Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
31063982 by Moritz Muehlenhoff at 2026-06-02T16:38:41+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -23,9 +23,9 @@ CVE-2026-49135 (CodexBar prior to 0.32.0 contains an insecure
temporary file han
CVE-2026-49134 (CodexBar prior to 0.32.0 contains a privilege escalation
vulnerability ...)
NOT-FOR-US: CodexBar
CVE-2026-40965 (Cloud Foundry UAA versions v76.12.0 through v78.12.0 are
vulnerable to ...)
- TODO: check
+ NOT-FOR-US: Cloud Foundry
CVE-2026-40964 (Authentication Bypass in cf-auth-proxy in Cloud Foundry
Foundation all ...)
- TODO: check
+ NOT-FOR-US: Cloud Foundry
CVE-2026-3871 (A buffer overflow vulnerability in the UPnP DeletePortMapping()
comman ...)
NOT-FOR-US: Zyxel
CVE-2026-3870 (A buffer overflow vulnerability in the UPnP AddPortMapping()
command i ...)
@@ -868,9 +868,9 @@ CVE-2025-55664 (A heap buffer overflow in the
m2tsdmx_send_packet function (filt
CVE-2024-52011 (launch-editor allows users to open files with line numbers in
editor f ...)
TODO: check
CVE-2024-40646 (Vertex is a management tool for PT (Private Tracker) users to
manage s ...)
- TODO: check
+ NOT-FOR-US: Vertex
CVE-2022-4991 (Tychon includes an OpenSSL component that specifies an
OPENSSLDIR vari ...)
- TODO: check
+ NOT-FOR-US: Tychon
CVE-2026-46243 (In the Linux kernel, the following vulnerability has been
resolved: s ...)
- linux 7.0.10-1
[trixie] - linux 6.12.90-2
@@ -6731,7 +6731,7 @@ CVE-2026-30895 (Lack of output escaping leads to a XSS
vector in the readmore li
CVE-2026-30894 (Lack of output escaping leads to a XSS vector in the content
history c ...)
NOT-FOR-US: Joomla
CVE-2026-2264 (A vulnerability in the Google Cloud
ApigeeSetIntegrationRequestpolicy ...)
- TODO: check
+ NOT-FOR-US: Google Clpud
CVE-2026-27427 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-25901 (Lack of output escaping leads to a XSS vector in the
multilingual asso ...)
@@ -6863,7 +6863,7 @@ CVE-2026-9523 (A vulnerability was detected in Acrel
Electrical EEMS Enterprise
CVE-2026-9521 (A security vulnerability has been detected in fraillt bitsery
up to 5. ...)
NOT-FOR-US: fraillt bitsery
CVE-2026-9520 (A weakness has been identified in blitz-js blitz up to 3.0.2 on
GitHub ...)
- TODO: check
+ NOT-FOR-US: blitz-js
CVE-2026-9519 (A security flaw has been discovered in stonith404 pingvin-share
up to ...)
NOT-FOR-US: stonith404 pingvin-share
CVE-2026-9518 (A vulnerability was identified in hemant6488
CodeIgniter-StudentManage ...)
@@ -7481,7 +7481,7 @@ CVE-2026-9343 (A weakness has been identified in Edimax
EW-7438RPn up to 1.31. T
CVE-2026-9342 (A security flaw has been discovered in SourceCodester Hospitals
Patien ...)
NOT-FOR-US: SourceCodester
CVE-2026-3515 (A vulnerability in the `GitHubRepository` block of the
`prefect-github ...)
- TODO: check
+ NOT-FOR-US: Prefect
CVE-2026-9306 (A security vulnerability has been detected in QuantumNous
new-api up t ...)
NOT-FOR-US: QuantumNous new-api
CVE-2026-9305 (A weakness has been identified in QuantumNous new-api up to
0.12.1. Th ...)
@@ -7844,9 +7844,9 @@ CVE-2026-9264 (A cross-site scripting (XSS) vulnerability
in SketchUp 2026's Dyn
CVE-2026-9104 (The Draft List plugin for WordPress is vulnerable to Stored
Cross-Site ...)
NOT-FOR-US: WordPress plugin
CVE-2026-9054 (An attacker sending tcp, il, rudp, rudp, or gre packets with a
length ...)
- TODO: check
+ NOT-FOR-US: 9front
CVE-2026-9053 (Mothra would respect a default value given by a website for
HTML file ...)
- TODO: check
+ NOT-FOR-US: 9front
CVE-2026-9018 (The Easy Elements for Elementor \u2013 Addons & Website
Templates plug ...)
NOT-FOR-US: WordPress plugin
CVE-2026-8435 (Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request
Forger ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/31063982058d2caa9accbb110690f086ab693238
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/31063982058d2caa9accbb110690f086ab693238
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
