Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9b685777 by Salvatore Bonaccorso at 2026-09-11T22:05:57+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
CVE-2026-9160 (Improper neutralization of special elements used in a template
engine ...)
- TODO: check
+ NOT-FOR-US: Arma Digital Media Inc. Website Template
CVE-2026-8304 (Missing Authorization vulnerability in TUBITAK BILGEM Software
Technol ...)
TODO: check
CVE-2026-8303 (Incorrect privilege assignment vulnerability in TUBITAK BILGEM
Softwar ...)
@@ -11,77 +11,77 @@ CVE-2026-89329 (A flaw was found in `multipathd`. A local
attacker with access t
CVE-2026-89298 (A flaw was found in the Dynamic Client Registration service of
Keycloa ...)
TODO: check
CVE-2026-89265 (MoguBlog through 6.2 contains an authorization bypass
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: MoguBlog
CVE-2026-89264 (MoguBlog through 6.2 fails to validate the comment author
identity in ...)
- TODO: check
+ NOT-FOR-US: MoguBlog
CVE-2026-89263 (MoguBlog through 6.2 fails to authenticate requests to the
/web/commen ...)
- TODO: check
+ NOT-FOR-US: MoguBlog
CVE-2026-89262 (MoguBlog through 6.2 contains an authorization bypass
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: MoguBlog
CVE-2026-89261 (MoguBlog through 6.2 exposes Elasticsearch index management
endpoints ...)
- TODO: check
+ NOT-FOR-US: MoguBlog
CVE-2026-89260 (MoguBlog through 6.2 contains an XML external entity injection
vulnera ...)
- TODO: check
+ NOT-FOR-US: MoguBlog
CVE-2026-89259 (Hugo is a static site generator. From v0.161.0, Hugo executes
Node too ...)
TODO: check
CVE-2026-89258 (Hugo is a static site generator. In versions after v0.123.0
and before ...)
TODO: check
CVE-2026-89257 (AVideo through 29.0 contains an insecure direct object
reference (IDOR ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89256 (AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1
contain ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89255 (AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1
contain ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89254 (AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1
contain ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89253 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89252 (AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1
fails t ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89251 (AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1
fails t ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89250 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89249 (AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1
contain ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89248 (AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1
is miss ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89247 (WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1
and ear ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89246 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89245 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89244 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89243 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89242 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89241 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89240 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89239 (WWBN AVideo through commit
c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89212 (A flaw resulting in XML external entity (XXE) was found in
Akana API P ...)
- TODO: check
+ NOT-FOR-US: Akana
CVE-2026-89179 (WeenyGenius, a computer lab management system by Howyar
Technologies, ...)
- TODO: check
+ NOT-FOR-US: WeenyGenius
CVE-2026-89178 (WeenyGenius, a computer lab management system by Howyar
Technologies, ...)
- TODO: check
+ NOT-FOR-US: WeenyGenius
CVE-2026-89177 (WeenyGenius, a computer lab management system by Howyar
Technologies, ...)
- TODO: check
+ NOT-FOR-US: WeenyGenius
CVE-2026-89176 (WeenyGenius, a computer lab management system developed by
Howyar Tech ...)
- TODO: check
+ NOT-FOR-US: WeenyGenius
CVE-2026-89175 (Smart Video Intercom System developed by Kingdom Communication
Associa ...)
- TODO: check
+ NOT-FOR-US: Smart Video Intercom System from Kingdom Communication
Associated
CVE-2026-89174 (Smart Video Intercom System developed by Kingdom Communication
Associa ...)
- TODO: check
+ NOT-FOR-US: Smart Video Intercom System from Kingdom Communication
Associated
CVE-2026-89173 (Smart Video Intercom System developed by Kingdom Communication
Associa ...)
- TODO: check
+ NOT-FOR-US: Smart Video Intercom System from Kingdom Communication
Associated
CVE-2026-89148 (AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1
contain ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89147 (Net-SNMP through 5.9.5.2 contains a denial of service
vulnerability in ...)
TODO: check
CVE-2026-89146 (libp2p-rendezvous through 0.17.1 fails to validate
registration TTL va ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9b685777bf27b0ada8c7055748f3c4f097582727
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9b685777bf27b0ada8c7055748f3c4f097582727
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
