Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b1c78832 by Salvatore Bonaccorso at 2026-08-25T10:00:35+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,7 +1,7 @@
CVE-2026-7455 (A maliciously crafted FLT file, when parsed through Autodesk
3ds Max, ...)
NOT-FOR-US: Autodesk
CVE-2026-78685 (Medical Practice Management System developed by Le-yan has a
Remote Co ...)
- TODO: check
+ NOT-FOR-US: Medical Practice Management System
CVE-2026-78683 (NLTK before 3.10.0 (affected versions <=3.9.4) contains an
unsafe pick ...)
- nltk 3.10.0-1
NOTE:
https://github.com/nltk/nltk/security/advisories/GHSA-rhp5-r9x4-f5g2
@@ -32,17 +32,17 @@ CVE-2026-78675 (GitPython before 3.1.59 fails to disable
merge_includes when par
CVE-2026-78656 (A vulnerability was found in itsourcecode Sales and Inventory
System 1 ...)
NOT-FOR-US: itsourcecode System
CVE-2026-78654 (A vulnerability has been found in cleverbrush framework and
deep up to ...)
- TODO: check
+ NOT-FOR-US: cleverbrush framework
CVE-2026-78638 (A flaw has been found in peerigon unzip-crx and unzip-crx-3 up
to 0.2. ...)
- TODO: check
+ NOT-FOR-US: peerigon unzip-crx and unzip-crx-3
CVE-2026-78637 (A vulnerability was detected in Fdawgs node-poppler up to
9.1.2/10.0.1 ...)
- TODO: check
+ NOT-FOR-US: Fdawgs node-poppler
CVE-2026-78555 (RansomLook exposed complete API keys in the HTML source of the
authent ...)
- TODO: check
+ NOT-FOR-US: RansomLook
CVE-2026-78553 (RansomLook created its Flask session-signing key without
explicitly re ...)
- TODO: check
+ NOT-FOR-US: RansomLook
CVE-2026-78551 (RansomLook contains multiple weaknesses in its authentication
endpoint ...)
- TODO: check
+ NOT-FOR-US: RansomLook
CVE-2026-78478 (The Mane theme for WordPress is vulnerable to Local File
Inclusion in ...)
NOT-FOR-US: WordPress plugin
CVE-2026-78477 (The Jawn theme for WordPress is vulnerable to Privilege
Escalation in ...)
@@ -54,11 +54,11 @@ CVE-2026-78467 (The Fluent Support Pro plugin for WordPress
is vulnerable to una
CVE-2026-78466 (The Fluent Boards Pro plugin for WordPress is vulnerable to
Insecure D ...)
NOT-FOR-US: WordPress plugin
CVE-2026-78435 (A vulnerability has been found in Faveo Helpdesk up to 2.0.3.
Affected ...)
- TODO: check
+ NOT-FOR-US: Faveo Helpdesk
CVE-2026-78434 (A flaw has been found in Faveo Helpdesk up to 2.0.3. This
impacts the ...)
- TODO: check
+ NOT-FOR-US: Faveo Helpdesk
CVE-2026-78430 (A vulnerability was detected in sworddut mcp-ffmpeg-helper
0.1.0/0.1.1 ...)
- TODO: check
+ NOT-FOR-US: sworddut mcp-ffmpeg-helper
CVE-2026-78284 (Unauthenticated Arbitrary File Deletion in MasterStudy LMS <=
3.7.42 v ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-78282 (Unauthenticated Cross Site Scripting (XSS) in Stripe Payments
<= 2.1.2 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b1c7883279caba1321f9c44a4cf84242fd538dab
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b1c7883279caba1321f9c44a4cf84242fd538dab
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
