Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a9b96339 by Salvatore Bonaccorso at 2026-09-28T11:40:45+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -11,83 +11,83 @@ CVE-2026-89300 (The WP Verify API WordPress plugin through
1.0.0 does not have a
CVE-2026-88828 (The Blacklist Manager for WooCommerce WordPress plugin from
1.3.0 to 2 ...)
NOT-FOR-US: WordPress plugin
CVE-2026-87723 (In Google fuse-archive versions prior to 1.24, an attacker who
can pre ...)
- TODO: check
+ NOT-FOR-US: Google fuse-archive
CVE-2026-86838 (The Bookly WordPress plugin before 28.3 does not validate
client-suppl ...)
NOT-FOR-US: WordPress plugin
CVE-2026-84744 (The WPForms Lite WordPress plugin from 1.5.0.1 to 2.0.2 does
not remov ...)
NOT-FOR-US: WordPress plugin
CVE-2026-101090 (Nezha 2.2.3 contains a Host header injection regression in
the OAuth2 ...)
- TODO: check
+ NOT-FOR-US: Nezha
CVE-2026-101089 (Nezha before 2.2.7 contains an information disclosure
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Nezha
CVE-2026-101088 (Nezha is a server and website monitoring tool. In versions >=
2.2.11 a ...)
- TODO: check
+ NOT-FOR-US: Nezha
CVE-2026-101087 (Nezha versions 2.0.10 through 2.3.2 use a restricted HTTP
client to va ...)
- TODO: check
+ NOT-FOR-US: Nezha
CVE-2026-101086 (Nezha Dashboard versions before 2.3.5 fail to restrict
service monitor ...)
- TODO: check
+ NOT-FOR-US: Nezha
CVE-2026-101085 (Nezha before 2.3.8 fails to validate alert rule type and
duration boun ...)
- TODO: check
+ NOT-FOR-US: Nezha
CVE-2026-101084 (obot versions before v0.21.1 fail to enforce Access Control
Rules on t ...)
- TODO: check
+ NOT-FOR-US: obot
CVE-2026-101065 (Obot is an open-source AI agent/MCP platform. In all versions
up to an ...)
- TODO: check
+ NOT-FOR-US: obot
CVE-2026-101064 (Obot before v0.23.0 contains a server-side request forgery
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: obot
CVE-2026-101063 (Obot versions before v0.23.0 fail to enforce authentication
on MCP Reg ...)
- TODO: check
+ NOT-FOR-US: obot
CVE-2026-101062 (Obot before v0.23.0 (affected versions <= v0.22.1) running
with OBOT_S ...)
- TODO: check
+ NOT-FOR-US: obot
CVE-2026-101007 (A vulnerability has been found in aaPanel BaoTa up to 11.8.0.
This iss ...)
- TODO: check
+ NOT-FOR-US: aaPanel BaoTa
CVE-2026-101006 (A flaw has been found in Frappe HR up to 16.15.0. This
vulnerability a ...)
- TODO: check
+ NOT-FOR-US: Frappe HR
CVE-2026-101005 (A vulnerability was detected in October CMS up to 4.3.4. This
affects ...)
- TODO: check
+ NOT-FOR-US: October CMS
CVE-2026-101004 (A security vulnerability has been detected in notionnext-org
NotionNex ...)
- TODO: check
+ NOT-FOR-US: notionnext-org NotionNext
CVE-2026-101003 (A weakness has been identified in Cesanta Mongoose up to
7.21. Affecte ...)
TODO: check
CVE-2026-101002 (A security flaw has been discovered in Netcore NBR200V2
1.3.241127.071 ...)
- TODO: check
+ NOT-FOR-US: Netcore
CVE-2026-101001 (A vulnerability was identified in Netcore NBR200V2
1.3.241127.071246. ...)
- TODO: check
+ NOT-FOR-US: Netcore
CVE-2026-101000 (A vulnerability was determined in Netcore NBR100V2
1.3.240614.030928. ...)
- TODO: check
+ NOT-FOR-US: Netcore
CVE-2026-100909 (A vulnerability was found in OctoberCMS up to
4.1.19/4.2.25/4.3.4. The ...)
- TODO: check
+ NOT-FOR-US: October CMS
CVE-2026-100908 (A vulnerability has been found in Eyeplus 57.0.0.0308. This
affects an ...)
- TODO: check
+ NOT-FOR-US: Eyeplus
CVE-2026-100907 (A flaw has been found in Eyeplus 57.0.0.0308. The impacted
element is ...)
- TODO: check
+ NOT-FOR-US: Eyeplus
CVE-2026-100906 (A vulnerability was detected in Eyeplus 57.0.0.0308. The
affected elem ...)
- TODO: check
+ NOT-FOR-US: Eyeplus
CVE-2026-100904 (A security vulnerability has been detected in amirsanni
mini-inventory ...)
- TODO: check
+ NOT-FOR-US: amirsanni mini-inventory-and-sales-management-system
CVE-2026-100903 (A vulnerability was identified in \u041e\u041e\u041e
\u041d\u041f\u041 ...)
- TODO: check
+ NOT-FOR-US: GEOritm
CVE-2026-100902 (A vulnerability was determined in Barco ClickShare CX-20 Gen2
up to 02 ...)
- TODO: check
+ NOT-FOR-US: Barco ClickShare CX-20 Gen2
CVE-2026-100901 (A vulnerability was found in athlon1600 youtube-downloader up
to 4.0.1 ...)
- TODO: check
+ NOT-FOR-US: athlon1600 youtube-downloader
CVE-2026-100900 (A vulnerability has been found in DevaslanPHP
project-management 1.2.1 ...)
- TODO: check
+ NOT-FOR-US: DevaslanPHP project-management
CVE-2026-100899 (A flaw has been found in DevaslanPHP project-management
1.2.1/1.2.2/1. ...)
- TODO: check
+ NOT-FOR-US: DevaslanPHP project-management
CVE-2026-100898 (A vulnerability was detected in DevaslanPHP
project-management 1.2.1/1 ...)
- TODO: check
+ NOT-FOR-US: DevaslanPHP project-management
CVE-2026-100897 (A security vulnerability has been detected in fuzui
StudentInfo up to ...)
- TODO: check
+ NOT-FOR-US: fuzui StudentInfo
CVE-2026-100896 (A weakness has been identified in TOTOLINK N150RT
3.4.0-B20201030. The ...)
NOT-FOR-US: TOTOLINK
CVE-2026-100895 (A security flaw has been discovered in Trusted Domain Project
OpenARC ...)
TODO: check
CVE-2026-100894 (A vulnerability was identified in mathurvishal
CloudClassroom-PHP-Proj ...)
- TODO: check
+ NOT-FOR-US: mathurvishal CloudClassroom-PHP-Project
CVE-2026-100893 (A vulnerability was determined in Privoce VoceChat Server up
to 0.5.36 ...)
- TODO: check
+ NOT-FOR-US: Privoce VoceChat Server
CVE-2026-100892 (A vulnerability was found in aligungr UERANSIM up to 3.3.0.
This affec ...)
- TODO: check
+ NOT-FOR-US: aligungr UERANSIM
CVE-2026-100891 (A vulnerability has been found in Trusted Domain Project
OpenDMARC up ...)
TODO: check
CVE-2026-100890 (A flaw has been found in Trusted Domain Project OpenDMARC up
to 1.4.2. ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a9b96339bfa66d0102a9a17aa878c2c2624686df
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a9b96339bfa66d0102a9a17aa878c2c2624686df
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
