Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5885fa78 by Salvatore Bonaccorso at 2026-09-10T12:44:44+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -61,17 +61,17 @@ CVE-2026-85645 (The Form Maker by 10Web \u2013
Mobile-Friendly Drag & Drop Conta
CVE-2026-84939 (Path traversal vulnerability in Apache FreeMarker template
loading mec ...)
TODO: check
CVE-2026-84063 (BurgerEditor 3.2.0 through 3.4.0 contains an issue with
unrestricted u ...)
- TODO: check
+ NOT-FOR-US: BurgerEditor
CVE-2026-84062 (BurgerEditor 3.0.0 through 3.4.0 contains an issue with
authorization ...)
- TODO: check
+ NOT-FOR-US: BurgerEditor
CVE-2026-82925 (The Site Reviews WordPress plugin before 8.3.0 does not
prevent reques ...)
NOT-FOR-US: WordPress plugin
CVE-2026-82582 (An authorization bypass vulnerability exists in SHIRASAGI
through a us ...)
- TODO: check
+ NOT-FOR-US: SHIRASAGI
CVE-2026-82079 (A stack-based buffer overflow vulnerability in the Nintendo
Switch loc ...)
- TODO: check
+ NOT-FOR-US: Nintendo
CVE-2026-81635 (A cross-site scripting vulnerability exists in SHIRASAGI,
which may al ...)
- TODO: check
+ NOT-FOR-US: SHIRASAGI
CVE-2026-81431 (The Registration Form for WooCommerce WordPress plugin before
1.1.3 do ...)
NOT-FOR-US: WordPress plugin
CVE-2026-79522 (An out-of-bounds read in the gf_dm_get_chunk_data function
(src/utils/ ...)
@@ -85,9 +85,9 @@ CVE-2026-79514 (An out-of-bounds read in the
gf_dm_data_received function (downl
CVE-2026-79513 (A divide-by-zero vulnerability in the
gf_dash_get_timeline_duration fu ...)
TODO: check
CVE-2026-79387 (SQL injection vulnerability in PbootCMS versions 3.2.0 through
3.2.5 a ...)
- TODO: check
+ NOT-FOR-US: PbootCMS
CVE-2026-79324 (Missing authorization in the Address Delete controller in
Mageplaza GD ...)
- TODO: check
+ NOT-FOR-US: Mageplaza GDPR for Magento 2 (mageplaza/module-gdpr)
CVE-2026-78361 (The zipMoney(Zip Co) Payments Plugin for WooCommerce WordPress
plugin ...)
NOT-FOR-US: WordPress plugin
CVE-2026-77771 (The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange
2FA Wor ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5885fa78b201f553bf7e2b790f524cfd15cfe716
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5885fa78b201f553bf7e2b790f524cfd15cfe716
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
