Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
13270a18 by Salvatore Bonaccorso at 2026-05-20T09:27:35+02:00
Add new keycloak issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -7,7 +7,7 @@ CVE-2026-9010 (The Boost plugin for WordPress is vulnerable to
time-based SQL In
CVE-2026-9003 (E-LAN Hybrid Recording System developed by TONNET has a SQL
Injection ...)
TODO: check
CVE-2026-8922 (A flaw was found in Keycloak. When both realm-level and
client-level ` ...)
- TODO: check
+ - keycloak <itp> (bug #1088287)
CVE-2026-8912 (The Contest Gallery plugin for WordPress is vulnerable to SQL
Injectio ...)
NOT-FOR-US: WordPress plugin
CVE-2026-8827 (The AddressRepository::getSqlQuery() method constructs a
database quer ...)
@@ -69,13 +69,13 @@ CVE-2026-7860 (A possible information disclosure
vulnerability exists in the Vaa
CVE-2026-7637 (The Boost plugin for WordPress is vulnerable to PHP Object
Injection i ...)
NOT-FOR-US: WordPress plugin
CVE-2026-7571 (A flaw was found in Keycloak. A low-privilege user, with
knowledge of ...)
- TODO: check
+ - keycloak <itp> (bug #1088287)
CVE-2026-7522 (The Advanced Database Cleaner \u2013 Premium plugin for
WordPress is v ...)
NOT-FOR-US: WordPress plugin
CVE-2026-7507 (A session fixation vulnerability was found in Keycloak's
login-actions ...)
- TODO: check
+ - keycloak <itp> (bug #1088287)
CVE-2026-7504 (A flaw was found in Keycloak's URL validation logic during
redirect op ...)
- TODO: check
+ - keycloak <itp> (bug #1088287)
CVE-2026-7472 (The Read More & Accordion plugin for WordPress is vulnerable to
time-b ...)
NOT-FOR-US: WordPress plugin
CVE-2026-7467 (The Read More & Accordion plugin for WordPress is vulnerable to
Privil ...)
@@ -87,7 +87,7 @@ CVE-2026-7460 (mailcow-dockerized contains a stored
cross-site scripting vulnera
CVE-2026-7385 (The Decent Comments WordPress plugin before 3.0.2 does not
restrict ac ...)
NOT-FOR-US: WordPress plugin
CVE-2026-7307 (A flaw was found in Keycloak. A remote, unauthenticated
attacker can s ...)
- TODO: check
+ - keycloak <itp> (bug #1088287)
CVE-2026-7284 (The Easy Elements for Elementor \u2013 Addons & Website
Templates plug ...)
NOT-FOR-US: WordPress plugin
CVE-2026-6871 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/13270a18178d10cea60d08984b8dc6b888f8fc39
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/13270a18178d10cea60d08984b8dc6b888f8fc39
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
