mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
Sync CVE metadata 2026-09-04
This commit is contained in:
1 parent
ee2b6eb533
commit
b05a5acb33
39 files changed
+485
-19
No files matched your search
@@ -1,8 +1,8 @@
|
||||
<div align="center">
|
||||
|
||||
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=171146-82617-1184" alt="PoC Index" width="100%"></a>
|
||||
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=171170-82641-1184" alt="PoC Index" width="100%"></a>
|
||||
|
||||
[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
|
||||
[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
|
||||
|
||||
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/8dec6181e823d641132e0ee8a52a1612c2b5dd37/docs/search.svg" alt="Search PoC Index" width="100%"></a>
|
||||
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-50554](https://www.cve.org/CVERecord?id=CVE-2026-50554)
|
||||
**Note Mark: Unauthenticated disclosure of soft-deleted note metadata via deleted=true on public books in note-mark**
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
Note Mark is an open-source note-taking application. Prior to version 0.19.5, GET /api/books/{bookID}/notes is an unauthenticated endpoint that accepts a "deleted" query parameter. When the request is ?deleted=true, the service runs the query with Unscoped() (bypassing GORM's soft-delete scope) but keeps the read-authorization clause as "owner_id = ? OR is_public = ?". As a result, any unauthenticated caller can enumerate the metadata of soft-deleted ("trashed") notes belonging to any public book — notes the owner explicitly deleted and expected to be removed from public view. This issue has been patched in version 0.19.5.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-588f-fvcv-xhvf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-53728](https://www.cve.org/CVERecord?id=CVE-2026-53728)
|
||||
**Medplum - Improper Validation of Redirect URI in External Auth Callback allows Authorization Code Leakage**
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
Medplum is a developer platform that enables development of healthcare apps. Prior to version 5.1.6, the external identity provider callback at GET /auth/external accepts attacker-controlled redirect URIs that only need to start with a registered client redirect URI, rather than matching exactly. After a successful external IdP login, the server appends Medplum login and code values to that attacker-supplied URL and issues a redirect. Because the external login request state is serialized as raw JSON and later trusted by the callback, an attacker who can tamper with state.redirectUri can cause Medplum to redirect authorization artifacts to an attacker-controlled endpoint. When the registered redirect URI is a bare origin or another prefix that can be extended into a different hostname, this becomes a cross-origin authorization code leak. This issue has been patched in version 5.1.6.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-m44r-7c5h-m6mj
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-61556](https://www.cve.org/CVERecord?id=CVE-2026-61556)
|
||||
**LiquidJS: An infinite loop vulnerability in `strip_html` filter**
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. From 10.26.0 until 10.27.1, the strip_html filter in src/filters/html.ts can enter an infinite loop when an input string contains <, includes at least one preceding character, and has no later >. In strip_html, the search for the next opener advances lt while the loop index remains unchanged when the closer search returns -1, and the equality-only stall guard does not exit because the loop index is less than lt. Reprocessing the same state indefinitely blocks template rendering and can cause denial of service with an input as short as a<. This issue is fixed in version 10.27.1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-m7fp-h3p4-hr49
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-63376](https://www.cve.org/CVERecord?id=CVE-2026-63376)
|
||||
**toml-node: Prototype Pollution Leads to `Object.prototype` Corruption via `__proto__` Key-Path Desynchronization**
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
toml-node is a TOML parser for Node.js and the browser. Prior to 4.1.2, toml.parse() in lib/compiler.js can be tricked by a table path such as a.b.y.__proto__.__proto__, allowing traversal from a scalar value into Number.prototype and Object.prototype. The currentPath tracking value uses both arrays and strings, so valueAssignments records a comma-joined path such as a,b.y while deepRef checks the dot-joined path a.b.y, allowing the duplicate-key guard to miss and attacker-controlled keys to be written to Object.prototype. A table-array prefix-clearing path in addTableArray can also erase guard state before the same __proto__ traversal. Injected properties become visible throughout the Node.js process and can cause denial of service, logic or authorization bypass, or code execution when an application contains a suitable gadget. This issue is fixed in version 4.1.2.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-v5mp-jgw5-2x6j
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-63669](https://www.cve.org/CVERecord?id=CVE-2026-63669)
|
||||
**ApostropheCMS: Missing destination-parent authorization in page `move()` allows a low-privileged editor to move and re-rank pages inside a restricted subtree**
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
ApostropheCMS is an open-source Node.js content management system. Prior to 4.32.0, the page module's move() operation fails to enforce the destination parent's _create permission because its oldParent archive condition disables the check for ordinary moves, allowing an authenticated editor or contributor to use _targetId and _position through the page REST update endpoint to move a controlled page into a restricted subtree and make nudgeNewPeers() updateMany re-rank protected sibling pages. This issue is fixed in version 4.32.0.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-wr5r-wqp2-x4fh
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-68585](https://www.cve.org/CVERecord?id=CVE-2026-68585)
|
||||
**SiYuan before v3.7.3 Metadata Disclosure via getBlockInfo**
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
SiYuan versions before v3.7.3 contain a metadata disclosure vulnerability in the /api/block/getBlockInfo endpoint that returns document root metadata including title for publish-forbidden documents without publish-access checks. Anonymous readers or publish RoleReader tokens can supply a block ID to retrieve the title, notebook, path, root ID, and icon of documents administrators marked as excluded from publishing.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-pm3w-vxp9-ccwc
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-68586](https://www.cve.org/CVERecord?id=CVE-2026-68586)
|
||||
**SiYuan before v3.7.3 Content Disclosure via getBacklinkDoc**
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
SiYuan before v3.7.3 fails to apply publish-access filters to the getBacklinkDoc and getBackmentionDoc content endpoints (/api/ref/getBacklinkDoc and /api/ref/getBackmentionDoc). While the corresponding backlink list endpoints filter publish-forbidden documents, the content endpoints (gated only by CheckAuth) do not. A publish-mode reader — including an anonymous reader when publish Basic Auth is disabled — can call these endpoints directly with a publish-forbidden document's ID to retrieve its rendered DOM content and to determine whether the document references a given block (a reference-existence oracle).
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-36v8-mpjm-8j5r
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-68587](https://www.cve.org/CVERecord?id=CVE-2026-68587)
|
||||
**SiYuan before v3.7.3 Information Disclosure via getHeading*Transaction**
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
SiYuan versions before v3.7.3 contain an information disclosure vulnerability in the getHeadingDeleteTransaction, getHeadingLevelTransaction, and getHeadingInsertTransaction endpoints that return rendered block DOM without publish-access checks. Anonymous readers or publish RoleReader tokens can supply a heading block ID to read full rendered content of publish-disabled documents that should be restricted.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-69mh-gvh4-8gp7
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -12,7 +12,7 @@ SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullT
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://github.com/advisories/GHSA-fph3-ghq9-vw66
|
||||
|
||||
#### Github
|
||||
- https://github.com/0xdak/CVE-2026-69083_exploit
|
||||
@@ -12,7 +12,7 @@ SiYuan versions <= v3.7.2 expose the /api/search/searchEmbedBlock endpoint, whic
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://github.com/advisories/GHSA-vh22-h7hf-www7
|
||||
|
||||
#### Github
|
||||
- https://github.com/Boreas37/CVE-2026-69084-PoC
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-71428](https://www.cve.org/CVERecord?id=CVE-2026-71428)
|
||||
**unstructured: Server-Side Request Forgery in the URL-based partitioning**
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. From 0.4.7 until 0.24.0, the url argument of partition, partition_html, and partition_md is fetched without host validation in unstructured/partition/auto.py, unstructured/partition/html/partition.py, and unstructured/partition/md.py. An attacker who controls that URL can make a server-side ingestion service request loopback addresses, internal HTTP services, or cloud metadata endpoints through direct targets, redirects, or DNS rebinding. The response body is returned as Element text, allowing internal response disclosure, and side-effecting GET endpoints may also be triggered. This issue is fixed in version 0.24.0.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-4mvj-m6j5-pmf7
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-71429](https://www.cve.org/CVERecord?id=CVE-2026-71429)
|
||||
**stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)**
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.5.0, the path filters pick, ignore, filter, and replace in src/core/filters/filter-base.js recompute the full path string from the nesting stack for every checkable token. Because the stack length equals the current nesting depth and a checkable token is emitted at every level, a depth D document costs O(D²) rather than O(D) to process. The issue is triggered by nesting depth rather than byte volume, including the documented pick({filter: 'data'}) traversal-until-match path, so an application that sends untrusted JSON through a string or RegExp filter can block the Node.js event loop and cause denial of service with a small deeply nested document. The streamArray, streamObject, and streamValues streamers are not affected because they use the constant-time asm.depth getter. This issue is fixed in version 3.5.0.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-528h-pc64-c93x
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-72800](https://www.cve.org/CVERecord?id=CVE-2026-72800)
|
||||
**SiYuan before v3.7.4 Information Disclosure via Unfiltered API**
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
SiYuan versions before v3.7.4 fail to apply publish-access filtering to the getAttributeViewKeysByID endpoint, allowing authenticated readers to retrieve complete database column schemas including descriptions, select vocabularies, and template expressions. Additionally, getBlockDefIDsByRefText and getBlockRelevantIDs endpoints enumerate workspace-wide block IDs without publish scoping, enabling attackers to discover valid block identifiers across publish boundaries and access content from hidden or password-protected documents.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-5fhr-f75j-8wr9
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-72801](https://www.cve.org/CVERecord?id=CVE-2026-72801)
|
||||
**SiYuan before v3.7.4 Information Disclosure via Encryption Key Material**
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
SiYuan versions before v3.7.4 disclose encrypted-notebook key-derivation material and wrapped data keys through unauthenticated endpoints in publish mode. Attackers can retrieve Argon2id salt, cost parameters, password verifiers, and wrapped notebook keys to perform unlimited offline master-password cracking without rate limiting.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-8x84-r2ff-h8pq
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-72802](https://www.cve.org/CVERecord?id=CVE-2026-72802)
|
||||
**SiYuan before v3.7.4 Information Disclosure via resolveAssetPath**
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the resolveAssetPath endpoint that returns absolute filesystem paths unmodified to CheckAuth-only requests. Attackers can harvest relative asset paths from published documents and submit them to resolveAssetPath to obtain the server's absolute workspace path, disclosing the operating-system username and installation layout.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-jv8v-xq2h-657v
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-72803](https://www.cve.org/CVERecord?id=CVE-2026-72803)
|
||||
**SiYuan before v3.7.4 Information Disclosure via getBlockAttrs**
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
SiYuan versions before v3.7.4 fail to enforce publish-access checks in the getBlockAttrs and batchGetBlockAttrs endpoints. Attackers can retrieve block attributes including names, aliases, memos, and custom fields from protected documents by sending POST requests with block IDs.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-qvq9-hq6p-v378
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-72804](https://www.cve.org/CVERecord?id=CVE-2026-72804)
|
||||
**SiYuan before v3.7.4 Authentication Bypass via Graph Endpoints**
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
SiYuan versions before v3.7.4 fail to validate publish-password tier in getGraph and getLocalGraph endpoints, allowing anonymous readers to retrieve block-level content of password-protected documents. Attackers can call these endpoints without supplying a password to read protected document content and the complete reference topology.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-vpjw-wf5h-cgpq
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-72805](https://www.cve.org/CVERecord?id=CVE-2026-72805)
|
||||
**SiYuan before v3.7.4 Information Disclosure via Block Endpoints**
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
SiYuan versions before v3.7.4 fail to enforce publish-access checks on getBlockBreadcrumb, getRefText, and getBlockTreeInfos endpoints, allowing disclosure of protected document content and metadata. Anonymous readers or publish RoleReader accounts can retrieve document titles, ancestor block content snippets, reference text, and path metadata for publish-forbidden or password-protected documents by supplying block IDs.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-67x2-mq63-v9vm
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-72807](https://www.cve.org/CVERecord?id=CVE-2026-72807)
|
||||
**SiYuan before v3.7.4 SQL Injection via queryBlocks template**
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
SiYuan versions before v3.7.4 contain a second-order SQL injection vulnerability in attribute-view template columns that expose the queryBlocks function, which executes raw SQL using string substitution instead of parameterized queries. Attackers can distribute malicious SiYuan documents or packages with crafted template columns that execute arbitrary SQL on a victim's kernel when the package is imported and rendered, enabling read and write access across notebooks.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-x67c-8pwr-m8g3
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-72808](https://www.cve.org/CVERecord?id=CVE-2026-72808)
|
||||
**SiYuan before v3.7.4 Information Disclosure via getFileAnnotation**
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
SiYuan versions up to and including v3.7.2 (fixed in v3.7.4) contain an information disclosure vulnerability in the /api/asset/getFileAnnotation endpoint, which returns .sya PDF-annotation file content without a publish-access check. Because the endpoint is gated only by CheckAuth (unlike the /assets/* route, which enforces publish access and password), an anonymous reader (when publish authentication is disabled) or any publish RoleReader who knows an asset path can read the private PDF annotations (highlights and notes) of publish-forbidden, password-protected, or unpublished documents. The issue is limited to non-encrypted notebooks; encrypted-box annotations are not exposed.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-v7ph-r5r6-4jcj
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-72810](https://www.cve.org/CVERecord?id=CVE-2026-72810)
|
||||
**SiYuan before v3.7.4 Publish-Boundary Bypass via WebSocket**
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
SiYuan versions before v3.7.4 contain a publish-boundary bypass vulnerability in WebSocket broadcast sessions that allows anonymous readers to receive unfiltered edits. Attackers can establish a WebSocket connection to the publish surface and passively receive real-time content events including password-protected and forbidden documents without authentication.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-mw8r-mw84-88v2
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-72811](https://www.cve.org/CVERecord?id=CVE-2026-72811)
|
||||
**SiYuan before v3.7.4 SQL Injection via backlink search**
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
SiYuan versions <= v3.7.2 contain a SQL injection vulnerability in the backlink/mention search query (kernel/model/backlink.go), which concatenates stored block metadata (title, name, alias, anchor text) and the client-supplied keyword into a SQL MATCH/search statement while escaping only the double-quote character and not the single quote. A single quote in the client keyword (first-order, reachable by an anonymous or RoleReader user on the publish surface) or in stored document metadata (second-order) breaks out of the string literal. Because the query runs on the main read-write siyuan.db handle via a statement-stacking-capable driver, an attacker can execute arbitrary SQL, enabling cross-notebook read and write. Fixed in v3.7.4.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-q2vg-7qgx-x5fc
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-72812](https://www.cve.org/CVERecord?id=CVE-2026-72812)
|
||||
**SiYuan before v3.7.4 Missing Authorization via refreshBacklink**
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
SiYuan versions before v3.7.4 contain a missing authorization vulnerability in the /api/ref/refreshBacklink endpoint that allows anonymous readers to trigger persistent server-side writes. Attackers can invoke the endpoint with an attacker-controlled block ID to flush transaction queues, scan all references globally, and enqueue database writes, bypassing read-only protections and enabling resource amplification attacks.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-wgwx-479j-23vq
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -13,7 +13,7 @@ Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.21, the
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://github.com/advisories/GHSA-8cj9-r88m-8945
|
||||
|
||||
#### Github
|
||||
- https://github.com/CamilleGR/CVE-2026-73292
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-73293](https://www.cve.org/CVERecord?id=CVE-2026-73293)
|
||||
**Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision**
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.19 and from 2.19.0-alpha3 until 2.19.5-beta5, ProjectMiddleware and GetProjectOrGlobalRoleBySlug allow a project manager to use POST /api/project/{id}/roles to create a custom manager role with permission bitmask 15, overriding the built-in manager permissions and granting CanUpdateProject and CanManageProjectUsers owner capabilities. This issue is fixed in versions 2.18.19 and 2.19.5-beta5.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-cxvf-gvfq-36w2
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-73846](https://www.cve.org/CVERecord?id=CVE-2026-73846)
|
||||
**CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning**
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped ampersand, equals-sign, and vertical-bar delimiters, allowing different logical parameter sets used by buildCacheKey to collide and an attacker to prime a shared cache with a response for a victim's distinct query. This issue is fixed in version 0.4.112.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-78x9-fhhx-v2g6
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-75602](https://www.cve.org/CVERecord?id=CVE-2026-75602)
|
||||
**OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool**
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
OpenList a file list program that supports multiple storage. Prior to 4.2.3, OpenList's offline-download feature at POST /api/fs/add_offline_download with tool: "SimpleHttp" accepts an attacker-supplied URL and saves its bytes under a per-task temporary directory before transferring them to the user's destination storage. The temporary filename comes from the attacker-controlled Content-Disposition header, is passed from parseFilenameFromContentDisposition in internal/offline_download/http/util.go to filepath.Join(task.TempDir, filename) in SimpleHttp.Run in internal/offline_download/http/client.go, and is opened with os.Create without a containment check. Because filepath.Join cleans .. segments, a non-admin user with PermAddOfflineDownload on any path can traverse out of task.TempDir and create, truncate, or overwrite any file writable by the OpenList process whose parent directory already exists. The server/handles/offline_download.go AddOfflineDownload route uses normal user authentication rather than AuthAdmin, and local-storage destinations fall through tryPutUrl in internal/offline_download/tool/add.go to the vulnerable SimpleHttp.Run path. This issue is fixed in version 4.2.3.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/advisories/GHSA-h6cj-26g5-67fv
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
+3
-3
@@ -1,5 +1,5 @@
|
||||
<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="180" viewBox="0 0 1200 180"
|
||||
role="img" aria-label="PoC Index, 82,617 CVEs with public proof-of-concept exploits">
|
||||
role="img" aria-label="PoC Index, 82,641 CVEs with public proof-of-concept exploits">
|
||||
<clipPath id="card"><rect x="1" y="1" width="1198" height="178" rx="12"/></clipPath>
|
||||
<rect x="0.5" y="0.5" width="1199" height="179" rx="12" fill="#0d1117" stroke="#30363d"/>
|
||||
<g clip-path="url(#card)" opacity="0.6"><g>
|
||||
@@ -19,10 +19,10 @@
|
||||
<text x="56" y="132" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="15" fill="#2f81f7">pocindex.io</text>
|
||||
|
||||
<text x="620" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
|
||||
fill="#e6edf3" letter-spacing="-0.5">171,146</text>
|
||||
fill="#e6edf3" letter-spacing="-0.5">171,170</text>
|
||||
<text x="620" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
|
||||
fill="#6e7681" letter-spacing="1.6">CVES INDEXED</text><text x="840" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
|
||||
fill="#2f81f7" letter-spacing="-0.5">82,617</text>
|
||||
fill="#2f81f7" letter-spacing="-0.5">82,641</text>
|
||||
<text x="840" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
|
||||
fill="#6e7681" letter-spacing="1.6">WITH POCS</text><text x="1010" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
|
||||
fill="#f85149" letter-spacing="-0.5">1,184</text>
|
||||
|
||||
|
Before Width: | Height: | Size: 2.6 KiB After Width: | Height: | Size: 2.6 KiB |
@@ -20,10 +20,10 @@
|
||||
|
||||
<rect x="96" y="344" width="1088" height="1" fill="#30363d"/>
|
||||
<text x="96" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
|
||||
fill="#e6edf3" letter-spacing="-0.5">171,146</text>
|
||||
fill="#e6edf3" letter-spacing="-0.5">171,170</text>
|
||||
<text x="96" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
|
||||
fill="#6e7681" letter-spacing="1.6">CVES INDEXED</text><text x="500" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
|
||||
fill="#2f81f7" letter-spacing="-0.5">82,617</text>
|
||||
fill="#2f81f7" letter-spacing="-0.5">82,641</text>
|
||||
<text x="500" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
|
||||
fill="#6e7681" letter-spacing="1.6">WITH POCS</text><text x="880" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
|
||||
fill="#f85149" letter-spacing="-0.5">1,184</text>
|
||||
|
||||
|
Before Width: | Height: | Size: 2.7 KiB After Width: | Height: | Size: 2.7 KiB |
+2
-2
@@ -1,5 +1,5 @@
|
||||
{
|
||||
"kev": 1184,
|
||||
"total_cves": 171146,
|
||||
"with_pocs": 82617
|
||||
"total_cves": 171170,
|
||||
"with_pocs": 82641
|
||||
}
|
||||
@@ -1 +1 @@
|
||||
{"CVE-1999-0001":["2000-02-04","2024-08-01"],"CVE-1999-0002":["1999-09-29","2024-08-01"],"CVE-1999-0003":["1999-09-29","2024-08-01"],"CVE-1999-0004":["2000-02-04","2024-08-01"],"CVE-1999-0005":["1999-09-29","2024-08-01"],"CVE-1999-0006":["1999-09-29","2024-10-29"],"CVE-1999-0007":["1999-09-29","2024-08-01"],"CVE-1999-0009":["1999-09-29","2024-08-01"],"CVE-1999-0014":["1999-09-29","2024-08-01"],"CVE-1999-0015":["2000-02-04","2024-08-01"],"CVE-1999-0016":["1999-09-29","2025-03-17"],"CVE-1999-0018":["1999-09-29","2024-08-01"],"CVE-1999-0019":["1999-09-29","2024-08-01"],"CVE-1999-0021":["1999-09-29","2024-08-01"],"CVE-1999-0023":["1999-09-29","2024-08-01"],"CVE-1999-0025":["1999-09-29","2024-08-01"],"CVE-1999-0026":["1999-09-29","2024-08-01"],"CVE-1999-0027":["1999-09-29","2024-08-01"],"CVE-1999-0028":["1999-09-29","2024-08-01"],"CVE-1999-0029":["1999-09-29","2024-10-29"],"CVE-1999-0030":["2000-02-04","2024-08-01"],"CVE-1999-0032":["1999-09-29","2024-08-01"],"CVE-1999-0034":["1999-09-29","2024-08-01"],"CVE-1999-0036":["1999-09-29","2024-10-29"],"CVE-1999-0038":["1999-09-29","2024-09-12"],"CVE-1999-0039":["1999-09-29","2024-09-12"],"CVE-1999-0040":["1999-09-29","2024-08-01"],"CVE-1999-0041":["1999-09-29","2024-09-17"],"CVE-1999-0042":["1999-09-29","2024-08-01"],"CVE-1999-0044":["1999-09-29","2024-08-01"],"CVE-1999-0045":["1999-09-29","2024-08-01"],"CVE-1999-0046":["1999-09-29","2024-08-01"],"CVE-1999-0050":["1999-09-29","2024-08-01"],"CVE-1999-0051":["1999-09-29","2024-08-01"],"CVE-1999-0060":["1999-09-29","2024-08-01"],"CVE-1999-0063":["1999-09-29","2024-08-01"],"CVE-1999-0064":["1999-09-29","2024-08-01"],"CVE-1999-0066":["1999-09-29","2024-08-01"],"CVE-1999-0067":["1999-09-29","2024-08-01"],"CVE-1999-0068":["1999-09-29","2024-08-01"],"CVE-1999-0069":["1999-09-29","2024-08-01"],"CVE-1999-0070":["1999-09-29","2024-08-01"],"CVE-1999-0077":["1999-09-29","2024-08-01"],"CVE-1999-0078":["2000-02-04","2024-08-01"],"CVE-1999-0082":["1999-09-29","2024-08-01"],"CVE-1999-0084":["1999-09-29","2024-08-01"],"CVE-1999-0088":["2000-02-04","2024-08-01"],"CVE-1999-0092":["2000-02-04","2024-08-01"],"CVE-1999-0095":["1999-09-29","2024-08-01"],"CVE-1999-0101":["2000-01-18","2024-08-01"],"CVE-1999-0103":["1999-09-29","2025-03-17"],"CVE-1999-0105":["2000-02-04","2024-08-01"],"CVE-1999-0107":["2000-02-04","2024-08-01"],"CVE-1999-0108":["1999-09-29","2024-08-01"],"CVE-1999-0109":["1999-09-29","2024-08-01"],"CVE-1999-0110":["2000-02-04","2005-02-04"],"CVE-1999-0112":["1999-09-29","2024-08-01"],"CVE-1999-0113":["1999-09-29","2024-08-01"],"CVE-1999-0115":["2001-05-07","2024-08-01"],"CVE-1999-0116":["1999-09-29","2024-08-01"],"CVE-1999-0118":["2000-06-02","2024-08-01"],"CVE-1999-0122":["1999-09-29","2024-08-01"],"CVE-1999-0125":["1999-09-29","2024-08-01"],"CVE-1999-0126":["1999-09-29","2024-08-01"],"CVE-1999-0128":["1999-09-29","2024-08-01"],"CVE-1999-0130":["1999-09-29","2024-08-01"],"CVE-1999-0137":["1999-09-29","2024-08-01"],"CVE-1999-0140":["2000-02-04","2024-08-01"],"CVE-1999-0144":["2000-02-04","2024-08-01"],"CVE-1999-0145":["2000-10-13","2024-08-01"],"CVE-1999-0146":["1999-09-29","2024-08-01"],"CVE-1999-0147":["1999-09-29","2024-08-01"],"CVE-1999-0148":["1999-09-29","2024-08-01"],"CVE-1999-0149":["1999-09-29","2024-08-01"],"CVE-1999-0153":["1999-09-29","2024-08-01"],"CVE-1999-0154":["2001-09-12","2024-08-01"],"CVE-1999-0156":["2000-02-04","2024-08-01"],"CVE-1999-0158":["1999-09-29","2024-08-01"],"CVE-1999-0162":["1999-09-29","2024-08-01"],"CVE-1999-0163":["2000-02-04","2024-08-01"],"CVE-1999-0165":["2000-02-04","2024-08-01"],"CVE-1999-0170":["1999-09-29","2024-08-01"],"CVE-1999-0173":["1999-09-29","2024-08-01"],"CVE-1999-0174":["1999-09-29","2024-08-01"],"CVE-1999-0175":["1999-09-29","2024-08-01"],"CVE-1999-0176":["1999-09-29","2024-08-01"],"CVE-1999-0178":["1999-09-29","2024-08-01"],"CVE-1999-0180":["1999-09-29","2024-08-01"],"CVE-1999-0182":["1999-09-29","2024-08-01"],"CVE-1999-0183":["1999-09-29","2024-08-01"],"CVE-1999-0191":["1999-09-29","2024-08-01"],"CVE-1999-0192":["1999-09-29","2024-08-01"],"CVE-1999-0193":["2000-02-04","2024-08-01"],"CVE-1999-0195":["2000-02-04","2024-08-01"],"CVE-1999-0196":["1999-09-29","2024-08-01"],"CVE-1999-0199":["2020-10-06","2024-08-01"],"CVE-1999-0201":["1999-09-29","2024-08-01"],"CVE-1999-0204":["1999-09-29","2024-08-01"],"CVE-1999-0206":["1999-09-29","2024-08-01"],"CVE-1999-0207":["1999-09-29","2024-08-01"],"CVE-1999-0208":["1999-09-29","2024-08-01"],"CVE-1999-0209":["1999-09-29","2024-08-01"],"CVE-1999-0210":["2000-06-02","2024-08-01"],"CVE-1999-0211":["1999-09-29","2024-08-01"],"CVE-1999-0215":["1999-09-29","2024-08-01"],"CVE-1999-0219":["1999-09-29","2024-08-01"],"CVE-1999-0220":["2000-02-04","2024-08-01"],"CVE-1999-0221":["1999-09-29","2024-08-01"],"CVE-1999-0224":["1999-09-29","2024-08-01"],"CVE-1999-0225":["2000-06-02","2024-08-01"],"CVE-1999-0232":["2000-02-04","2024-08-01"],"CVE-1999-0233":["2000-01-18","2024-08-01"],"CVE-1999-0235":["2000-02-04","2024-08-01"],"CVE-1999-0236":["1999-09-Line truncated
|
||||
{"CVE-1999-0001":["2000-02-04","2024-08-01"],"CVE-1999-0002":["1999-09-29","2024-08-01"],"CVE-1999-0003":["1999-09-29","2024-08-01"],"CVE-1999-0004":["2000-02-04","2024-08-01"],"CVE-1999-0005":["1999-09-29","2024-08-01"],"CVE-1999-0006":["1999-09-29","2024-10-29"],"CVE-1999-0007":["1999-09-29","2024-08-01"],"CVE-1999-0009":["1999-09-29","2024-08-01"],"CVE-1999-0014":["1999-09-29","2024-08-01"],"CVE-1999-0015":["2000-02-04","2024-08-01"],"CVE-1999-0016":["1999-09-29","2025-03-17"],"CVE-1999-0018":["1999-09-29","2024-08-01"],"CVE-1999-0019":["1999-09-29","2024-08-01"],"CVE-1999-0021":["1999-09-29","2024-08-01"],"CVE-1999-0023":["1999-09-29","2024-08-01"],"CVE-1999-0025":["1999-09-29","2024-08-01"],"CVE-1999-0026":["1999-09-29","2024-08-01"],"CVE-1999-0027":["1999-09-29","2024-08-01"],"CVE-1999-0028":["1999-09-29","2024-08-01"],"CVE-1999-0029":["1999-09-29","2024-10-29"],"CVE-1999-0030":["2000-02-04","2024-08-01"],"CVE-1999-0032":["1999-09-29","2024-08-01"],"CVE-1999-0034":["1999-09-29","2024-08-01"],"CVE-1999-0036":["1999-09-29","2024-10-29"],"CVE-1999-0038":["1999-09-29","2024-09-12"],"CVE-1999-0039":["1999-09-29","2024-09-12"],"CVE-1999-0040":["1999-09-29","2024-08-01"],"CVE-1999-0041":["1999-09-29","2024-09-17"],"CVE-1999-0042":["1999-09-29","2024-08-01"],"CVE-1999-0044":["1999-09-29","2024-08-01"],"CVE-1999-0045":["1999-09-29","2024-08-01"],"CVE-1999-0046":["1999-09-29","2024-08-01"],"CVE-1999-0050":["1999-09-29","2024-08-01"],"CVE-1999-0051":["1999-09-29","2024-08-01"],"CVE-1999-0060":["1999-09-29","2024-08-01"],"CVE-1999-0063":["1999-09-29","2024-08-01"],"CVE-1999-0064":["1999-09-29","2024-08-01"],"CVE-1999-0066":["1999-09-29","2024-08-01"],"CVE-1999-0067":["1999-09-29","2024-08-01"],"CVE-1999-0068":["1999-09-29","2024-08-01"],"CVE-1999-0069":["1999-09-29","2024-08-01"],"CVE-1999-0070":["1999-09-29","2024-08-01"],"CVE-1999-0077":["1999-09-29","2024-08-01"],"CVE-1999-0078":["2000-02-04","2024-08-01"],"CVE-1999-0082":["1999-09-29","2024-08-01"],"CVE-1999-0084":["1999-09-29","2024-08-01"],"CVE-1999-0088":["2000-02-04","2024-08-01"],"CVE-1999-0092":["2000-02-04","2024-08-01"],"CVE-1999-0095":["1999-09-29","2024-08-01"],"CVE-1999-0101":["2000-01-18","2024-08-01"],"CVE-1999-0103":["1999-09-29","2025-03-17"],"CVE-1999-0105":["2000-02-04","2024-08-01"],"CVE-1999-0107":["2000-02-04","2024-08-01"],"CVE-1999-0108":["1999-09-29","2024-08-01"],"CVE-1999-0109":["1999-09-29","2024-08-01"],"CVE-1999-0110":["2000-02-04","2005-02-04"],"CVE-1999-0112":["1999-09-29","2024-08-01"],"CVE-1999-0113":["1999-09-29","2024-08-01"],"CVE-1999-0115":["2001-05-07","2024-08-01"],"CVE-1999-0116":["1999-09-29","2024-08-01"],"CVE-1999-0118":["2000-06-02","2024-08-01"],"CVE-1999-0122":["1999-09-29","2024-08-01"],"CVE-1999-0125":["1999-09-29","2024-08-01"],"CVE-1999-0126":["1999-09-29","2024-08-01"],"CVE-1999-0128":["1999-09-29","2024-08-01"],"CVE-1999-0130":["1999-09-29","2024-08-01"],"CVE-1999-0137":["1999-09-29","2024-08-01"],"CVE-1999-0140":["2000-02-04","2024-08-01"],"CVE-1999-0144":["2000-02-04","2024-08-01"],"CVE-1999-0145":["2000-10-13","2024-08-01"],"CVE-1999-0146":["1999-09-29","2024-08-01"],"CVE-1999-0147":["1999-09-29","2024-08-01"],"CVE-1999-0148":["1999-09-29","2024-08-01"],"CVE-1999-0149":["1999-09-29","2024-08-01"],"CVE-1999-0153":["1999-09-29","2024-08-01"],"CVE-1999-0154":["2001-09-12","2024-08-01"],"CVE-1999-0156":["2000-02-04","2024-08-01"],"CVE-1999-0158":["1999-09-29","2024-08-01"],"CVE-1999-0162":["1999-09-29","2024-08-01"],"CVE-1999-0163":["2000-02-04","2024-08-01"],"CVE-1999-0165":["2000-02-04","2024-08-01"],"CVE-1999-0170":["1999-09-29","2024-08-01"],"CVE-1999-0173":["1999-09-29","2024-08-01"],"CVE-1999-0174":["1999-09-29","2024-08-01"],"CVE-1999-0175":["1999-09-29","2024-08-01"],"CVE-1999-0176":["1999-09-29","2024-08-01"],"CVE-1999-0178":["1999-09-29","2024-08-01"],"CVE-1999-0180":["1999-09-29","2024-08-01"],"CVE-1999-0182":["1999-09-29","2024-08-01"],"CVE-1999-0183":["1999-09-29","2024-08-01"],"CVE-1999-0191":["1999-09-29","2024-08-01"],"CVE-1999-0192":["1999-09-29","2024-08-01"],"CVE-1999-0193":["2000-02-04","2024-08-01"],"CVE-1999-0195":["2000-02-04","2024-08-01"],"CVE-1999-0196":["1999-09-29","2024-08-01"],"CVE-1999-0199":["2020-10-06","2024-08-01"],"CVE-1999-0201":["1999-09-29","2024-08-01"],"CVE-1999-0204":["1999-09-29","2024-08-01"],"CVE-1999-0206":["1999-09-29","2024-08-01"],"CVE-1999-0207":["1999-09-29","2024-08-01"],"CVE-1999-0208":["1999-09-29","2024-08-01"],"CVE-1999-0209":["1999-09-29","2024-08-01"],"CVE-1999-0210":["2000-06-02","2024-08-01"],"CVE-1999-0211":["1999-09-29","2024-08-01"],"CVE-1999-0215":["1999-09-29","2024-08-01"],"CVE-1999-0219":["1999-09-29","2024-08-01"],"CVE-1999-0220":["2000-02-04","2024-08-01"],"CVE-1999-0221":["1999-09-29","2024-08-01"],"CVE-1999-0224":["1999-09-29","2024-08-01"],"CVE-1999-0225":["2000-06-02","2024-08-01"],"CVE-1999-0232":["2000-02-04","2024-08-01"],"CVE-1999-0233":["2000-01-18","2024-08-01"],"CVE-1999-0235":["2000-02-04","2024-08-01"],"CVE-1999-0236":["1999-09-Line truncated
|
||||
@@ -1 +1 @@
|
||||
{"CVE-1999-0110":{"checked":"2026-09-01","status":"REJECTED"},"CVE-1999-0335":{"checked":"2026-09-01","status":"REJECTED"},"CVE-1999-0531":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2002-0192":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2002-0828":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2003-0090":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-0122":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-0153":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2005-1032":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-2116":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-2303":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-4633":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2006-3866":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2006-4216":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2007-1570":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2007-5125":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-2737":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4042":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4112":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4189":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4270":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-6049":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-6628":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2009-0300":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2009-0795":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2009-2259":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2010-0368":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2010-2782":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2010-2972":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2010-3885":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-0108":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-1656":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2011-2553":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2011-3633":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-4779":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-5232":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-0722":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-1300":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2012-1304":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2012-1305":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2012-1309":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2012-1913":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-2216":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-2344":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-2765":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2012-3539":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-4748":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2012-4749":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2012-6315":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-6679":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2013-1298":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-1625":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2013-1805":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-2649":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2013-2749":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-3130":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-4266":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5575":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5581":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5621":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5622":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5623":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5624":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5625":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5627":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5628":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5630":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5631":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5632":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5633":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5689":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5759":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-0982":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1004":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1137":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1155":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1470":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-2085":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-2239":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2014-2923":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2014-2937":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2Line truncated
|
||||
{"CVE-1999-0110":{"checked":"2026-09-01","status":"REJECTED"},"CVE-1999-0335":{"checked":"2026-09-01","status":"REJECTED"},"CVE-1999-0531":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2002-0192":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2002-0828":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2003-0090":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-0122":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-0153":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2005-1032":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-2116":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-2303":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-4633":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2006-3866":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2006-4216":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2007-1570":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2007-5125":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-2737":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4042":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4112":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4189":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4270":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-6049":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-6628":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2009-0300":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2009-0795":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2009-2259":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2010-0368":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2010-2782":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2010-2972":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2010-3885":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-0108":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-1656":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2011-2553":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2011-3633":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-4779":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-5232":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-0722":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-1300":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2012-1304":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2012-1305":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2012-1309":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2012-1913":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-2216":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-2344":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-2765":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2012-3539":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-4748":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2012-4749":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2012-6315":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-6679":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2013-1298":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-1625":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2013-1805":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-2649":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2013-2749":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-3130":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-4266":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5575":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5581":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5621":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5622":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5623":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5624":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5625":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5627":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5628":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5630":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5631":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5632":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5633":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5689":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5759":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-0982":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1004":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1137":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1155":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1470":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-2085":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-2239":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2014-2923":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2014-2937":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2Line truncated
|
||||
@@ -1 +1 @@
|
||||
{"GHSA-222V-CX2C-Q2F5":["CVE-2025-24530","https://github.com/advisories/GHSA-222v-cx2c-q2f5",[["3.1",6.4,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2025-11-03T22:54:20Z"],"GHSA-222W-XMC5-JHP3":["CVE-2025-43735","https://github.com/advisories/GHSA-222w-xmc5-jhp3",[["4.0",6.9,"MEDIUM","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2025-08-12T21:04:35Z"],"GHSA-2234-FMW7-43WR":["CVE-2024-48913","https://github.com/advisories/GHSA-2234-fmw7-43wr",[["3.1",5.9,"MEDIUM","CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N","GitHub Advisory Database","GitHub Reviewed"]],1,"2024-11-07T18:33:22Z"],"GHSA-2238-XC5R-V9HJ":["CVE-2026-24125","https://github.com/advisories/GHSA-2238-xc5r-v9hj",[["3.1",6.3,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","GitHub Advisory Database","GitHub Reviewed"]],1,"2026-03-12T19:13:57Z"],"GHSA-223G-8W3X-98WR":["CVE-2023-34230","https://github.com/advisories/GHSA-223g-8w3x-98wr",[["3.1",7.3,"HIGH","CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2023-11-06T05:04:15Z"],"GHSA-223G-F5MQ-GW33":["CVE-2026-44720","https://github.com/advisories/GHSA-223g-f5mq-gw33",[["4.0",6.9,"MEDIUM","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2026-06-08T23:54:58Z"],"GHSA-223J-4RM8-MRMF":["CVE-2025-30218","https://github.com/advisories/GHSA-223j-4rm8-mrmf",[["4.0",1.7,"LOW","CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U","GitHub Advisory Database","GitHub Reviewed"]],0,"2025-10-13T15:35:51Z"],"GHSA-223M-4RFP-646H":["CVE-2025-59475","https://github.com/advisories/GHSA-223m-4rfp-646h",[["3.1",4.3,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2025-11-05T20:45:04Z"],"GHSA-223M-PGCQ-F3XG":["CVE-2023-4303","https://github.com/advisories/GHSA-223m-pgcq-f3xg",[["3.1",4.3,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2023-11-09T05:03:23Z"],"GHSA-2259-H742-5VR4":["CVE-2021-20250","https://github.com/advisories/GHSA-2259-h742-5vr4",[["3.1",4.3,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2023-01-31T05:01:19Z"],"GHSA-225X-3JHX-WH4Q":["CVE-2026-64664","https://github.com/advisories/GHSA-225x-3jhx-wh4q",[["3.1",4.3,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2026-08-06T19:22:35Z"],"GHSA-2263-JWGM-WV97":["CVE-2018-16342","https://github.com/advisories/GHSA-2263-jwgm-wv97",[["3.0",5.4,"MEDIUM","CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2023-10-06T18:02:31Z"],"GHSA-2267-XQCF-GW2M":["CVE-2025-69210","https://github.com/advisories/GHSA-2267-xqcf-gw2m",[["4.0",8.6,"HIGH","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2026-01-02T22:51:53Z"],"GHSA-2268-98WH-QFHF":["CVE-2023-50572","https://github.com/advisories/GHSA-2268-98wh-qfhf",[["3.1",5.5,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","GitHub Advisory Database","GitHub Reviewed"]],0,"2024-01-05T19:49:51Z"],"GHSA-226F-F24G-524W":["CVE-2026-54008","https://github.com/advisories/GHSA-226f-f24g-524w",[["3.1",8.5,"HIGH","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","GitHub Advisory Database","GitHub Reviewed"]],1,"2026-06-17T14:10:58Z"],"GHSA-226H-QRG4-8236":["CVE-2020-2269","https://github.com/advisories/GHSA-226h-qrg4-8236",[["3.1",8.0,"HIGH","CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","GitHub Advisory Database","GitHub Reviewed"]],0,"2023-01-28T05:06:32Z"],"GHSA-2275-RPF5-XV8H":["CVE-2022-25906","https://github.com/advisories/GHSA-2275-rpf5-xv8h",[["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","GitHub Advisory Database","GitHub Reviewed"]],0,"2025-03-27T03:50:00Z"],"GHSA-227G-7CVV-6FF3":["CVE-2022-31781","https://github.com/advisories/GHSA-227g-7cvv-6ff3",[["3.1",7.5,"HIGH","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","GitHub Advisory Database","GitHub Reviewed"]],0,"2023-07-24T19:38:55Z"],"GHSA-227R-JM2G-7CP4":["CVE-2026-50201","https://github.com/advisories/GHSA-227r-jm2g-7cp4",[["3.1",6.5,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2026-07-02T20:31:28Z"],"GHSA-227R-W5J2-6243":["CVE-2024-11042","https://github.com/advisories/GHSA-227r-w5j2-6243",[["3.0",9.1,"CRITICAL","CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","GitHub Advisory Database","GitHub Reviewed"]],0,"2025-10-15T16:03:29Z"],"GHSA-227W-WV4J-67H4":["CVE-2024-23682","https://github.com/advisories/GHSA-227w-wv4j-67h4",[["3.1",8.2,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","GitHub Advisory Database","GitHub Reviewed"]],0,"2026-01-22T20:53:44Z"],"GHSA-227X-7MH8-3CF6":["CVE-2025-59823","hLine truncated
|
||||
{"GHSA-222V-CX2C-Q2F5":["CVE-2025-24530","https://github.com/advisories/GHSA-222v-cx2c-q2f5",[["3.1",6.4,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2025-11-03T22:54:20Z"],"GHSA-222W-XMC5-JHP3":["CVE-2025-43735","https://github.com/advisories/GHSA-222w-xmc5-jhp3",[["4.0",6.9,"MEDIUM","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2025-08-12T21:04:35Z"],"GHSA-2234-FMW7-43WR":["CVE-2024-48913","https://github.com/advisories/GHSA-2234-fmw7-43wr",[["3.1",5.9,"MEDIUM","CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N","GitHub Advisory Database","GitHub Reviewed"]],1,"2024-11-07T18:33:22Z"],"GHSA-2238-XC5R-V9HJ":["CVE-2026-24125","https://github.com/advisories/GHSA-2238-xc5r-v9hj",[["3.1",6.3,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","GitHub Advisory Database","GitHub Reviewed"]],1,"2026-03-12T19:13:57Z"],"GHSA-223G-8W3X-98WR":["CVE-2023-34230","https://github.com/advisories/GHSA-223g-8w3x-98wr",[["3.1",7.3,"HIGH","CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2023-11-06T05:04:15Z"],"GHSA-223G-F5MQ-GW33":["CVE-2026-44720","https://github.com/advisories/GHSA-223g-f5mq-gw33",[["4.0",6.9,"MEDIUM","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2026-06-08T23:54:58Z"],"GHSA-223J-4RM8-MRMF":["CVE-2025-30218","https://github.com/advisories/GHSA-223j-4rm8-mrmf",[["4.0",1.7,"LOW","CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U","GitHub Advisory Database","GitHub Reviewed"]],0,"2025-10-13T15:35:51Z"],"GHSA-223M-4RFP-646H":["CVE-2025-59475","https://github.com/advisories/GHSA-223m-4rfp-646h",[["3.1",4.3,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2025-11-05T20:45:04Z"],"GHSA-223M-PGCQ-F3XG":["CVE-2023-4303","https://github.com/advisories/GHSA-223m-pgcq-f3xg",[["3.1",4.3,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2023-11-09T05:03:23Z"],"GHSA-2259-H742-5VR4":["CVE-2021-20250","https://github.com/advisories/GHSA-2259-h742-5vr4",[["3.1",4.3,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2023-01-31T05:01:19Z"],"GHSA-225X-3JHX-WH4Q":["CVE-2026-64664","https://github.com/advisories/GHSA-225x-3jhx-wh4q",[["3.1",4.3,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2026-08-06T19:22:35Z"],"GHSA-2263-JWGM-WV97":["CVE-2018-16342","https://github.com/advisories/GHSA-2263-jwgm-wv97",[["3.0",5.4,"MEDIUM","CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2023-10-06T18:02:31Z"],"GHSA-2267-XQCF-GW2M":["CVE-2025-69210","https://github.com/advisories/GHSA-2267-xqcf-gw2m",[["4.0",8.6,"HIGH","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2026-01-02T22:51:53Z"],"GHSA-2268-98WH-QFHF":["CVE-2023-50572","https://github.com/advisories/GHSA-2268-98wh-qfhf",[["3.1",5.5,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","GitHub Advisory Database","GitHub Reviewed"]],0,"2024-01-05T19:49:51Z"],"GHSA-226F-F24G-524W":["CVE-2026-54008","https://github.com/advisories/GHSA-226f-f24g-524w",[["3.1",8.5,"HIGH","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","GitHub Advisory Database","GitHub Reviewed"]],1,"2026-06-17T14:10:58Z"],"GHSA-226H-QRG4-8236":["CVE-2020-2269","https://github.com/advisories/GHSA-226h-qrg4-8236",[["3.1",8.0,"HIGH","CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","GitHub Advisory Database","GitHub Reviewed"]],0,"2023-01-28T05:06:32Z"],"GHSA-2275-RPF5-XV8H":["CVE-2022-25906","https://github.com/advisories/GHSA-2275-rpf5-xv8h",[["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","GitHub Advisory Database","GitHub Reviewed"]],0,"2025-03-27T03:50:00Z"],"GHSA-227G-7CVV-6FF3":["CVE-2022-31781","https://github.com/advisories/GHSA-227g-7cvv-6ff3",[["3.1",7.5,"HIGH","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","GitHub Advisory Database","GitHub Reviewed"]],0,"2023-07-24T19:38:55Z"],"GHSA-227R-JM2G-7CP4":["CVE-2026-50201","https://github.com/advisories/GHSA-227r-jm2g-7cp4",[["3.1",6.5,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","GitHub Advisory Database","GitHub Reviewed"]],0,"2026-07-02T20:31:28Z"],"GHSA-227R-W5J2-6243":["CVE-2024-11042","https://github.com/advisories/GHSA-227r-w5j2-6243",[["3.0",9.1,"CRITICAL","CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","GitHub Advisory Database","GitHub Reviewed"]],0,"2025-10-15T16:03:29Z"],"GHSA-227W-WV4J-67H4":["CVE-2024-23682","https://github.com/advisories/GHSA-227w-wv4j-67h4",[["3.1",8.2,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","GitHub Advisory Database","GitHub Reviewed"]],0,"2026-01-22T20:53:44Z"],"GHSA-227X-7MH8-3CF6":["CVE-2025-59823","hLine truncated
|
||||
@@ -1 +1 @@
|
||||
{"CVE-2023-0001":{"advisories":[["https://security.paloaltonetworks.com/CVE-2023-0001",["Vendor Advisory"]]],"cvss":[["3.1",6.7,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",6.0,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H","[email protected]","Secondary"]]},"CVE-2023-0002":{"advisories":[["https://security.paloaltonetworks.com/CVE-2023-0002",["Vendor Advisory"]]],"cvss":[["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",5.5,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","[email protected]","Secondary"]]},"CVE-2023-0003":{"advisories":[["https://security.paloaltonetworks.com/CVE-2023-0003",["Vendor Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/HMEELCREWMRT6NS7HWXLA6XFLLMO36HE",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/UEJWL67XR67JAGEL2ZK22NA3BRKNMZNY",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/VEEQIN5242K5NBE2CZ4DYTNA5B4YTYE5",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/VKFMKD4MJZIKFQJAAJ4VZ2FHIJ764A76",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y",["Third Party Advisory"]]],"cvss":[["3.1",6.5,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","[email protected]","Primary"],["3.1",6.5,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","[email protected]","Secondary"]]},"CVE-2023-0004":{"advisories":[["https://security.paloaltonetworks.com/CVE-2023-0004",["Vendor Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y",["Third Party Advisory"]]],"cvss":[["3.1",6.5,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","[email protected]","Primary"],["3.1",6.5,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","[email protected]","Secondary"]]},"CVE-2023-0005":{"advisories":[["https://security.paloaltonetworks.com/CVE-2023-0005",["Vendor Advisory"]]],"cvss":[["3.1",4.9,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","[email protected]","Primary"],["3.1",4.1,"MEDIUM","CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","[email protected]","Secondary"]]},"CVE-2023-0012":{"advisories":[["https://launchpad.support.sap.com/#/notes/3276120",["Vendor Advisory"]],["https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",["Vendor Advisory"]]],"cvss":[["3.1",6.7,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",6.4,"MEDIUM","CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","[email protected]","Secondary"]]},"CVE-2023-0013":{"advisories":[["https://launchpad.support.sap.com/#/notes/3283283",["Vendor Advisory"]],["https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",["Vendor Advisory"]]],"cvss":[["3.1",6.1,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","[email protected]","Primary"],["3.1",6.1,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","[email protected]","Secondary"]]},"CVE-2023-0014":{"advisories":[["https://launchpad.support.sap.com/#/notesLine truncated
|
||||
{"CVE-2023-0001":{"advisories":[["https://security.paloaltonetworks.com/CVE-2023-0001",["Vendor Advisory"]]],"cvss":[["3.1",6.7,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",6.0,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H","[email protected]","Secondary"]]},"CVE-2023-0002":{"advisories":[["https://security.paloaltonetworks.com/CVE-2023-0002",["Vendor Advisory"]]],"cvss":[["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",5.5,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","[email protected]","Secondary"]]},"CVE-2023-0003":{"advisories":[["https://security.paloaltonetworks.com/CVE-2023-0003",["Vendor Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/HMEELCREWMRT6NS7HWXLA6XFLLMO36HE",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/UEJWL67XR67JAGEL2ZK22NA3BRKNMZNY",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/VEEQIN5242K5NBE2CZ4DYTNA5B4YTYE5",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/VKFMKD4MJZIKFQJAAJ4VZ2FHIJ764A76",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y",["Third Party Advisory"]]],"cvss":[["3.1",6.5,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","[email protected]","Primary"],["3.1",6.5,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","[email protected]","Secondary"]]},"CVE-2023-0004":{"advisories":[["https://security.paloaltonetworks.com/CVE-2023-0004",["Vendor Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG",["Third Party Advisory"]],["https://lists.fedoraproject.org/archives/list/[email protected]/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y",["Third Party Advisory"]]],"cvss":[["3.1",6.5,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","[email protected]","Primary"],["3.1",6.5,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","[email protected]","Secondary"]]},"CVE-2023-0005":{"advisories":[["https://security.paloaltonetworks.com/CVE-2023-0005",["Vendor Advisory"]]],"cvss":[["3.1",4.9,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","[email protected]","Primary"],["3.1",4.1,"MEDIUM","CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","[email protected]","Secondary"]]},"CVE-2023-0012":{"advisories":[["https://launchpad.support.sap.com/#/notes/3276120",["Vendor Advisory"]],["https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",["Vendor Advisory"]]],"cvss":[["3.1",6.7,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",6.4,"MEDIUM","CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","[email protected]","Secondary"]]},"CVE-2023-0013":{"advisories":[["https://launchpad.support.sap.com/#/notes/3283283",["Vendor Advisory"]],["https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",["Vendor Advisory"]]],"cvss":[["3.1",6.1,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","[email protected]","Primary"],["3.1",6.1,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","[email protected]","Secondary"]]},"CVE-2023-0014":{"advisories":[["https://launchpad.support.sap.com/#/notesLine truncated
|
||||
@@ -1 +1 @@
|
||||
{"CVE-2024-0001":{"advisories":[["https://purestorage.com/security",["Vendor Advisory"]]],"cvss":[["3.1",9.8,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",10.0,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","[email protected]","Secondary"]]},"CVE-2024-0002":{"advisories":[["https://purestorage.com/security",["Vendor Advisory"]]],"cvss":[["3.1",9.8,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",10.0,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","[email protected]","Secondary"]]},"CVE-2024-0003":{"advisories":[["https://purestorage.com/security",["Vendor Advisory"]]],"cvss":[["3.1",7.2,"HIGH","CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",9.1,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","[email protected]","Secondary"]]},"CVE-2024-0004":{"advisories":[["https://purestorage.com/security",["Vendor Advisory"]]],"cvss":[["3.1",7.2,"HIGH","CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",9.1,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","[email protected]","Secondary"]]},"CVE-2024-0005":{"advisories":[["https://purestorage.com/security",["Vendor Advisory"]]],"cvss":[["3.1",8.8,"HIGH","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",9.1,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","[email protected]","Secondary"]]},"CVE-2024-0006":{"cvss":[["4.0",5.4,"MEDIUM","CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","[email protected]","Secondary"]]},"CVE-2024-0010":{"advisories":[["https://security.paloaltonetworks.com/CVE-2024-0010",["Vendor Advisory"]]],"cvss":[["3.1",6.1,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","[email protected]","Primary"],["3.1",4.3,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","[email protected]","Secondary"]]},"CVE-2024-0012":{"advisories":[["https://security.paloaltonetworks.com/CVE-2024-0012",["Vendor Advisory"]],["https://unit42.paloaltonetworks.com/cve-2024-0012-cve-2024-9474",["Vendor Advisory"]],["https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474",["Third Party Advisory","Exploit"]]],"cvss":[["4.0",9.3,"CRITICAL","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:H/U:Red","[email protected]","Secondary"],["3.1",9.8,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"]]},"CVE-2024-0014":{"advisories":[["https://source.android.com/security/bulletin/2024-02-01",["Vendor Advisory"]]],"cvss":[["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",8.4,"HIGH","CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2024-0015":{"advisories":[["https://source.android.com/security/bulletin/2024-01-01",["Vendor Advisory","Patch"]],["https://android.googlesource.com/platform/frameworks/base/+/2ce1b7fd37273ea19fbbb6daeeaa6212357b9a70",["Patch"]]],"cvss":[["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2024-0016":{"advisories":[["https://source.android.com/security/bulletin/2024-01-01",["Vendor Advisory","Patch"]],["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/1d7ba7c8a205522f384e8d5c7c9f26a421cab5f1",["Patch"]]],"cvss":[["3.1",5.3,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","[email protected]","Primary"],["3.1",6.5,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2024-0017":{"advisories":[["https://source.android.com/security/bulletin/2024-01-01",["Vendor Advisory","Patch"]],["https://android.googlesource.com/platform/packages/apps/Camera2/+/5c4c4b35754eef319dcd69c422f0b1ac0c823f6e",["Patch"]]],"cvss":[["3.1",5.5,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","[email protected]","Primary"],["3.1",5.5,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2024-0023":{"advisories":[["https://source.android.com/security/bulletin/2024-01-01",["Vendor Advisory","Patch"]],["https://android.googlesource.com/platform/frameworks/av/+/30b1b34cfd5abfcfee759e7d13167d368ac6c268",["Patch"]]],"cvss":[["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",7.4,"HIGH","CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2024-0028":{"advisories":[["https://source.android.com/security/bulletLine truncated
|
||||
{"CVE-2024-0001":{"advisories":[["https://purestorage.com/security",["Vendor Advisory"]]],"cvss":[["3.1",9.8,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",10.0,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","[email protected]","Secondary"]]},"CVE-2024-0002":{"advisories":[["https://purestorage.com/security",["Vendor Advisory"]]],"cvss":[["3.1",9.8,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",10.0,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","[email protected]","Secondary"]]},"CVE-2024-0003":{"advisories":[["https://purestorage.com/security",["Vendor Advisory"]]],"cvss":[["3.1",7.2,"HIGH","CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",9.1,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","[email protected]","Secondary"]]},"CVE-2024-0004":{"advisories":[["https://purestorage.com/security",["Vendor Advisory"]]],"cvss":[["3.1",7.2,"HIGH","CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",9.1,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","[email protected]","Secondary"]]},"CVE-2024-0005":{"advisories":[["https://purestorage.com/security",["Vendor Advisory"]]],"cvss":[["3.1",8.8,"HIGH","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",9.1,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","[email protected]","Secondary"]]},"CVE-2024-0006":{"cvss":[["4.0",5.4,"MEDIUM","CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","[email protected]","Secondary"]]},"CVE-2024-0010":{"advisories":[["https://security.paloaltonetworks.com/CVE-2024-0010",["Vendor Advisory"]]],"cvss":[["3.1",6.1,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","[email protected]","Primary"],["3.1",4.3,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","[email protected]","Secondary"]]},"CVE-2024-0012":{"advisories":[["https://security.paloaltonetworks.com/CVE-2024-0012",["Vendor Advisory"]],["https://unit42.paloaltonetworks.com/cve-2024-0012-cve-2024-9474",["Vendor Advisory"]],["https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474",["Third Party Advisory","Exploit"]]],"cvss":[["4.0",9.3,"CRITICAL","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:H/U:Red","[email protected]","Secondary"],["3.1",9.8,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"]]},"CVE-2024-0014":{"advisories":[["https://source.android.com/security/bulletin/2024-02-01",["Vendor Advisory"]]],"cvss":[["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",8.4,"HIGH","CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2024-0015":{"advisories":[["https://source.android.com/security/bulletin/2024-01-01",["Vendor Advisory","Patch"]],["https://android.googlesource.com/platform/frameworks/base/+/2ce1b7fd37273ea19fbbb6daeeaa6212357b9a70",["Patch"]]],"cvss":[["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2024-0016":{"advisories":[["https://source.android.com/security/bulletin/2024-01-01",["Vendor Advisory","Patch"]],["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/1d7ba7c8a205522f384e8d5c7c9f26a421cab5f1",["Patch"]]],"cvss":[["3.1",5.3,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","[email protected]","Primary"],["3.1",6.5,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2024-0017":{"advisories":[["https://source.android.com/security/bulletin/2024-01-01",["Vendor Advisory","Patch"]],["https://android.googlesource.com/platform/packages/apps/Camera2/+/5c4c4b35754eef319dcd69c422f0b1ac0c823f6e",["Patch"]]],"cvss":[["3.1",5.5,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","[email protected]","Primary"],["3.1",5.5,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2024-0023":{"advisories":[["https://source.android.com/security/bulletin/2024-01-01",["Vendor Advisory","Patch"]],["https://android.googlesource.com/platform/frameworks/av/+/30b1b34cfd5abfcfee759e7d13167d368ac6c268",["Patch"]]],"cvss":[["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",7.4,"HIGH","CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2024-0028":{"advisories":[["https://source.android.com/security/bulletLine truncated
|
||||
@@ -1 +1 @@
|
||||
{"CVE-2025-0001":{"cvss":[["3.1",6.5,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","[email protected]","Secondary"]]},"CVE-2025-0009":{"cvss":[["3.1",5.5,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","[email protected]","Secondary"]]},"CVE-2025-0010":{"cvss":[["3.1",6.1,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","[email protected]","Secondary"]]},"CVE-2025-0011":{"cvss":[["3.1",3.3,"LOW","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","[email protected]","Secondary"]]},"CVE-2025-0015":{"advisories":[["https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities",["Vendor Advisory"]]],"cvss":[["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2025-0032":{"cvss":[["3.1",7.2,"HIGH","CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N","[email protected]","Secondary"]]},"CVE-2025-0034":{"cvss":[["3.1",4.7,"MEDIUM","CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","[email protected]","Secondary"]]},"CVE-2025-0050":{"advisories":[["https://developer.arm.com/documentation/110435/latest",["Vendor Advisory"]]],"cvss":[["3.1",5.9,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2025-0054":{"cvss":[["3.1",5.4,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","[email protected]","Secondary"]]},"CVE-2025-0072":{"advisories":[["https://developer.arm.com/documentation/110465/latest",["Vendor Advisory"]]],"cvss":[["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2025-0074":{"advisories":[["https://source.android.com/security/bulletin/2025-03-01",["Vendor Advisory"]],["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/37bcf769c1aa8dfa8e5524858d47f6a80b765fa4",["Product"]]],"cvss":[["3.1",9.8,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2025-0075":{"advisories":[["https://source.android.com/security/bulletin/2025-03-01",["Vendor Advisory"]],["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5959f8bcf4efe924b0ba4dbcbfe83e602f0eb0ac",["Product"]]],"cvss":[["3.1",9.8,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2025-0076":{"advisories":[["https://source.android.com/security/bulletin/2025-09-01",["Vendor Advisory"]],["https://android.googlesource.com/platform/frameworks/base/+/d6ad7f34eaf5f0452b93a650265ee432288c0978",["Patch","Product"]]],"cvss":[["3.1",3.3,"LOW","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2025-0086":{"advisories":[["https://source.android.com/security/bulletin/2025-03-01",["Vendor Advisory"]],["https://android.googlesource.com/platform/frameworks/base/+/c1aa9e662464b8fa49765d53a82efa8e06bb176a",["Product"]]],"cvss":[["3.1",6.2,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2025-0087":{"advisories":[["https://source.android.com/security/bulletin/2025-05-01",["Vendor Advisory"]],["https://android.googlesource.com/platform/frameworks/base/+/4c269d7b0ec71951f773844b2a325e556f982a9c",["Product"]]],"cvss":[["3.1",5.1,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2025-0107":{"advisories":[["https://security.paloaltonetworks.com/PAN-SA-2025-0001",["Vendor Advisory"]]],"cvss":[["4.0",7.7,"HIGH","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:H/U:Green","[email protected]","Secondary"],["3.1",9.8,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"]]},"CVE-2025-0108":{"advisories":[["https://security.paloaltonetworks.com/CVE-2025-0108",["Vendor Advisory","Exploit"]],["https://github.com/iSee857/CVE-2025-0108-PoC",["Third Party Advisory","Exploit"]],["https://www.bleepingcomputer.com/news/security/palo-alto-networks-tags-new-firewall-bug-as-exploited-in-attacks",["Third Party Advisory"]],["https://www.darkreading.com/remote-workforce/patch-now-cisa-researchers-warn-palo-alto-flaw-exploited-wild",["Third Party Advisory"]],["https://www.securityweek.com/palo-alto-networks-confirms-exploitation-of-firewall-vulnerability",["Third Party Advisory"]],["https://www.theregister.com/2025/02/19/palo_alto_firewall_attack",["Third Party Advisory"]]],"cvss":[["4.0",8.8,"HIGH","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Red","[email protected]","Secondary"],["3.1",9.1,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","nvd@nLine truncated
|
||||
{"CVE-2025-0001":{"cvss":[["3.1",6.5,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","[email protected]","Secondary"]]},"CVE-2025-0009":{"cvss":[["3.1",5.5,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","[email protected]","Secondary"]]},"CVE-2025-0010":{"cvss":[["3.1",6.1,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","[email protected]","Secondary"]]},"CVE-2025-0011":{"cvss":[["3.1",3.3,"LOW","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","[email protected]","Secondary"]]},"CVE-2025-0015":{"advisories":[["https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities",["Vendor Advisory"]]],"cvss":[["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2025-0032":{"cvss":[["3.1",7.2,"HIGH","CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N","[email protected]","Secondary"]]},"CVE-2025-0034":{"cvss":[["3.1",4.7,"MEDIUM","CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","[email protected]","Secondary"]]},"CVE-2025-0050":{"advisories":[["https://developer.arm.com/documentation/110435/latest",["Vendor Advisory"]]],"cvss":[["3.1",5.9,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2025-0054":{"cvss":[["3.1",5.4,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","[email protected]","Secondary"]]},"CVE-2025-0072":{"advisories":[["https://developer.arm.com/documentation/110465/latest",["Vendor Advisory"]]],"cvss":[["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2025-0074":{"advisories":[["https://source.android.com/security/bulletin/2025-03-01",["Vendor Advisory"]],["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/37bcf769c1aa8dfa8e5524858d47f6a80b765fa4",["Product"]]],"cvss":[["3.1",9.8,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2025-0075":{"advisories":[["https://source.android.com/security/bulletin/2025-03-01",["Vendor Advisory"]],["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5959f8bcf4efe924b0ba4dbcbfe83e602f0eb0ac",["Product"]]],"cvss":[["3.1",9.8,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2025-0076":{"advisories":[["https://source.android.com/security/bulletin/2025-09-01",["Vendor Advisory"]],["https://android.googlesource.com/platform/frameworks/base/+/d6ad7f34eaf5f0452b93a650265ee432288c0978",["Patch","Product"]]],"cvss":[["3.1",3.3,"LOW","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2025-0086":{"advisories":[["https://source.android.com/security/bulletin/2025-03-01",["Vendor Advisory"]],["https://android.googlesource.com/platform/frameworks/base/+/c1aa9e662464b8fa49765d53a82efa8e06bb176a",["Product"]]],"cvss":[["3.1",6.2,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2025-0087":{"advisories":[["https://source.android.com/security/bulletin/2025-05-01",["Vendor Advisory"]],["https://android.googlesource.com/platform/frameworks/base/+/4c269d7b0ec71951f773844b2a325e556f982a9c",["Product"]]],"cvss":[["3.1",5.1,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2025-0107":{"advisories":[["https://security.paloaltonetworks.com/PAN-SA-2025-0001",["Vendor Advisory"]]],"cvss":[["4.0",7.7,"HIGH","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:H/U:Green","[email protected]","Secondary"],["3.1",9.8,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"]]},"CVE-2025-0108":{"advisories":[["https://security.paloaltonetworks.com/CVE-2025-0108",["Vendor Advisory","Exploit"]],["https://github.com/iSee857/CVE-2025-0108-PoC",["Third Party Advisory","Exploit"]],["https://www.bleepingcomputer.com/news/security/palo-alto-networks-tags-new-firewall-bug-as-exploited-in-attacks",["Third Party Advisory"]],["https://www.darkreading.com/remote-workforce/patch-now-cisa-researchers-warn-palo-alto-flaw-exploited-wild",["Third Party Advisory"]],["https://www.securityweek.com/palo-alto-networks-confirms-exploitation-of-firewall-vulnerability",["Third Party Advisory"]],["https://www.theregister.com/2025/02/19/palo_alto_firewall_attack",["Third Party Advisory"]]],"cvss":[["4.0",8.8,"HIGH","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Red","[email protected]","Secondary"],["3.1",9.1,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","nvd@nLine truncated
|
||||
@@ -1 +1 @@
|
||||
{"CVE-2026-0006":{"cvss":[["3.1",9.8,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2026-0013":{"cvss":[["3.1",8.4,"HIGH","CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2026-0023":{"cvss":[["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2026-0047":{"cvss":[["3.1",8.4,"HIGH","CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2026-0049":{"advisories":[["https://source.android.com/docs/security/bulletin/2026/2026-04-01",["Vendor Advisory"]]],"cvss":[["3.1",6.2,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2026-0059":{"advisories":[["https://source.android.com/docs/security/bulletin/2026/2026-06-01",["Vendor Advisory"]]],"cvss":[["3.1",8.0,"HIGH","CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2026-0073":{"advisories":[["https://source.android.com/docs/security/bulletin/2026/2026-05-01",["Vendor Advisory"]]],"cvss":[["3.1",8.8,"HIGH","CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2026-0092":{"advisories":[["https://source.android.com/docs/security/bulletin/android-17",["Vendor Advisory"]]],"cvss":[["4.0",10.0,"CRITICAL","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","[email protected]","Secondary"]]},"CVE-2026-0163":{"cvss":[["3.1",9.8,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2026-0227":{"advisories":[["https://security.paloaltonetworks.com/CVE-2026-0227",["Vendor Advisory"]]],"cvss":[["4.0",6.6,"MEDIUM","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:M/U:Amber","[email protected]","Secondary"],["3.1",7.5,"HIGH","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","[email protected]","Primary"]]},"CVE-2026-0257":{"advisories":[["https://security.paloaltonetworks.com/CVE-2026-0257",["Vendor Advisory"]],["https://cert-portal.siemens.com/productcert/html/ssa-967325.html",["Third Party Advisory"]]],"cvss":[["4.0",7.8,"HIGH","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:Red","[email protected]","Secondary"],["3.1",9.1,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","[email protected]","Primary"]]},"CVE-2026-0265":{"advisories":[["https://security.paloaltonetworks.com/CVE-2026-0265",["Vendor Advisory"]],["https://cert-portal.siemens.com/productcert/html/ssa-967325.html",["Third Party Advisory"]]],"cvss":[["4.0",7.2,"HIGH","CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Red","[email protected]","Secondary"],["3.1",8.1,"HIGH","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"]]},"CVE-2026-0273":{"advisories":[["https://security.paloaltonetworks.com/CVE-2026-0273",["Vendor Advisory"]]],"cvss":[["4.0",6.1,"MEDIUM","CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","[email protected]","Secondary"],["3.1",7.2,"HIGH","CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"]]},"CVE-2026-0300":{"advisories":[["https://security.paloaltonetworks.com/CVE-2026-0300",["Vendor Advisory","Mitigation"]],["https://cert-portal.siemens.com/productcert/html/ssa-967325.html",["Third Party Advisory"]]],"cvss":[["4.0",9.3,"CRITICAL","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:Red","[email protected]","Secondary"],["3.1",9.8,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"]]},"CVE-2026-0542":{"cvss":[["4.0",9.2,"CRITICAL","CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","[email protected]","Secondary"]]},"CVE-2026-0544":{"advisories":[["https://github.com/ltranquility/CVE/issues/31",["Third Party Advisory","Issue Tracking","Exploit"]],["https://vuldb.com/?id.339331",["Third Party Advisory"]],["https://vuldb.com/?submit.728909",["Third Party Advisory"Line truncated
|
||||
{"CVE-2026-0006":{"cvss":[["3.1",9.8,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2026-0013":{"cvss":[["3.1",8.4,"HIGH","CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2026-0023":{"cvss":[["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"],["3.1",7.8,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2026-0047":{"cvss":[["3.1",8.4,"HIGH","CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2026-0049":{"advisories":[["https://source.android.com/docs/security/bulletin/2026/2026-04-01",["Vendor Advisory"]]],"cvss":[["3.1",6.2,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2026-0059":{"advisories":[["https://source.android.com/docs/security/bulletin/2026/2026-06-01",["Vendor Advisory"]]],"cvss":[["3.1",8.0,"HIGH","CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2026-0073":{"advisories":[["https://source.android.com/docs/security/bulletin/2026/2026-05-01",["Vendor Advisory"]]],"cvss":[["3.1",8.8,"HIGH","CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2026-0092":{"advisories":[["https://source.android.com/docs/security/bulletin/android-17",["Vendor Advisory"]]],"cvss":[["4.0",10.0,"CRITICAL","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","[email protected]","Secondary"]]},"CVE-2026-0163":{"cvss":[["3.1",9.8,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary"]]},"CVE-2026-0227":{"advisories":[["https://security.paloaltonetworks.com/CVE-2026-0227",["Vendor Advisory"]]],"cvss":[["4.0",6.6,"MEDIUM","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:M/U:Amber","[email protected]","Secondary"],["3.1",7.5,"HIGH","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","[email protected]","Primary"]]},"CVE-2026-0257":{"advisories":[["https://security.paloaltonetworks.com/CVE-2026-0257",["Vendor Advisory"]],["https://cert-portal.siemens.com/productcert/html/ssa-967325.html",["Third Party Advisory"]]],"cvss":[["4.0",7.8,"HIGH","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:Red","[email protected]","Secondary"],["3.1",9.1,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","[email protected]","Primary"]]},"CVE-2026-0265":{"advisories":[["https://security.paloaltonetworks.com/CVE-2026-0265",["Vendor Advisory"]],["https://cert-portal.siemens.com/productcert/html/ssa-967325.html",["Third Party Advisory"]]],"cvss":[["4.0",7.2,"HIGH","CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Red","[email protected]","Secondary"],["3.1",8.1,"HIGH","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"]]},"CVE-2026-0273":{"advisories":[["https://security.paloaltonetworks.com/CVE-2026-0273",["Vendor Advisory"]]],"cvss":[["4.0",6.1,"MEDIUM","CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","[email protected]","Secondary"],["3.1",7.2,"HIGH","CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"]]},"CVE-2026-0300":{"advisories":[["https://security.paloaltonetworks.com/CVE-2026-0300",["Vendor Advisory","Mitigation"]],["https://cert-portal.siemens.com/productcert/html/ssa-967325.html",["Third Party Advisory"]]],"cvss":[["4.0",9.3,"CRITICAL","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:Red","[email protected]","Secondary"],["3.1",9.8,"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","[email protected]","Primary"]]},"CVE-2026-0542":{"cvss":[["4.0",9.2,"CRITICAL","CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","[email protected]","Secondary"]]},"CVE-2026-0544":{"advisories":[["https://github.com/ltranquility/CVE/issues/31",["Third Party Advisory","Issue Tracking","Exploit"]],["https://vuldb.com/?id.339331",["Third Party Advisory"]],["https://vuldb.com/?submit.728909",["Third Party Advisory"Line truncated
|
||||
@@ -116957,3 +116957,30 @@ CVE-2026-85407 - https://drive.google.com/file/d/12yNkuZNJ79dpsKECbR_U7L4KCGRnYA
|
||||
CVE-2026-85408 - https://drive.google.com/file/d/1fVUqrUoO29zkq2Ib_TXFNavX9yDo-Vp6/view?usp=sharing
|
||||
CVE-2026-85409 - https://drive.google.com/file/d/1fCPpqzYyoII_lfC6iXy-hLd1YpJcgmgR/view?usp=sharing
|
||||
CVE-2026-85438 - https://www.vulncheck.com/advisories/moos-ivp-through-24.8.1-out-of-bounds-write-via-unvalidated-ivp-payload-counts
|
||||
CVE-2026-50554 - https://github.com/advisories/GHSA-588f-fvcv-xhvf
|
||||
CVE-2026-53728 - https://github.com/advisories/GHSA-m44r-7c5h-m6mj
|
||||
CVE-2026-61556 - https://github.com/advisories/GHSA-m7fp-h3p4-hr49
|
||||
CVE-2026-63376 - https://github.com/advisories/GHSA-v5mp-jgw5-2x6j
|
||||
CVE-2026-63669 - https://github.com/advisories/GHSA-wr5r-wqp2-x4fh
|
||||
CVE-2026-68585 - https://github.com/advisories/GHSA-pm3w-vxp9-ccwc
|
||||
CVE-2026-68586 - https://github.com/advisories/GHSA-36v8-mpjm-8j5r
|
||||
CVE-2026-68587 - https://github.com/advisories/GHSA-69mh-gvh4-8gp7
|
||||
CVE-2026-69083 - https://github.com/advisories/GHSA-fph3-ghq9-vw66
|
||||
CVE-2026-69084 - https://github.com/advisories/GHSA-vh22-h7hf-www7
|
||||
CVE-2026-71428 - https://github.com/advisories/GHSA-4mvj-m6j5-pmf7
|
||||
CVE-2026-71429 - https://github.com/advisories/GHSA-528h-pc64-c93x
|
||||
CVE-2026-72800 - https://github.com/advisories/GHSA-5fhr-f75j-8wr9
|
||||
CVE-2026-72801 - https://github.com/advisories/GHSA-8x84-r2ff-h8pq
|
||||
CVE-2026-72802 - https://github.com/advisories/GHSA-jv8v-xq2h-657v
|
||||
CVE-2026-72803 - https://github.com/advisories/GHSA-qvq9-hq6p-v378
|
||||
CVE-2026-72804 - https://github.com/advisories/GHSA-vpjw-wf5h-cgpq
|
||||
CVE-2026-72805 - https://github.com/advisories/GHSA-67x2-mq63-v9vm
|
||||
CVE-2026-72807 - https://github.com/advisories/GHSA-x67c-8pwr-m8g3
|
||||
CVE-2026-72808 - https://github.com/advisories/GHSA-v7ph-r5r6-4jcj
|
||||
CVE-2026-72810 - https://github.com/advisories/GHSA-mw8r-mw84-88v2
|
||||
CVE-2026-72811 - https://github.com/advisories/GHSA-q2vg-7qgx-x5fc
|
||||
CVE-2026-72812 - https://github.com/advisories/GHSA-wgwx-479j-23vq
|
||||
CVE-2026-73292 - https://github.com/advisories/GHSA-8cj9-r88m-8945
|
||||
CVE-2026-73293 - https://github.com/advisories/GHSA-cxvf-gvfq-36w2
|
||||
CVE-2026-73846 - https://github.com/advisories/GHSA-78x9-fhhx-v2g6
|
||||
CVE-2026-75602 - https://github.com/advisories/GHSA-h6cj-26g5-67fv
|
||||
Reference in new issue
Block a user