NVD update 2026-11-12T10:47:54Z
This commit is contained in:
Vulnerability Bot
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Telerik Reporting","vendor":"Progress Software","versions":[{"lessThan":"20.3.26.1110","status":"affected","version":"0","versionType":"custom"}]}],"source":"security@progress.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In Progress® Telerik® Reporting prior to version 20.3.26.1110, a deserialization of untrusted data vulnerability in the .NET Framework report designers allows a local attacker with low privileges to execute arbitrary code in the context of the designer process when the user performs certain editing operations."}],"id":"CVE-2026-106140","lastModified":"2026-11-12T10:17:26.987","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.3,"impactScore":5.9,"source":"security@progress.com","type":"Secondary"}]},"published":"2026-11-12T10:17:26.987","references":[{"source":"security@progress.com","url":"https://www.telerik.com/products/reporting/documentation/knowledge-base/kb-security-deserialization-of-untrusted-data-cve-2026-106140"}],"sourceIdentifier":"security@progress.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-502"}],"source":"security@progress.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Payara Server","vendor":"Azul Payara","versions":[{"lessThan":"7.6.0","status":"affected","version":"7.0.0","versionType":"semver"},{"lessThan":"7.2026.11","status":"affected","version":"7.2024.1.Alpha1","versionType":"custom"},{"lessThan":"6.44.0","status":"affected","version":"6.0.0","versionType":"semver"},{"lessThanOrEqual":"6.2025.11","status":"affected","version":"6.2022.1","versionType":"custom"},{"lessThan":"5.93.0","status":"affected","version":"5.20.0","versionType":"semver"},{"lessThanOrEqual":"5.201.2","status":"affected","version":"5.181","versionType":"custom"},{"lessThanOrEqual":"5.2022.5","status":"affected","version":"5.2020.2","versionType":"custom"},{"lessThan":"4.1.2.191.61","status":"affected","version":"4.1.2.191","versionType":"custom"}]}],"source":"769c9ae7-73c3-4e47-ae19-903170fc3eb8"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the administration REST interface of Azul Payara allows a remote, unauthenticated attacker to bypass secure-admin remote-access restrictions by supplying an arbitrary value in the X-GlassFish-authToken HTTP header. The header's presence waives the remote-rejection check before the token is validated, and an invalid token falls through to password-based authentication, which succeeds without credentials on default domains configured with an empty administrative password. Successful exploitation grants execution of arbitrary administrative commands, equivalent to complete compromise of the server."}],"id":"CVE-2026-110003","lastModified":"2026-11-12T09:16:39.813","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"769c9ae7-73c3-4e47-ae19-903170fc3eb8","type":"Secondary"}]},"published":"2026-11-12T09:16:39.813","references":[{"source":"769c9ae7-73c3-4e47-ae19-903170fc3eb8","url":"https://docs.azul.com/payara-community/release-notes/release-notes-7.2026.11.html"},{"source":"769c9ae7-73c3-4e47-ae19-903170fc3eb8","url":"https://docs.azul.com/payara/release-notes/release-notes-7.6.0.html"},{"source":"769c9ae7-73c3-4e47-ae19-903170fc3eb8","url":"https://docs.azul.com/payara/version/4/release-notes/release-notes-4.1.2.191.61.html"},{"source":"769c9ae7-73c3-4e47-ae19-903170fc3eb8","url":"https://docs.azul.com/payara/version/5/release-notes/release-notes-5.93.0.html"},{"source":"769c9ae7-73c3-4e47-ae19-903170fc3eb8","url":"https://docs.azul.com/payara/version/6/release-notes/release-notes-6.44.0.html"}],"sourceIdentifier":"769c9ae7-73c3-4e47-ae19-903170fc3eb8","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-288"}],"source":"769c9ae7-73c3-4e47-ae19-903170fc3eb8","type":"Secondary"}]}
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://atomgit.com/src-openeuler/iSulad","defaultStatus":"affected","packageName":"iSulad","platforms":["Linux"],"product":"iSulad","programFiles":["src/daemon/modules/spec/specs_mount.c"],"repo":"https://atomgit.com/openeuler/iSulad","vendor":"openEuler","versions":[{"lessThanOrEqual":"2.1.6","status":"affected","version":"0","versionType":"rpm"}]}],"source":"securities@openeuler.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux.\n\nThis vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c.\n\n\n\nThis issue affects iSulad: through 2.1.6.\n\n\n\nIf an attacker can get the victim or the platform to run their crafted malicious image, they can cause the iSulad daemon to copy sensitive host directories into an anonymous volume when creating a container, which the container can then read."}],"id":"CVE-2026-111433","lastModified":"2026-11-12T04:17:17.160","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.0,"source":"securities@openeuler.org","type":"Secondary"}]},"published":"2026-11-12T04:17:17.160","references":[{"source":"securities@openeuler.org","url":"https://atomgit.com/openeuler/iSulad/commit/3af9a2bf517b570fe20b1ee1070668a6270d6e11?ref=master&prId=2652"},{"source":"securities@openeuler.org","url":"https://atomgit.com/src-openeuler/iSulad/pull/812"}],"sourceIdentifier":"securities@openeuler.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-61"}],"source":"securities@openeuler.org","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://atomgit.com/src-openeuler/iSulad","defaultStatus":"affected","packageName":"iSulad","platforms":["Linux"],"product":"iSulad","programFiles":["src/daemon/modules/spec/specs_mount.c"],"repo":"https://atomgit.com/openeuler/iSulad","vendor":"openEuler","versions":[{"lessThanOrEqual":"2.1.6","status":"affected","version":"0","versionType":"rpm"}]}],"source":"securities@openeuler.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux.\n\nThis vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c.\n\n\n\nThis issue affects iSulad: through 2.1.6.\n\n\n\nIf an attacker can get the victim or the platform to run their crafted malicious image, they can cause the iSulad daemon to copy sensitive host directories into an anonymous volume when creating a container, which the container can then read."}],"id":"CVE-2026-111433","lastModified":"2026-11-12T10:17:27.557","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.0,"source":"securities@openeuler.org","type":"Secondary"}]},"published":"2026-11-12T04:17:17.160","references":[{"source":"securities@openeuler.org","url":"https://atomgit.com/openeuler/iSulad/commit/3af9a2bf517b570fe20b1ee1070668a6270d6e11?ref=master&prId=2652"},{"source":"securities@openeuler.org","url":"https://atomgit.com/src-openeuler/iSulad/pull/812"},{"source":"securities@openeuler.org","url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4865"}],"sourceIdentifier":"securities@openeuler.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-61"}],"source":"securities@openeuler.org","type":"Secondary"}]}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://atomgit.com/src-openeuler/iSulad","defaultStatus":"affected","packageName":"iSulad","platforms":["Linux"],"product":"iSulad","programFiles":["src/daemon/modules/image/oci/oci_load.c"],"repo":"https://atomgit.com/openeuler/iSulad","vendor":"openEuler","versions":[{"lessThanOrEqual":"2.1.6","status":"affected","version":"0","versionType":"rpm"}]}],"source":"securities@openeuler.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use of Externally-Controlled format string vulnerability in openEuler iSulad on Linux.\n\nThis vulnerability is associated with program file src/daemon/modules/image/oci/oci_load.c.\n\n\n\nThis issue affects iSulad: through 2.1.6.\n\n\n\nWhen the iSulad daemon performs container lifecycle operations (such as create, start, exec, stop, etc.) through the isula runtime (shim), the daemon reads the stderr output of the shim process via a pipe for error information display. If the buffer contains format specifiers such as %s, %x, or %n, it may trigger a format string vulnerability, potentially leading to information leakage, denial of service, or the risk of arbitrary writes."}],"id":"CVE-2026-111434","lastModified":"2026-11-12T04:17:17.327","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.6,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H","version":"3.1"},"exploitabilityScore":0.8,"impactScore":4.7,"source":"securities@openeuler.org","type":"Secondary"}]},"published":"2026-11-12T04:17:17.327","references":[{"source":"securities@openeuler.org","url":"https://atomgit.com/openeuler/iSulad/commit/697cb26a5946d56bbb2c5533bab72f4376d8421b?ref=master&prId=2650"},{"source":"securities@openeuler.org","url":"https://atomgit.com/src-openeuler/iSulad/pull/812"}],"sourceIdentifier":"securities@openeuler.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-134"}],"source":"securities@openeuler.org","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://atomgit.com/src-openeuler/iSulad","defaultStatus":"affected","packageName":"iSulad","platforms":["Linux"],"product":"iSulad","programFiles":["src/daemon/modules/image/oci/oci_load.c"],"repo":"https://atomgit.com/openeuler/iSulad","vendor":"openEuler","versions":[{"lessThanOrEqual":"2.1.6","status":"affected","version":"0","versionType":"rpm"}]}],"source":"securities@openeuler.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use of Externally-Controlled format string vulnerability in openEuler iSulad on Linux.\n\nThis vulnerability is associated with program file src/daemon/modules/image/oci/oci_load.c.\n\n\n\nThis issue affects iSulad: through 2.1.6.\n\n\n\nWhen the iSulad daemon performs container lifecycle operations (such as create, start, exec, stop, etc.) through the isula runtime (shim), the daemon reads the stderr output of the shim process via a pipe for error information display. If the buffer contains format specifiers such as %s, %x, or %n, it may trigger a format string vulnerability, potentially leading to information leakage, denial of service, or the risk of arbitrary writes."}],"id":"CVE-2026-111434","lastModified":"2026-11-12T10:17:27.683","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.6,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H","version":"3.1"},"exploitabilityScore":0.8,"impactScore":4.7,"source":"securities@openeuler.org","type":"Secondary"}]},"published":"2026-11-12T04:17:17.327","references":[{"source":"securities@openeuler.org","url":"https://atomgit.com/openeuler/iSulad/commit/697cb26a5946d56bbb2c5533bab72f4376d8421b?ref=master&prId=2650"},{"source":"securities@openeuler.org","url":"https://atomgit.com/src-openeuler/iSulad/pull/812"},{"source":"securities@openeuler.org","url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4865"}],"sourceIdentifier":"securities@openeuler.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-134"}],"source":"securities@openeuler.org","type":"Secondary"}]}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://atomgit.com/src-openeuler/iSulad","defaultStatus":"affected","packageName":"iSulad","platforms":["Linux"],"product":"iSulad","programFiles":["src/daemon/modules/image/oci/oci_load.c"],"repo":"https://atomgit.com/openeuler/iSulad","vendor":"openEuler","versions":[{"lessThanOrEqual":"2.1.6","status":"affected","version":"0","versionType":"rpm"}]}],"source":"securities@openeuler.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Relative path traversal vulnerability in openEuler iSulad on Linux.\n\nThis vulnerability is associated with program file src/daemon/modules/image/oci/oci_load.c.\n\n\n\nThis issue affects iSulad: through 2.1.6.\n\n\n\nIn oci_load.c, oci_load_process_manifest() does not sanitize the Config path of manifest.json. A malicious tar package can enable the isulad with the root permission to read any file on the host."}],"id":"CVE-2026-111435","lastModified":"2026-11-12T04:17:17.483","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.0,"source":"securities@openeuler.org","type":"Secondary"}]},"published":"2026-11-12T04:17:17.483","references":[{"source":"securities@openeuler.org","url":"https://atomgit.com/openeuler/iSulad/commit/370889a81f1e7381de68ad7ded88b3439e266af5?ref=master&prId=2646"},{"source":"securities@openeuler.org","url":"https://atomgit.com/src-openeuler/iSulad/pull/812"}],"sourceIdentifier":"securities@openeuler.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-23"}],"source":"securities@openeuler.org","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://atomgit.com/src-openeuler/iSulad","defaultStatus":"affected","packageName":"iSulad","platforms":["Linux"],"product":"iSulad","programFiles":["src/daemon/modules/image/oci/oci_load.c"],"repo":"https://atomgit.com/openeuler/iSulad","vendor":"openEuler","versions":[{"lessThanOrEqual":"2.1.6","status":"affected","version":"0","versionType":"rpm"}]}],"source":"securities@openeuler.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Relative path traversal vulnerability in openEuler iSulad on Linux.\n\nThis vulnerability is associated with program file src/daemon/modules/image/oci/oci_load.c.\n\n\n\nThis issue affects iSulad: through 2.1.6.\n\n\n\nIn oci_load.c, oci_load_process_manifest() does not sanitize the Config path of manifest.json. A malicious tar package can enable the isulad with the root permission to read any file on the host."}],"id":"CVE-2026-111435","lastModified":"2026-11-12T10:17:27.797","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.0,"source":"securities@openeuler.org","type":"Secondary"}]},"published":"2026-11-12T04:17:17.483","references":[{"source":"securities@openeuler.org","url":"https://atomgit.com/openeuler/iSulad/commit/370889a81f1e7381de68ad7ded88b3439e266af5?ref=master&prId=2646"},{"source":"securities@openeuler.org","url":"https://atomgit.com/src-openeuler/iSulad/pull/812"},{"source":"securities@openeuler.org","url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4865"}],"sourceIdentifier":"securities@openeuler.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-23"}],"source":"securities@openeuler.org","type":"Secondary"}]}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://atomgit.com/src-openeuler/iSulad","defaultStatus":"unaffected","packageName":"iSulad","platforms":["Linux"],"product":"iSulad","programFiles":["src/daemon/modules/spec/specs_mount.c"],"repo":"https://atomgit.com/openeuler/iSulad","vendor":"openEuler","versions":[{"lessThanOrEqual":"2.1.6","status":"affected","version":"0","versionType":"rpm"}]}],"source":"securities@openeuler.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux.\n\nThis vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c.\n\n\n\nThis issue affects iSulad: through 2.1.6.\n\n\n\nThe memory leak vulnerability causes the iSulad daemon to be triggered frequently, exhausting the host machine's memory and ultimately leading to an OOM crash of the daemon, resulting in a denial of service (DoS)."}],"id":"CVE-2026-111436","lastModified":"2026-11-12T04:17:17.630","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":4.4,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":0.8,"impactScore":3.6,"source":"securities@openeuler.org","type":"Secondary"}]},"published":"2026-11-12T04:17:17.630","references":[{"source":"securities@openeuler.org","url":"https://atomgit.com/openeuler/iSulad/commit/d48130e6d16d603a9c12333b03bd74d63891ab87?ref=master&prId=2651"},{"source":"securities@openeuler.org","url":"https://atomgit.com/src-openeuler/iSulad/pull/812"}],"sourceIdentifier":"securities@openeuler.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-401"}],"source":"securities@openeuler.org","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://atomgit.com/src-openeuler/iSulad","defaultStatus":"unaffected","packageName":"iSulad","platforms":["Linux"],"product":"iSulad","programFiles":["src/daemon/modules/spec/specs_mount.c"],"repo":"https://atomgit.com/openeuler/iSulad","vendor":"openEuler","versions":[{"lessThanOrEqual":"2.1.6","status":"affected","version":"0","versionType":"rpm"}]}],"source":"securities@openeuler.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux.\n\nThis vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c.\n\n\n\nThis issue affects iSulad: through 2.1.6.\n\n\n\nThe memory leak vulnerability causes the iSulad daemon to be triggered frequently, exhausting the host machine's memory and ultimately leading to an OOM crash of the daemon, resulting in a denial of service (DoS)."}],"id":"CVE-2026-111436","lastModified":"2026-11-12T10:17:27.900","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":4.4,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":0.8,"impactScore":3.6,"source":"securities@openeuler.org","type":"Secondary"}]},"published":"2026-11-12T04:17:17.630","references":[{"source":"securities@openeuler.org","url":"https://atomgit.com/openeuler/iSulad/commit/d48130e6d16d603a9c12333b03bd74d63891ab87?ref=master&prId=2651"},{"source":"securities@openeuler.org","url":"https://atomgit.com/src-openeuler/iSulad/pull/812"},{"source":"securities@openeuler.org","url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4865"}],"sourceIdentifier":"securities@openeuler.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-401"}],"source":"securities@openeuler.org","type":"Secondary"}]}
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: none"}],"id":"CVE-2026-117474","lastModified":"2026-11-12T10:17:28.020","metrics":{},"published":"2026-11-12T10:17:28.020","references":[],"sourceIdentifier":"security@synology.com","vulnStatus":"Rejected"}
|
||||
@@ -0,0 +1 @@
|
||||
{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: none"}],"id":"CVE-2026-117475","lastModified":"2026-11-12T10:17:28.113","metrics":{},"published":"2026-11-12T10:17:28.113","references":[],"sourceIdentifier":"security@synology.com","vulnStatus":"Rejected"}
|
||||
@@ -0,0 +1 @@
|
||||
{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: none"}],"id":"CVE-2026-117476","lastModified":"2026-11-12T10:17:28.170","metrics":{},"published":"2026-11-12T10:17:28.170","references":[],"sourceIdentifier":"security@synology.com","vulnStatus":"Rejected"}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Telerik Reporting","vendor":"Progress Software","versions":[{"lessThan":"20.3.26.1110","status":"affected","version":"0","versionType":"custom"}]}],"source":"security@progress.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In Progress® Telerik® Reporting prior to version 20.3.26.1110, improper restriction of XML external entity references in the SVG processing engine allows an authenticated attacker with low privileges who can supply SVG content to a report to read local or UNC files, or trigger server-side network requests, from the report rendering host. External XML entities in SVG content were resolved without applying the configured strict resource resolver and report path validation. Disclosed content is limited by the permissions of the rendering process and by what the rendered report output exposes."}],"id":"CVE-2026-118975","lastModified":"2026-11-12T10:17:28.230","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"security@progress.com","type":"Secondary"}]},"published":"2026-11-12T10:17:28.230","references":[{"source":"security@progress.com","url":"https://www.telerik.com/products/reporting/documentation/knowledge-base/kb-security-improper-restriction-of-xml-external-entity-reference-cve-2026-118975"}],"sourceIdentifier":"security@progress.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-611"}],"source":"security@progress.com","type":"Primary"}]}
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Apache HTTP Server","vendor":"Apache Software Foundation","versions":[{"lessThanOrEqual":"2.4.70","status":"affected","version":"2.4.55","versionType":"semver"}]}],"source":"security@apache.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's mod_http2 in assign_headers() can lead to RCE.\n\nThis issue affects Apache HTTP Server: from 2.4.55 through 2.4.70.\nAffected releases of mod_h2 from GitHub: from 2.0.8 through 2.0.42."}],"id":"CVE-2026-119618","lastModified":"2026-11-11T19:17:30.313","metrics":{},"published":"2026-11-11T15:17:15.900","references":[{"source":"security@apache.org","url":"https://httpd.apache.org/security/vulnerabilities_24.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2026/11/11/13"}],"sourceIdentifier":"security@apache.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-362"}],"source":"security@apache.org","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Apache HTTP Server","vendor":"Apache Software Foundation","versions":[{"lessThanOrEqual":"2.4.70","status":"affected","version":"2.4.55","versionType":"semver"}]}],"source":"security@apache.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's mod_http2 in assign_headers() can lead to RCE.\n\nThis issue affects Apache HTTP Server: from 2.4.55 through 2.4.70.\nAffected releases of mod_h2 from GitHub: from 2.0.8 through 2.0.42."}],"id":"CVE-2026-119618","lastModified":"2026-11-12T10:17:28.360","metrics":{},"published":"2026-11-11T15:17:15.900","references":[{"source":"security@apache.org","url":"https://httpd.apache.org/security/vulnerabilities_24.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2026/11/11/13"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/security/cve/cve-2026-119618"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://bugs.gentoo.org/986161"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://github.com/AlmaLinux/updates/issues/4252"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://github.com/microsoft/azurelinux/pull/20165"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.wiz.io/blog/cve-2026-119618-rce-apache-http-server-vulnerability"}],"sourceIdentifier":"security@apache.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-362"}],"source":"security@apache.org","type":"Secondary"}]}
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://repo.maven.apache.org/maven2","defaultStatus":"unaffected","packageName":"org.apache.sling:org.apache.sling.xss","packageURL":"pkg:maven/org.apache.sling/org.apache.sling.xss","product":"Apache Sling XSS","vendor":"Apache Software Foundation","versions":[{"lessThan":"2.4.14","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@apache.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS. xssAPI.getStyleToken() accepts markup in unquoted urls.\n\n\n\nThis issue affects Apache Sling XSS: before 2.4.14.\n\n\n\nUsers are recommended to upgrade to version 2.4.14, which fixes the issue."}],"id":"CVE-2026-123765","lastModified":"2026-11-12T10:17:28.523","metrics":{},"published":"2026-11-12T10:17:28.523","references":[{"source":"security@apache.org","url":"https://lists.apache.org/thread.html/ddvvg034rwqpnsqz8sw0rldyqqoh9c92"}],"sourceIdentifier":"security@apache.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"security@apache.org","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: 歸類為 JSONCPP Open Source 之問題"}],"id":"CVE-2026-124617","lastModified":"2026-11-12T10:17:28.657","metrics":{},"published":"2026-11-12T10:17:28.657","references":[],"sourceIdentifier":"security@synology.com","vulnStatus":"Rejected"}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Telerik UI for WinForms","vendor":"Progress Software","versions":[{"lessThan":"2026.4.1111","status":"affected","version":"2026.3.1007","versionType":"custom"}]}],"source":"security@progress.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In Telerik UI for WinForms, versions prior to 2026.4.1111, an improper control of code generation vulnerability exists that allows an attacker to supply a crafted expression and execute unauthorized code in the context of the affected application."}],"id":"CVE-2026-124699","lastModified":"2026-11-12T10:17:28.723","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"security@progress.com","type":"Secondary"}]},"published":"2026-11-12T10:17:28.723","references":[{"source":"security@progress.com","url":"https://www.telerik.com/products/winforms/documentation/knowledge-base/kb-security-improper-control-of-generation-of-code-cve-2026-124699"}],"sourceIdentifier":"security@progress.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"security@progress.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"affected","packageName":"ansible-automation-platform-24/controller-rhel8","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"affected","packageName":"ansible-automation-platform-25/controller-rhel8","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"affected","packageName":"ansible-automation-platform-26/controller-rhel9","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"affected","packageName":"ansible-automation-platform-27/controller-rhel9","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"affected","packageName":"automation-controller","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An incorrect authorization flaw was found in AWX, the automation controller component of Red Hat Ansible Automation Platform. The API access classes for JobTemplate and WorkflowJobTemplate do not check the caller's Credential use_role when assigning the single-valued webhook_credential foreign key: JobTemplateAccess.can_add/can_change and WorkflowJobTemplateAccess.can_change in awx/main/access.py omit the check_related('webhook_credential', Credential, ..., role_field='use_role') call that UnifiedCredentialsMixin.can_attach performs for the normal many-to-many credentials relationship, and the serializer validates only the credential's type and namespace. A user who may administer their own job template (or workflow job template) and use its project and inventory can therefore attach a webhook token credential (for example a GitLab token) that they do not have use permission on. The template administrator can retrieve the template's webhook key; a subsequent webhook event causes AWX to decrypt the attached token and send it in the request header (for GitLab, PRIVATE-TOKEN) to a status URL derived from the event payload, disclosing the victim's token to a destination the attacker can influence. This may disclose another user's personal access token and allow whatever actions that token permits."}],"id":"CVE-2026-126642","lastModified":"2026-11-12T09:16:40.177","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"secalert@redhat.com","type":"Primary"}]},"published":"2026-11-12T09:16:40.020","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-126642"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2571729"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"secalert@redhat.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:misp:misp-modules:*:*:*:*:*:*:*:*"],"modules":["external_tools"],"product":"misp-modules","programFiles":["website/app/external_tools/external_tools.py"],"repo":"https://github.com/MISP/misp-modules","vendor":"misp","versions":[{"lessThanOrEqual":"3.1.4","status":"affected","version":"0","versionType":"semver"}]}],"source":"5a6e4751-2f3f-4070-9419-94fb35b644e8"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The MISP Modules website component exposes external tool management endpoints (add, delete, change status, and change configuration) that did not enforce the optional administrator authentication policy. When ADMIN_PASSWORD was configured in the application environment, the module configuration endpoints correctly required an authenticated administrator session, but the external tools management handlers processed requests from anonymous users without any authorization check. An unauthenticated attacker with network access to the website could add arbitrary external tools, delete existing tools, toggle their active status, and modify their configurations including API keys and ingestion URLs. This inconsistency allowed bypass of the intended access control for the external tools management functionality. The vulnerability is conditional on ADMIN_PASSWORD being set; installations without an admin password intentionally permit open management access by design. The affected component is the external_tools Flask blueprint within the MISP Modules website application."}],"id":"CVE-2026-127016","lastModified":"2026-11-12T10:17:29.123","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.2,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"5a6e4751-2f3f-4070-9419-94fb35b644e8","type":"Secondary"}],"ssvcV203":[{"source":"5a6e4751-2f3f-4070-9419-94fb35b644e8","ssvcData":{"options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"Supplier","timestamp":"2026-11-12T08:59:10Z","version":"2.0.3"}}]},"published":"2026-11-12T10:17:28.960","references":[{"source":"5a6e4751-2f3f-4070-9419-94fb35b644e8","url":"https://github.com/MISP/misp-modules/commit/28c27e30f6d3a10e38fe9c54bb52f57ccf70d027"}],"sourceIdentifier":"5a6e4751-2f3f-4070-9419-94fb35b644e8","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"5a6e4751-2f3f-4070-9419-94fb35b644e8","type":"Secondary"}]}
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected","packageName":"wpdatatables","product":"wpDataTables","vendor":"wpDataTables","versions":[{"changes":[{"at":"7.4.1","status":"unaffected"}],"lessThanOrEqual":"7.4","status":"affected","version":"n/a","versionType":"custom"}]}],"source":"audit@patchstack.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Unauthenticated SQL Injection in wpDataTables <= 7.4 versions."}],"id":"CVE-2026-54825","lastModified":"2026-06-26T16:16:32.443","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.7,"source":"audit@patchstack.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-54825","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-06-26T15:51:12.626864Z","version":"2.0.3"}}]},"published":"2026-06-26T15:16:40.230","references":[{"source":"audit@patchstack.com","url":"https://patchstack.com/database/wordpress/plugin/wpdatatables/vulnerability/wordpress-wpdatatables-plugin-7-4-sql-injection-vulnerability?_s_id=cve"}],"sourceIdentifier":"audit@patchstack.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"audit@patchstack.com","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected","packageName":"wpdatatables","product":"wpDataTables","vendor":"TMS","versions":[{"changes":[{"at":"7.4.1","status":"unaffected"}],"lessThanOrEqual":"7.4","status":"affected","version":"0","versionType":"custom"}]}],"source":"audit@patchstack.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS wpDataTables wpdatatables allows Blind SQL Injection.This issue affects wpDataTables: from n/a through 7.4."}],"id":"CVE-2026-54825","lastModified":"2026-11-12T10:17:29.180","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.7,"source":"audit@patchstack.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-54825","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-06-26T15:51:12.626864Z","version":"2.0.3"}}]},"published":"2026-06-26T15:16:40.230","references":[{"source":"audit@patchstack.com","url":"https://patchstack.com/database/wordpress/plugin/wpdatatables/vulnerability/wordpress-wpdatatables-plugin-7-4-sql-injection-vulnerability?_s_id=cve"}],"sourceIdentifier":"audit@patchstack.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"audit@patchstack.com","type":"Secondary"}]}
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"WhatsApp for Dolibarr","vendor":"Sgestion / EasySoft","versions":[{"status":"affected","version":"1.9"}]}],"source":"cve-coordination@incibe.es"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Blind SQL injection vulnerability in the public endpoint `public/webhook/receiver.php` of the WhatsApp module for Dolibarr 1.9. The phone number value derived from the `data.key.remoteJid` parameter, received via a JSON request, is incorporated into an SQL query without escaping or parameterization. With the WHATSAPP_WEBHOOK_ALLOW option enabled, an unauthenticated remote attacker could manipulate this parameter to alter the query. Exploitation using a timing-based technique could allow an attacker to extract information from the database and cause service disruption."}],"id":"CVE-2026-76173","lastModified":"2026-11-12T10:17:29.353","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.8,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cve-coordination@incibe.es","type":"Secondary"}]},"published":"2026-11-12T10:17:29.353","references":[{"source":"cve-coordination@incibe.es","url":"https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-whatsapp-dolibarr-sgestion-easysoft"}],"sourceIdentifier":"cve-coordination@incibe.es","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"cve-coordination@incibe.es","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Payara Server","vendor":"Azul Payara","versions":[{"lessThan":"7.6.0","status":"affected","version":"7.0.0","versionType":"semver"},{"lessThan":"7.2026.11","status":"affected","version":"7.2024.1.Alpha1","versionType":"custom"},{"lessThan":"6.44.0","status":"affected","version":"6.0.0","versionType":"semver"},{"lessThanOrEqual":"6.2025.11","status":"affected","version":"6.2022.1","versionType":"custom"},{"lessThan":"5.93.0","status":"affected","version":"5.20.0","versionType":"semver"},{"lessThanOrEqual":"5.201.2","status":"affected","version":"5.181","versionType":"custom"},{"lessThanOrEqual":"5.2022.5","status":"affected","version":"5.2020.2","versionType":"custom"},{"lessThan":"4.1.2.191.61","status":"affected","version":"4.1.2.191","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Payara Micro","vendor":"Azul Payara","versions":[{"lessThan":"7.6.0","status":"affected","version":"7.0.0","versionType":"semver"},{"lessThan":"7.2026.11","status":"affected","version":"7.2024.1.Alpha1","versionType":"custom"},{"lessThan":"6.44.0","status":"affected","version":"6.0.0","versionType":"semver"},{"lessThanOrEqual":"6.2025.11","status":"affected","version":"6.2022.1","versionType":"custom"},{"lessThan":"5.93.0","status":"affected","version":"5.20.0","versionType":"semver"},{"lessThanOrEqual":"5.201.2","status":"affected","version":"5.181","versionType":"custom"},{"lessThanOrEqual":"5.2022.5","status":"affected","version":"5.2020.2","versionType":"custom"},{"lessThan":"4.1.2.191.61","status":"affected","version":"4.1.1.154.1","versionType":"custom"}]}],"source":"769c9ae7-73c3-4e47-ae19-903170fc3eb8"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the GenericAdminAuthenticator component of Azul Payara Server and Azul Payara Micro allows a remote, unauthenticated attacker to bypass JMX/RMI administrative access restrictions by spoofing the client host address. Successful exploitation can grant administrative access to the MBean server and lead to remote code execution. Azul Payara Micro is affected only when its JMX connector is enabled."}],"id":"CVE-2026-90908","lastModified":"2026-11-12T09:16:40.297","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"769c9ae7-73c3-4e47-ae19-903170fc3eb8","type":"Secondary"}]},"published":"2026-11-12T09:16:40.297","references":[{"source":"769c9ae7-73c3-4e47-ae19-903170fc3eb8","url":"https://docs.azul.com/payara-community/release-notes/release-notes-7.2026.11.html"},{"source":"769c9ae7-73c3-4e47-ae19-903170fc3eb8","url":"https://docs.azul.com/payara/release-notes/release-notes-7.6.0.html"},{"source":"769c9ae7-73c3-4e47-ae19-903170fc3eb8","url":"https://docs.azul.com/payara/version/4/release-notes/release-notes-4.1.2.191.61.html"},{"source":"769c9ae7-73c3-4e47-ae19-903170fc3eb8","url":"https://docs.azul.com/payara/version/5/release-notes/release-notes-5.93.0.html"},{"source":"769c9ae7-73c3-4e47-ae19-903170fc3eb8","url":"https://docs.azul.com/payara/version/6/release-notes/release-notes-6.44.0.html"}],"sourceIdentifier":"769c9ae7-73c3-4e47-ae19-903170fc3eb8","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-807"}],"source":"769c9ae7-73c3-4e47-ae19-903170fc3eb8","type":"Secondary"}]}
|
||||
Reference in New Issue
Block a user