Skip to content

Commit adcd9c5

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-5422-5257-mh57 GHSA-6qr8-c78q-5fg9 GHSA-cx7v-5xwm-4mqw GHSA-q432-rmqv-hh8m GHSA-qfjx-g344-4pcg
1 parent 41b1eee commit adcd9c5

5 files changed

Lines changed: 283 additions & 0 deletions

File tree

‎advisories/unreviewed/2026/06/GHSA-5422-5257-mh57/GHSA-5422-5257-mh57.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-5422-5257-mh57",
4+
"modified": "2026-06-06T12:31:38Z",
5+
"published": "2026-06-06T12:31:37Z",
6+
"aliases": [
7+
"CVE-2026-11412"
8+
],
9+
"details": "A weakness has been identified in Jinher OA C6. The affected element is an unknown function of the file /C6/JHSoft.Web.ModuleCount/GetFormSn.aspx. Executing a manipulation of the argument queryID can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11412"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/MichaelZhuang521/cve/issues/3"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/cve/CVE-2026-11412"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/submit/819943"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/vuln/368969"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/vuln/368969/cti"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-74"
50+
],
51+
"severity": "LOW",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2026-06-06T11:16:49Z"
55+
}
56+
}

‎advisories/unreviewed/2026/06/GHSA-6qr8-c78q-5fg9/GHSA-6qr8-c78q-5fg9.json‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-6qr8-c78q-5fg9",
4+
"modified": "2026-06-06T12:31:37Z",
5+
"published": "2026-06-06T12:31:37Z",
6+
"aliases": [
7+
"CVE-2026-11406"
8+
],
9+
"details": "A vulnerability was determined in GL.iNet MT3000 up to 4.4.5. This vulnerability affects unknown code of the file ovpnclient.sh of the component OpenVPN Client Import Workflow. This manipulation causes command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. Upgrading to version 4.9.0_beta3-1012-0513-1778656146 is able to resolve this issue. You should upgrade the affected component. The vendor confirms: \"This issue has been addressed by implementing malicious checks on OpenVPN configuration files to prevent command injection attacks carried through malicious configuration files.\"",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11406"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://fw.gl-inet.cn/firmware/mt3000/testing/mt3000-4.9.0_beta3-1012-0513-1778656146.tar"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/StrTzz123/iot_vul/tree/main/GL-iNet/MT3000/4.4.5/ovpn_client_import"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/cve/CVE-2026-11406"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/submit/820049"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/vuln/368966"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/vuln/368966/cti"
49+
}
50+
],
51+
"database_specific": {
52+
"cwe_ids": [
53+
"CWE-74"
54+
],
55+
"severity": "LOW",
56+
"github_reviewed": false,
57+
"github_reviewed_at": null,
58+
"nvd_published_at": "2026-06-06T10:16:27Z"
59+
}
60+
}

‎advisories/unreviewed/2026/06/GHSA-cx7v-5xwm-4mqw/GHSA-cx7v-5xwm-4mqw.json‎

Lines changed: 68 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,68 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-cx7v-5xwm-4mqw",
4+
"modified": "2026-06-06T12:31:37Z",
5+
"published": "2026-06-06T12:31:37Z",
6+
"aliases": [
7+
"CVE-2026-11408"
8+
],
9+
"details": "A vulnerability was identified in vertex-app vertex up to 2026.02.12. This issue affects some unknown processing of the file app/model/LogMod.js of the component Log Viewer Endpoint. Such manipulation of the argument req.query leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be used. The name of the patch is 805d82e7100d49b79b3beb1b9420e8e458987198. It is best practice to apply a patch to resolve this issue.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11408"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/vertex-app/vertex/commit/805d82e7100d49b79b3beb1b9420e8e458987198"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://drive.google.com/drive/folders/1DO-kB1eUoB1CksJ_ZKzpUaX0kp5Rgm_T?usp=sharing"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://gist.github.com/menelausx/e632faba4014474fcef6a1f541ca3e4e"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://github.com/vertex-app/vertex"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/cve/CVE-2026-11408"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/submit/818442"
49+
},
50+
{
51+
"type": "WEB",
52+
"url": "https://vuldb.com/vuln/368967"
53+
},
54+
{
55+
"type": "WEB",
56+
"url": "https://vuldb.com/vuln/368967/cti"
57+
}
58+
],
59+
"database_specific": {
60+
"cwe_ids": [
61+
"CWE-77"
62+
],
63+
"severity": "LOW",
64+
"github_reviewed": false,
65+
"github_reviewed_at": null,
66+
"nvd_published_at": "2026-06-06T11:16:48Z"
67+
}
68+
}

‎advisories/unreviewed/2026/06/GHSA-q432-rmqv-hh8m/GHSA-q432-rmqv-hh8m.json‎

Lines changed: 43 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,43 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-q432-rmqv-hh8m",
4+
"modified": "2026-06-06T12:31:37Z",
5+
"published": "2026-06-06T12:31:37Z",
6+
"aliases": [
7+
"CVE-2026-10725"
8+
],
9+
"details": "Protocol::HTTP2 versions through 1.12 for Perl is vulnerable to a HTTP/2 Bomb.\n\nProtocol::HTTP2's inbound HPACK path has no header-list size limit, so a small HTTP/2 request can expand into large server memory (the \"HTTP/2 bomb\").\n\nThe headers_decode method materialises a full key+value copy per indexed reference with no running size check, and the stream_header_block_add method appends (since version 1.12) every CONTINUATION frame to the per-stream buffer unbounded.\n\nMAX_HEADER_LIST_SIZE (default 65536) is advertised in SETTINGS but never consulted on decode. It is absent from the decoder and from the :limits export tag.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10725"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://metacpan.org/release/CRUX/Protocol-HTTP2-1.12/source/lib/Protocol/HTTP2/HeaderCompression.pm#L133"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "https://metacpan.org/release/CRUX/Protocol-HTTP2-1.12/source/lib/Protocol/HTTP2/Stream.pm#L414"
24+
},
25+
{
26+
"type": "WEB",
27+
"url": "https://security.metacpan.org/patches/P/Protocol-HTTP2/1.12/CVE-2026-10725-r1.patch"
28+
},
29+
{
30+
"type": "WEB",
31+
"url": "http://www.openwall.com/lists/oss-security/2026/06/06/7"
32+
}
33+
],
34+
"database_specific": {
35+
"cwe_ids": [
36+
"CWE-409"
37+
],
38+
"severity": null,
39+
"github_reviewed": false,
40+
"github_reviewed_at": null,
41+
"nvd_published_at": "2026-06-06T10:16:25Z"
42+
}
43+
}

‎advisories/unreviewed/2026/06/GHSA-qfjx-g344-4pcg/GHSA-qfjx-g344-4pcg.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-qfjx-g344-4pcg",
4+
"modified": "2026-06-06T12:31:37Z",
5+
"published": "2026-06-06T12:31:37Z",
6+
"aliases": [
7+
"CVE-2026-11411"
8+
],
9+
"details": "A security flaw has been discovered in iAI Lab PDF AI App 4.21.0 on Android. Impacted is the function getExternalCacheDir of the component chatpdf.pro. Performing a manipulation of the argument _display_name results in path traversal. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11411"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/actuator/chatpdf.pro"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/cve/CVE-2026-11411"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/submit/818818"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/vuln/368968"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/vuln/368968/cti"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-22"
50+
],
51+
"severity": "LOW",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2026-06-06T11:16:49Z"
55+
}
56+
}

0 commit comments

Comments
 (0)