From b580773e3b81a4011207b05a72a0a46e7cf67b6a Mon Sep 17 00:00:00 2001 From: Rutger van Waveren Date: Tue, 15 Sep 2026 20:44:09 +0200 Subject: [PATCH] Fix 6 wrong CPE identities, a duplicate WebLogic rule and ProgressBar.js's detection NVD files these products' CVEs under a different identity than the rule's cpe carries: - Angular: angularjs:angular is AngularJS (15 names, 0 CVEs); Angular's 24 CVEs are under angular:angular - jQuery UI: jquery:jquery_ui has 0 CVEs; jqueryui:jquery_ui has 7, including CVE-2021-41182/41183/41184 and CVE-2022-31160 - Kentico CMS: kentico:kentico_cms has 3 CVEs on old releases (5.5 R2, 8.2); current Kentico (Xperience) CVEs are under kentico:xperience - Plesk: parallels:parallels_plesk_panel is the pre-2017 Parallels-era product, with no CVE on a current release; plesk:plesk has today's CVEs - ProfilePress: profilepress:profilepress has 0 CVEs; properfraction:profilepress has 35, including 4 CRITICAL Transifex's cpe (transifex:transifex) names the old desktop app, versions 0.1-0.10; this rule reads Transifex Live's JavaScript widget, which NVD does not list a product for. Dropped rather than left pointing at the wrong product. "Oracle WebLogic Server" has no patterns of its own, is reached only through Oracle Dynamic Monitoring Service's implies, and carries BEA's pre-Oracle identity (bea:weblogic_server: 130 names up to 10.0, none of its 150 CVEs on a current release). "Weblogic Server" detects the real Server header and had no cpe. Folded the duplicate into it and added its correct identity, oracle:weblogic_server (354 CVEs). ProgressBar.js matched any progressbar(.min).js and read ?ver=, so a site running WordPress's bundled jQuery UI progressbar widget (served at that same file name) was detected as ProgressBar.js under jQuery UI's version numbers. The patterns now require the package's own cdnjs, npm-CDN or dist paths. --- src/technologies/a.json | 2 +- src/technologies/j.json | 2 +- src/technologies/k.json | 2 +- src/technologies/o.json | 17 +---------------- src/technologies/p.json | 9 +++++---- src/technologies/t.json | 1 - src/technologies/w.json | 1 + 7 files changed, 10 insertions(+), 24 deletions(-) diff --git a/src/technologies/a.json b/src/technologies/a.json index fe797095..3d5194d7 100644 --- a/src/technologies/a.json +++ b/src/technologies/a.json @@ -5590,7 +5590,7 @@ "cats": [ 12 ], - "cpe": "cpe:2.3:a:angularjs:angular:*:*:*:*:*:*:*:*", + "cpe": "cpe:2.3:a:angular:angular:*:*:*:*:*:*:*:*", "description": "Angular is a TypeScript-based open-source web application framework led by the Angular Team at Google.", "dom": { "[ng-version]": { diff --git a/src/technologies/j.json b/src/technologies/j.json index ae0abd48..66cef7f1 100644 --- a/src/technologies/j.json +++ b/src/technologies/j.json @@ -1298,7 +1298,7 @@ "cats": [ 59 ], - "cpe": "cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*", + "cpe": "cpe:2.3:a:jqueryui:jquery_ui:*:*:*:*:*:*:*:*", "description": "jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.", "icon": "jQuery UI.svg", "implies": [ diff --git a/src/technologies/k.json b/src/technologies/k.json index 4e764530..5d4b6013 100644 --- a/src/technologies/k.json +++ b/src/technologies/k.json @@ -849,7 +849,7 @@ "CMSCookieLevel": "", "CMSPreferredCulture": "" }, - "cpe": "cpe:2.3:a:kentico:kentico_cms:*:*:*:*:*:*:*:*", + "cpe": "cpe:2.3:a:kentico:xperience:*:*:*:*:*:*:*:*", "description": "Kentico CMS is a web content management system for building websites, online stores, intranets, and Web 2.0 community sites.", "dom": [ "link[href*='/kentico/bundles/pageComponents/']" diff --git a/src/technologies/o.json b/src/technologies/o.json index 1f158bd9..c8d63465 100644 --- a/src/technologies/o.json +++ b/src/technologies/o.json @@ -2625,7 +2625,7 @@ }, "icon": "Oracle.svg", "implies": [ - "Oracle WebLogic Server" + "Weblogic Server" ], "website": "https://oracle.com" }, @@ -2708,21 +2708,6 @@ "icon": "Oracle.svg", "website": "https://oracle.com" }, - "Oracle WebLogic Server": { - "cats": [ - 22 - ], - "cpe": "cpe:2.3:a:bea:weblogic_server:*:*:*:*:*:*:*:*", - "description": "Oracle WebLogic Server is a Java-based application server that provides a platform for developing, deploying, and running enterprise-level Java applications.", - "icon": "Oracle.svg", - "implies": [ - "Java" - ], - "pricing": [ - "poa" - ], - "website": "https://www.oracle.com/java/weblogic/" - }, "Orama": { "cats": [ 29 diff --git a/src/technologies/p.json b/src/technologies/p.json index 6f83a5e9..9a5375b9 100644 --- a/src/technologies/p.json +++ b/src/technologies/p.json @@ -4878,7 +4878,7 @@ "cats": [ 9 ], - "cpe": "cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*", + "cpe": "cpe:2.3:a:plesk:plesk:*:*:*:*:*:*:*:*", "description": "Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.", "headers": { "X-Powered-By": "^Plesk(?:L|W)in", @@ -7666,7 +7666,7 @@ "cookies": { "ppwp_wp_session": "" }, - "cpe": "cpe:2.3:a:profilepress:profilepress:*:*:*:*:*:wordpress:*:*", + "cpe": "cpe:2.3:a:properfraction:profilepress:*:*:*:*:*:wordpress:*:*", "description": "ProfilePress is a WordPress registration plugin that lets you create login forms, registration forms, user profiles, and more.", "dom": [ "link[href*='/wp-content/plugins/wp-user-avatar/']" @@ -7842,8 +7842,9 @@ "icon": "ProgressBar.js.png", "oss": true, "scriptSrc": [ - "progressbar(?:\\.min)?\\.js(?:\\?v(?:er)?=((?:\\d+\\.)+\\d+))?\\;version:\\1", - "(?:((?:\\d+\\.)+\\d+)\\/)?progressbar(?:\\.min)?\\.js\\;version:\\1" + "cdnjs\\.cloudflare\\.com\\/ajax\\/libs\\/progressbar\\.js\\/([\\d\\.]+)\\/progressbar(?:\\.min)?\\.js\\;version:\\1", + "\\/progressbar\\.js@([\\d\\.]+)\\/dist\\/progressbar(?:\\.min)?\\.js\\;version:\\1", + "\\/progressbar\\.js\\/dist\\/progressbar(?:\\.min)?\\.js" ], "website": "https://kimmobrunfeldt.github.io/progressbar.js/" }, diff --git a/src/technologies/t.json b/src/technologies/t.json index cd7ba076..a5103147 100644 --- a/src/technologies/t.json +++ b/src/technologies/t.json @@ -5433,7 +5433,6 @@ "cats": [ 12 ], - "cpe": "cpe:2.3:a:transifex:transifex:*:*:*:*:*:*:*:*", "description": "Transifex is a cloud-based platform for managing the translation and localization of digital content.", "icon": "transifex.svg", "js": { diff --git a/src/technologies/w.json b/src/technologies/w.json index ccb6278e..c28192b0 100644 --- a/src/technologies/w.json +++ b/src/technologies/w.json @@ -1523,6 +1523,7 @@ "cats": [ 22 ], + "cpe": "cpe:2.3:a:oracle:weblogic_server:*:*:*:*:*:*:*:*", "description": "WebLogic Server is an Application Server that runs on a middle tier, between back-end databases and related applications and browser-based thin clients.", "headers": { "Server": "^WebLogic\\sServer\\s([\\d\\.]+)?\\;version:\\1"