Advisory Database Sync · github/advisory-database@f1e7763 · GitHub
Skip to content

Commit f1e7763

Browse files
advisory-database[bot]advisory-database[bot]
committed
Advisory Database Sync
1 parent e411ff2 commit f1e7763

174 files changed

Lines changed: 4273 additions & 121 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎advisories/unreviewed/2026/09/GHSA-2g2v-9wf5-6m3g/GHSA-2g2v-9wf5-6m3g.json‎

Lines changed: 9 additions & 1 deletion

‎advisories/unreviewed/2026/09/GHSA-3j7c-jr86-m5jq/GHSA-3j7c-jr86-m5jq.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-3j7c-jr86-m5jq",
4-
"modified": "2026-09-23T18:31:57Z",
4+
"modified": "2026-10-20T21:30:35Z",
55
"published": "2026-09-23T18:31:57Z",
66
"aliases": [
77
"CVE-2026-96654"
@@ -31,6 +31,10 @@
3131
"type": "WEB",
3232
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-266-01.json"
3333
},
34+
{
35+
"type": "WEB",
36+
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-96654"
37+
},
3438
{
3539
"type": "WEB",
3640
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96654"

‎advisories/unreviewed/2026/09/GHSA-4h74-hj22-v78v/GHSA-4h74-hj22-v78v.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,17 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-4h74-hj22-v78v",
4-
"modified": "2026-09-26T15:31:27Z",
4+
"modified": "2026-10-20T21:30:36Z",
55
"published": "2026-09-26T15:31:27Z",
66
"aliases": [
77
"CVE-2026-97160"
88
],
99
"details": "Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29",
1010
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
14+
},
1115
{
1216
"type": "CVSS_V4",
1317
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"

‎advisories/unreviewed/2026/09/GHSA-4qjx-g3m9-jcwf/GHSA-4qjx-g3m9-jcwf.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,17 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-4qjx-g3m9-jcwf",
4-
"modified": "2026-09-26T15:31:27Z",
4+
"modified": "2026-10-20T21:30:36Z",
55
"published": "2026-09-26T15:31:27Z",
66
"aliases": [
77
"CVE-2026-97161"
88
],
99
"details": "Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29",
1010
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
14+
},
1115
{
1216
"type": "CVSS_V4",
1317
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"

‎advisories/unreviewed/2026/09/GHSA-5p7w-r379-3c2m/GHSA-5p7w-r379-3c2m.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-5p7w-r379-3c2m",
4-
"modified": "2026-09-23T18:31:57Z",
4+
"modified": "2026-10-20T21:30:35Z",
55
"published": "2026-09-23T18:31:57Z",
66
"aliases": [
77
"CVE-2026-96652"
@@ -31,6 +31,10 @@
3131
"type": "WEB",
3232
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-266-01.json"
3333
},
34+
{
35+
"type": "WEB",
36+
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-96652"
37+
},
3438
{
3539
"type": "WEB",
3640
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96652"

‎advisories/unreviewed/2026/09/GHSA-657v-94xx-8q7f/GHSA-657v-94xx-8q7f.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,17 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-657v-94xx-8q7f",
4-
"modified": "2026-09-26T15:31:25Z",
4+
"modified": "2026-10-20T21:30:36Z",
55
"published": "2026-09-26T15:31:25Z",
66
"aliases": [
77
"CVE-2026-94131"
88
],
99
"details": "Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0 - A subscriber could store a path in a file-type custom field and have AcyMailing delete that file when the field was cleared, including files outside the upload folder such as configuration.php.",
1010
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"
14+
},
1115
{
1216
"type": "CVSS_V4",
1317
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"

‎advisories/unreviewed/2026/09/GHSA-6pgc-8534-jjrf/GHSA-6pgc-8534-jjrf.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,17 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-6pgc-8534-jjrf",
4-
"modified": "2026-09-26T15:31:27Z",
4+
"modified": "2026-10-20T21:30:36Z",
55
"published": "2026-09-26T15:31:27Z",
66
"aliases": [
77
"CVE-2026-97163"
88
],
99
"details": "Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29",
1010
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
14+
},
1115
{
1216
"type": "CVSS_V4",
1317
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"

‎advisories/unreviewed/2026/09/GHSA-7xvw-34f4-v8v2/GHSA-7xvw-34f4-v8v2.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,17 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-7xvw-34f4-v8v2",
4-
"modified": "2026-09-26T15:31:27Z",
4+
"modified": "2026-10-20T21:30:36Z",
55
"published": "2026-09-26T15:31:27Z",
66
"aliases": [
77
"CVE-2026-97162"
88
],
99
"details": "Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29",
1010
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
14+
},
1115
{
1216
"type": "CVSS_V4",
1317
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"

‎advisories/unreviewed/2026/09/GHSA-859h-6w5v-whx9/GHSA-859h-6w5v-whx9.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,17 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-859h-6w5v-whx9",
4-
"modified": "2026-09-27T12:30:21Z",
4+
"modified": "2026-10-20T21:30:37Z",
55
"published": "2026-09-27T12:30:21Z",
66
"aliases": [
77
"CVE-2026-100748"
88
],
99
"details": "Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.0",
1010
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
14+
},
1115
{
1216
"type": "CVSS_V4",
1317
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"

‎advisories/unreviewed/2026/09/GHSA-9x88-w2p7-56vh/GHSA-9x88-w2p7-56vh.json‎

Lines changed: 5 additions & 1 deletion

0 commit comments

Comments
 (0)