Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
21ed79a2 by security tracker role at 2026-09-30T19:14:51+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,4 +1,880 @@
-CVE-2026-19445
+CVE-2026-97347 (The Post Views Stats Counter plugin for WordPress is
vulnerable to Sto ...)
+ TODO: check
+CVE-2026-97302 (Unauthenticated Sensitive Data Exposure in MPG <= 4.2.3
versions.)
+ TODO: check
+CVE-2026-97301 (Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <=
2.7.8 v ...)
+ TODO: check
+CVE-2026-97299 (Unauthenticated Cross Site Request Forgery (CSRF) in Razorpay
Payment ...)
+ TODO: check
+CVE-2026-97298 (Contributor Cross Site Scripting (XSS) in King Addons for
Elementor <= ...)
+ TODO: check
+CVE-2026-97293 (Contributor SQL Injection in Media LIbrary Assistant <= 3.41
versions.)
+ TODO: check
+CVE-2026-97292 (Author Cross Site Scripting (XSS) in YITH WooCommerce Tab
Manager <= 2 ...)
+ TODO: check
+CVE-2026-97291 (Contributor PHP Object Injection in Schema & Structured Data
for WP & ...)
+ TODO: check
+CVE-2026-97290 (Unauthenticated Cross Site Scripting (XSS) in Photonic Gallery
& Light ...)
+ TODO: check
+CVE-2026-97289 (Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey
Master < ...)
+ TODO: check
+CVE-2026-97288 (Contributor Cross Site Scripting (XSS) in OAuth Server <=
4.5.1 versio ...)
+ TODO: check
+CVE-2026-97287 (Contributor SQL Injection in Event Tickets <= 5.29.5 versions.)
+ TODO: check
+CVE-2026-97286 (Contributor Cross Site Scripting (XSS) in Strong Testimonials
<= 3.3.1 ...)
+ TODO: check
+CVE-2026-97285 (Contributor Broken Access Control in The Events Calendar <=
6.17.5 ver ...)
+ TODO: check
+CVE-2026-97282 (Unauthenticated Insecure Direct Object References (IDOR) in
Review Sch ...)
+ TODO: check
+CVE-2026-97279 (Contributor Cross Site Scripting (XSS) in Polylang <= 3.8.9
versions.)
+ TODO: check
+CVE-2026-97274 (Unauthenticated Bypass Vulnerability in OAuth Single Sign On
\u2013 SS ...)
+ TODO: check
+CVE-2026-97272 (Unauthenticated Cross Site Scripting (XSS) in Premmerce
Permalink Mana ...)
+ TODO: check
+CVE-2026-97271 (Unauthenticated Cross Site Scripting (XSS) in WPFunnels <=
3.13.1 vers ...)
+ TODO: check
+CVE-2026-97270 (Subscriber Cross Site Scripting (XSS) in CMB2 <= 2.13.0
versions.)
+ TODO: check
+CVE-2026-97267 (Subscriber Broken Access Control in Prevent files / folders
access <= ...)
+ TODO: check
+CVE-2026-97266 (Contributor Cross Site Scripting (XSS) in
Virtue/Ascend/Pinnacle Toolk ...)
+ TODO: check
+CVE-2026-97265 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-97262 (Contributor Cross Site Scripting (XSS) in Visual Composer
Website Buil ...)
+ TODO: check
+CVE-2026-97261 (Unauthenticated Sensitive Data Exposure in Notivo <= 1.4.2
versions.)
+ TODO: check
+CVE-2026-97259 (Authorization Bypass Through User-Controlled Key vulnerability
in WP H ...)
+ TODO: check
+CVE-2026-97256 (Editor PHP Object Injection in Page Builder by SiteOrigin <=
2.36.0 ve ...)
+ TODO: check
+CVE-2026-97253 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-97250 (Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <=
1.13.21 v ...)
+ TODO: check
+CVE-2026-97249 (Unauthenticated Bypass Vulnerability in Paid Member
Subscriptions <= 3 ...)
+ TODO: check
+CVE-2026-97248 (Unauthenticated PHP Object Injection in Booking Activities <=
1.18.7.1 ...)
+ TODO: check
+CVE-2026-97247 (Unauthenticated Broken Access Control in Blocksy Companion <=
2.1.55 v ...)
+ TODO: check
+CVE-2026-97246 (Subscriber PHP Object Injection in ShortPixel Image Optimizer
<= 6.5.5 ...)
+ TODO: check
+CVE-2026-97245 (Shop Worker Privilege Escalation in SureCart <= 4.7.2
versions.)
+ TODO: check
+CVE-2026-97244 (Contributor Path Traversal in Creator LMS <= 1.2.19 versions.)
+ TODO: check
+CVE-2026-97243 (Subscriber Broken Access Control in AllAble Connector <=
0.13.4 versio ...)
+ TODO: check
+CVE-2026-97242 (Author Arbitrary File Deletion in WEBO MCP <= 3.0.18 versions.)
+ TODO: check
+CVE-2026-97241 (Unauthenticated Sensitive Data Exposure in BackupEase <= 2.2.2
version ...)
+ TODO: check
+CVE-2026-97240 (Unauthenticated Sensitive Data Exposure in StifLi Backup Tools
<= 2.2. ...)
+ TODO: check
+CVE-2026-97239 (Subscriber Broken Access Control in MCP Content Manager Lite
<= 1.1.0 ...)
+ TODO: check
+CVE-2026-97238 (Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3
version ...)
+ TODO: check
+CVE-2026-97237 (Unauthenticated Cross Site Scripting (XSS) in JetEngine <=
3.8.14.3 ve ...)
+ TODO: check
+CVE-2026-97236 (Subscriber Cross Site Scripting (XSS) in ThemeREX Addons <
2.45.0 vers ...)
+ TODO: check
+CVE-2026-97235 (Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons
< 2.45.0 ...)
+ TODO: check
+CVE-2026-97197 (Unauthenticated Broken Access Control in WordPress Backup &
Migration ...)
+ TODO: check
+CVE-2026-97150 (When converting baserCMS4-style addons to baserCMS5-style
ones, BcAddo ...)
+ TODO: check
+CVE-2026-97079 (Subscriber Insecure Direct Object References (IDOR) in Webba
Booking < ...)
+ TODO: check
+CVE-2026-97078 (Unauthenticated Insecure Direct Object References (IDOR) in
Client Inv ...)
+ TODO: check
+CVE-2026-97077 (Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <=
2.8.18 ve ...)
+ TODO: check
+CVE-2026-97074 (Subscriber Insecure Direct Object References (IDOR) in
Newsletters, Em ...)
+ TODO: check
+CVE-2026-97067 (Contributor Cross Site Scripting (XSS) in EWWW Image Optimizer
<= 8.7. ...)
+ TODO: check
+CVE-2026-97066 (Unauthenticated Insecure Direct Object References (IDOR) in
GiveWP <= ...)
+ TODO: check
+CVE-2026-97065 (Unauthenticated Cross Site Scripting (XSS) in Happyforms <=
1.26.15 ve ...)
+ TODO: check
+CVE-2026-96838 (Unauthenticated Cross Site Request Forgery (CSRF) in Blacklist
Manager ...)
+ TODO: check
+CVE-2026-96837 (Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0
versions ...)
+ TODO: check
+CVE-2026-96836 (Unauthenticated Cross Site Scripting (XSS) in Parsi Date <=
6.3 versio ...)
+ TODO: check
+CVE-2026-96835 (Contributor Cross Site Scripting (XSS) in King Addons for
Elementor <= ...)
+ TODO: check
+CVE-2026-96834 (Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9
versions.)
+ TODO: check
+CVE-2026-96833 (Editor PHP Object Injection in Ultimate Addons for Contact
Form 7 <= 3 ...)
+ TODO: check
+CVE-2026-96832 (Shop manager PHP Object Injection in Content Egg <= 6.3.1
versions.)
+ TODO: check
+CVE-2026-96831 (Contributor PHP Object Injection in Themify Builder <= 7.8.1
versions.)
+ TODO: check
+CVE-2026-96830 (Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9
version ...)
+ TODO: check
+CVE-2026-96829 (Contributor Cross Site Scripting (XSS) in The Plus Addons for
Elemento ...)
+ TODO: check
+CVE-2026-96828 (Administrator SQL Injection in Category Discount Woocommerce
<= 5.18 v ...)
+ TODO: check
+CVE-2026-96827 (Administrator SQL Injection in Admin Notices Manager <= 1.6.0
versions ...)
+ TODO: check
+CVE-2026-96825 (Subscriber Bypass Vulnerability in All In One WP Security &
Firewall < ...)
+ TODO: check
+CVE-2026-96824 (Editor Arbitrary File Deletion in Template Kit \u2013 Import
<= 1.0.16 ...)
+ TODO: check
+CVE-2026-96823 (Unauthenticated Arbitrary Content Deletion in Customer Reviews
for Woo ...)
+ TODO: check
+CVE-2026-96822 (Unauthenticated SQL Injection in Books Gallery <= 4.8.3
versions.)
+ TODO: check
+CVE-2026-96821 (Subscriber Privilege Escalation in FluentBoards <= 2.0.12
versions.)
+ TODO: check
+CVE-2026-96820 (Subscriber Cross Site Scripting (XSS) in Awesome Support <=
6.3.9 vers ...)
+ TODO: check
+CVE-2026-96819 (Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4
versions.)
+ TODO: check
+CVE-2026-96818 (Unauthenticated Broken Access Control in WP Express Checkout
(Accept P ...)
+ TODO: check
+CVE-2026-96817 (Subscriber Broken Access Control in MakeCommerce for
WooCommerce <= 4. ...)
+ TODO: check
+CVE-2026-96816 (Unauthenticated Cross Site Scripting (XSS) in Trusted Shops
Easy Integ ...)
+ TODO: check
+CVE-2026-96815 (Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.)
+ TODO: check
+CVE-2026-96814 (Unauthenticated Cross Site Scripting (XSS) in WooCommerce
Product Tabl ...)
+ TODO: check
+CVE-2026-96450 (Contributor Cross Site Scripting (XSS) in pixfort Core < 4.3.3
version ...)
+ TODO: check
+CVE-2026-96352 (Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce
Ajax Se ...)
+ TODO: check
+CVE-2026-96351 (Unauthenticated Cross Site Scripting (XSS) in Classified
Listing <= 6. ...)
+ TODO: check
+CVE-2026-96350 (Subscriber Privilege Escalation in Estatik <= 4.3.5 versions.)
+ TODO: check
+CVE-2026-96349 (Unauthenticated Remote Code Execution (RCE) in SiteSkite <=
2.1.8 vers ...)
+ TODO: check
+CVE-2026-96348 (Unauthenticated Broken Access Control in Bookly <= 28.2
versions.)
+ TODO: check
+CVE-2026-96347 (Subscriber Insecure Direct Object References (IDOR) in Bookly
<= 28.2 ...)
+ TODO: check
+CVE-2026-96346 (Author SQL Injection in WP ERP <= 1.17.9 versions.)
+ TODO: check
+CVE-2026-96345 (Administrator SQL Injection in Estatik <= 4.3.5 versions.)
+ TODO: check
+CVE-2026-96344 (Custom role PHP Object Injection in eCommerce Product Catalog
<= 3.6.0 ...)
+ TODO: check
+CVE-2026-96343 (Custom role PHP Object Injection in WP ERP <= 1.17.9 versions.)
+ TODO: check
+CVE-2026-96342 (Missing Authorization vulnerability in Amauri.IO WPMobile.App
wpappnin ...)
+ TODO: check
+CVE-2026-96338 (Subscriber Cross Site Scripting (XSS) in Profile Builder <=
4.0.2 vers ...)
+ TODO: check
+CVE-2026-95616 (An integer overflow in WSS4J's DER bounds check lets an
oversized allo ...)
+ TODO: check
+CVE-2026-95587 (Unauthenticated Broken Access Control in Hostinger Migrator <=
1.0 ver ...)
+ TODO: check
+CVE-2026-95531 (Subscriber PHP Object Injection in Conversational Forms for
ChatBot <= ...)
+ TODO: check
+CVE-2026-94683 (Contributor PHP Object Injection in DesignSetGo <= 2.8.0
versions.)
+ TODO: check
+CVE-2026-94681 (Unauthenticated Denial of Service Attack in WP Store Locator <
3.0.0 v ...)
+ TODO: check
+CVE-2026-94678 (Contributor PHP Object Injection in Go Live Update Urls <=
7.0.8 versi ...)
+ TODO: check
+CVE-2026-94677 (Shop manager PHP Object Injection in Kadence WooCommerce Email
Designe ...)
+ TODO: check
+CVE-2026-94674 (Contributor Cross Site Scripting (XSS) in Pixel Manager for
WooCommerc ...)
+ TODO: check
+CVE-2026-94673 (Unauthenticated Insecure Direct Object References (IDOR) in
Simply Sch ...)
+ TODO: check
+CVE-2026-94672 (Contributor Insecure Direct Object References (IDOR) in Safe
SVG <= 2. ...)
+ TODO: check
+CVE-2026-94545 (Satori is a library to convert HTML and CSS to SVG. Starting
in versio ...)
+ TODO: check
+CVE-2026-94499 (Subscriber Broken Access Control in FormGent <= 1.12.2
versions.)
+ TODO: check
+CVE-2026-94389 (Unauthenticated Remote Code Execution (RCE) in AcyMailing SMTP
Newslet ...)
+ TODO: check
+CVE-2026-94178 (Subscriber Privilege Escalation in Import and export users and
custome ...)
+ TODO: check
+CVE-2026-94177 (Unauthenticated SQL Injection in GamiPress <= 8.0.2 versions.)
+ TODO: check
+CVE-2026-94173 (Contributor Insecure Direct Object References (IDOR) in
Business Direc ...)
+ TODO: check
+CVE-2026-94171 (Unauthenticated Cross Site Scripting (XSS) in CURCY <= 2.2.16
versions ...)
+ TODO: check
+CVE-2026-94123 (Unauthenticated Arbitrary File Download in NextGEN Gallery <=
4.5.0 ve ...)
+ TODO: check
+CVE-2026-94122 (Editor PHP Object Injection in Responsive Slider Gallery <=
1.5.5 ver ...)
+ TODO: check
+CVE-2026-94121 (Contributor PHP Object Injection in 10Web Booster \u2013
Website speed ...)
+ TODO: check
+CVE-2026-94120 (Unauthenticated Broken Access Control in GravityExport Lite
for Gravit ...)
+ TODO: check
+CVE-2026-94115 (Contributor SQL Injection in Easy Pricing Tables <= 4.1.2
versions.)
+ TODO: check
+CVE-2026-94082 (Author SQL Injection in Quiz Cat <= 3.1.1 versions.)
+ TODO: check
+CVE-2026-94081 (Unauthenticated Cross Site Scripting (XSS) in WordPress
Persistent Log ...)
+ TODO: check
+CVE-2026-94078 (Unauthenticated Cross Site Scripting (XSS) in Site Reviews <=
8.3.1 ve ...)
+ TODO: check
+CVE-2026-94077 (Contributor Cross Site Scripting (XSS) in Safe SVG <= 2.5.0
versions.)
+ TODO: check
+CVE-2026-94076 (Contributor PHP Object Injection in SEO Plugin by Squirrly SEO
<= 14.2 ...)
+ TODO: check
+CVE-2026-94074 (Unauthenticated Broken Access Control in Simply Schedule
Appointments ...)
+ TODO: check
+CVE-2026-93908 (The Real Estate Manager \u2013 Property Listing and Agent
Management p ...)
+ TODO: check
+CVE-2026-93903 (LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles
internal r ...)
+ TODO: check
+CVE-2026-93771 (Shop manager PHP Object Injection in Cost of Goods for
WooCommerce <= ...)
+ TODO: check
+CVE-2026-93770 (Unauthenticated Cross Site Scripting (XSS) in WP Statistics <=
14.16.1 ...)
+ TODO: check
+CVE-2026-93651 (Author PHP Object Injection in Minimum and Maximum Quantity
for WooCom ...)
+ TODO: check
+CVE-2026-93624 (Shop manager PHP Object Injection in Music Player for
WooCommerce <= 1 ...)
+ TODO: check
+CVE-2026-93621 (Unauthenticated SQL Injection in WP Data Access <= 5.5.84
versions.)
+ TODO: check
+CVE-2026-93547 (A missing authorization check in the Vaadin Spreadsheet
component allo ...)
+ TODO: check
+CVE-2026-93514 (Unauthenticated Cross Site Scripting (XSS) in Notification for
Telegra ...)
+ TODO: check
+CVE-2026-93512 (Unauthenticated Cross Site Scripting (XSS) in JW Player for
WordPress ...)
+ TODO: check
+CVE-2026-93464 (Stored Cross-Site Scripting via custom content descriptions
vulnerabil ...)
+ TODO: check
+CVE-2026-93463 (Cross-Site Scripting via Script Validation Bypass exists in
baserCMS. ...)
+ TODO: check
+CVE-2026-93462 (Missing authentication for critical function vulnerability
exists in b ...)
+ TODO: check
+CVE-2026-93460 (Stored Cross-site scripting via appended strings in email form
fields ...)
+ TODO: check
+CVE-2026-92899 (Apache WSS4J remembers the Nonce of each UsernameToken it
accepts, so ...)
+ TODO: check
+CVE-2026-92873 (Pgpool-II contains an incorrect implementation of an
authentication al ...)
+ TODO: check
+CVE-2026-92872 (Pgpool-II inserts sensitive information into log file, which
may allow ...)
+ TODO: check
+CVE-2026-92871 (A NULL pointer dereference vulnerability exists in Pgpool-II,
which ma ...)
+ TODO: check
+CVE-2026-92870 (A stack-based buffer overflow vulnerability exists in
Pgpool-II, which ...)
+ TODO: check
+CVE-2026-92869 (An out-of-bounds write vulnerability exists in Pgpool-II,
which may al ...)
+ TODO: check
+CVE-2026-92868 (An improper certificate validation vulnerability exists in
Pgpool-II, ...)
+ TODO: check
+CVE-2026-92867 (An out-of-bounds write vulnerability exists in Pgpool-II ,
which may a ...)
+ TODO: check
+CVE-2026-92712 (The ReactPress \u2013 Create React App for WordPress plugin
for WordPr ...)
+ TODO: check
+CVE-2026-92121 (In the WSS4J streaming (StAX) code, a signature reference
using the WS ...)
+ TODO: check
+CVE-2026-91860 (A prototype pollution vulnerability exists in the deep merge
helpers o ...)
+ TODO: check
+CVE-2026-89238 (WSS4J EncryptedHeader child confusion could promote an
attacker-contro ...)
+ TODO: check
+CVE-2026-88920 (An authentication bypass in the DOM security processor in
Apache WSS4J ...)
+ TODO: check
+CVE-2026-88037 (The Bold Page Builder plugin for WordPress is vulnerable to
Stored Cro ...)
+ TODO: check
+CVE-2026-87830 (In the StAX streaming WS-SecurityPolicy validator, certain
relative or ...)
+ TODO: check
+CVE-2026-87004 (Tugtainer is a self-hosted app for automating updates of
Docker contai ...)
+ TODO: check
+CVE-2026-86778 (Observable response discrepancy vulnerability in Maksisoft
Technology, ...)
+ TODO: check
+CVE-2026-85532 (Apache WSS4J accepted attacker-controlled derived-key lengths
and offs ...)
+ TODO: check
+CVE-2026-82307 (Improper neutralization of special elements used in an SQL
command ('S ...)
+ TODO: check
+CVE-2026-79625 (Affected products do not properly synchronize access to their
monitori ...)
+ TODO: check
+CVE-2026-76992 (The CODESYS Gateway Client allocates memory based on a size
field in a ...)
+ TODO: check
+CVE-2026-76570 (Joomla Extension - joomcode.com - Unauthenticated SQL
injection in rea ...)
+ TODO: check
+CVE-2026-76504 (A vulnerability in the API session-based authentication
management of ...)
+ TODO: check
+CVE-2026-75969 (Missing authentication for critical function vulnerability for
all PTZ ...)
+ TODO: check
+CVE-2026-75098 (The Product Designer App plugin for WordPress is vulnerable to
Directo ...)
+ TODO: check
+CVE-2026-74865 (sogo_yhn configures SOGo with a parameter
"SOGoTrustProxyAuthenticatio ...)
+ TODO: check
+CVE-2026-74864 (sogo_yhn configures SOGo with a parameter that forces the
request with ...)
+ TODO: check
+CVE-2026-6806 (The Motors \u2013 Car Dealership & Classified Listings Plugin
plugin f ...)
+ TODO: check
+CVE-2026-6173 (The Bold Page Builder plugin for WordPress is vulnerable to
Stored Cro ...)
+ TODO: check
+CVE-2026-6172 (The Bold Page Builder plugin for WordPress is vulnerable to
Stored Cro ...)
+ TODO: check
+CVE-2026-6171 (The Bold Page Builder plugin for WordPress is vulnerable to
Stored Cro ...)
+ TODO: check
+CVE-2026-6170 (The Bold Page Builder plugin for WordPress is vulnerable to
Stored Cro ...)
+ TODO: check
+CVE-2026-62308 (Tugtainer is a self-hosted app for automating updates of
Docker contai ...)
+ TODO: check
+CVE-2026-62146 (A trust-boundary flaw in CRI-O's sandbox state persistence
allows atta ...)
+ TODO: check
+CVE-2026-62097 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2026-62085 (Administrator SQL Injection in WP Activity Log <= 5.6.6
versions.)
+ TODO: check
+CVE-2026-62084 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-62083 (Subscriber Other Vulnerability Type in Creator LMS <= 1.2.19
versions.)
+ TODO: check
+CVE-2026-62081 (Contributor Insecure Direct Object References (IDOR) in
Flexible PDF C ...)
+ TODO: check
+CVE-2026-62080 (Contributor Cross Site Scripting (XSS) in Happy Addons for
Elementor < ...)
+ TODO: check
+CVE-2026-62079 (Contributor Cross Site Scripting (XSS) in Qi Addons For
Elementor <= 1 ...)
+ TODO: check
+CVE-2026-62078 (Contributor Cross Site Scripting (XSS) in Premium Addons for
Elementor ...)
+ TODO: check
+CVE-2026-55494 (Tugtainer is a self-hosted app for automating updates of
Docker contai ...)
+ TODO: check
+CVE-2026-55224 (MineAdmin is a ready-to-use backend management system suitable
for qui ...)
+ TODO: check
+CVE-2026-55181 (Tugtainer is a self-hosted app for automating updates of
Docker contai ...)
+ TODO: check
+CVE-2026-55177 (CloudTAK is a browser-based Common Operating Picture and
situational a ...)
+ TODO: check
+CVE-2026-55176 (Soft Machine is a Virtual Machine\u2013based agentic
development envir ...)
+ TODO: check
+CVE-2026-55174 (UltrafastSecp256k1 is a high-performance, multi-backend
secp256k1 engi ...)
+ TODO: check
+CVE-2026-55107 (Kobako is a Ruby gem that embeds a Wasm-isolated mruby
interpreter ins ...)
+ TODO: check
+CVE-2026-55094 (Taskcluster is the task execution framework that supports
Mozilla's co ...)
+ TODO: check
+CVE-2026-53605 (Reachy Mini ISO for Wireless contains the necessary files to
build a c ...)
+ TODO: check
+CVE-2026-47604 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47603 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47602 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47601 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47600 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47599 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the op ...)
+ TODO: check
+CVE-2026-47598 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the op ...)
+ TODO: check
+CVE-2026-47597 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47596 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47595 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47594 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47593 (NVIDIA GPU Display Driver for Windows contains a vulnerability
in the ...)
+ TODO: check
+CVE-2026-47592 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47591 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47590 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47589 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47588 (NVIDIA GPU Display Driver for Linux contains a vulnerability
where an ...)
+ TODO: check
+CVE-2026-47587 (NVIDIA GPU Display Driver for Linux contains a vulnerability
where an ...)
+ TODO: check
+CVE-2026-47586 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47585 (NVIDIA GPU Display Driver for Windows contains a vulnerability
in the ...)
+ TODO: check
+CVE-2026-47584 (NVIDIA GPU Display Driver for Windows contains a vulnerability
in the ...)
+ TODO: check
+CVE-2026-47583 (NVIDIA GPU Display Driver for Windows contains a vulnerability
in the ...)
+ TODO: check
+CVE-2026-47582 (NVIDIA GPU Display Driver for Windows contains a vulnerability
in the ...)
+ TODO: check
+CVE-2026-47581 (NVIDIA GPU Display Driver for Windows contains a vulnerability
in the ...)
+ TODO: check
+CVE-2026-47580 (NVIDIA GPU Display Driver for Windows contains a vulnerability
in the ...)
+ TODO: check
+CVE-2026-47579 (The NVIDIA GPU Display Driver for Windows contains a
vulnerability in ...)
+ TODO: check
+CVE-2026-47578 (NVIDIA GPU Display Driver for Windows contains a vulnerability
in the ...)
+ TODO: check
+CVE-2026-47577 (NVIDIA GPU Display Driver for Windows contains a vulnerability
in the ...)
+ TODO: check
+CVE-2026-47576 (NVIDIA GPU Display Driver for Windows contains a vulnerability
in the ...)
+ TODO: check
+CVE-2026-47575 (NVIDIA GPU Display Driver for Windows contains a vulnerability
in the ...)
+ TODO: check
+CVE-2026-47574 (NVIDIA vGPU Virtual GPU Manager for Linux contains a
vulnerability whe ...)
+ TODO: check
+CVE-2026-47573 (NVIDIA NVAPI for Windows contains a vulnerability where an
attacker co ...)
+ TODO: check
+CVE-2026-47572 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47571 (NVIDIA GPU Display Driver for Windows contains a vulnerability
in kern ...)
+ TODO: check
+CVE-2026-47570 (NVIDIA GPU Display Driver for Windows contains a vulnerability
in the ...)
+ TODO: check
+CVE-2026-47569 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47568 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47567 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47566 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47565 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47563 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47562 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47561 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47560 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47559 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47558 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47557 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47556 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47555 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47554 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47553 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47552 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47551 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47550 (NVIDIA GPU Display Driver for Windows contains a vulnerability
in the ...)
+ TODO: check
+CVE-2026-47549 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47548 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47547 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47546 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47545 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47544 (NVIDIA vGPU Virtual GPU Manager for Linux contains a
vulnerability in ...)
+ TODO: check
+CVE-2026-47543 (VIDIA GPU Display Driver for Windows and Linux contains a
vulnerabilit ...)
+ TODO: check
+CVE-2026-47542 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47541 (NVIDIA vGPU Virtual GPU Manager for Linux contains a
vulnerability in ...)
+ TODO: check
+CVE-2026-47540 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47539 (NVIDIA vGPU Virtual GPU Manager for Linux contains a
vulnerability in ...)
+ TODO: check
+CVE-2026-47538 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47537 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47536 (NVIDIA vGPU Virtual GPU Manager for Linux contains a
vulnerability in ...)
+ TODO: check
+CVE-2026-47535 (NVIDIA vGPU Virtual GPU Manager for Linux contains a
vulnerability in ...)
+ TODO: check
+CVE-2026-47534 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47533 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47532 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47531 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47530 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47529 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47528 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47527 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47526 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47525 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47524 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47523 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47522 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47521 (NVIDIA vGPU Virtual GPU Manager for Linux contains a
vulnerability in ...)
+ TODO: check
+CVE-2026-47520 (NVIDIA vGPU Virtual GPU Manager for Linux contains a
vulnerability in ...)
+ TODO: check
+CVE-2026-47519 (NVIDIA vGPU Virtual GPU Manager for Linux contains a
vulnerability in ...)
+ TODO: check
+CVE-2026-47518 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47517 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47516 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47515 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47514 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47513 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47512 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47511 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47510 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47509 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47508 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47507 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47506 (NVIDIA GPU Display Driver for Windows contains a vulnerability
in the ...)
+ TODO: check
+CVE-2026-47505 (NVIDIA GPU Display Driver for Windows contains a vulnerability
in the ...)
+ TODO: check
+CVE-2026-47504 (NVIDIA Linux GPU Display Driver contains a vulnerability in
the NGX up ...)
+ TODO: check
+CVE-2026-47503 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the Vi ...)
+ TODO: check
+CVE-2026-47502 (NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains
a vulne ...)
+ TODO: check
+CVE-2026-47501 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47500 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47499 (NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains
a vulne ...)
+ TODO: check
+CVE-2026-47498 (NVIDIA vGPU Manager contains a vulnerability in the GPU System
Process ...)
+ TODO: check
+CVE-2026-47497 (NVIDIA Virtual GPU Manager contains a vulnerability in the GPU
System ...)
+ TODO: check
+CVE-2026-47496 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the Vi ...)
+ TODO: check
+CVE-2026-47495 (NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains
a vulne ...)
+ TODO: check
+CVE-2026-47494 (NVIDIA GPU Display Driver for Linux contains a vulnerability
where a u ...)
+ TODO: check
+CVE-2026-47493 (NVIDIA vGPU software for Windows and Linux contains a
vulnerability in ...)
+ TODO: check
+CVE-2026-47492 (NVIDIA GPU Display Driver for Windows and Linux contains a
vulnerabili ...)
+ TODO: check
+CVE-2026-47491 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47489 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
+ TODO: check
+CVE-2026-47097 (AJA HELO Plus firmware before 2.1.7 contains an information
disclosure ...)
+ TODO: check
+CVE-2026-46711 (Soft Machine is a Virtual Machine\u2013based agentic
development envir ...)
+ TODO: check
+CVE-2026-27371 (Unauthenticated Cross Site Scripting (XSS) in WPFunnels <=
3.13.1 vers ...)
+ TODO: check
+CVE-2026-27085 (Shop manager Content Injection in Astra WordPress Theme <=
4.13.12 ver ...)
+ TODO: check
+CVE-2026-19553 (ssl.SSLContext.wrap_bio() didn't require the server_hostname
argument ...)
+ TODO: check
+CVE-2026-18783 (Missing authentication for critical function vulnerability in
Trex Dig ...)
+ TODO: check
+CVE-2026-18782 (Improper neutralization of special elements used in an SQL
command ('S ...)
+ TODO: check
+CVE-2026-16596 (The WP Directory Kit plugin for WordPress is vulnerable to
generic SQL ...)
+ TODO: check
+CVE-2026-14876 (The Smart Slider 3 plugin for WordPress is vulnerable to
Stored Cross- ...)
+ TODO: check
+CVE-2026-13720 (An Editor can set file-provisioning metadata (the
grafana.app/managedB ...)
+ TODO: check
+CVE-2026-13719 (An authenticated user can list alert rules stored in folders
they are ...)
+ TODO: check
+CVE-2026-11895 (The HT Mega Addons for Elementor \u2013 Elementor Widgets &
Template B ...)
+ TODO: check
+CVE-2026-10764 (Information disclosure in BVMS 4.5 up to 12.3 including allows
man-in- ...)
+ TODO: check
+CVE-2026-10739 (Cato Networks SDP Client for Windows before 6.12.6 allows a
local user ...)
+ TODO: check
+CVE-2026-10726 (Cato Windows SDP Client before version 6.12.6 contains an
arbitrary fi ...)
+ TODO: check
+CVE-2026-103500 (An attacker could cause a heap buffer overflow by getting a
user to op ...)
+ TODO: check
+CVE-2026-103476 (yii2-starter-kit through 4.2.0 fails to validate article
publication s ...)
+ TODO: check
+CVE-2026-103475 (yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii
modules t ...)
+ TODO: check
+CVE-2026-103474 (yii2-starter-kit through 4.2.0 fails to validate file types
in the bac ...)
+ TODO: check
+CVE-2026-103473 (Deno versions 2.7.0 through 2.9.7 on Windows contain a
command injecti ...)
+ TODO: check
+CVE-2026-103472 (restbed through 5.0.0 accepts WebSocket frames with declared
payload l ...)
+ TODO: check
+CVE-2026-103471 (restbed through 5.0.0 buffers HTTP request headers without
enforcing a ...)
+ TODO: check
+CVE-2026-103470 (In Internet2 Grouper before 7.5.1 (in some configurations), a
user who ...)
+ TODO: check
+CVE-2026-103446 (Authorization bypass through User-Controlled key
vulnerability in The ...)
+ TODO: check
+CVE-2026-103445 (Improper neutralization of Script-Related HTML tags in a web
page (bas ...)
+ TODO: check
+CVE-2026-103444 (Improper neutralization of Script-Related HTML tags in a web
page (bas ...)
+ TODO: check
+CVE-2026-103443 (Improper neutralization of Script-Related HTML tags in a web
page (bas ...)
+ TODO: check
+CVE-2026-103442 (External control of system or configuration setting
vulnerability in T ...)
+ TODO: check
+CVE-2026-103441 (Deserialization of untrusted data vulnerability in The
Wikimedia Found ...)
+ TODO: check
+CVE-2026-103440 (Exposure of sensitive information through data queries
vulnerability i ...)
+ TODO: check
+CVE-2026-103439 (Improper neutralization of Script-Related HTML tags in a web
page (bas ...)
+ TODO: check
+CVE-2026-103438 (Improper neutralization of Script-Related HTML tags in a web
page (bas ...)
+ TODO: check
+CVE-2026-103437 (Improper neutralization of Script-Related HTML tags in a web
page (bas ...)
+ TODO: check
+CVE-2026-103436 (apcupsd through 3.14.14 discloses uninitialized stack memory
in getups ...)
+ TODO: check
+CVE-2026-103432 (apcupsd through 3.14.14 has an sscanf stack-based buffer
overflow in g ...)
+ TODO: check
+CVE-2026-103399 (A flaw was found in SoupServer (libsoup). When an HTTP/1.x
client send ...)
+ TODO: check
+CVE-2026-103398 (OpenSave through 2.4.0 fails to properly validate save paths
supplied ...)
+ TODO: check
+CVE-2026-103397 (OpenSave before 2.4.0-beta.1 fails to validate sender
identity in WAN ...)
+ TODO: check
+CVE-2026-103396 (bbs-go through 4.4.6 contains a permission bypass
vulnerability in the ...)
+ TODO: check
+CVE-2026-103395 (LightLLM through 1.2.0 visual_only deployments expose an
unauthenticat ...)
+ TODO: check
+CVE-2026-103389 (MISP contains a stored cross-site scripting (XSS)
vulnerability in the ...)
+ TODO: check
+CVE-2026-103388 (MISP renders the source field of a Galaxy Cluster as a
clickable hyper ...)
+ TODO: check
+CVE-2026-103321 (MISP contains a stored cross-site script (XSS) vulnerability
in the ev ...)
+ TODO: check
+CVE-2026-103270 (LightLLM through 1.2.0 mounts reinforcement learning control
routes on ...)
+ TODO: check
+CVE-2026-103243 (LightLLM through 1.2.0 fails to validate image_url and
audio_url param ...)
+ TODO: check
+CVE-2026-103242 (A heap-based buffer overflow flaw was found in rpm.
RPMTAG_FILESIGNATU ...)
+ TODO: check
+CVE-2026-103241 (A flaw has been found in vllm-project vLLM up to 0.26.0. This
vulnerab ...)
+ TODO: check
+CVE-2026-103239 (MISP contains a privilege escalation vulnerability in the tag
collecti ...)
+ TODO: check
+CVE-2026-103237 (MISP contains an improper input validation vulnerability in
its ORM sa ...)
+ TODO: check
+CVE-2026-103235 (MISP contains a mass assignment vulnerability in the event
delegation ...)
+ TODO: check
+CVE-2026-103233 (A security vulnerability has been detected in AdithyaYelloju
Restauran ...)
+ TODO: check
+CVE-2026-103232 (A weakness has been identified in AdithyaYelloju
Restaurant-Management ...)
+ TODO: check
+CVE-2026-103231 (A vulnerability was identified in AdithyaYelloju
Restaurant-Management ...)
+ TODO: check
+CVE-2026-103230 (A vulnerability was determined in AdithyaYelloju
Restaurant-Management ...)
+ TODO: check
+CVE-2026-103229 (A vulnerability was found in AdithyaYelloju
Restaurant-Management-Syst ...)
+ TODO: check
+CVE-2026-103227 (A weakness has been identified in GPAC up to 26.07.0.
Affected by this ...)
+ TODO: check
+CVE-2026-103226 (A vulnerability was identified in Artifex Ghostscript up to
10.09.0. A ...)
+ TODO: check
+CVE-2026-103222 (A vulnerability was determined in Blosc C-Blosc2 up to 3.3.2.
This imp ...)
+ TODO: check
+CVE-2026-103118 (A vulnerability was detected in GraphicsMagick up to 1.3.47.
Affected ...)
+ TODO: check
+CVE-2026-103117 (A security vulnerability has been detected in OS4ED
openSIS-Classic up ...)
+ TODO: check
+CVE-2026-103116 (A weakness has been identified in OS4ED openSIS-Classic up to
9.3. Thi ...)
+ TODO: check
+CVE-2026-103115 (A security flaw has been discovered in OS4ED openSIS-Classic
up to 9.3 ...)
+ TODO: check
+CVE-2026-103114 (A vulnerability was identified in OS4ED openSIS-Classic up to
9.3. The ...)
+ TODO: check
+CVE-2026-103113 (A vulnerability was determined in OS4ED openSIS-Classic up to
9.3. The ...)
+ TODO: check
+CVE-2026-103012 (Claude Code selected an API key stored by Claude Code, for
example fro ...)
+ TODO: check
+CVE-2026-102984 (Astro is a web framework for content-driven websites. Prior
to 11.1.3, ...)
+ TODO: check
+CVE-2026-102983 (Astro is a web framework for content-driven websites. From
5.2.0 until ...)
+ TODO: check
+CVE-2026-102717 (MQTT WebSocket setter ABI mismatch may disclose memory or
cause a cras ...)
+ TODO: check
+CVE-2026-102588 (A flaw was found in Moodle. The XML grade import feature
lacks proper ...)
+ TODO: check
+CVE-2026-102587 (A flaw was found in Moodle. User list filters do not properly
enforce ...)
+ TODO: check
+CVE-2026-102586 (A flaw was found in Moodle. Insufficient sanitization of
username inpu ...)
+ TODO: check
+CVE-2026-102585 (A flaw was found in Moodle. When enrolling a user into a
course while ...)
+ TODO: check
+CVE-2026-102584 (A flaw was found in Moodle. Due to a missing capability
check, a low-p ...)
+ TODO: check
+CVE-2026-102583 (A flaw was found in Moodle. An incorrect capability check in
the artif ...)
+ TODO: check
+CVE-2026-102582 (A flaw was found in Moodle. The manual enrolment management
page did n ...)
+ TODO: check
+CVE-2026-102581 (A flaw was found in Moodle. Insufficient output escaping in
templates ...)
+ TODO: check
+CVE-2026-102580 (A flaw was found in Moodle. An authenticated attacker can
supply an im ...)
+ TODO: check
+CVE-2026-102579 (A flaw was found in Moodle. An incorrect capability check in
the grade ...)
+ TODO: check
+CVE-2026-102578 (A flaw was found in Moodle. An authenticated attacker with
access to t ...)
+ TODO: check
+CVE-2026-102577 (A flaw was found in Moodle. Incorrect handling of IPv4-mapped
IPv6 add ...)
+ TODO: check
+CVE-2026-102511 (Improper Verification of Source of a Communication Channel in
the ADS ...)
+ TODO: check
+CVE-2026-102510 (Integer Overflow, Improper Validation of Array Index,
Uncontrolled Rec ...)
+ TODO: check
+CVE-2026-102509 (Memory Allocation with Excessive Size Value, Allocation of
Resources W ...)
+ TODO: check
+CVE-2026-102508 (Improper Verification of Cryptographic Signature and Improper
Certific ...)
+ TODO: check
+CVE-2026-102490 (All versions of Zammad including the latest alpha enable the
local zam ...)
+ TODO: check
+CVE-2026-102489 (Zammad versions 6.3.0 to 6.5.4 are vulnerable a session
hijack vulnera ...)
+ TODO: check
+CVE-2026-102459 (EasyFlow .NET developed by Digiwin has a Reflected Cross-site
Scriptin ...)
+ TODO: check
+CVE-2026-102458 (EasyFlow .NET developed by Digiwin has a Missing
Authentication vulner ...)
+ TODO: check
+CVE-2026-102457 (EasyFlow .NET developed by Digiwin has an Arbitrary File Read
vulnerab ...)
+ TODO: check
+CVE-2026-102456 (EasyFlow .NET developed by Digiwin has an SQL Injection
vulnerability. ...)
+ TODO: check
+CVE-2026-102455 (EasyFlow .NET developed by Digiwin has a Insecure
Deserialization vuln ...)
+ TODO: check
+CVE-2026-102454 (EasyFlow .NET developed by Digiwin has an Arbitrary File
Upload vulner ...)
+ TODO: check
+CVE-2026-102427 (Joomla Extension - ordasoft.com - Unauthenticated Remote Code
Executio ...)
+ TODO: check
+CVE-2026-102399 (Unauthenticated Cross Site Request Forgery (CSRF) in Photo
Gallery by ...)
+ TODO: check
+CVE-2026-102398 (Unauthenticated Cross Site Scripting (XSS) in Popup by
Supsystic <= 1. ...)
+ TODO: check
+CVE-2026-102397 (Unauthenticated Broken Access Control in Ultimate Maps by
Supsystic <= ...)
+ TODO: check
+CVE-2026-102396 (Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps
by Supsyst ...)
+ TODO: check
+CVE-2026-102395 (Unauthenticated Cross Site Scripting (XSS) in Easy Google
Maps <= 1.14 ...)
+ TODO: check
+CVE-2026-102392 (Shop manager PHP Object Injection in Extra Product Options
For WooComm ...)
+ TODO: check
+CVE-2026-102391 (Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder
<= 3.6.5. ...)
+ TODO: check
+CVE-2026-102386 (Subscriber Cross Site Scripting (XSS) in WP Photo Album Plus
<= 9.3.02 ...)
+ TODO: check
+CVE-2026-102385 (Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <=
3.15.3 ve ...)
+ TODO: check
+CVE-2026-102384 (Author Cross Site Scripting (XSS) in Supreme Modules Lite <=
2.5.63 ve ...)
+ TODO: check
+CVE-2026-102377 (Contributor PHP Object Injection in Photo Gallery by 10Web <=
1.8.46 v ...)
+ TODO: check
+CVE-2026-102376 (Subscriber Cross Site Scripting (XSS) in Branda <= 3.4.32
versions.)
+ TODO: check
+CVE-2026-102375 (Subscriber Broken Access Control in Optimole <= 4.2.14
versions.)
+ TODO: check
+CVE-2026-101295 (Path traversal / arbitrary file write in oc-mirror's operator
catalog ...)
+ TODO: check
+CVE-2026-100513 (Contributor Cross Site Scripting (XSS) in CF7 Views –
Complete E ...)
+ TODO: check
+CVE-2026-100512 (Contributor PHP Object Injection in Nested Pages <= 3.3.2
versions.)
+ TODO: check
+CVE-2026-100510 (Unauthenticated Cross Site Scripting (XSS) in Post and Page
Builder by ...)
+ TODO: check
+CVE-2026-100508 (Unauthenticated Denial of Service Attack in Two Factor <=
0.16.0 versi ...)
+ TODO: check
+CVE-2026-100507 (Unauthenticated Cross Site Scripting (XSS) in If-So Dynamic
Content Pe ...)
+ TODO: check
+CVE-2026-100280 (In JetBrains YouTrack before 2026.2.19197 creating a project
from an u ...)
+ TODO: check
+CVE-2026-100279 (In JetBrains YouTrack before 2026.2.19197 changing an
integration URL ...)
+ TODO: check
+CVE-2026-100278 (In JetBrains YouTrack before 2026.2.19197 users with
restricted permis ...)
+ TODO: check
+CVE-2026-100277 (In JetBrains YouTrack before 2026.2.19197 account takeover
was possibl ...)
+ TODO: check
+CVE-2026-100276 (In JetBrains YouTrack before 2026.2.19197 guest users could
remove a w ...)
+ TODO: check
+CVE-2026-100275 (In JetBrains YouTrack before 2026.2.19197 stored XSS in the
workflow e ...)
+ TODO: check
+CVE-2026-100274 (In JetBrains YouTrack before 2026.2.19197 project Admin could
trigger ...)
+ TODO: check
+CVE-2026-100273 (In JetBrains YouTrack before 2026.2.19197 authorisation
bypass in the ...)
+ TODO: check
+CVE-2026-100272 (In JetBrains YouTrack before 2026.2.19197 missing
authorisation in the ...)
+ TODO: check
+CVE-2026-100271 (In JetBrains YouTrack before 2026.2.19197 missing
authorisation on sev ...)
+ TODO: check
+CVE-2026-100270 (In JetBrains YouTrack before 2026.2.19197 low-level Admin
Read permiss ...)
+ TODO: check
+CVE-2026-100269 (In JetBrains YouTrack before 2026.2.19197 helpdesk project's
Authorize ...)
+ TODO: check
+CVE-2026-100268 (In JetBrains YouTrack before 2026.2.19197 project
administrators could ...)
+ TODO: check
+CVE-2026-100267 (In JetBrains YouTrack before 2026.2.19197 reDoS attack was
possible vi ...)
+ TODO: check
+CVE-2026-100266 (In JetBrains Hub before 2026.2.52366 missing authorisation
allowed aut ...)
+ TODO: check
+CVE-2026-100265 (In JetBrains Rider before 2026.2.1 aI Assistant could
auto-update thir ...)
+ TODO: check
+CVE-2026-100264 (In JetBrains YouTrack before 2026.2.18991 stored SMTP server
credentia ...)
+ TODO: check
+CVE-2026-100263 (In JetBrains YouTrack before 2026.2.18991 stored HTML
injection via th ...)
+ TODO: check
+CVE-2026-100262 (In JetBrains YouTrack before 2026.2.18991 missing
authorisation allowe ...)
+ TODO: check
+CVE-2026-100261 (In JetBrains YouTrack before 2026.2.18991 changing article
visibility ...)
+ TODO: check
+CVE-2026-100260 (In JetBrains YouTrack before 2026.2.18991 mailbox integration
allowed ...)
+ TODO: check
+CVE-2026-100259 (In JetBrains YouTrack before 2026.2.18991 improper access
control on G ...)
+ TODO: check
+CVE-2026-100258 (In JetBrains YouTrack before 2026.2.18991 missing
authorisation allowe ...)
+ TODO: check
+CVE-2026-100257 (In JetBrains YouTrack before 2026.2.18991 sSRF via stored
XHTML inject ...)
+ TODO: check
+CVE-2026-100256 (In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural
Search s ...)
+ TODO: check
+CVE-2026-100255 (In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8
administrat ...)
+ TODO: check
+CVE-2026-100254 (In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8
authenticat ...)
+ TODO: check
+CVE-2026-100253 (In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8
sandbox esc ...)
+ TODO: check
+CVE-2025-14564 (The Viable URL Media Uploader plugin for WordPress is
vulnerable to St ...)
+ TODO: check
+CVE-2026-19445 (A remote, unauthenticated TLS client can make a server crash
or call t ...)
- python3.15 <unfixed>
- python3.14 <unfixed>
- python3.13 <unfixed>
@@ -10,7 +886,7 @@ CVE-2026-19445
NOTE:
https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698
(3.14 branch)
NOTE:
https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c
(3.13 branch)
NOTE: https://github.com/python/cpython/pull/158523 (3.11)
-CVE-2026-80490
+CVE-2026-80490 (Algorithm::AhoCorasick::XS versions through 0.04 for Perl read
the hay ...)
NOT-FOR-US: Algorithm::AhoCorasick::XS Perl module
CVE-2026-74246
NOT-FOR-US: Red Hat Quay
@@ -340,6 +1216,7 @@ CVE-2026-102877 (Fider before 0.38.0 contains a
server-side request forgery vuln
CVE-2026-102876 (SurrealDB before 3.3.0 contains an authorization bypass in
HTTP sessio ...)
NOT-FOR-US: SurrealDB
CVE-2026-102875 (VLC media player before 3.0.24 contains a path traversal
vulnerability ...)
+ {DSA-6515-1}
- vlc 3.0.24-1
NOTE:
https://code.videolan.org/videolan/vlc/-/commit/59934edbd03c6c1147d75d6c91e96633b710ec31
(3.0.24-rc1)
NOTE:
https://code.videolan.org/videolan/vlc/-/commit/8d43e99c2c01d9aab3ecad00e7a102806262b06b
(3.0.24-rc1)
@@ -485,28 +1362,28 @@ CVE-2026-102314 (UI misrepresentation in TabStrip in
Google Chrome prior to 154.
- chromium 154.0.8037.92-1
CVE-2026-102305 (UI misrepresentation in SignIn in Google Chrome on on iOS
prior to 154 ...)
- chromium 154.0.8037.92-1
-CVE-2026-94053
+CVE-2026-94053 (Authentication bypass via LDAP injection in component
sshd-ldap in Apa ...)
- libmina-sshd-java <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/09/29/39
-CVE-2026-94052
+CVE-2026-94052 (A missing check in LdapPasswordAuthenticator in component
sshd-ldap in ...)
- libmina-sshd-java <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/09/29/38
-CVE-2026-94029
+CVE-2026-94029 (Server-side memory exhaustion in Apache MINA SSHD 1.0.0 to
2.19.0 and ...)
- libmina-sshd-java <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/09/29/37
-CVE-2026-94002
+CVE-2026-94002 (Possible memory exhaustion in SFTP clients (DefaultSftpClient)
in comp ...)
- libmina-sshd-java <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/09/29/36
-CVE-2026-93996
+CVE-2026-93996 (Uncontrolled resource consumption in component ssd-scp in
Apache MINA ...)
- libmina-sshd-java <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/09/29/35
-CVE-2026-93995
+CVE-2026-93995 (Improper input validation in sshd-git in Apache MINA SSHD,
versions up ...)
- libmina-sshd-java <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/09/29/34
-CVE-2026-93994
+CVE-2026-93994 (Apache MINA SSHD is a Java library for client-side and
server-side SSH ...)
- libmina-sshd-java <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/09/29/33
-CVE-2026-77185
+CVE-2026-77185 (Authentication bypass in sshd-core in Apache MINA SSHD
versions 2.0.0 ...)
- libmina-sshd-java <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/09/29/32
CVE-2026-98164 (In the Linux kernel, the following vulnerability has been
resolved: K ...)
@@ -989,26 +1866,31 @@ CVE-2022-51019 (Akaunting before 2.1.31 contains an OS
command injection vulnera
CVE-2015-20122 (Seeyon A6 collaborative office automation platform contains an
unauthe ...)
NOT-FOR-US: Seeyon
CVE-2026-100756 (Incorrect boundary conditions in the Audio/Video: Playback
component. ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100756
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100756
CVE-2026-100757 (Use-after-free in the Widget component. This vulnerability
was fixed i ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100757
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100757
CVE-2026-100758 (Sandbox escape in the DOM: Navigation component. This
vulnerability wa ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100758
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100758
CVE-2026-100759 (Uninitialized memory in the Storage: Quota Manager component.
This vul ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100759
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100759
CVE-2026-100760 (Sandbox escape in the Security: Process Sandboxing component.
This vul ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100760
@@ -1017,6 +1899,7 @@ CVE-2026-100761 (Privilege escalation due to
use-after-free in the Graphics: Web
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100761
CVE-2026-100762 (Sandbox escape due to use-after-free in the DOM: Content
Processes com ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100762
@@ -1028,16 +1911,19 @@ CVE-2026-100764 (Privilege escalation due to incorrect
boundary conditions in th
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100764
CVE-2026-100765 (Use-after-free in the JavaScript: WebAssembly component. This
vulnerab ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100765
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100765
CVE-2026-100766 (Information disclosure in the Networking: JAR component. This
vulnerab ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100766
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100766
CVE-2026-100767 (Use-after-free in the Networking: Cache component. This
vulnerability ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100767
@@ -1046,121 +1932,145 @@ CVE-2026-100768 (Use-after-free in the Graphics:
WebGPU component. This vulnerab
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100768
CVE-2026-100769 (Use-after-free in the JavaScript: WebAssembly component. This
vulnerab ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100769
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100769
CVE-2026-100770 (Sandbox escape due to use-after-free in the DOM: Content
Processes com ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100770
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100770
CVE-2026-100771 (Undefined behavior in the DOM: Streams component. This
vulnerability w ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100771
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100771
CVE-2026-100772 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100772
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100772
CVE-2026-100773 (Use-after-free in the Storage: IndexedDB component. This
vulnerability ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100773
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100773
CVE-2026-100774 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100774
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100774
CVE-2026-100775 (Sandbox escape in the Graphics component. This vulnerability
was fixed ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100775
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100775
CVE-2026-100776 (Use-after-free in the JavaScript: WebAssembly component. This
vulnerab ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100776
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100776
CVE-2026-100777 (Use-after-free in the Graphics: Canvas2D component. This
vulnerability ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100777
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100777
CVE-2026-100778 (Sandbox escape due to use-after-free in the DOM: Core & HTML
component ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100778
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100778
CVE-2026-100779 (Use-after-free in the XSLT component. This vulnerability was
fixed in ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100779
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100779
CVE-2026-100780 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100780
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100780
CVE-2026-100781 (Sandbox escape due to incorrect boundary conditions in the
Graphics: W ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100781
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100781
CVE-2026-100782 (Privilege escalation due to incorrect boundary conditions in
the Graph ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100782
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100782
CVE-2026-100783 (Uninitialized memory in the Audio/Video component. This
vulnerability ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100783
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100783
CVE-2026-100784 (Use-after-free in the Layout: Text and Fonts component. This
vulnerabi ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100784
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100784
CVE-2026-100785 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100785
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100785
CVE-2026-100786 (Sandbox escape due to use-after-free in the Graphics
component. This v ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100786
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100786
CVE-2026-100787 (Sandbox escape in the XUL component. This vulnerability was
fixed in F ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100787
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100787
CVE-2026-100788 (Invalid pointer in the JavaScript: WebAssembly component.
This vulnera ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100788
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100788
CVE-2026-100789 (Use-after-free in the Graphics: Canvas2D component. This
vulnerability ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100789
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100789
CVE-2026-100790 (Use-after-free in the XSLT component. This vulnerability was
fixed in ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100790
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100790
CVE-2026-100791 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100791
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100791
CVE-2026-100792 (JIT miscompilation in the JavaScript: WebAssembly component.
This vuln ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100792
@@ -1169,11 +2079,13 @@ CVE-2026-100793 (JIT miscompilation in the JavaScript
Engine component. This vul
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100793
CVE-2026-100794 (Sandbox escape due to incorrect boundary conditions in the
Internation ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100794
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100794
CVE-2026-96869 (Information disclosure in the Networking component. This
vulnerability ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-96869
@@ -1185,11 +2097,13 @@ CVE-2026-100796 (Use-after-free in the JavaScript:
WebAssembly component. This v
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100796
CVE-2026-100797 (Privilege escalation due to use-after-free in the Graphics:
WebRender ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100797
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100797
CVE-2026-100798 (Cryptography misuse in Storage: Quota Manager component. This
vulnerab ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100798
@@ -1198,11 +2112,13 @@ CVE-2026-100799 (Uninitialized memory in the Graphics:
WebGPU component. This vu
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100799
CVE-2026-100800 (Sandbox escape due to use-after-free in the Disability Access
APIs com ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100800
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100800
CVE-2026-100801 (Privilege escalation in the DLL Services component. This
vulnerability ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100801
@@ -1211,6 +2127,7 @@ CVE-2026-100802 (Uninitialized memory in the Graphics:
WebGPU component. This vu
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100802
CVE-2026-100803 (Same-origin policy bypass in the WebExtensions component.
This vulnera ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100803
@@ -1222,21 +2139,25 @@ CVE-2026-100805 (Race condition, use-after-free in the
Audio/Video component. Th
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100805
CVE-2026-100806 (Uninitialized memory in the Graphics: WebGPU component. This
vulnerabi ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100806
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100806
CVE-2026-100807 (Privilege escalation in the DOM: Service Workers component.
This vulne ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100807
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100807
CVE-2026-100808 (Mitigation bypass in the DOM: Service Workers component. This
vulnerab ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100808
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100808
CVE-2026-100809 (Same-origin policy bypass in the DevTools component. This
vulnerabilit ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100809
@@ -1245,11 +2166,13 @@ CVE-2026-100810 (Other issue in the DevTools component.
This vulnerability was f
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100810
CVE-2026-100811 (Sandbox escape due to use-after-free in the DOM: Core & HTML
component ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100811
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100811
CVE-2026-100812 (Denial-of-service in the Graphics component. This
vulnerability was fi ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100812
@@ -1258,16 +2181,19 @@ CVE-2026-100813 (Invalid pointer in the JavaScript
Engine: JIT component. This v
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100813
CVE-2026-100814 (Incorrect boundary conditions in the JavaScript Engine: JIT
component. ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100814
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100814
CVE-2026-100815 (Use-after-free in the CSS Parsing and Computation component.
This vuln ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100815
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100815
CVE-2026-100816 (Site isolation issue in the DOM: Networking component. This
vulnerabil ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100816
@@ -1276,26 +2202,31 @@ CVE-2026-100817 (Other issue in the JavaScript:
WebAssembly component. This vuln
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100817
CVE-2026-100818 (Sandbox escape due to use-after-free in the Widget: Gtk
component. Thi ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100818
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100818
CVE-2026-100819 (Sandbox escape due to incorrect boundary conditions in the
XPCOM compo ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100819
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100819
CVE-2026-100820 (Privilege escalation in the Address Bar component. This
vulnerability ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100820
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100820
CVE-2026-100821 (Site isolation issue in the Panning and Zooming component.
This vulner ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100821
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100821
CVE-2026-100822 (Spoofing issue in the Networking: HTTP component. This
vulnerability w ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100822
@@ -1304,41 +2235,49 @@ CVE-2026-100823 (Spoofing issue in the Downloads
component in Firefox for Androi
- firefox <not-affected> (Only affects Firefox on Android)
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100823
CVE-2026-100824 (Privilege escalation in the Places component. This
vulnerability was f ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100824
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100824
CVE-2026-100825 (Use-after-free in the JavaScript Engine: JIT component. This
vulnerabi ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100825
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100825
CVE-2026-100826 (Denial-of-service in the Storage: StorageManager component.
This vulne ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100826
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100826
CVE-2026-100828 (Mitigation bypass in the Bookmarks & History component. This
vulnerabi ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100828
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100828
CVE-2026-100829 (Mitigation bypass in the DOM: Security component. This
vulnerability w ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100829
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100829
CVE-2026-100830 (Mitigation bypass in the DOM: Navigation component. This
vulnerability ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100830
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100830
CVE-2026-100831 (Use-after-free in the DOM: UI Events & Focus Handling
component. This ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100831
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100831
CVE-2026-100832 (Use-after-free in the Graphics: Canvas2D component. This
vulnerability ...)
+ {DSA-6533-1}
- firefox-esr 153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100832
CVE-2026-84782 (Issue summary: The DTLS retransmission logic does not
correctly handle ...)
@@ -1510,7 +2449,7 @@ CVE-2026-102374 (GestSup versions before 3.2.62 contain a
stored cross-site scri
NOT-FOR-US: GestSup
CVE-2026-102373 (GestSup versions before 3.2.62 fail to validate ticket
ownership when ...)
NOT-FOR-US: GestSup
-CVE-2026-102372 (GestSup versions before 3.2.62 fail to properly sanitize HTML
email bo ...)
+CVE-2026-102372 (GestSup versions before 3.2.61 fail to properly sanitize HTML
email bo ...)
NOT-FOR-US: GestSup
CVE-2026-102367 (mall4j through 4.0 contains an insufficient session
expiration vulnera ...)
NOT-FOR-US: mall4jmall4j
@@ -3482,7 +4421,7 @@ CVE-2026-100391 (MediaFlow Proxy through 2.4.9 contains a
server-side request fo
NOT-FOR-US: MediaFlow Proxy
CVE-2026-100390 (Zoraxy versions 3.2.3 through 3.3.4 fail to properly parse
IPv6 addres ...)
NOT-FOR-US: Zoraxy
-CVE-2026-100389 (GestSup versions before 3.2.61 contain a remote code
execution vulnera ...)
+CVE-2026-100389 (GestSup versions before 3.2.62 contain a remote code
execution vulnera ...)
NOT-FOR-US: GestSup
CVE-2026-100388 (RustDesk versions before 1.5.0 fail to properly validate file
transfer ...)
NOT-FOR-US: RustDesk
@@ -10307,7 +11246,8 @@ CVE-2026-16778 (The Live Composer \u2013 Free WordPress
Website Builder plugin f
NOT-FOR-US: WordPress plugin
CVE-2026-15095 (The Product Feed Manager for WooCommerce \u2013 CTX Feed
\u2013 Suppor ...)
NOT-FOR-US: WordPress plugin
-CVE-2026-13087 (A heap out-of-bounds write vulnerability was found in the
Linux kernel ...)
+CVE-2026-13087
+ REJECTED
NOTE: Red Hat CNA contacted, confirmed duplicate of CVE-2026-89530 and
will be rejected soon
CVE-2026-12995 (The Custom Field Template plugin for WordPress is vulnerable
to Insecu ...)
NOT-FOR-US: WordPress plugin
@@ -11658,6 +12598,7 @@ CVE-2026-76790 (The Estatik Real Estate Plugin
WordPress plugin before 4.3.5 doe
CVE-2026-76554 (The WP Import Export Lite WordPress plugin before 3.9.35 does
not veri ...)
NOT-FOR-US: WordPress plugin
CVE-2026-75895 (In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue
was foun ...)
+ {DLA-4804-1}
- libsmpp34 1.14.6-1 (bug #1148557)
[trixie] - libsmpp34 <no-dsa> (Minor issue)
NOTE:
https://cgit.osmocom.org/libsmpp34/commit/?id=af0e2912057551dab97bbe26e6a41f18a75f3bbb
(1.14.6)
@@ -23982,7 +24923,7 @@ CVE-2023-32803 (The ca-certificates package before
ca-certificates-2021.2.50-72
CVE-2023-32778 (An issue was discovered in ILIAS 6.23, 7 before 7.22, and 8.1.
An atta ...)
NOT-FOR-US: ILIAS
CVE-2026-90783 (MKVToolNix through 101.0 contains a heap buffer overflow in
the bundle ...)
- {DSA-6502-1}
+ {DSA-6502-1 DLA-4805-1}
- mkvtoolnix 101.0-2 (bug #1147621)
NOTE: Fixed by:
https://codeberg.org/mbunkus/mkvtoolnix/commit/1495126138e086080f0163bee27fafbdf956a1d0
NOTE: Fixed by:
https://codeberg.org/mbunkus/mkvtoolnix/commit/13fd81db3ae2b79d41536a9663719df11780797e
@@ -55195,7 +56136,7 @@ CVE-2026-66679 (Unauthenticated Broken Access Control
in Appointment Hour Bookin
NOT-FOR-US: WordPress plugin or theme
CVE-2026-66667 (Unauthenticated Cross Site Scripting (XSS) in Templately <=
3.7.1 vers ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-66651 (Unauthenticated Broken Access Control in MultiVendorX <=
5.0.14 versio ...)
+CVE-2026-66651 (Missing Authorization vulnerability in MultiVendorX
MultiVendorX dc-wo ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-66646 (Contributor Cross Site Scripting (XSS) in WP Tab Widget <=
1.2.11 vers ...)
NOT-FOR-US: WordPress plugin or theme
@@ -83674,9 +84615,9 @@ CVE-2026-65491 (Subscriber Broken Access Control in
Query Wrangler <= 1.5.57 ver
NOT-FOR-US: WordPress plugin or theme
CVE-2026-65490 (Exposure of Sensitive System Information to an Unauthorized
Control Sp ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-65489 (Unauthenticated Broken Access Control in LA-Studio Element Kit
for Ele ...)
+CVE-2026-65489 (Missing Authorization vulnerability in LA-Studio LA-Studio
Element Kit ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-65488 (Unauthenticated Cross Site Request Forgery (CSRF) in LA-Studio
Element ...)
+CVE-2026-65488 (Cross-Site Request Forgery (CSRF) vulnerability in LA-Studio
LA-Studio ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-65487 (Unauthenticated Broken Access Control in Photography <= 7.7.6
versions ...)
NOT-FOR-US: WordPress plugin or theme
@@ -101849,7 +102790,7 @@ CVE-2026-57761 (Unauthenticated Cross Site Request
Forgery (CSRF) in SEOWP <= 3.
NOT-FOR-US: WordPress plugin or theme
CVE-2026-57760 (Missing Authorization vulnerability in Sendcloud Sendcloud
Shipping al ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-57759 (Unauthenticated Cross Site Request Forgery (CSRF) in
ProfileGrid <= 5 ...)
+CVE-2026-57759 (Cross-Site Request Forgery (CSRF) vulnerability in Metagauss
ProfileGr ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-57758 (Unauthenticated Cross Site Request Forgery (CSRF) in Permalink
Manager ...)
NOT-FOR-US: WordPress plugin or theme
@@ -103404,43 +104345,43 @@ CVE-2026-55223 (c3p0 is a JDBC Connection pooling
library. In versions prior to
NOTE:
https://github.com/swaldman/c3p0/commit/7b022c4b6694dabc6204254dc917af9c38f2cb27
(v0.14.0)
TODO: check if that is an issue with the packaged version
CVE-2026-54903 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.3-1
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-475m-ph3x-64gp
NOTE:
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7
(v3.17.3)
CVE-2026-54902 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.6-2
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-m578-w5vf-rfcm
NOTE:
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7
(v3.17.3)
NOTE: Followup: https://github.com/ohler55/oj/issues/1109
CVE-2026-54901 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.3-1
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-vwm4-62gf-x745
NOTE:
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7
(v3.17.3)
CVE-2026-54900 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.3-1
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-9cv6-qcjw-4grx
NOTE:
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7
(v3.17.3)
CVE-2026-54899 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.3-1
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-2cw7-v8ff-p88r
NOTE:
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7
(v3.17.3)
CVE-2026-54898 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.3-1
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-q2gm-54r6-8fwm
NOTE:
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7
(v3.17.3)
CVE-2026-54897 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.3-1
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-9ppp-w3g4-fh4q
NOTE:
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7
(v3.17.3)
CVE-2026-54896 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.3-1
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-35w3-pjm6-wj95
NOTE:
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7
(v3.17.3)
@@ -103456,17 +104397,17 @@ CVE-2026-54673 (electron-updater allows for
automatic updates for Electron apps.
CVE-2026-54672 (electron-updater allows for automatic updates for Electron
apps. Prior ...)
NOT-FOR-US: electron-updater
CVE-2026-54592 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.3-1
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-3m6q-jj5j-38c9
NOTE:
https://github.com/ohler55/oj/commit/bbde91a679728f94c4492ebc3683f4fa3309049f
(v3.17.3)
CVE-2026-54502 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.3-1
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-3v45-f3vh-wg7m
NOTE:
https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7
(v3.17.3)
CVE-2026-54500 (Oj (Optimized JSON) is a JSON parser and Object marshaller
packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.3-1
NOTE:
https://github.com/ohler55/oj/security/advisories/GHSA-fm7p-mprw-wjm9
NOTE:
https://github.com/ohler55/oj/commit/bbde91a679728f94c4492ebc3683f4fa3309049f
(v3.17.3)
@@ -150575,11 +151516,11 @@ CVE-2026-40966 (In Spring AI, an attacker can
bypass conversation isolation and
NOT-FOR-US: VMware
CVE-2026-40556
REJECTED
-CVE-2026-40552 (mpGabinet is vulnerable to Remote Command Execution. An
authorized use ...)
+CVE-2026-40552 (Multiple BinSoft products arevulnerable to Remote Command
Execution. A ...)
NOT-FOR-US: mpGabinet
-CVE-2026-40551 (mpGabinet performs client-side authentication. An attacker
with access ...)
+CVE-2026-40551 (Multiple BinSoft products perform client-side authentication.
An attac ...)
NOT-FOR-US: mpGabinet
-CVE-2026-40550 (mpGabinet is vulnerable to Privilege Escalation due to
excessive datab ...)
+CVE-2026-40550 (Multiple BinSoft products are vulnerable to Privilege
Escalation due t ...)
NOT-FOR-US: mpGabinet
CVE-2026-3323 (An unsecured configuration interface on affected devices allows
unauth ...)
NOT-FOR-US: VEGA Grieshaber KG
@@ -456920,7 +457861,7 @@ CVE-2023-39418 (A vulnerability was found in
PostgreSQL with the use of the MERG
NOTE:
https://www.postgresql.org/about/news/postgresql-154-149-1312-1216-1121-and-postgresql-16-beta-3-released-2689/
NOTE:
https://git.postgresql.org/gitweb/?p=postgresql.git;a=commitdiff;h=cb2ae5741f2458a474ed3c31458d242e678ff229
(REL_15_4)
CVE-2023-39417 (IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was
found in Po ...)
- {DSA-6385-1 DSA-5554-1 DSA-5553-1 DLA-3600-1}
+ {DSA-6385-1 DSA-5554-1 DSA-5553-1 DLA-4806-1 DLA-3600-1}
- postgresql-15 15.4-1
- postgresql-13 <removed>
- postgresql-11 <removed>
@@ -545054,7 +545995,8 @@ CVE-2022-2026 (Cross-site Scripting (XSS) - Stored in
GitHub repository kromitgm
NOT-FOR-US: kromitgmbh/titra
CVE-2022-2025 (an attacker with knowledge of user/pass of Grandstream GSD3710
in its ...)
NOT-FOR-US: Grandstream
-CVE-2017-20051 (A vulnerability was detected in InnoSetup Installer 5.5.9.
This affect ...)
+CVE-2017-20051
+ REJECTED
NOT-FOR-US: InnoSetup
CVE-2022-32548 (An issue was discovered on certain DrayTek Vigor routers
before July 2 ...)
NOT-FOR-US: DrayTek Vigor router
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/21ed79a2fa5e3ac5068b7de8527fe899ae02febc
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/21ed79a2fa5e3ac5068b7de8527fe899ae02febc
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
