Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
922cbca7 by Salvatore Bonaccorso at 2026-08-17T21:32:52+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -35,81 +35,81 @@ CVE-2026-75045 (In JetBrains YouTrack before 2025.3.156085,
2026.1.13913, 2026
CVE-2026-75044 (In JetBrains YouTrack before 2025.3.156085, 2026.1.13914,
2026.2.180 ...)
NOT-FOR-US: JetBrains
CVE-2026-75011 (A flaw has been found in kylecui NetForensicMCP 2.1.0.
Impacted is the ...)
- TODO: check
+ NOT-FOR-US: NetForensicMCP
CVE-2026-74901 (openssl_encrypt versions before 1.4.0 contain an
authentication bypass ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74900 (openssl_encrypt versions before 1.4.0 contain a critical
vulnerability ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74899 (openssl_encrypt versions before 1.4.0 contain a sandbox escape
vulnera ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74896 (openssl_encrypt versions before 1.4.0 contain a sandbox escape
vulnera ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74895 (openssl_encrypt versions before 1.4.0 fail to apply sandbox
restrictio ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74894 (openssl_encrypt before 1.4.0 contains an authentication bypass
vulnera ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74893 (openssl_encrypt versions before 1.4.0 contain hardcoded
default JWT si ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74892 (openssl_encrypt versions before 1.4.0 contain a hardcoded
default secr ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74891 (openssl_encrypt versions before 1.4.0 contain hardcoded
database crede ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74890 (openssl_encrypt versions before 1.4.0 contain an
authentication bypass ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74889 (openssl_encrypt versions before 1.4.0 use HKDF with no salt
and static ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74888 (openssl_encrypt versions before 1.4.0 use a non-standard
PBKDF2 key de ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74887 (openssl_encrypt before 1.4.0 imports Python's
non-cryptographic 'rando ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74886 (openssl_encrypt versions before 1.4.0 contain a plugin sandbox
bypass ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74885 (openssl_encrypt versions before 1.4.0 contain a logging bug in
restore ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74884 (openssl_encrypt versions before 1.4.0 contain a path traversal
vulnera ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74883 (openssl_encrypt versions before 1.4.0 contain a sandbox bypass
vulnera ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74882 (openssl_encrypt versions before 1.4.0 contain an insecure
default conf ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74881 (openssl_encrypt versions before 1.4.0 configure CORS with
allow_origin ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74880 (openssl_encrypt versions before 1.4.0 accept refresh tokens as
URL que ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74879 (openssl_encrypt versions before 1.4.0 contain an information
disclosur ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74878 (openssl_encrypt versions before 1.4.0 use an in-memory rate
limiter fo ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74877 (openssl_encrypt versions before 1.4.0 contain a missing
ownership veri ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74876 (openssl_encrypt versions before 1.4.0 contain a vulnerability
in Publi ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74875 (openssl_encrypt versions before 1.4.0 silently skip JSON
schema valida ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74874 (openssl_encrypt versions before 1.4.0 use Python's
non-cryptographic r ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74873 (openssl_encrypt versions before 1.4.0 expose passwords passed
via the ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74872 (openssl_encrypt versions before 1.4.0 contain an arbitrary
code execut ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74871 (openssl_encrypt versions before 1.4.6 contain a key derivation
flaw in ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74870 (openssl_encrypt (pip) versions <= 1.4.7 contain an information
exposur ...)
- TODO: check
+ NOT-FOR-US: OpenSSL Encrypt
CVE-2026-74869 (stoatchat before 0.15.0 contains a missing authorization
vulnerability ...)
- TODO: check
+ NOT-FOR-US: stoatchat
CVE-2026-74868 (SiYuan versions before 3.7.4 contain an unthrottled
brute-force vulner ...)
NOT-FOR-US: SiYuan
CVE-2026-74867 (SiYuan versions before 3.7.4 contain a cross-site request
forgery vuln ...)
NOT-FOR-US: SiYuan
CVE-2026-74858 (A vulnerability has been found in jae-jae fetcher-mcp up to
0.3.9. Imp ...)
- TODO: check
+ NOT-FOR-US: jae-jae fetcher-mcp
CVE-2026-74845 (Official Document Management System developed by 2100
Technology has a ...)
- TODO: check
+ NOT-FOR-US: 2100 Technology
CVE-2026-74843 (A vulnerability was determined in Wavlink WN531P3 and WN535M1
V250922. ...)
NOT-FOR-US: Wavlink
CVE-2026-74842 (A vulnerability was found in Kira-Pgr PromptShopMCP up to
5bc0cd17358e ...)
- TODO: check
+ NOT-FOR-US: Kira-Pgr PromptShopMCP
CVE-2026-74802 (SiYuan versions before 3.7.4 contain a cross-site WebSocket
hijacking ...)
NOT-FOR-US: SiYuan
CVE-2026-74801 (SiYuan before 3.7.4 fails to properly escape workspace
directory paths ...)
@@ -125,7 +125,7 @@ CVE-2026-74254 (Joomla Extension - joomlack.fr - SQL
injection in Page Builder C
CVE-2026-74253 (Joomla Extension - regularlabs.com - Unauthenticated RCE
through unver ...)
NOT-FOR-US: Joomla
CVE-2026-74238 (TIER IV Nebula through 1.2.0 contains an out-of-bounds read
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: TIER IV Nebula
CVE-2026-73851 (Kiota is an OpenAPI based HTTP Client code generator. Prior to
1.29.1 ...)
TODO: check
CVE-2026-73646 (PostCSS takes a CSS file and provides an API to analyze and
modify its ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/922cbca7047432c1077d906f2a7e0f4d8f48b5cf
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/922cbca7047432c1077d906f2a7e0f4d8f48b5cf
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
