NVD update 2026-11-12T06:47:55Z
This commit is contained in:
Vulnerability Bot
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Air Terminal 6","vendor":"SoftBank Corp.","versions":[{"lessThanOrEqual":"v1.01.80","status":"affected","version":"0","versionType":"semver"}]}],"source":"vultures@jpcert.or.jp"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An OS command Injection issue exists in Air Terminal 6 provided by SoftBank Corp. Arbitrary commands may be executed with the root privilege by a user who can log in to the web management console of the affected product."}],"id":"CVE-2026-101107","lastModified":"2026-11-12T06:17:10.053","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":8.0,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":2.1,"impactScore":5.9,"source":"vultures@jpcert.or.jp","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":8.6,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"vultures@jpcert.or.jp","type":"Secondary"}]},"published":"2026-11-12T06:17:10.053","references":[{"source":"vultures@jpcert.or.jp","url":"https://jvn.jp/en/jp/JVN64740097/"}],"sourceIdentifier":"vultures@jpcert.or.jp","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-78"}],"source":"vultures@jpcert.or.jp","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Oxygen MyData for WooCommerce","vendor":"Unknown","versions":[{"lessThan":"3.0.9","status":"affected","version":"3.0.0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Oxygen MyData for WooCommerce WordPress plugin before 3.0.9 does not have proper authorisation, nor validate the authenticity of the request, on one of its payment callbacks, allowing unauthenticated users to mark arbitrary WooCommerce orders as completed."}],"id":"CVE-2026-106027","lastModified":"2026-11-12T06:17:10.350","metrics":{},"published":"2026-11-12T06:17:10.350","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/6f364114-e016-4c60-9ced-5b726d84bc19/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
|
||||
File diff suppressed because one or more lines are too long
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.3"],"defaultStatus":"affected","packageName":"mutter","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:49.4-6.el10_3.1","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"unaffected","packageName":"mutter","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"mutter","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"mutter","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path. A local attacker who can run a malicious Wayland client can destroy a wp_image_description_v1 resource while an asynchronous ICC file read is still in progress. When the read completes, the compositor uses the freed wl_resource, writes into freed memory, and frees a pointer derived from that memory. This can crash the GNOME session and may allow arbitrary code execution within the compositor process."}],"id":"CVE-2026-108094","lastModified":"2026-11-11T23:17:10.430","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-108094","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-10-13T18:23:15.091003Z","version":"2.0.3"}}]},"published":"2026-10-12T15:17:07.080","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99130"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-108094"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2549511"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.3"],"defaultStatus":"affected","packageName":"mutter","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:49.4-6.el10_3.1","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.2"],"defaultStatus":"affected","packageName":"mutter","product":"Red Hat Enterprise Linux 10.2 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:49.4-5.el10_2.5","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"unaffected","packageName":"mutter","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"mutter","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"mutter","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path. A local attacker who can run a malicious Wayland client can destroy a wp_image_description_v1 resource while an asynchronous ICC file read is still in progress. When the read completes, the compositor uses the freed wl_resource, writes into freed memory, and frees a pointer derived from that memory. This can crash the GNOME session and may allow arbitrary code execution within the compositor process."}],"id":"CVE-2026-108094","lastModified":"2026-11-12T06:17:10.697","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-108094","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-10-13T18:23:15.091003Z","version":"2.0.3"}}]},"published":"2026-10-12T15:17:07.080","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99130"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99141"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-108094"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2549511"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Crop Thumbnails","vendor":"Unknown","versions":[{"lessThan":"1.10.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Crop Thumbnails WordPress plugin before 1.10.0 does not perform object-level authorization when reading and re-cropping media attachments, allowing any authenticated user with the upload capability (the Author role by default) to read the metadata of, and overwrite the generated thumbnail files and stored metadata of, media attachments belonging to other users."}],"id":"CVE-2026-110041","lastModified":"2026-11-12T06:17:10.863","metrics":{},"published":"2026-11-12T06:17:10.863","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/f79fa2e0-ebba-4075-84d9-b5fadfbd6ca4/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Photo Gallery by 10Web","vendor":"Unknown","versions":[{"lessThan":"1.8.49","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Photo Gallery by 10Web WordPress plugin before 1.8.49 does not escape a shortcode attribute that sets a gallery watermark image before rendering it into an HTML image attribute, and decodes percent-encoded characters in the value, allowing users with Contributor-level access and above to perform Stored Cross-Site Scripting that executes in the browser of any user, including an administrator, who views the published gallery."}],"id":"CVE-2026-110072","lastModified":"2026-11-12T06:17:10.983","metrics":{},"published":"2026-11-12T06:17:10.983","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/6bf17a5c-21c4-4e0e-b0a4-aee18c9820f1/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Descope","vendor":"Unknown","versions":[{"lessThan":"1.2.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Descope WordPress plugin before 1.2.0 does not validate the authentication token it receives before creating a WordPress session, accepting any non-empty token, so an unauthenticated attacker can obtain a session for any existing account, including an administrator, by supplying that account's email address."}],"id":"CVE-2026-110959","lastModified":"2026-11-12T06:17:11.100","metrics":{},"published":"2026-11-12T06:17:11.100","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/8b97f139-cbc3-4913-b69a-a3179f4cc264/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"product":"dnspython","vendor":"rthalley","versions":[{"status":"affected","version":"< 2.9.0"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from_wire_parser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application degradation, or denial of service in applications that process untrusted DNS messages. This issue is fixed in version 2.9.0."}],"id":"CVE-2026-114605","lastModified":"2026-10-29T04:18:24.280","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-114605","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-10-29T02:18:51.388509Z","version":"2.0.3"}}]},"published":"2026-10-22T17:16:58.237","references":[{"source":"security-advisories@github.com","url":"https://github.com/rthalley/dnspython/commit/b485e460c266540a1a09ca6d8d1d7b685b1d3023"},{"source":"security-advisories@github.com","url":"https://github.com/rthalley/dnspython/releases/tag/v2.9.0"},{"source":"security-advisories@github.com","url":"https://github.com/rthalley/dnspython/security/advisories/GHSA-45c3-73f7-pv4m"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-674"}],"source":"security-advisories@github.com","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"product":"dnspython","vendor":"rthalley","versions":[{"status":"affected","version":"< 2.9.0"}]}],"source":"security-advisories@github.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from_wire_parser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application degradation, or denial of service in applications that process untrusted DNS messages. This issue is fixed in version 2.9.0."}],"id":"CVE-2026-114605","lastModified":"2026-11-12T06:17:11.230","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"security-advisories@github.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-114605","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-10-29T02:18:51.388509Z","version":"2.0.3"}}]},"published":"2026-10-22T17:16:58.237","references":[{"source":"security-advisories@github.com","url":"https://github.com/rthalley/dnspython/commit/b485e460c266540a1a09ca6d8d1d7b685b1d3023"},{"source":"security-advisories@github.com","url":"https://github.com/rthalley/dnspython/releases/tag/v2.9.0"},{"source":"security-advisories@github.com","url":"https://github.com/rthalley/dnspython/security/advisories/GHSA-45c3-73f7-pv4m"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.debian.org/debian-lts-announce/2026/11/msg00017.html"}],"sourceIdentifier":"security-advisories@github.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-674"}],"source":"security-advisories@github.com","type":"Secondary"}]}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::baseos"],"defaultStatus":"affected","packageName":"patch","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.7.6-12.el8_10","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"patch","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:6"],"defaultStatus":"unknown","packageName":"patch","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"affected","packageName":"patch","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"patch","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:hummingbird:1"],"defaultStatus":"affected","packageName":"patch","product":"Red Hat Hardened Images","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow to apply a specially crafted patch file. Due to missing validation during automatic patch reversal, absolute file paths in patch headers are accepted rather than rejected. Consequently, the utility can create files in arbitrary locations with the permissions of the executing user."}],"id":"CVE-2026-115207","lastModified":"2026-11-09T17:17:10.740","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-115207","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-10-28T02:19:12.050793Z","version":"2.0.3"}}]},"published":"2026-10-22T11:17:50.537","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:96215"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-115207"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2558775"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2026/10/26/14"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8::baseos"],"defaultStatus":"affected","packageName":"patch","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.7.6-12.el8_10","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.8::appstream"],"defaultStatus":"affected","packageName":"patch","product":"Red Hat Enterprise Linux 9.8 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.7.6-16.el9_8.1","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"patch","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:6"],"defaultStatus":"unknown","packageName":"patch","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"affected","packageName":"patch","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"patch","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:hummingbird:1"],"defaultStatus":"affected","packageName":"patch","product":"Red Hat Hardened Images","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow to apply a specially crafted patch file. Due to missing validation during automatic patch reversal, absolute file paths in patch headers are accepted rather than rejected. Consequently, the utility can create files in arbitrary locations with the permissions of the executing user."}],"id":"CVE-2026-115207","lastModified":"2026-11-12T06:17:11.383","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-115207","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-10-28T02:19:12.050793Z","version":"2.0.3"}}]},"published":"2026-10-22T11:17:50.537","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:96215"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99161"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-115207"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2558775"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2026/10/26/14"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|
||||
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"WP Directory Kit","vendor":"Unknown","versions":[{"lessThan":"1.6.3","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The WP Directory Kit WordPress plugin before 1.6.3 does not properly sanitise and escape a parameter used to order results on one of its admin screens before using it in a SQL statement, relying on a keyword deny-list whose replacement order can be bypassed, making it possible for users holding the WP Directory Kit WordPress plugin before 1.6.3's custom Listing Admin role, and above, to perform SQL injection attacks."}],"id":"CVE-2026-118421","lastModified":"2026-11-12T06:17:11.800","metrics":{},"published":"2026-11-12T06:17:11.700","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/cb2c14ff-96bd-4731-bce2-346a904fc72b/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred"}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Directorist: AI-Powered Business Directory, Listings & Classified Ads","vendor":"Unknown","versions":[{"lessThan":"8.11.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11.1 does not prevent a listing's own author from changing its status from pending to published, allowing users with a Subscriber-level account and above to bypass the administrator's listing moderation and publish their own pending listings."}],"id":"CVE-2026-118531","lastModified":"2026-11-12T06:17:11.850","metrics":{},"published":"2026-11-12T06:17:11.850","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/04ba942d-59f2-4e35-9d09-877f9bdd3606/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"affected","platforms":["Windows","MacOS","Linux"],"product":"Akaunting","repo":"https://github.com/akaunting/akaunting","vendor":"Akaunting","versions":[{"status":"affected","version":"3.3.0","versionType":"semver"}]}],"source":"help@fluidattacks.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Akaunting 3.3.0 contains a stored cross-site scripting vulnerability in custom invoice payment terms. An authenticated Manager can save a crafted custom payment-term value. When an authorized user opens Invoice Settings for the same company, Akaunting inserts the stored value into a client-side event-handler expression, causing attacker-controlled JavaScript to execute in the victim's authenticated origin."}],"id":"CVE-2026-118597","lastModified":"2026-11-12T06:17:11.980","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"help@fluidattacks.com","type":"Secondary"}]},"published":"2026-11-12T06:17:11.980","references":[{"source":"help@fluidattacks.com","url":"https://fluidattacks.com/advisories/rhiannon"},{"source":"help@fluidattacks.com","url":"https://github.com/akaunting/akaunting"},{"source":"help@fluidattacks.com","url":"https://github.com/akaunting/akaunting/blob/3.3.0/app/Abstracts/Http/SettingController.php"},{"source":"help@fluidattacks.com","url":"https://github.com/akaunting/akaunting/blob/3.3.0/app/View/Components/Form/Group/PaymentTerm.php"},{"source":"help@fluidattacks.com","url":"https://github.com/akaunting/akaunting/blob/3.3.0/resources/views/components/form/group/payment_term.blade.php"}],"sourceIdentifier":"help@fluidattacks.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"help@fluidattacks.com","type":"Primary"}]}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Defender Security","vendor":"Unknown","versions":[{"lessThan":"6.4.1","status":"affected","version":"4.9.0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Defender Security WordPress plugin before 6.4.1 does not verify that the client IP address it derives for its firewall and lockout decisions actually originates from a trusted source, trusting a user-supplied value by default, allowing unauthenticated attackers to spoof their IP address and evade IP-based protections such as login lockout and IP banning, impersonate an allowlisted address, and poison the Defender Security WordPress plugin before 6.4.1's activity logs."}],"id":"CVE-2026-119039","lastModified":"2026-11-12T06:17:12.143","metrics":{},"published":"2026-11-12T06:17:12.143","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/58a8fb54-7dc6-4749-9467-6ce19a13f0ed/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Defender Security","vendor":"Unknown","versions":[{"lessThan":"6.4.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Defender Security WordPress plugin before 6.4.1 does not limit the number of failed two-factor authentication attempts in its default configuration, allowing an attacker who already knows a victim's password to brute-force the one-time code and defeat the second authentication factor."}],"id":"CVE-2026-119040","lastModified":"2026-11-12T06:17:12.257","metrics":{},"published":"2026-11-12T06:17:12.257","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/325f30c7-7ea9-48c8-a7fc-2644779e6ca6/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"],"defaultStatus":"affected","packageName":"gimp","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"2:3.0.4-8.el9_9.6","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"gimp","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:6"],"defaultStatus":"unknown","packageName":"gimp","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"affected","packageName":"gimp","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"gimp:2.8/gimp","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying a converted resource name into a fixed stack buffer. Opening a crafted PSD file can cause a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution."}],"id":"CVE-2026-119528","lastModified":"2026-11-11T13:17:16.890","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-119528","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-10-30T00:00:00+00:00","version":"2.0.3"}}]},"published":"2026-10-30T14:16:45.143","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:98532"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-119528"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2563900"},{"source":"secalert@redhat.com","url":"https://gitlab.gnome.org/GNOME/gimp/-/work_items/16799"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-121"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"],"defaultStatus":"affected","packageName":"gimp","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"2:3.0.4-8.el9_9.6","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.8::appstream"],"defaultStatus":"affected","packageName":"gimp","product":"Red Hat Enterprise Linux 9.8 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"2:3.0.4-4.el9_8.16","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"gimp","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:6"],"defaultStatus":"unknown","packageName":"gimp","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"affected","packageName":"gimp","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"gimp:2.8/gimp","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying a converted resource name into a fixed stack buffer. Opening a crafted PSD file can cause a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution."}],"id":"CVE-2026-119528","lastModified":"2026-11-12T06:17:12.377","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-119528","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-10-30T00:00:00+00:00","version":"2.0.3"}}]},"published":"2026-10-30T14:16:45.143","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:98532"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99154"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-119528"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2563900"},{"source":"secalert@redhat.com","url":"https://gitlab.gnome.org/GNOME/gimp/-/work_items/16799"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-121"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"AskAny","vendor":"Unknown","versions":[{"lessThan":"2.2.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The AskAny WordPress plugin before 2.2.1 does not verify that a chat session belongs to the requester before returning or changing it, allowing unauthenticated users who obtain or guess another visitor's session identifier to read that visitor's chat transcript, name, email address and IP address, and to add messages to their conversation or overwrite their details."}],"id":"CVE-2026-121498","lastModified":"2026-11-12T06:17:12.547","metrics":{},"published":"2026-11-12T06:17:12.547","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/0347e870-93ff-48d3-b100-6cd9ec0535bb/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.3"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-good","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.26.7-10.el10_3.1","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:6"],"defaultStatus":"unaffected","packageName":"gstreamer-plugins-good","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"unaffected","packageName":"gstreamer1-plugins-good","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"unaffected","packageName":"gstreamer-plugins-good","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"unaffected","packageName":"gstreamer1-plugins-good","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"unaffected","packageName":"gstreamer1-plugins-good","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in GStreamer's adaptive streaming demuxers (HLS, DASH, MSS). When processing a media playlist or manifest, URIs referenced in the manifest content are fetched without restricting which URI schemes are permitted. An attacker who controls a manifest URL, or who can inject content into an HTTP manifest response, can include file:// URIs pointing to arbitrary local files, causing the affected application to read and process those files. In automated or server-side deployments such as media recorders, proxies, and downloaders, this can lead to disclosure of sensitive local files. Existence of files can also be inferred through differing error responses even when content is not directly observable."}],"id":"CVE-2026-121629","lastModified":"2026-11-11T14:17:31.850","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"secalert@redhat.com","type":"Secondary"}]},"published":"2026-11-09T12:16:37.847","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:98644"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-121629"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2565965"},{"source":"secalert@redhat.com","url":"https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5380"},{"source":"secalert@redhat.com","url":"https://gstreamer.freedesktop.org/security/sa-2026-0097.html"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-73"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.3"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-good","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.26.7-10.el10_3.1","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.2"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-good","product":"Red Hat Enterprise Linux 10.2 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.26.7-2.el10_2.9","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:6"],"defaultStatus":"unaffected","packageName":"gstreamer-plugins-good","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"unaffected","packageName":"gstreamer1-plugins-good","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"unaffected","packageName":"gstreamer-plugins-good","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"unaffected","packageName":"gstreamer1-plugins-good","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"unaffected","packageName":"gstreamer1-plugins-good","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in GStreamer's adaptive streaming demuxers (HLS, DASH, MSS). When processing a media playlist or manifest, URIs referenced in the manifest content are fetched without restricting which URI schemes are permitted. An attacker who controls a manifest URL, or who can inject content into an HTTP manifest response, can include file:// URIs pointing to arbitrary local files, causing the affected application to read and process those files. In automated or server-side deployments such as media recorders, proxies, and downloaders, this can lead to disclosure of sensitive local files. Existence of files can also be inferred through differing error responses even when content is not directly observable."}],"id":"CVE-2026-121629","lastModified":"2026-11-12T06:17:12.657","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"secalert@redhat.com","type":"Secondary"}]},"published":"2026-11-09T12:16:37.847","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:98644"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99140"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-121629"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2565965"},{"source":"secalert@redhat.com","url":"https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5380"},{"source":"secalert@redhat.com","url":"https://gstreamer.freedesktop.org/security/sa-2026-0097.html"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-73"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Abilities Bridge","vendor":"Unknown","versions":[{"lessThan":"1.4.2","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Abilities Bridge WordPress plugin before 1.4.2 does not require a valid nonce before re-authenticating a REST API request from the logged-in session cookie, allowing attackers to make a logged-in administrator perform any REST API action, including creating a new administrator account and taking over the site, by tricking them into opening a crafted page (CSRF)."}],"id":"CVE-2026-122003","lastModified":"2026-11-12T06:17:12.810","metrics":{},"published":"2026-11-12T06:17:12.810","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/e421e862-8d7a-4df6-9c5e-dc06a466a0fc/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Linux"],"product":"TrueConf Server","vendor":"TrueConf","versions":[{"lessThan":"5.5.6","status":"affected","version":"4.7.2","versionType":"semver"}]}],"source":"vulnerability@kaspersky.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An attacker who gains the ability to execute arbitrary code on a system with TrueConf Server (Linux) versions from 4.7.2 up to, but not including, 5.5.6 installed, running as the user trueconf (by exploiting some other vulnerability), can elevate their privileges to root."}],"id":"CVE-2026-123040","lastModified":"2026-11-11T15:17:18.060","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"vulnerability@kaspersky.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":8.5,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"vulnerability@kaspersky.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123040","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-11T14:15:27.397847Z","version":"2.0.3"}}]},"published":"2026-11-11T14:17:32.280","references":[{"source":"vulnerability@kaspersky.com","url":"https://ics-cert.kaspersky.com/advisories/2026/11/10/trueconf-server-linux-incorrect-default-permissions/"}],"sourceIdentifier":"vulnerability@kaspersky.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-276"}],"source":"vulnerability@kaspersky.com","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Linux"],"product":"TrueConf Server","vendor":"TrueConf","versions":[{"lessThan":"5.5.6","status":"affected","version":"4.7.2","versionType":"semver"}]}],"source":"vulnerability@kaspersky.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An attacker who gains the ability to execute arbitrary code on a system with TrueConf Server (Linux) versions from 4.7.2 up to, but not including, 5.5.6 installed, running as the user trueconf (by exploiting some other vulnerability), can elevate their privileges to root."}],"id":"CVE-2026-123040","lastModified":"2026-11-12T05:17:38.223","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"vulnerability@kaspersky.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":8.5,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"vulnerability@kaspersky.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-123040","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-11T00:00:00+00:00","version":"2.0.3"}}]},"published":"2026-11-11T14:17:32.280","references":[{"source":"vulnerability@kaspersky.com","url":"https://ics-cert.kaspersky.com/advisories/2026/11/10/trueconf-server-linux-incorrect-default-permissions/"}],"sourceIdentifier":"vulnerability@kaspersky.com","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-276"}],"source":"vulnerability@kaspersky.com","type":"Secondary"}]}
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"ContentPen","vendor":"Unknown","versions":[{"lessThan":"1.1.1","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The ContentPen WordPress plugin before 1.1.1 discloses its REST API key to unauthenticated users, who can then use it to create posts containing unfiltered JavaScript, leading to Stored XSS that executes in the browser of any visitor, including administrators."}],"id":"CVE-2026-123044","lastModified":"2026-11-12T06:17:12.920","metrics":{},"published":"2026-11-12T06:17:12.920","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/646b9448-ee17-4852-8f42-c086625e5983/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"WP Remote Users Sync","vendor":"Unknown","versions":[{"lessThan":"2.3.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The WP Remote Users Sync WordPress plugin before 2.3.0 does not restrict which user metadata keys may be written through its incoming user synchronisation requests, allowing a site that holds the shared synchronisation keys to set the capabilities of any existing account and escalate it to administrator."}],"id":"CVE-2026-123092","lastModified":"2026-11-12T06:17:13.023","metrics":{},"published":"2026-11-12T06:17:13.023","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/31ed11db-eb07-4628-8ad8-5b545c6f8fe0/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"TI WooCommerce Wishlist","vendor":"Unknown","versions":[{"lessThan":"2.0.7","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The TI WooCommerce Wishlist WordPress plugin before 2.0.7 does not sanitise and escape user input before using it in a SQL statement in a front-end endpoint, allowing unauthenticated users to perform SQL injection attacks."}],"id":"CVE-2026-124647","lastModified":"2026-11-12T06:17:13.150","metrics":{},"published":"2026-11-12T06:17:13.150","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/d0119edb-2845-4106-a2bf-0ef28949ae32/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"TI WooCommerce Wishlist","vendor":"Unknown","versions":[{"lessThan":"2.13.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The TI WooCommerce Wishlist WordPress plugin before 2.13.0 does not verify that a visitor who is not logged in owns a registered user's wishlist before letting them manage it, allowing unauthenticated users who know or guess a wishlist's share key to delete items from other customers' wishlists."}],"id":"CVE-2026-124648","lastModified":"2026-11-12T06:17:13.270","metrics":{},"published":"2026-11-12T06:17:13.270","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/528218ee-f437-4028-aae0-022435cbb66e/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Mine CloudVod","vendor":"Unknown","versions":[{"lessThan":"2.6.6","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Mine CloudVod WordPress plugin before 2.6.6 does not verify that an order belongs to the requesting user before returning its payment status, allowing any authenticated user, such as subscriber, to read other customers' order status, the purchased item and, while an Alipay payment is in progress, the buyer's Alipay account identifier."}],"id":"CVE-2026-124652","lastModified":"2026-11-12T06:17:13.400","metrics":{},"published":"2026-11-12T06:17:13.400","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/ed4ce4b8-a30b-443c-9b5a-b7415e30eb62/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Mine CloudVod","vendor":"Unknown","versions":[{"lessThan":"2.6.6","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Mine CloudVod WordPress plugin before 2.6.6 does not restrict who can request cloud storage upload credentials from several of its REST API routes, allowing unauthenticated attackers to obtain signed upload policies and temporary credentials for the site's configured Alibaba Cloud OSS, Tencent Cloud COS and Dogecloud accounts and use them to upload or overwrite files in the site's storage."}],"id":"CVE-2026-124653","lastModified":"2026-11-12T06:17:13.513","metrics":{},"published":"2026-11-12T06:17:13.513","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/c476458c-215d-4056-bd82-06e59f0f84d4/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Order Tracking","vendor":"Unknown","versions":[{"lessThan":"3.6.2","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Order Tracking WordPress plugin before 3.6.2 does not verify that a visitor owns the customer or sales representative account whose orders they request, and the account numbers default to sequential values, allowing unauthenticated users to retrieve the order history of every customer and sales representative, including order contact email addresses in some versions."}],"id":"CVE-2026-124665","lastModified":"2026-11-12T06:17:13.627","metrics":{},"published":"2026-11-12T06:17:13.627","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/9165da1e-76b7-4364-9fd7-67ccb96afc48/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Ultimate Addons for Elementor Forms","vendor":"Unknown","versions":[{"lessThan":"1.0.8","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Ultimate Addons for Elementor Forms WordPress plugin before 1.0.8 does not properly validate the extension of uploaded files in its bundled file upload field, allowing unauthenticated users to upload arbitrary files such as PHP scripts and achieve remote code execution."}],"id":"CVE-2026-124814","lastModified":"2026-11-12T06:17:13.743","metrics":{},"published":"2026-11-12T06:17:13.743","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/85f2e67b-4c6d-4817-9e4d-ef62a7ddb081/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Clockinator Lite","vendor":"Unknown","versions":[{"lessThan":"1.1.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Clockinator Lite WordPress plugin before 1.1.0 does not restrict access to several of its record deletion actions, and uses a user-supplied table name in a SQL query without validating or escaping it, allowing unauthenticated users to perform SQL injection attacks, deleting data from any database table and extracting sensitive information such as password hashes."}],"id":"CVE-2026-124815","lastModified":"2026-11-12T06:17:13.853","metrics":{},"published":"2026-11-12T06:17:13.853","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/a7fe2ca1-ddfe-45fa-93e2-e0959ae29256/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
|
||||
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Clockinator Lite","vendor":"Unknown","versions":[{"lessThan":"1.1.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Clockinator Lite WordPress plugin before 1.1.0 does not check authorisation or ownership when updating leave requests, allowing unauthenticated users to modify any leave record, including approving or rejecting requests and reassigning them to other users."}],"id":"CVE-2026-124817","lastModified":"2026-11-12T06:17:13.963","metrics":{},"published":"2026-11-12T06:17:13.963","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/31b79fe5-89ee-4ccf-b3c4-48ab46fa499c/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"],"defaultStatus":"affected","packageName":"gstreamer1","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.16.1-3.el8_10","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"],"defaultStatus":"affected","packageName":"gstreamer1","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.22.12-3.el9_9.1","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"gstreamer1","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"affected","packageName":"gstreamer1","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free flaw was found in GStreamer core buffer value deserialization. When serialized buffer text contains an invalid character, an error path frees a mapped buffer before unmapping it. Applications that parse untrusted caps or structure data can reach a freed-buffer read and may crash. A network-facing GStreamer Data Protocol receiver can process such caps data without user interaction; further impact has not been established."}],"id":"CVE-2026-125704","lastModified":"2026-11-12T04:17:18.080","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"secalert@redhat.com","type":"Secondary"}]},"published":"2026-11-10T11:16:43.580","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99090"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99228"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-125704"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2569128"},{"source":"secalert@redhat.com","url":"https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11583.patch"},{"source":"secalert@redhat.com","url":"https://gstreamer.freedesktop.org/security/sa-2026-0028.html"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.3"],"defaultStatus":"affected","packageName":"gstreamer1","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.26.7-5.el10_3.1","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"],"defaultStatus":"affected","packageName":"gstreamer1","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.16.1-3.el8_10","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"],"defaultStatus":"affected","packageName":"gstreamer1","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.22.12-3.el9_9.1","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"affected","packageName":"gstreamer1","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free flaw was found in GStreamer core buffer value deserialization. When serialized buffer text contains an invalid character, an error path frees a mapped buffer before unmapping it. Applications that parse untrusted caps or structure data can reach a freed-buffer read and may crash. A network-facing GStreamer Data Protocol receiver can process such caps data without user interaction; further impact has not been established."}],"id":"CVE-2026-125704","lastModified":"2026-11-12T06:17:14.080","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"secalert@redhat.com","type":"Secondary"}]},"published":"2026-11-10T11:16:43.580","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99090"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99129"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99228"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-125704"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2569128"},{"source":"secalert@redhat.com","url":"https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11583.patch"},{"source":"secalert@redhat.com","url":"https://gstreamer.freedesktop.org/security/sa-2026-0028.html"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-base","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.16.1-8.el8_10","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-base","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.22.12-10.el9_9.1","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:10"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-base","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:6"],"defaultStatus":"unknown","packageName":"gstreamer-plugins-base","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-base","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"affected","packageName":"gstreamer-plugins-base","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer, potentially crashing the application or exposing a limited amount of process memory."}],"id":"CVE-2026-125712","lastModified":"2026-11-11T23:17:10.893","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-125712","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-10T16:33:10.793215Z","version":"2.0.3"}}]},"published":"2026-11-10T12:17:18.607","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99012"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99126"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-125712"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2569130"},{"source":"secalert@redhat.com","url":"https://gstreamer.freedesktop.org/security/sa-2026-0030.html"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.3"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-base","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.26.7-4.el10_3.2","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-base","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.16.1-8.el8_10","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-base","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.22.12-10.el9_9.1","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:6"],"defaultStatus":"unknown","packageName":"gstreamer-plugins-base","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"affected","packageName":"gstreamer1-plugins-base","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"affected","packageName":"gstreamer-plugins-base","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer, potentially crashing the application or exposing a limited amount of process memory."}],"id":"CVE-2026-125712","lastModified":"2026-11-12T06:17:14.230","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-125712","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-10T16:33:10.793215Z","version":"2.0.3"}}]},"published":"2026-11-10T12:17:18.607","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99012"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99126"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99128"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-125712"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2569130"},{"source":"secalert@redhat.com","url":"https://gstreamer.freedesktop.org/security/sa-2026-0030.html"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"N-central","vendor":"N-able","versions":[{"lessThan":"26.4.1","status":"affected","version":"0","versionType":"custom"}]}],"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Incorrect privilege assignment vulnerability in N-able N-central allows Privilege Escalation.\n\nThis issue affects N-central: before 26.4.1."}],"id":"CVE-2026-125879","lastModified":"2026-11-11T14:17:40.047","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.6,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-125879","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-11T13:58:59.410493Z","version":"2.0.3"}}]},"published":"2026-11-10T22:18:30.553","references":[{"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","url":"https://me.n-able.com/s/security-advisory/aArVy0000002ikvKAA/cve2026125879-local-privilege-escalation-to-root-via-nablewritable-config"}],"sourceIdentifier":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-266"}],"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"N-central","vendor":"N-able","versions":[{"lessThan":"26.4.1","status":"affected","version":"0","versionType":"custom"}]}],"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Incorrect privilege assignment vulnerability in N-able N-central allows Privilege Escalation.\n\nThis issue affects N-central: before 26.4.1."}],"id":"CVE-2026-125879","lastModified":"2026-11-12T05:17:45.147","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.6,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-125879","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-11T00:00:00+00:00","version":"2.0.3"}}]},"published":"2026-11-10T22:18:30.553","references":[{"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","url":"https://me.n-able.com/s/security-advisory/aArVy0000002ikvKAA/cve2026125879-local-privilege-escalation-to-root-via-nablewritable-config"}],"sourceIdentifier":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-266"}],"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","type":"Secondary"}]}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"N-central","vendor":"N-able","versions":[{"lessThan":"26.4.1","status":"affected","version":"0","versionType":"custom"}]}],"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper restriction of XML external entity reference vulnerability in N-able N-central allows XML Schema Poisoning.\n\nThis issue affects N-central: before 26.4.1."}],"id":"CVE-2026-125883","lastModified":"2026-11-11T15:17:22.223","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-125883","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-11T14:49:30.555315Z","version":"2.0.3"}}]},"published":"2026-11-10T22:18:31.143","references":[{"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","url":"https://me.n-able.com/s/security-advisory/aArVy0000002ihhKAA/cve2026125883-multiple-xxe-vulnerabilities"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/Oracle-Security/CVEs/tree/main/0-Days/N-Central%20N-Able#anonymous-service-import-xxe-rce"}],"sourceIdentifier":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-611"}],"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"N-central","vendor":"N-able","versions":[{"lessThan":"26.4.1","status":"affected","version":"0","versionType":"custom"}]}],"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper restriction of XML external entity reference vulnerability in N-able N-central allows XML Schema Poisoning.\n\nThis issue affects N-central: before 26.4.1."}],"id":"CVE-2026-125883","lastModified":"2026-11-12T05:17:45.310","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-125883","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-11T00:00:00+00:00","version":"2.0.3"}}]},"published":"2026-11-10T22:18:31.143","references":[{"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","url":"https://me.n-able.com/s/security-advisory/aArVy0000002ihhKAA/cve2026125883-multiple-xxe-vulnerabilities"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/Oracle-Security/CVEs/tree/main/0-Days/N-Central%20N-Able#anonymous-service-import-xxe-rce"}],"sourceIdentifier":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-611"}],"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","type":"Secondary"}]}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"N-central","vendor":"N-able","versions":[{"lessThanOrEqual":"24.6.1","status":"affected","version":"0","versionType":"custom"}]}],"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Download of code without integrity check vulnerability in N-able N-central allows Remote Code Inclusion.\n\nThis issue affects N-central: through 24.6.1."}],"id":"CVE-2026-125958","lastModified":"2026-11-11T15:17:22.367","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.5,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-125958","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-11T14:54:57.851737Z","version":"2.0.3"}}]},"published":"2026-11-10T22:18:31.287","references":[{"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","url":"https://me.n-able.com/s/security-advisory/aArVy0000002ixpKAA/cve2026125958-root-rce-via-unsigned-nsp-upgrade-package-upload"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/Oracle-Security/CVEs/tree/main/0-Days/N-Central%20N-Able#preupgrade-helper-root-rce"}],"sourceIdentifier":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-494"}],"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"N-central","vendor":"N-able","versions":[{"lessThanOrEqual":"24.6.1","status":"affected","version":"0","versionType":"custom"}]}],"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Download of code without integrity check vulnerability in N-able N-central allows Remote Code Inclusion.\n\nThis issue affects N-central: through 24.6.1."}],"id":"CVE-2026-125958","lastModified":"2026-11-12T05:17:45.453","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":7.5,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-125958","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-11T00:00:00+00:00","version":"2.0.3"}}]},"published":"2026-11-10T22:18:31.287","references":[{"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","url":"https://me.n-able.com/s/security-advisory/aArVy0000002ixpKAA/cve2026125958-root-rce-via-unsigned-nsp-upgrade-package-upload"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://github.com/Oracle-Security/CVEs/tree/main/0-Days/N-Central%20N-Able#preupgrade-helper-root-rce"}],"sourceIdentifier":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-494"}],"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","type":"Secondary"}]}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://cpan.org/modules","defaultStatus":"unaffected","modules":["Data::Dump::Streamer"],"packageName":"Data-Dump-Streamer","packageURL":"pkg:cpan/Data-Dump-Streamer","programFiles":["lib/Data/Dump/Streamer.pm"],"programRoutines":[{"name":"Data::Dump::Streamer::_dump_qr"}],"repo":"https://github.com/demerphq/Data-Dump-Streamer","versions":[{"lessThan":"3.00","status":"affected","version":"0","versionType":"custom"}]}],"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Data::Dump::Streamer versions before 3.00 for Perl allow code injection via unescaped Regexp patterns in _dump_qr.\n\nA Regexp's pattern is written into a qr literal without escaping \"$\" or \"@\", so \"@{[ ... ]}\" and \"${\\ ... }\" in the pattern run as code when the dump is evaluated. An already escaped delimiter gets a second backslash, which leaves the delimiter bare and ends the qr literal early.\n\nAn attacker who supplies a pattern that an application compiles, dumps and later restores with eval or do can run arbitrary Perl code."}],"id":"CVE-2026-126673","lastModified":"2026-11-12T01:17:11.457","metrics":{},"published":"2026-11-12T01:17:11.457","references":[{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","url":"https://metacpan.org/release/YVES/Data-Dump-Streamer-3.00/source/Changes"}],"sourceIdentifier":"9b29abf9-4ab0-4765-b253-1875cd9b441e","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://cpan.org/modules","defaultStatus":"unaffected","modules":["Data::Dump::Streamer"],"packageName":"Data-Dump-Streamer","packageURL":"pkg:cpan/Data-Dump-Streamer","programFiles":["lib/Data/Dump/Streamer.pm"],"programRoutines":[{"name":"Data::Dump::Streamer::_dump_qr"}],"repo":"https://github.com/demerphq/Data-Dump-Streamer","versions":[{"lessThan":"3.00","status":"affected","version":"0","versionType":"custom"}]}],"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Data::Dump::Streamer versions before 3.00 for Perl allow code injection via unescaped Regexp patterns in _dump_qr.\n\nA Regexp's pattern is written into a qr literal without escaping \"$\" or \"@\", so \"@{[ ... ]}\" and \"${\\ ... }\" in the pattern run as code when the dump is evaluated. An already escaped delimiter gets a second backslash, which leaves the delimiter bare and ends the qr literal early.\n\nAn attacker who supplies a pattern that an application compiles, dumps and later restores with eval or do can run arbitrary Perl code."}],"id":"CVE-2026-126673","lastModified":"2026-11-12T06:17:14.380","metrics":{},"published":"2026-11-12T01:17:11.457","references":[{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","url":"https://metacpan.org/release/YVES/Data-Dump-Streamer-3.00/source/Changes"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2026/11/12/2"}],"sourceIdentifier":"9b29abf9-4ab0-4765-b253-1875cd9b441e","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","type":"Secondary"}]}
|
||||
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"User Verification by PickPlugins","vendor":"Unknown","versions":[{"lessThan":"2.0.49","status":"affected","version":"2.0.38","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The User Verification by PickPlugins WordPress plugin before 2.0.49 does not rate limit the verification step of its one-time-password login, and does not expire the generated code, allowing unauthenticated attackers to brute force it and log in as any user, including administrators, where the code is configured to use digits only."}],"id":"CVE-2026-76792","lastModified":"2026-11-12T06:17:14.937","metrics":{},"published":"2026-11-12T06:17:14.937","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/e77de84b-3567-4ec6-a2dc-dce93c1fdc6f/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Received"}
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Aodh","repo":"https://opendev.org/openstack/aodh","vendor":"OpenStack","versions":[{"lessThan":"20.0.1","status":"affected","version":"10.0.0","versionType":"semver"},{"lessThan":"21.0.1","status":"affected","version":"21.0.0","versionType":"semver"},{"lessThan":"22.0.1","status":"affected","version":"22.0.0","versionType":"semver"}]}],"source":"cve@mitre.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is set to false. The API checks for the presence of the all_projects key rather than its value; a true value enforces the administrator-only policy, but a false value removes the key and skips the branch that normally restricts results to the caller's project. A non-admin user with the reader role can list alarms from all projects, exposing alarm actions containing trust webhook URLs, Heat signal endpoints, project IDs, and user IDs. The parameter can also be combined with a foreign project_id to target a specific project's alarms. A related concern is that OpenStack Watcher does not apply authorization to its webhook trigger endpoint. Any authenticated user who learns an audit's webhook URL, for example from this leaked Aodh alarm metadata, can start an EVENT audit and its associated action plan regardless of their own project or role. The webhook endpoint has lacked policy enforcement since its introduction in the Ussuri release (Watcher 4.0.0)."}],"id":"CVE-2026-76878","lastModified":"2026-09-09T16:03:22.897","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.4,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cve@mitre.org","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-76878","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-08-20T15:08:58.058420Z","version":"2.0.3"}}]},"published":"2026-08-19T22:17:28.310","references":[{"source":"cve@mitre.org","url":"https://launchpad.net/bugs/2161276"},{"source":"cve@mitre.org","url":"https://launchpad.net/bugs/2161771"},{"source":"cve@mitre.org","url":"https://lists.openstack.org/archives/list/openstack-announce@lists.openstack.org/thread/O6PKAUNMNZP6FRHLUUGBYELCRBEPB52B/"},{"source":"cve@mitre.org","url":"https://security.openstack.org/ossa/OSSA-2026-036.html"},{"source":"cve@mitre.org","url":"https://www.openwall.com/lists/oss-security/2026/08/19/5"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2026/08/20/21"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-688"}],"source":"cve@mitre.org","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Aodh","repo":"https://opendev.org/openstack/aodh","vendor":"OpenStack","versions":[{"lessThan":"20.0.1","status":"affected","version":"10.0.0","versionType":"semver"},{"lessThan":"21.0.1","status":"affected","version":"21.0.0","versionType":"semver"},{"lessThan":"22.0.1","status":"affected","version":"22.0.0","versionType":"semver"}]}],"source":"cve@mitre.org"}],"cveTags":[],"descriptions":[{"lang":"en","value":"In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is set to false. The API checks for the presence of the all_projects key rather than its value; a true value enforces the administrator-only policy, but a false value removes the key and skips the branch that normally restricts results to the caller's project. A non-admin user with the reader role can list alarms from all projects, exposing alarm actions containing trust webhook URLs, Heat signal endpoints, project IDs, and user IDs. The parameter can also be combined with a foreign project_id to target a specific project's alarms. A related concern is that OpenStack Watcher does not apply authorization to its webhook trigger endpoint. Any authenticated user who learns an audit's webhook URL, for example from this leaked Aodh alarm metadata, can start an EVENT audit and its associated action plan regardless of their own project or role. The webhook endpoint has lacked policy enforcement since its introduction in the Ussuri release (Watcher 4.0.0)."}],"id":"CVE-2026-76878","lastModified":"2026-11-12T06:17:15.073","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":8.4,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cve@mitre.org","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-76878","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-08-20T15:08:58.058420Z","version":"2.0.3"}}]},"published":"2026-08-19T22:17:28.310","references":[{"source":"cve@mitre.org","url":"https://launchpad.net/bugs/2161276"},{"source":"cve@mitre.org","url":"https://launchpad.net/bugs/2161771"},{"source":"cve@mitre.org","url":"https://lists.openstack.org/archives/list/openstack-announce@lists.openstack.org/thread/O6PKAUNMNZP6FRHLUUGBYELCRBEPB52B/"},{"source":"cve@mitre.org","url":"https://security.openstack.org/ossa/OSSA-2026-036.html"},{"source":"cve@mitre.org","url":"https://www.openwall.com/lists/oss-security/2026/08/19/5"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2026/08/20/21"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.debian.org/debian-lts-announce/2026/11/msg00019.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.debian.org/debian-lts-announce/2026/11/msg00020.html"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-688"}],"source":"cve@mitre.org","type":"Secondary"}]}
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"N-central","vendor":"N-able","versions":[{"lessThan":"2026.4.1","status":"affected","version":"0","versionType":"custom"}]}],"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Missing authentication for critical function vulnerability in N-able N-central allows Privilege Escalation.\n\nThis issue affects N-central: before 2026.4.1."}],"id":"CVE-2026-91000","lastModified":"2026-11-11T15:17:25.647","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":8.4,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-91000","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-11T14:02:31.388178Z","version":"2.0.3"}}]},"published":"2026-11-10T22:21:14.613","references":[{"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","url":"https://me.n-able.com/s/security-advisory/aArVy0000002irNKAQ/cve202691000-insecure-ipc-channels-lead-to-local-privilege-escalation"}],"sourceIdentifier":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-306"}],"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"N-central","vendor":"N-able","versions":[{"lessThan":"2026.4.1","status":"affected","version":"0","versionType":"custom"}]}],"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Missing authentication for critical function vulnerability in N-able N-central allows Privilege Escalation.\n\nThis issue affects N-central: before 2026.4.1."}],"id":"CVE-2026-91000","lastModified":"2026-11-12T05:17:45.623","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":8.4,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-91000","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-11T00:00:00+00:00","version":"2.0.3"}}]},"published":"2026-11-10T22:21:14.613","references":[{"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","url":"https://me.n-able.com/s/security-advisory/aArVy0000002irNKAQ/cve202691000-insecure-ipc-channels-lead-to-local-privilege-escalation"}],"sourceIdentifier":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","vulnStatus":"Received","weaknesses":[{"description":[{"lang":"en","value":"CWE-306"}],"source":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","type":"Secondary"}]}
|
||||
|
||||
File diff suppressed because one or more lines are too long
@@ -1 +1 @@
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.3"],"defaultStatus":"affected","packageName":"gnome-remote-desktop","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:49.3-18.el10_3","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.8::appstream"],"defaultStatus":"affected","packageName":"gnome-remote-desktop","product":"Red Hat Enterprise Linux 9.8 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:40.0-13.el9_8","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"gnome-remote-desktop","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"gnome-remote-desktop","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A denial-of-service flaw was found in gnome-remote-desktop. An unauthenticated remote attacker can open RDP connections without completing the handshake and retain the connection-throttling slots indefinitely because no pre-authentication handshake deadline is enforced. By exhausting the global connection limit, an attacker can prevent new RDP clients from connecting until a holding socket is closed."}],"id":"CVE-2026-96541","lastModified":"2026-11-12T02:16:40.450","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-96541","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-10-14T03:59:26.711449Z","version":"2.0.3"}}]},"published":"2026-09-23T19:19:54.080","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:98622"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99136"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-96541"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2539385"},{"source":"secalert@redhat.com","url":"https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/356"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/356"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|
||||
{"affected":[{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.3"],"defaultStatus":"affected","packageName":"gnome-remote-desktop","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:49.3-18.el10_3","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.2"],"defaultStatus":"affected","packageName":"gnome-remote-desktop","product":"Red Hat Enterprise Linux 10.2 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:49.3-5.el10_2","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.8::appstream"],"defaultStatus":"affected","packageName":"gnome-remote-desktop","product":"Red Hat Enterprise Linux 9.8 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:40.0-13.el9_8","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8"],"defaultStatus":"affected","packageName":"gnome-remote-desktop","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9"],"defaultStatus":"affected","packageName":"gnome-remote-desktop","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat"}],"source":"secalert@redhat.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A denial-of-service flaw was found in gnome-remote-desktop. An unauthenticated remote attacker can open RDP connections without completing the handshake and retain the connection-throttling slots indefinitely because no pre-authentication handshake deadline is enforced. By exhausting the global connection limit, an attacker can prevent new RDP clients from connecting until a holding socket is closed."}],"id":"CVE-2026-96541","lastModified":"2026-11-12T06:17:15.513","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"secalert@redhat.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-96541","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-10-14T03:59:26.711449Z","version":"2.0.3"}}]},"published":"2026-09-23T19:19:54.080","references":[{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:98622"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99125"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/errata/RHSA-2026:99136"},{"source":"secalert@redhat.com","url":"https://access.redhat.com/security/cve/CVE-2026-96541"},{"source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2539385"},{"source":"secalert@redhat.com","url":"https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/356"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","url":"https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/356"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|
||||
|
||||
Reference in New Issue
Block a user