Skip to content

Commit 44095bd

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-925f-q35m-63gx GHSA-f72j-hx3j-hhxx GHSA-wpqj-9q8f-r6hc
1 parent b81a27c commit 44095bd

3 files changed

Lines changed: 180 additions & 0 deletions

File tree

‎advisories/unreviewed/2026/02/GHSA-925f-q35m-63gx/GHSA-925f-q35m-63gx.json‎

Lines changed: 68 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,68 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-925f-q35m-63gx",
4+
"modified": "2026-02-21T15:31:33Z",
5+
"published": "2026-02-21T15:31:33Z",
6+
"aliases": [
7+
"CVE-2026-2869"
8+
],
9+
"details": "A vulnerability was identified in janet-lang janet up to 1.40.1. Affected by this vulnerability is the function janetc_varset of the file src/core/specials.c of the component handleattr Handler. The manipulation leads to out-of-bounds read. The attack can only be performed from a local environment. The exploit is publicly available and might be used. Upgrading to version 1.41.0 addresses this issue. The identifier of the patch is 2fabc80151a2b8834ee59cda8a70453f848b40e5. The affected component should be upgraded.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2869"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/janet-lang/janet/issues/1699"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/janet-lang/janet/commit/2fabc80151a2b8834ee59cda8a70453f848b40e5"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://github.com/janet-lang/janet"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://github.com/janet-lang/janet/releases/tag/v1.41.0"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://github.com/oneafter/0123/blob/main/ja1/repro"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/?ctiid.347106"
49+
},
50+
{
51+
"type": "WEB",
52+
"url": "https://vuldb.com/?id.347106"
53+
},
54+
{
55+
"type": "WEB",
56+
"url": "https://vuldb.com/?submit.754589"
57+
}
58+
],
59+
"database_specific": {
60+
"cwe_ids": [
61+
"CWE-119"
62+
],
63+
"severity": "MODERATE",
64+
"github_reviewed": false,
65+
"github_reviewed_at": null,
66+
"nvd_published_at": "2026-02-21T15:15:58Z"
67+
}
68+
}

‎advisories/unreviewed/2026/02/GHSA-f72j-hx3j-hhxx/GHSA-f72j-hx3j-hhxx.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-f72j-hx3j-hhxx",
4+
"modified": "2026-02-21T15:31:33Z",
5+
"published": "2026-02-21T15:31:33Z",
6+
"aliases": [
7+
"CVE-2026-2867"
8+
],
9+
"details": "A vulnerability was determined in itsourcecode Vehicle Management System 1.0. Affected is an unknown function of the file /billaction.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2867"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/wan1yan/cve/issues/4"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://itsourcecode.com"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?ctiid.347105"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?id.347105"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?submit.754578"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-74"
50+
],
51+
"severity": "MODERATE",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2026-02-21T14:15:57Z"
55+
}
56+
}

‎advisories/unreviewed/2026/02/GHSA-wpqj-9q8f-r6hc/GHSA-wpqj-9q8f-r6hc.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-wpqj-9q8f-r6hc",
4+
"modified": "2026-02-21T15:31:34Z",
5+
"published": "2026-02-21T15:31:34Z",
6+
"aliases": [
7+
"CVE-2026-2870"
8+
],
9+
"details": "A security flaw has been discovered in Tenda A21 1.0.0.0. Affected by this issue is the function set_qosMib_list of the file /goform/formSetQosBand. The manipulation of the argument list results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2870"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/QIU-DIE/cve-nneeww/issues/1"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?ctiid.347107"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?id.347107"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?submit.754627"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://www.tenda.com.cn"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-119"
50+
],
51+
"severity": "HIGH",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2026-02-21T15:15:59Z"
55+
}
56+
}

0 commit comments

Comments
 (0)