Advisory Database Sync · github/advisory-database@d25bc36 · GitHub
Skip to content

Commit d25bc36

Browse files
advisory-database[bot]advisory-database[bot]
committed
Advisory Database Sync
1 parent 31a625b commit d25bc36

28 files changed

Lines changed: 858 additions & 6 deletions

File tree

‎advisories/unreviewed/2026/08/GHSA-ph76-744q-p8fh/GHSA-ph76-744q-p8fh.json‎

Lines changed: 5 additions & 1 deletion

‎advisories/unreviewed/2026/09/GHSA-c24q-2g88-pp57/GHSA-c24q-2g88-pp57.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-c24q-2g88-pp57",
4-
"modified": "2026-09-30T15:31:03Z",
4+
"modified": "2026-10-21T09:30:28Z",
55
"published": "2026-09-21T15:32:05Z",
66
"aliases": [
77
"CVE-2026-80110"
@@ -27,6 +27,10 @@
2727
"type": "WEB",
2828
"url": "https://access.redhat.com/errata/RHSA-2026:73766"
2929
},
30+
{
31+
"type": "WEB",
32+
"url": "https://access.redhat.com/errata/RHSA-2026:86621"
33+
},
3034
{
3135
"type": "WEB",
3236
"url": "https://access.redhat.com/security/cve/CVE-2026-80110"

‎advisories/unreviewed/2026/09/GHSA-jj2h-hcrf-9gfx/GHSA-jj2h-hcrf-9gfx.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-jj2h-hcrf-9gfx",
4-
"modified": "2026-10-14T21:33:05Z",
4+
"modified": "2026-10-21T09:30:28Z",
55
"published": "2026-09-23T15:30:49Z",
66
"aliases": [
77
"CVE-2026-96512"
@@ -43,6 +43,10 @@
4343
"type": "WEB",
4444
"url": "https://access.redhat.com/errata/RHSA-2026:82939"
4545
},
46+
{
47+
"type": "WEB",
48+
"url": "https://access.redhat.com/errata/RHSA-2026:86634"
49+
},
4650
{
4751
"type": "WEB",
4852
"url": "https://access.redhat.com/security/cve/CVE-2026-96512"

‎advisories/unreviewed/2026/09/GHSA-pp8g-7wxg-9php/GHSA-pp8g-7wxg-9php.json‎

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-pp8g-7wxg-9php",
4-
"modified": "2026-10-05T06:30:22Z",
4+
"modified": "2026-10-21T09:30:28Z",
55
"published": "2026-09-08T09:35:37Z",
66
"aliases": [
77
"CVE-2026-76561"
@@ -31,6 +31,18 @@
3131
"type": "WEB",
3232
"url": "https://access.redhat.com/errata/RHSA-2026:75573"
3333
},
34+
{
35+
"type": "WEB",
36+
"url": "https://access.redhat.com/errata/RHSA-2026:86621"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://access.redhat.com/errata/RHSA-2026:86624"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://access.redhat.com/errata/RHSA-2026:86625"
45+
},
3446
{
3547
"type": "WEB",
3648
"url": "https://access.redhat.com/security/cve/CVE-2026-76561"

‎advisories/unreviewed/2026/10/GHSA-2849-7xm6-r42x/GHSA-2849-7xm6-r42x.json‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2849-7xm6-r42x",
4+
"modified": "2026-10-21T09:30:30Z",
5+
"published": "2026-10-21T09:30:30Z",
6+
"aliases": [
7+
"CVE-2026-85683"
8+
],
9+
"details": "The Jane Menu WordPress plugin before 1.5.1 does not have any capability or nonce checks on one of its form handlers, which is reachable by unauthenticated users, allowing them to bind any published page to a remote document of their choosing. The plugin then fetches that document and outputs its head and body into the page without escaping, so an unauthenticated attacker can run arbitrary JavaScript in the browser of any visitor to that page, including an administrator.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85683"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://wpscan.com/vulnerability/76cfadde-2db5-4e01-b44b-c399381c339b"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [],
29+
"severity": "HIGH",
30+
"github_reviewed": false,
31+
"github_reviewed_at": null,
32+
"nvd_published_at": "2026-10-21T09:17:08Z"
33+
}
34+
}

‎advisories/unreviewed/2026/10/GHSA-2p4c-fhxq-6mq7/GHSA-2p4c-fhxq-6mq7.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2p4c-fhxq-6mq7",
4+
"modified": "2026-10-21T09:30:29Z",
5+
"published": "2026-10-21T09:30:29Z",
6+
"aliases": [
7+
"CVE-2026-107435"
8+
],
9+
"details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.12.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107435"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://patchstack.com/database/wordpress/plugin/strong-testimonials/vulnerability/wordpress-strong-testimonials-plugin-3-3-12-cross-site-scripting-xss-vulnerability?_s_id=cve"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-79"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-10-21T08:16:41Z"
35+
}
36+
}

‎advisories/unreviewed/2026/10/GHSA-3m32-jjhw-mfwj/GHSA-3m32-jjhw-mfwj.json‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-3m32-jjhw-mfwj",
4+
"modified": "2026-10-21T09:30:29Z",
5+
"published": "2026-10-21T09:30:29Z",
6+
"aliases": [
7+
"CVE-2026-104642"
8+
],
9+
"details": "The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify submitted product prices against a value only the site owner can set, allowing users with the Contributor role and above to register attacker-chosen prices for existing products, which any visitor can then use to add those products to the cart at that price.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104642"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://wpscan.com/vulnerability/f6f0db1e-4a25-402c-9c23-bf30909570b3"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [],
29+
"severity": "LOW",
30+
"github_reviewed": false,
31+
"github_reviewed_at": null,
32+
"nvd_published_at": "2026-10-21T09:17:06Z"
33+
}
34+
}

‎advisories/unreviewed/2026/10/GHSA-5qmh-x48w-jf3f/GHSA-5qmh-x48w-jf3f.json‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-5qmh-x48w-jf3f",
4+
"modified": "2026-10-21T09:30:29Z",
5+
"published": "2026-10-21T09:30:29Z",
6+
"aliases": [
7+
"CVE-2026-105256"
8+
],
9+
"details": "The LatePoint WordPress plugin before 5.7.5 does not validate the client-supplied value that determines how much is charged for a booking against the amounts the service and site actually allow, allowing an unauthenticated visitor to make the amount due resolve to zero and obtain a confirmed appointment and a recorded order without completing any payment.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105256"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://wpscan.com/vulnerability/53a81b39-e86b-4b73-8b4f-64746684055d"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [],
29+
"severity": "MODERATE",
30+
"github_reviewed": false,
31+
"github_reviewed_at": null,
32+
"nvd_published_at": "2026-10-21T09:17:06Z"
33+
}
34+
}

‎advisories/unreviewed/2026/10/GHSA-66rc-377g-m4m4/GHSA-66rc-377g-m4m4.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-66rc-377g-m4m4",
4+
"modified": "2026-10-21T09:30:30Z",
5+
"published": "2026-10-21T09:30:29Z",
6+
"aliases": [
7+
"CVE-2026-109125"
8+
],
9+
"details": "In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with 'unwanted-reply-threshold > 0' configurations (not a default configuration). If a response-like UDP datagram reaches the upstream source port currently used by a recursive query, but its TXID does not match any pending query, Unbound counts the packet as an unwanted reply. When the accumulated count reaches the configured threshold, Unbound clears the worker's RRset cache and message cache. This cache clear action does not destroy the current upstream UDP pending query. Therefore, an external observer can distinguish whether a candidate port matches the current upstream source port by checking whether an existing cached item has been cleared. This is a cache side-channel vulnerability that can be used to probe the upstream source port. Although the attack is not feasible on default configurations and the suggested value (10 million) makes it an ureliable attack on a public resolver, in scenarios where the attacker can keep a concurrent query window alive, the attacker can first filter the source port and then perform birthday-style guessing against the TXID, making cache poisoning a feasible attack path.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109125"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-109125.txt"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-205"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-10-21T09:17:06Z"
35+
}
36+
}

‎advisories/unreviewed/2026/10/GHSA-7q93-xmpc-48mr/GHSA-7q93-xmpc-48mr.json‎

Lines changed: 34 additions & 0 deletions

0 commit comments

Comments
 (0)