-videos.php#L757"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/fv-player/trunk/models/custom-videos.php#L790"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/fv-player/trunk/models/email-subscription.php#L762"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/fv-player/trunk/models/fv-player-frontend.php#L1224"},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4d581f96-5a30-49f7-bddf-45dd581d7a24?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"security@wordfence.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Multi Step for Contact Form 7","vendor":"ninjateam","versions":[{"lessThanOrEqual":"2.9.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Multi Step for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'multipart field name (array key)' parameter in all versions up to, and including, 2.9.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Successful exploitation requires the target CF7 form to have the 'Save every step' option enabled and the Database for Contact Form 7 companion plugin to be active with its 'Expandable' table option enabled, both of which are disabled by default."}],"id":"CVE-2026-116753","lastModified":"2026-11-14T16:17:03.917","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":2.7,"source":"security@wordfence.com","type":"Primary"}]},"published":"2026-11-14T16:17:03.793","references":[{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/cf7-multi-step/tags/2.9.1/inc/frontend/validation.php#L20"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/cf7-multi-step/tags/2.9.1/inc/frontend/validation.php#L291"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/cf7-multi-step/tags/2.9.1/inc/frontend/validation.php#L330"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/cf7-multi-step/tags/2.9.2/inc/frontend/validation.php"},{"source":"security@wordfence.com","url":"https://wordpress.org/plugins/cf7-multi-step/"},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b9700627-97f2-4da1-a984-934062bd5014?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"security@wordfence.com","type":"Primary"}]}
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["bgpd"],"product":"frrouting","programFiles":["bgpd/bgp_fsm.c"],"programRoutines":[{"name":"bgp_event_stop_with_notify"}],"repo":"https://github.com/FRRouting/frr/","vendor":"frrouting","versions":[{"changes":[{"at":"57a7f3eb48837359d6e3ee5ebd4acea8f49320e5","status":"unaffected"}],"lessThan":"*","status":"affected","version":"4967bf6d729d7dd14dff7b672b2fd4afe78a0d86","versionType":"git"}]}],"source":"57a55968-44ac-464c-a794-6ba3baad09c4"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In FRRouting 10.1 and later, bgpd does not correctly close a BGP session when the Send Hold Timer (RFC 9687) expires, i.e. when a neighbor has stopped accepting data from the router for twice the hold time. The connection is closed, but bgpd still considers the session to be up. A BGP neighbor that keeps sending KEEPALIVEs but stops reading from its connection, at a time when the router has a large amount of data to send to it (for example while sending it a full routing table), can trigger this. If the neighbor announced Graceful Restart support, bgpd crashes shortly after the session is closed, taking down all BGP sessions on the router, and the neighbor can repeat this each time bgpd restarts. Otherwise, the session stays stuck in the Established state: the neighbor's routes stay installed and keep being advertised to other peers, and the neighbor cannot reconnect until an operator clears the session manually. The neighbor does not need to be malicious; an overloaded or stuck peer can trigger the same behavior. No special configuration is required: any established BGP neighbor can trigger the issue, and Graceful Restart helper mode, which leads to the crash, is enabled by default."}],"id":"CVE-2026-120033","lastModified":"2026-11-13T07:17:20.477","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"AUTOMATIC","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"57a55968-44ac-464c-a794-6ba3baad09c4","type":"Secondary"}]},"published":"2026-11-12T19:16:48.393","references":[{"source":"57a55968-44ac-464c-a794-6ba3baad09c4","url":"https://github.com/FRRouting/frr/pull/23945/changes/57a7f3eb48837359d6e3ee5ebd4acea8f49320e5"}],"sourceIdentifier":"57a55968-44ac-464c-a794-6ba3baad09c4","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-372"},{"lang":"en","value":"CWE-617"}],"source":"57a55968-44ac-464c-a794-6ba3baad09c4","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["bgpd"],"product":"frrouting","programFiles":["bgpd/bgp_fsm.c"],"programRoutines":[{"name":"bgp_event_stop_with_notify"}],"repo":"https://github.com/FRRouting/frr/","vendor":"frrouting","versions":[{"changes":[{"at":"57a7f3eb48837359d6e3ee5ebd4acea8f49320e5","status":"unaffected"}],"lessThan":"*","status":"affected","version":"4967bf6d729d7dd14dff7b672b2fd4afe78a0d86","versionType":"git"},{"lessThan":"10.4.6","status":"affected","version":"10.1.0","versionType":"semver"},{"lessThan":"10.5.6","status":"affected","version":"10.5.0","versionType":"semver"},{"lessThan":"10.6.3","status":"affected","version":"10.6.0","versionType":"semver"},{"lessThan":"10.7.2","status":"affected","version":"10.7.0","versionType":"semver"}]}],"source":"57a55968-44ac-464c-a794-6ba3baad09c4"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In FRRouting, bgpd does not correctly close a BGP session when the Send Hold Timer (RFC 9687) expires, i.e. when a neighbor has stopped accepting data from the router for twice the hold time. The connection is closed, but bgpd still considers the session to be up. A BGP neighbor that keeps sending KEEPALIVEs but stops reading from its connection, at a time when the router has a large amount of data to send to it (for example while sending it a full routing table), can trigger this. If the neighbor announced Graceful Restart support, bgpd crashes shortly after the session is closed, taking down all BGP sessions on the router, and the neighbor can repeat this each time bgpd restarts. Otherwise, the session stays stuck in the Established state: the neighbor's routes stay installed and keep being advertised to other peers, and the neighbor cannot reconnect until an operator clears the session manually. The neighbor does not need to be malicious; an overloaded or stuck peer can trigger the same behavior. No special configuration is required: any established BGP neighbor can trigger the issue, and Graceful Restart helper mode, which leads to the crash, is enabled by default."}],"id":"CVE-2026-120033","lastModified":"2026-11-14T15:16:57.373","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"AUTOMATIC","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.0,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"57a55968-44ac-464c-a794-6ba3baad09c4","type":"Secondary"}]},"published":"2026-11-12T19:16:48.393","references":[{"source":"57a55968-44ac-464c-a794-6ba3baad09c4","url":"https://github.com/FRRouting/frr/pull/23945/changes/57a7f3eb48837359d6e3ee5ebd4acea8f49320e5"}],"sourceIdentifier":"57a55968-44ac-464c-a794-6ba3baad09c4","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-372"},{"lang":"en","value":"CWE-617"}],"source":"57a55968-44ac-464c-a794-6ba3baad09c4","type":"Secondary"}]}
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["bgpd"],"product":"frrouting","programFiles":["bgpd/bgpd.c"],"programRoutines":[{"name":"peer_group2peer_config_copy_af"},{"name":"peer_delete"}],"repo":"https://github.com/FRRouting/frr/","vendor":"frrouting","versions":[{"changes":[{"at":"6a96f515760dc278147fbf802777956ba80c7edd","status":"unaffected"}],"lessThan":"*","status":"affected","version":"01da2d26911c72023e71579bf4feeb707087ef50","versionType":"git"}]}],"source":"57a55968-44ac-464c-a794-6ba3baad09c4"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In FRRouting 8.4 and later, bgpd frees the same memory twice when dynamic BGP neighbors disconnect, if the peer-group used by a \"bgp listen range\" also has a Site-of-Origin configured (\"neighbor PG soo\"). Each dynamic neighbor shares the peer-group's SoO value instead of getting its own copy, but frees it as its own when the neighbor is deleted, which happens as soon as its connection closes. The first disconnect leaves the peer-group pointing at freed memory, and the second disconnect frees it again, causing bgpd to abort and drop all BGP sessions on the router. Any host whose address falls inside the listen range can trigger this by opening and closing two TCP connections to the BGP port, without sending any BGP message and without knowing the AS number, and can repeat it each time bgpd restarts. If the peer-group has a TCP-MD5 password, only hosts that know the password can trigger it. Two ordinary flaps of legitimate dynamic neighbors have the same effect. Between the two frees, displaying the configuration (\"show running-config\") or establishing a dynamic neighbor also reads the freed memory, which can crash bgpd after a single disconnect. Only configurations that combine a listen range with a SoO on the same peer-group are affected."}],"id":"CVE-2026-120221","lastModified":"2026-11-13T12:17:03.210","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"AUTOMATIC","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"57a55968-44ac-464c-a794-6ba3baad09c4","type":"Secondary"}]},"published":"2026-11-13T12:17:03.210","references":[{"source":"57a55968-44ac-464c-a794-6ba3baad09c4","url":"https://github.com/FRRouting/frr/pull/21685/changes/6a96f515760dc278147fbf802777956ba80c7edd"}],"sourceIdentifier":"57a55968-44ac-464c-a794-6ba3baad09c4","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-415"},{"lang":"en","value":"CWE-416"}],"source":"57a55968-44ac-464c-a794-6ba3baad09c4","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["bgpd"],"product":"frrouting","programFiles":["bgpd/bgpd.c"],"programRoutines":[{"name":"peer_group2peer_config_copy_af"},{"name":"peer_delete"}],"repo":"https://github.com/FRRouting/frr/","vendor":"frrouting","versions":[{"changes":[{"at":"6a96f515760dc278147fbf802777956ba80c7edd","status":"unaffected"}],"lessThan":"*","status":"affected","version":"01da2d26911c72023e71579bf4feeb707087ef50","versionType":"git"},{"lessThan":"10.2.7","status":"affected","version":"8.4.0","versionType":"semver"},{"lessThan":"10.3.5","status":"affected","version":"10.3.0","versionType":"semver"},{"lessThan":"10.4.6","status":"affected","version":"10.4.0","versionType":"semver"},{"lessThan":"10.5.6","status":"affected","version":"10.5.0","versionType":"semver"},{"lessThan":"10.6.3","status":"affected","version":"10.6.0","versionType":"semver"},{"lessThan":"10.7.2","status":"affected","version":"10.7.0","versionType":"semver"}]}],"source":"57a55968-44ac-464c-a794-6ba3baad09c4"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In FRRouting, bgpd frees the same memory twice when dynamic BGP neighbors disconnect, if the peer-group used by a \"bgp listen range\" also has a Site-of-Origin configured (\"neighbor PG soo\"). Each dynamic neighbor shares the peer-group's SoO value instead of getting its own copy, but frees it as its own when the neighbor is deleted, which happens as soon as its connection closes. The first disconnect leaves the peer-group pointing at freed memory, and the second disconnect frees it again, causing bgpd to abort and drop all BGP sessions on the router. Any host whose address falls inside the listen range can trigger this by opening and closing two TCP connections to the BGP port, without sending any BGP message and without knowing the AS number, and can repeat it each time bgpd restarts. If the peer-group has a TCP-MD5 password, only hosts that know the password can trigger it. Two ordinary flaps of legitimate dynamic neighbors have the same effect. Between the two frees, displaying the configuration (\"show running-config\") or establishing a dynamic neighbor also reads the freed memory, which can crash bgpd after a single disconnect. Only configurations that combine a listen range with a SoO on the same peer-group are affected."}],"id":"CVE-2026-120221","lastModified":"2026-11-14T15:16:58.130","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"AUTOMATIC","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"57a55968-44ac-464c-a794-6ba3baad09c4","type":"Secondary"}]},"published":"2026-11-13T12:17:03.210","references":[{"source":"57a55968-44ac-464c-a794-6ba3baad09c4","url":"https://github.com/FRRouting/frr/pull/21685/changes/6a96f515760dc278147fbf802777956ba80c7edd"}],"sourceIdentifier":"57a55968-44ac-464c-a794-6ba3baad09c4","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-415"},{"lang":"en","value":"CWE-416"}],"source":"57a55968-44ac-464c-a794-6ba3baad09c4","type":"Secondary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Lightbox & Modal Popup WordPress Plugin – FooBox","vendor":"fooplugins","versions":[{"lessThanOrEqual":"2.8.7","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Lightbox & Modal Popup WordPress Plugin – FooBox plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'img alt attribute inside .wp-caption container' parameter in all versions up to, and including, 2.8.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable by Subscriber-level users when bbPress is installed, as its bbp_filter_kses filter chain permits img and pre tags while preserving numeric character references inside attribute values, allowing encoded payloads to bypass save-time sanitization and reach the vulnerable sink fully intact. Exploitation by attackers with subscriber-level access and above requires that bbPress 2.6.20 is installed, a public forum exists, and either the first topic has already been approved or subsequent topics clear moderation. On a default installation, where that is not configured, the vulnerability requires attackers with contributor-level access and above."}],"id":"CVE-2026-120687","lastModified":"2026-11-14T16:17:04.090","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":2.7,"source":"security@wordfence.com","type":"Primary"}]},"published":"2026-11-14T16:17:03.957","references":[{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/foobox-image-lightbox/tags/2.8.7/free/includes/class-script-generator.php#L175"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/foobox-image-lightbox/tags/2.8.7/free/js/foobox.free.min.js"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/changeset/3789888/foobox-image-lightbox"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3789888%40foobox-image-lightbox%2Ftags%2F2.8.8&old=3741260%40foobox-image-lightbox%2Ftags%2F2.8.7"},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/66b5a5a2-8f70-4a85-ad03-8bd159cafdf5?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"security@wordfence.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"BuddyForms","vendor":"themekraft","versions":[{"lessThanOrEqual":"2.10.6","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The BuddyForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'buddyforms_form_content' parameter in all versions up to, and including, 2.10.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable when a form configured with the public_submit option is published — a condition met by the plugin's bundled Post Simple template out of the box."}],"id":"CVE-2026-127115","lastModified":"2026-11-14T16:17:04.253","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":2.7,"source":"security@wordfence.com","type":"Primary"}]},"published":"2026-11-14T16:17:04.130","references":[{"source":"security@wordfence.com","url":"https://github.com/Themekraft/buddyforms/pull/783/files"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/buddyforms/tags/2.10.6/includes/form/form-ajax.php#L140"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/buddyforms/tags/2.10.6/includes/form/form-ajax.php#L145"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/buddyforms/tags/2.10.6/includes/form/form-control.php#L663"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/buddyforms/tags/2.10.6/includes/functions.php#L2518"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/buddyforms/tags/2.10.6/includes/functions.php#L270"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/buddyforms/tags/2.10.6/includes/shortcodes.php#L464"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/buddyforms/tags/2.10.7/includes/functions.php"},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9e2f180b-fd81-4dfd-b264-d9ca74fdd092?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"security@wordfence.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:o:tenda:ac18_firmware:*:*:*:*:*:*:*:*"],"modules":["Firmware Upgrade Handler"],"product":"AC18","vendor":"Tenda","versions":[{"status":"affected","version":"15.03.05.05_multi"},{"status":"affected","version":"15.03.05.19 Build 6318"}]}],"source":"cna@vuldb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability was identified in Tenda AC18 15.03.05.05_multi/15.03.05.19 Build 6318. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/upgrade of the component Firmware Upgrade Handler. Such manipulation of the argument upgradeFile leads to insufficient verification of data authenticity. The attack may be launched remotely. The exploit is publicly available and might be used."}],"id":"CVE-2026-129258","lastModified":"2026-11-14T15:16:58.433","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"MULTIPLE","availabilityImpact":"COMPLETE","baseScore":8.3,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:L/Au:M/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":6.4,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"cna@vuldb.com","type":"Secondary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.3,"impactScore":6.0,"source":"cna@vuldb.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.5,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"PROOF_OF_CONCEPT","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@vuldb.com","type":"Secondary"}]},"published":"2026-11-14T15:16:58.257","references":[{"source":"cna@vuldb.com","url":"https://github.com/longqx223/Tenda-ac-18-V15.03.05.05-/blob/main/2026-10-19-Tenda-AC18-unsigned-firmware-update-advisory-EN.pdf"},{"source":"cna@vuldb.com","url":"https://vuldb.com/cve/CVE-2026-129258"},{"source":"cna@vuldb.com","url":"https://vuldb.com/submit/1043033"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/437295"},{"source":"cna@vuldb.com","url":"https://vuldb.com/vuln/437295/cti"},{"source":"cna@vuldb.com","url":"https://www.tenda.com.cn/"}],"sourceIdentifier":"cna@vuldb.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-345"}],"source":"cna@vuldb.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:mereithhh:vanblog:*:*:*:*:*:*:*:*"],"modules":["Image Upload Endpoint"],"product":"VanBlog","vendor":"Mereithhh","versions":[{"status":"affected","version":"0.1"},{"status":"affected","version":"0.2"},{"status":"affected","version":"0.3"},{"status":"affected","version":"0.4"},{"status":"affected","version":"0.5"},{"status":"affected","version":"0.6"},{"status":"affected","version":"0.7"},{"status":"affected","version":"0.8"},{"status":"affected","version":"0.9"},{"status":"affected","version":"0.10"},{"status":"affected","version":"0.11"},{"status":"affected","version":"0.12"},{"status":"affected","version":"0.13"},{"status":"affected","version":"0.14"},{"status":"affected","version":"0.15"},{"status":"affected","version":"0.16"},{"status":"affected","version":"0.17"},{"status":"affected","version":"0.18"},{"status":"affected","version":"0.19"},{"status":"affected","version":"0.20"},{"status":"affected","version":"0.21"},{"status":"affected","version":"0.22"},{"status":"affected","version":"0.23"},{"status":"affected","version":"0.24"},{"status":"affected","version":"0.25"},{"status":"affected","version":"0.26"},{"status":"affected","version":"0.27"},{"status":"affected","version":"0.28"},{"status":"affected","version":"0.29"},{"status":"affected","version":"0.30"},{"status":"affected","version":"0.31"},{"status":"affected","version":"0.32"},{"status":"affected","version":"0.33"},{"status":"affected","version":"0.34"},{"status":"affected","version":"0.35"},{"status":"affected","version":"0.36"},{"status":"affected","version":"0.37"},{"status":"affected","version":"0.38"},{"status":"affected","version":"0.39"},{"status":"affected","version":"0.40"},{"status":"affected","version":"0.41"},{"status":"affected","version":"0.42"},{"status":"affected","version":"0.43"},{"status":"affected","version":"0.44"},{"status":"affected","version":"0.45"},{"status":"affected","version":"0.46"},{"status":"affected","version":"0.47"},{"status":"affected","version":"0.48"},{"status":"affected","version":"0.49"},{"status":"affected","version":"0.50"},{"status":"affected","version":"0.51"},{"status":"affected","version":"0.52"},{"status":"affected","version":"0.53"},{"status":"affected","version":"0.54.0"}]}],"source":"cna@vuldb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A weakness has been identified in Mereithhh VanBlog up to 0.54.0. This affects an unknown part of the file packages/server/src/types/access/access.ts of the component Image Upload Endpoint. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."}],"id":"CVE-2026-129259","lastModified":"2026-11-14T15:16:58.633","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"NONE","baseScore":4.0,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","version":"2.0"},"exploitabilityScore":8.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"cna@vuldb.com","type":"Secondary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.5,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":2.1,"impactScore":1.4,"source":"cna@vuldb.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.0,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"PROOF_OF_CONCEPT","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:Line truncated
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:mereithhh:vanblog:*:*:*:*:*:*:*:*"],"modules":["Custom Page Handler"],"product":"VanBlog","vendor":"Mereithhh","versions":[{"status":"affected","version":"0.1"},{"status":"affected","version":"0.2"},{"status":"affected","version":"0.3"},{"status":"affected","version":"0.4"},{"status":"affected","version":"0.5"},{"status":"affected","version":"0.6"},{"status":"affected","version":"0.7"},{"status":"affected","version":"0.8"},{"status":"affected","version":"0.9"},{"status":"affected","version":"0.10"},{"status":"affected","version":"0.11"},{"status":"affected","version":"0.12"},{"status":"affected","version":"0.13"},{"status":"affected","version":"0.14"},{"status":"affected","version":"0.15"},{"status":"affected","version":"0.16"},{"status":"affected","version":"0.17"},{"status":"affected","version":"0.18"},{"status":"affected","version":"0.19"},{"status":"affected","version":"0.20"},{"status":"affected","version":"0.21"},{"status":"affected","version":"0.22"},{"status":"affected","version":"0.23"},{"status":"affected","version":"0.24"},{"status":"affected","version":"0.25"},{"status":"affected","version":"0.26"},{"status":"affected","version":"0.27"},{"status":"affected","version":"0.28"},{"status":"affected","version":"0.29"},{"status":"affected","version":"0.30"},{"status":"affected","version":"0.31"},{"status":"affected","version":"0.32"},{"status":"affected","version":"0.33"},{"status":"affected","version":"0.34"},{"status":"affected","version":"0.35"},{"status":"affected","version":"0.36"},{"status":"affected","version":"0.37"},{"status":"affected","version":"0.38"},{"status":"affected","version":"0.39"},{"status":"affected","version":"0.40"},{"status":"affected","version":"0.41"},{"status":"affected","version":"0.42"},{"status":"affected","version":"0.43"},{"status":"affected","version":"0.44"},{"status":"affected","version":"0.45"},{"status":"affected","version":"0.46"},{"status":"affected","version":"0.47"},{"status":"affected","version":"0.48"},{"status":"affected","version":"0.49"},{"status":"affected","version":"0.50"},{"status":"affected","version":"0.51"},{"status":"affected","version":"0.52"},{"status":"affected","version":"0.53"},{"status":"affected","version":"0.54.0"},{"status":"unaffected","version":"test-20261013"}]}],"source":"cna@vuldb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A security vulnerability has been detected in Mereithhh VanBlog up to 0.54.0. This vulnerability affects the function fs.readFileSync of the file local.provider.ts of the component Custom Page Handler. The manipulation of the argument path leads to path traversal. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. Upgrading to version test-20261013 is able to resolve this issue. The identifier of the patch is d63aa163f10b6dc1080e2368fe8e71aa95b765cb. Upgrading the affected component is advised."}],"id":"CVE-2026-129260","lastModified":"2026-11-14T16:17:04.450","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"MULTIPLE","availabilityImpact":"PARTIAL","baseScore":5.8,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:M/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":6.4,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"cna@vuldb.com","type":"Secondary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.6,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":2.3,"impactScore":3.7,"source":"cna@vuldb.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.0,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"PROOF_OF_CONCEPT","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegriLine truncated
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:kingston:fury_ctrl_rgb_control_software:*:*:*:*:*:*:*:*"],"modules":["IOCTL Handler"],"product":"FURY CTRL RGB Control Software","vendor":"Kingston","versions":[{"status":"affected","version":"2.0.0"},{"status":"affected","version":"2.0.1"},{"status":"affected","version":"2.0.2"},{"status":"affected","version":"2.0.3"},{"status":"affected","version":"2.0.4"},{"status":"affected","version":"2.0.5"},{"status":"affected","version":"2.0.6"},{"status":"affected","version":"2.0.7"},{"status":"affected","version":"2.0.8"},{"status":"affected","version":"2.0.9"},{"status":"affected","version":"2.0.10"},{"status":"affected","version":"2.0.11"},{"status":"affected","version":"2.0.12"},{"status":"affected","version":"2.0.13"},{"status":"affected","version":"2.0.14"},{"status":"affected","version":"2.0.15"},{"status":"affected","version":"2.0.16"},{"status":"affected","version":"2.0.17"},{"status":"affected","version":"2.0.18"},{"status":"affected","version":"2.0.19"},{"status":"affected","version":"2.0.20"},{"status":"affected","version":"2.0.21"},{"status":"affected","version":"2.0.22"},{"status":"affected","version":"2.0.23"},{"status":"affected","version":"2.0.24"},{"status":"affected","version":"2.0.25"},{"status":"affected","version":"2.0.26"},{"status":"affected","version":"2.0.27"},{"status":"affected","version":"2.0.28"},{"status":"affected","version":"2.0.29"},{"status":"affected","version":"2.0.30"},{"status":"affected","version":"2.0.31"},{"status":"affected","version":"2.0.32"},{"status":"affected","version":"2.0.33"},{"status":"affected","version":"2.0.34"},{"status":"affected","version":"2.0.35"},{"status":"affected","version":"2.0.36"},{"status":"affected","version":"2.0.37"},{"status":"affected","version":"2.0.38"},{"status":"affected","version":"2.0.39"},{"status":"affected","version":"2.0.40"},{"status":"affected","version":"2.0.41"},{"status":"affected","version":"2.0.42"},{"status":"affected","version":"2.0.43"},{"status":"affected","version":"2.0.44"},{"status":"affected","version":"2.0.45"},{"status":"affected","version":"2.0.46"},{"status":"affected","version":"2.0.47"},{"status":"affected","version":"2.0.48"},{"status":"affected","version":"2.0.49"},{"status":"affected","version":"2.0.50"},{"status":"affected","version":"2.0.51"},{"status":"affected","version":"2.0.52"},{"status":"affected","version":"2.0.53"},{"status":"affected","version":"2.0.54"},{"status":"affected","version":"2.0.55"},{"status":"affected","version":"2.0.56"},{"status":"affected","version":"2.0.57"},{"status":"affected","version":"2.0.58"},{"status":"affected","version":"2.0.59"},{"status":"affected","version":"2.0.60"},{"status":"affected","version":"2.0.61"},{"status":"affected","version":"2.0.62"},{"status":"affected","version":"2.0.63"},{"status":"affected","version":"2.0.64"},{"status":"affected","version":"2.0.65"},{"status":"affected","version":"2.0.66.0"}]}],"source":"cna@vuldb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability was found in Kingston FURY CTRL RGB Control Software up to 2.0.66.0. The impacted element is an unknown function in the library NTIOLib_X64.sys of the component IOCTL Handler. Performing a manipulation results in exposed ioctl with insufficient access control. The attack is only possible with local access."}],"id":"CVE-2026-129261","lastModified":"2026-11-14T16:17:04.677","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"MULTIPLE","availabilityImpact":"COMPLETE","baseScore":6.5,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:L/AC:L/Au:M/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":2.5,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"cna@vuldb.com","type":"Secondary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.5,"impactScore":6.0,"source":"cna@vuldb.com","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubCLine truncated
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected","packageName":"serbian-transliteration","product":"Transliterator","vendor":"Ivijan-Stefan Stipic","versions":[{"changes":[{"at":"2.5.14","status":"unaffected"}],"lessThanOrEqual":"2.5.13","status":"affected","version":"n/a","versionType":"custom"}]}],"source":"audit@patchstack.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Unauthenticated SQL Injection in Transliterator <= 2.5.13 versions."}],"id":"CVE-2026-39732","lastModified":"2026-10-30T19:22:27.173","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.7,"source":"audit@patchstack.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-39732","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-10-30T18:48:04.618662Z","version":"2.0.3"}}]},"published":"2026-10-30T19:18:24.137","references":[{"source":"audit@patchstack.com","url":"https://patchstack.com/database/wordpress/plugin/serbian-transliteration/vulnerability/wordpress-transliterator-plugin-2-5-13-sql-injection-vulnerability?_s_id=cve"}],"sourceIdentifier":"audit@patchstack.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"audit@patchstack.com","type":"Primary"}]}
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected","packageName":"serbian-transliteration","product":"Transliterator","vendor":"INTINITUM FORM","versions":[{"changes":[{"at":"2.5.14","status":"unaffected"}],"lessThanOrEqual":"2.5.13","status":"affected","version":"0","versionType":"custom"}]}],"source":"audit@patchstack.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in INTINITUM FORM Transliterator serbian-transliteration allows Blind SQL Injection.This issue affects Transliterator: from n/a through 2.5.13."}],"id":"CVE-2026-39732","lastModified":"2026-11-14T15:16:58.703","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.7,"source":"audit@patchstack.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-39732","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-10-30T18:48:04.618662Z","version":"2.0.3"}}]},"published":"2026-10-30T19:18:24.137","references":[{"source":"audit@patchstack.com","url":"https://patchstack.com/database/wordpress/plugin/serbian-transliteration/vulnerability/wordpress-transliterator-plugin-2-5-13-sql-injection-vulnerability?_s_id=cve"}],"sourceIdentifier":"audit@patchstack.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"audit@patchstack.com","type":"Secondary"}]}
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Buddyboss Platform","vendor":"MightyNetworks vs BuddyBoss","versions":[{"changes":[{"at":"3.1.0","status":"unaffected"}],"lessThanOrEqual":"3.0.5","status":"affected","version":"n/a","versionType":"custom"}]}],"source":"audit@patchstack.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Unauthenticated SQL Injection in Buddyboss Platform <= 3.0.5 versions."},{"lang":"es","value":"Inyección SQL no autenticada en versiones menor o igual que 3.0.5 de Buddyboss Platform."}],"id":"CVE-2026-59514","lastModified":"2026-10-24T13:10:00.147","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.7,"source":"audit@patchstack.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-59514","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-07-23T14:57:08.254712Z","version":"2.0.3"}}]},"published":"2026-07-23T12:18:32.103","references":[{"source":"audit@patchstack.com","url":"https://patchstack.com/database/wordpress/plugin/buddyboss-platform/vulnerability/wordpress-buddyboss-platform-plugin-3-0-5-sql-injection-vulnerability?_s_id=cve"}],"sourceIdentifier":"audit@patchstack.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"audit@patchstack.com","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected","packageName":"buddyboss-platform","product":"Buddyboss Platform","vendor":"BuddyBoss","versions":[{"changes":[{"at":"3.1.0","status":"unaffected"}],"lessThanOrEqual":"3.0.5","status":"affected","version":"0","versionType":"custom"}]}],"source":"audit@patchstack.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyBoss Buddyboss Platform buddyboss-platform allows Blind SQL Injection.This issue affects Buddyboss Platform: from n/a through 3.0.5."},{"lang":"es","value":"Inyección SQL no autenticada en versiones menor o igual que 3.0.5 de Buddyboss Platform."}],"id":"CVE-2026-59514","lastModified":"2026-11-14T15:16:58.853","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.7,"source":"audit@patchstack.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-59514","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-07-23T14:57:08.254712Z","version":"2.0.3"}}]},"published":"2026-07-23T12:18:32.103","references":[{"source":"audit@patchstack.com","url":"https://patchstack.com/database/wordpress/plugin/buddyboss-platform/vulnerability/wordpress-buddyboss-platform-plugin-3-0-5-sql-injection-vulnerability?_s_id=cve"}],"sourceIdentifier":"audit@patchstack.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"audit@patchstack.com","type":"Secondary"}]}
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected","packageName":"ulisting","product":"uListing","vendor":"Stylemix","versions":[{"lessThanOrEqual":"2.2.0","status":"affected","version":"n/a","versionType":"custom"}]}],"source":"audit@patchstack.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Unauthenticated SQL Injection in uListing <= 2.2.0 versions."}],"id":"CVE-2026-62031","lastModified":"2026-10-13T13:28:15.717","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.7,"source":"audit@patchstack.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-62031","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-10-11T11:52:03.983868Z","version":"2.0.3"}}]},"published":"2026-10-10T20:16:39.237","references":[{"source":"audit@patchstack.com","url":"https://patchstack.com/database/wordpress/plugin/ulisting/vulnerability/wordpress-ulisting-plugin-2-2-0-sql-injection-vulnerability?_s_id=cve"}],"sourceIdentifier":"audit@patchstack.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"audit@patchstack.com","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected","packageName":"ulisting","product":"uListing","vendor":"StylemixThemes","versions":[{"lessThanOrEqual":"2.2.0","status":"affected","version":"0","versionType":"custom"}]}],"source":"audit@patchstack.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes uListing ulisting allows Blind SQL Injection.This issue affects uListing: from n/a through 2.2.0."}],"id":"CVE-2026-62031","lastModified":"2026-11-14T15:16:58.987","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.7,"source":"audit@patchstack.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-62031","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-10-11T11:52:03.983868Z","version":"2.0.3"}}]},"published":"2026-10-10T20:16:39.237","references":[{"source":"audit@patchstack.com","url":"https://patchstack.com/database/wordpress/plugin/ulisting/vulnerability/wordpress-ulisting-plugin-2-2-0-sql-injection-vulnerability?_s_id=cve"}],"sourceIdentifier":"audit@patchstack.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"audit@patchstack.com","type":"Secondary"}]}
|
||||
+1
-1
@@ -1 +1 @@
|
||||
{"initial_complete":true,"last_run_counts":{"seen":3782,"skipped":1,"unchanged":3767,"written":14},"last_run_mode":"incremental","last_successful_end":"2026-11-14T14:42:26+00:00","schema_version":1,"since_year":2017,"source":"NVD CVE API 2.0","updated_at":"2026-11-14T14:48:02.589937+00:00"}
|
||||
{"initial_complete":true,"last_run_counts":{"seen":3740,"skipped":1,"unchanged":3726,"written":13},"last_run_mode":"incremental","last_successful_end":"2026-11-14T16:42:27+00:00","schema_version":1,"since_year":2017,"source":"NVD CVE API 2.0","updated_at":"2026-11-14T16:47:52.514676+00:00"}
|
||||
Reference in new issue
Block a user