diff --git a/data/2026/CVE-2026-109903.json b/data/2026/CVE-2026-109903.json new file mode 100644 index 0000000000..853ce20673 --- /dev/null +++ b/data/2026/CVE-2026-109903.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageName":"xwayland","product":"xwayland","repo":"https://gitlab.freedesktop.org/xorg/xserver/","vendor":"X.Org","versions":[{"lessThan":"24.1.15","status":"affected","version":"0","versionType":"rpm"}]},{"defaultStatus":"unaffected","packageName":"xorg-x11-server","product":"xorg-x11-server","repo":"https://gitlab.freedesktop.org/xorg/xserver/","vendor":"X.Org","versions":[{"lessThan":"21.1.26","status":"affected","version":"0","versionType":"rpm"}]}],"source":"meissner@suse.de"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overread caused by casting a negative integer to CARD32 in XvQueryImageAttributes in X.Org X Server before 21.1.26 and xwayland before 24.1.15 could be used to causes crashes by authenticated X clients."}],"id":"CVE-2026-109903","lastModified":"2026-11-13T11:17:15.377","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"meissner@suse.de","type":"Secondary"}]},"published":"2026-11-13T11:17:14.167","references":[{"source":"meissner@suse.de","url":"https://gitlab.freedesktop.org/xorg/xserver/-/commit/a11d070e4ea78c6c97a7e88c57277d766cd9050b"}],"sourceIdentifier":"meissner@suse.de","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-191"}],"source":"meissner@suse.de","type":"Primary"}]} diff --git a/data/2026/CVE-2026-109904.json b/data/2026/CVE-2026-109904.json new file mode 100644 index 0000000000..06a88f5efa --- /dev/null +++ b/data/2026/CVE-2026-109904.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageName":"xorg-x11-server","product":"xorg-x11-server","repo":"https://gitlab.freedesktop.org/xorg/xserver/","vendor":"X.Org","versions":[{"lessThan":"21.1.26","status":"affected","version":"0","versionType":"rpm"}]},{"defaultStatus":"unaffected","packageName":"xwayland","product":"xwayland","repo":"https://gitlab.freedesktop.org/xorg/xserver/","vendor":"X.Org","versions":[{"lessThan":"24.1.15","status":"affected","version":"0","versionType":"rpm"}]}],"source":"meissner@suse.de"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overread caused by an integer-overflow in Proc/SProcXResQueryClientIds in X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by attackers on authenticated X clients to crash the server or leak out information."}],"id":"CVE-2026-109904","lastModified":"2026-11-13T11:17:15.783","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"meissner@suse.de","type":"Secondary"}]},"published":"2026-11-13T11:17:15.677","references":[{"source":"meissner@suse.de","url":"https://gitlab.freedesktop.org/xorg/xserver/-/commit/ff754b812597177412f2e2fa2b1dd1eecbeb75cf"}],"sourceIdentifier":"meissner@suse.de","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-126"}],"source":"meissner@suse.de","type":"Primary"}]} diff --git a/data/2026/CVE-2026-112182.json b/data/2026/CVE-2026-112182.json new file mode 100644 index 0000000000..594ed60feb --- /dev/null +++ b/data/2026/CVE-2026-112182.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"OpenKM Community Edition","vendor":"OpenKM","versions":[{"status":"affected","version":"6.3.12"},{"status":"affected","version":"6.3.13"}]}],"source":"cve-coordination@incibe.es"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Unauthorization vulnerability in the management of workflow definitions in OpenKM Community Edition. The REST endpoints `registerProcessDefinition` and `runProcessDefinition` require authentication but do not verify roles in the WorkflowService or in lower layers. An attacker with the `ROLE_USER` role can register and execute a process definition containing BeanShell scripts, allowing them to execute Java code and operating system commands with the service’s privileges. In the official Docker image, the process runs as root."}],"id":"CVE-2026-112182","lastModified":"2026-11-13T11:17:15.913","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.7,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cve-coordination@incibe.es","type":"Secondary"}]},"published":"2026-11-13T11:17:15.913","references":[{"source":"cve-coordination@incibe.es","url":"https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-openkm-community-edition"}],"sourceIdentifier":"cve-coordination@incibe.es","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"cve-coordination@incibe.es","type":"Primary"}]} diff --git a/data/2026/CVE-2026-120221.json b/data/2026/CVE-2026-120221.json new file mode 100644 index 0000000000..5827223d09 --- /dev/null +++ b/data/2026/CVE-2026-120221.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["bgpd"],"product":"frrouting","programFiles":["bgpd/bgpd.c"],"programRoutines":[{"name":"peer_group2peer_config_copy_af"},{"name":"peer_delete"}],"repo":"https://github.com/FRRouting/frr/","vendor":"frrouting","versions":[{"changes":[{"at":"6a96f515760dc278147fbf802777956ba80c7edd","status":"unaffected"}],"lessThan":"*","status":"affected","version":"01da2d26911c72023e71579bf4feeb707087ef50","versionType":"git"}]}],"source":"57a55968-44ac-464c-a794-6ba3baad09c4"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In FRRouting 8.4 and later, bgpd frees the same memory twice when dynamic BGP neighbors disconnect, if the peer-group used by a \"bgp listen range\" also has a Site-of-Origin configured (\"neighbor PG soo\"). Each dynamic neighbor shares the peer-group's SoO value instead of getting its own copy, but frees it as its own when the neighbor is deleted, which happens as soon as its connection closes. The first disconnect leaves the peer-group pointing at freed memory, and the second disconnect frees it again, causing bgpd to abort and drop all BGP sessions on the router. Any host whose address falls inside the listen range can trigger this by opening and closing two TCP connections to the BGP port, without sending any BGP message and without knowing the AS number, and can repeat it each time bgpd restarts. If the peer-group has a TCP-MD5 password, only hosts that know the password can trigger it. Two ordinary flaps of legitimate dynamic neighbors have the same effect. Between the two frees, displaying the configuration (\"show running-config\") or establishing a dynamic neighbor also reads the freed memory, which can crash bgpd after a single disconnect. Only configurations that combine a listen range with a SoO on the same peer-group are affected."}],"id":"CVE-2026-120221","lastModified":"2026-11-13T12:17:03.210","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NO","Recovery":"AUTOMATIC","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"57a55968-44ac-464c-a794-6ba3baad09c4","type":"Secondary"}]},"published":"2026-11-13T12:17:03.210","references":[{"source":"57a55968-44ac-464c-a794-6ba3baad09c4","url":"https://github.com/FRRouting/frr/pull/21685/changes/6a96f515760dc278147fbf802777956ba80c7edd"}],"sourceIdentifier":"57a55968-44ac-464c-a794-6ba3baad09c4","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-415"},{"lang":"en","value":"CWE-416"}],"source":"57a55968-44ac-464c-a794-6ba3baad09c4","type":"Secondary"}]} diff --git a/data/2026/CVE-2026-123274.json b/data/2026/CVE-2026-123274.json new file mode 100644 index 0000000000..4ab405a414 --- /dev/null +++ b/data/2026/CVE-2026-123274.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"collectionURL":"https://github.com","defaultStatus":"unaffected","packageName":"apache/datasketches-cpp","packageURL":"pkg:github/apache/datasketches-cpp","product":"Apache DataSketches C++","vendor":"Apache Software Foundation","versions":[{"lessThanOrEqual":"5.3.0","status":"affected","version":"1.0.0-incubating","versionType":"semver"}]}],"source":"security@apache.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Out-of-bounds Write vulnerability in Apache DataSketches C++. An\n application that deserializes a KLL sketch from an untrusted source\n can have heap memory corrupted by a crafted sketch, because the\n serialized level boundaries were not validated.\n\n This issue affects Apache DataSketches C++: 2.0.0 through 5.3.0.\n\n Users are recommended to upgrade to version 5.3.1, which fixes the\n issue."}],"id":"CVE-2026-123274","lastModified":"2026-11-13T11:17:16.127","metrics":{},"published":"2026-11-13T11:17:16.127","references":[{"source":"security@apache.org","url":"https://github.com/apache/datasketches-cpp/commit/bb86d439db494e3d362e54cc4f83481893974335"},{"source":"security@apache.org","url":"https://github.com/apache/datasketches-cpp/pull/568"},{"source":"security@apache.org","url":"https://github.com/apache/datasketches-cpp/releases/tag/5.3.1"},{"source":"security@apache.org","url":"https://lists.apache.org/thread/t4rngyg9cbv1b42f1d0crgpgtpby0594"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2026/11/13/1"}],"sourceIdentifier":"security@apache.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"security@apache.org","type":"Primary"}]} diff --git a/data/2026/CVE-2026-123338.json b/data/2026/CVE-2026-123338.json new file mode 100644 index 0000000000..637243c7df --- /dev/null +++ b/data/2026/CVE-2026-123338.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"collectionURL":"https://github.com","defaultStatus":"unaffected","packageName":"apache/datasketches-cpp","packageURL":"pkg:github/apache/datasketches-cpp","product":"Apache DataSketches C++","vendor":"Apache Software Foundation","versions":[{"lessThanOrEqual":"5.3.0","status":"affected","version":"3.0.0","versionType":"semver"}]}],"source":"security@apache.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Out-of-bounds Write vulnerability in Apache DataSketches C++. An\n application that deserializes a REQ sketch from an untrusted source\n can have heap memory corrupted by a crafted sketch, because the\n serialized compactor headers were not validated.\n\n This issue affects Apache DataSketches C++: from 3.0.0 through 5.3.0.\n\n Users are recommended to upgrade to version 5.3.1, which fixes the\n issue."}],"id":"CVE-2026-123338","lastModified":"2026-11-13T11:17:16.273","metrics":{},"published":"2026-11-13T11:17:16.273","references":[{"source":"security@apache.org","url":"https://github.com/apache/datasketches-cpp/commit/9839ffd2ccc038d453e38b545750a5ed2d589dea"},{"source":"security@apache.org","url":"https://github.com/apache/datasketches-cpp/pull/568"},{"source":"security@apache.org","url":"https://github.com/apache/datasketches-cpp/releases/tag/5.3.1"},{"source":"security@apache.org","url":"https://lists.apache.org/thread/wjsso4wl0f0nczwh7gd74kc5wckn1635"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2026/11/13/2"}],"sourceIdentifier":"security@apache.org","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"security@apache.org","type":"Primary"}]} diff --git a/data/2026/CVE-2026-125659.json b/data/2026/CVE-2026-125659.json new file mode 100644 index 0000000000..62204473ca --- /dev/null +++ b/data/2026/CVE-2026-125659.json @@ -0,0 +1 @@ +{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"emBridge","vendor":"eMudhra","versions":[{"status":"affected","version":"version 5.9.1.x to 5.9.3.x"}]},{"defaultStatus":"unaffected","platforms":["MacOS"],"product":"emBridge","vendor":"eMudhra","versions":[{"status":"affected","version":"version 3.2.4.x to 3.2.6.x"}]},{"defaultStatus":"unaffected","platforms":["Ubuntu"],"product":"emBridge","vendor":"eMudhra","versions":[{"status":"affected","version":"version 3.2.0.x to 3.3.0.x"}]},{"defaultStatus":"unaffected","platforms":["Red Hat"],"product":"emBridge","vendor":"eMudhra","versions":[{"status":"affected","version":"version 3.2.0.x to 3.3.0.x"}]}],"source":"vdisclose@cert-in.org.in"}],"cveTags":[],"descriptions":[{"lang":"en","value":"This vulnerability exists in the eMudhra emBridge due to missing authorization checks in the FileBrowser API endpoints. These endpoints perform file system enumeration using the LocalSystem account without adequately validating the requesting caller's authorization. An unauthenticated attacker on the same LAN could exploit this vulnerability by sending malicious webpage to the local HTTPS Web API.\n\n \n\nSuccessful exploitation of this vulnerability could allow the attacker to enumerate file and directory names and obtain information about the directory structure of the targeted system. \n\n\n\nThe vulnerability however, does not provide access to file contents or permit file modification, deletion, or code execution, or access to cryptographic keys and hardware token PINs."}],"id":"CVE-2026-125659","lastModified":"2026-11-13T11:17:16.400","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":2.1,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"vdisclose@cert-in.org.in","type":"Secondary"}]},"published":"2026-11-13T11:17:16.400","references":[{"source":"vdisclose@cert-in.org.in","url":"https://emudhra.com/en/post/cve-2026-125659"},{"source":"vdisclose@cert-in.org.in","url":"https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0549"}],"sourceIdentifier":"vdisclose@cert-in.org.in","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"vdisclose@cert-in.org.in","type":"Primary"}]} diff --git a/state/sync.json b/state/sync.json index 4a54679d31..881c9ad71b 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1 +1 @@ -{"initial_complete":true,"last_run_counts":{"seen":5154,"skipped":39,"unchanged":4760,"written":355},"last_run_mode":"incremental","last_successful_end":"2026-11-13T10:42:26+00:00","schema_version":1,"since_year":2017,"source":"NVD CVE API 2.0","updated_at":"2026-11-13T10:47:57.406274+00:00"} +{"initial_complete":true,"last_run_counts":{"seen":5156,"skipped":39,"unchanged":5110,"written":7},"last_run_mode":"incremental","last_successful_end":"2026-11-13T12:42:51+00:00","schema_version":1,"since_year":2017,"source":"NVD CVE API 2.0","updated_at":"2026-11-13T12:48:44.453907+00:00"}