Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b7d74ba2 by Salvatore Bonaccorso at 2026-08-07T22:36:14+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -40,17 +40,17 @@ CVE-2026-71556 (go-git is an extensible git implementation
library written in pu
NOTE: Fixed by:
https://github.com/go-git/go-git/commit/661d1c7f101d34e002a3cfcf8dbea5b7421d07ac
(v6.0.0-alpha.5)
NOTE: Fixed by:
https://github.com/go-git/go-git/commit/008a78f2dd86f52544ddff8b8e8ddeecdf3f7aab
(v5.19.2)
CVE-2026-70561 (TestLink 1.9.20 and prior contains an insecure direct object
reference ...)
- TODO: check
+ NOT-FOR-US: TestLink
CVE-2026-69127 (Kirby is an open-source content management system. Prior to
4.9.5 and ...)
- TODO: check
+ NOT-FOR-US: Kirby CMS
CVE-2026-68772 (ZenML 0.94.6 contains a remote code execution vulnerability in
the Clo ...)
- TODO: check
+ NOT-FOR-US: ZenML
CVE-2026-67585 (Allocation of Resources Without Limits or Throttling
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: DivvyPayHQ absinthe_federation
CVE-2026-66914 (Joomla Extension - seblod.com - Unauthenticated path traversal
in SEBL ...)
NOT-FOR-US: Joomla
CVE-2026-66838 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: elixir-ecto postgrex
CVE-2026-66494 (Joomla Extension - joomshaper.com - Unauthenticated stored XSS
in Shap ...)
NOT-FOR-US: Joomla
CVE-2026-66493 (Joomla Extension - phoca.cz - Path Traversal vulnerability in
Phoca Co ...)
@@ -60,17 +60,17 @@ CVE-2026-66492 (Joomla Extension - phoca.cz - Path
Traversal vulnerability in Ph
CVE-2026-66491 (Joomla Extension - phoca.cz - Arbitrary File Read in Phoca
Commander 1 ...)
NOT-FOR-US: Joomla
CVE-2026-66062 (SvelteKit is a framework for rapidly developing robust,
performant web ...)
- TODO: check
+ NOT-FOR-US: SvelteKit
CVE-2026-66059 (Frappe is a full-stack web application framework. Prior to
16.20.0 and ...)
- TODO: check
+ NOT-FOR-US: Frappe
CVE-2026-66058 (Frappe is a full-stack web application framework. Prior to
16.20.0 and ...)
- TODO: check
+ NOT-FOR-US: Frappe
CVE-2026-66000 (Frappe is a full-stack web application framework. Prior to
16.23.0 and ...)
- TODO: check
+ NOT-FOR-US: Frappe
CVE-2026-64637 (Improper privilege management in the XML-RPC API of Plesk
before 18.0. ...)
- TODO: check
+ NOT-FOR-US: Plesk
CVE-2026-64636 (An SQL injection vulnerability in Plesk Obsidian up to 18.0.80
for Lin ...)
- TODO: check
+ NOT-FOR-US: Plesk
CVE-2026-62996 (Smarty is a template engine for PHP, facilitating the
separation of pr ...)
TODO: check
CVE-2026-62992 (Smarty is a template engine for PHP, facilitating the
separation of pr ...)
@@ -80,45 +80,45 @@ CVE-2026-56794 (Dell OpenManage Server Administrator,
versions prior to 11.1.0.2
CVE-2026-56793 (Dell OpenManage Server Administrator, versions prior to
11.1.0.2, cont ...)
NOT-FOR-US: Dell / EMC
CVE-2026-54218 (Use of hard-coded cryptographic key vulnerability in Tobit
Laboratorie ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54217 (Tobit Laboratories AG TeamDavid's Webbox application is
vulnerable to ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54216 (Tobit Laboratories AG TeamDavid's Webbox application contains
a reflec ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54215 (Tobit Laboratories AG TeamDavid's Webbox contains an open
redirect vu ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54214 (Tobit Laboratories AG TeamDavid's Webbox application is
vulnerable to ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54213 (Tobit Laboratories AG TeamDavid's Webbox application exposes a
functio ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54212 (Tobit Laboratories AG TeamDavid's Webbox application
implements an API ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54211 (Tobit Laboratories AG TeamDavid's Webbox application\u2019s
endpoint \ ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54210 (Tobit Laboratories AG TeamDavid's Webbox application
implements variou ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54209 (Tobit Laboratories AG TeamDavid's Webbox application handles
password ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54208 (Tobit Laboratories AG TeamDavid's Webbox application is
vulnerable to ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54207 (Tobit Laboratories AG TeamDavid's Webbox 's move archive
functionality ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54206 (Tobit Laboratories AG TeamDavid's Webbox 's sending email,
fax, SMS, e ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54205 (Tobit Laboratories AG TeamDavid's Webbox 's link storing
functionality ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54204 (Tobit Laboratories AG TeamDavid's Webbox 's search
functionality accep ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54203 (Memory Leak to an Unauthorized Actor vulnerability in Tobit
Laboratori ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54202 (Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a
path trav ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54201 (Tobit Laboratories AG TeamDavid's Webbox does not enforce
authenticat ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54200 (Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a
local fil ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54199 (Tobit Laboratories AG TeamDavid's Webbox is vulnerable to
HTTP header ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-49008 (By accessing unencrypted information in the device firmware,
an attack ...)
NOT-FOR-US: ZTE
CVE-2026-49007 (By accessing unencrypted information in the device firmware,
an attack ...)
@@ -126,21 +126,21 @@ CVE-2026-49007 (By accessing unencrypted information in
the device firmware, an
CVE-2026-49006 (By accessing unencrypted information in the device firmware,
an attack ...)
NOT-FOR-US: ZTE
CVE-2026-48098 (NexTor IP Changer is a command-line tool that leverages the
Tor networ ...)
- TODO: check
+ NOT-FOR-US: NexTor IP Changer
CVE-2026-48097 (NexTor IP Changer is a command-line tool that leverages the
Tor networ ...)
- TODO: check
+ NOT-FOR-US: NexTor IP Changer
CVE-2026-48094 (The ShareOpenly WordPress plugin prior to version 1.2.1
contains a Cro ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-48093 (The Code Embed WordPress plugin prior to version 2.6.1 is
vulnerable t ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-47364 (On every successful login, the Datadog Android application
calls Fireb ...)
- TODO: check
+ NOT-FOR-US: Datadog Android application
CVE-2026-47363 (The launcher activity AppActivity in the Datadog Android
application i ...)
- TODO: check
+ NOT-FOR-US: Datadog Android application
CVE-2026-47362 (The Datadog Android application stores operationally sensitive
content ...)
- TODO: check
+ NOT-FOR-US: Datadog Android application
CVE-2026-47361 (BubbleChatActivity in the Datadog Android application is
declared andr ...)
- TODO: check
+ NOT-FOR-US: Datadog Android application
CVE-2026-44965 (Six Android App Widget configuration activities in the Datadog
Android ...)
TODO: check
CVE-2026-44964 (The OnCallNotificationActivity in the Datadog Android
application is d ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b7d74ba2f34f0847fcba52a9e6177d79961288a0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b7d74ba2f34f0847fcba52a9e6177d79961288a0
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
