Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
75b84690 by Salvatore Bonaccorso at 2026-09-30T21:38:07+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -89,7 +89,7 @@ CVE-2026-97235 (Unauthenticated Cross Site Scripting (XSS) in
ThemeREX Addons <
CVE-2026-97197 (Unauthenticated Broken Access Control in WordPress Backup &
Migration ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-97150 (When converting baserCMS4-style addons to baserCMS5-style
ones, BcAddo ...)
- TODO: check
+ NOT-FOR-US: BcAddonMigrator
CVE-2026-97079 (Subscriber Insecure Direct Object References (IDOR) in Webba
Booking < ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-97078 (Unauthenticated Insecure Direct Object References (IDOR) in
Client Inv ...)
@@ -237,7 +237,7 @@ CVE-2026-94074 (Unauthenticated Broken Access Control in
Simply Schedule Appoint
CVE-2026-93908 (The Real Estate Manager \u2013 Property Listing and Agent
Management p ...)
NOT-FOR-US: WordPress plugin
CVE-2026-93903 (LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles
internal r ...)
- TODO: check
+ NOT-FOR-US: LiteSpeed Web Server (LSWS)
CVE-2026-93771 (Shop manager PHP Object Injection in Cost of Goods for
WooCommerce <= ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-93770 (Unauthenticated Cross Site Scripting (XSS) in WP Statistics <=
14.16.1 ...)
@@ -255,13 +255,13 @@ CVE-2026-93514 (Unauthenticated Cross Site Scripting
(XSS) in Notification for T
CVE-2026-93512 (Unauthenticated Cross Site Scripting (XSS) in JW Player for
WordPress ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-93464 (Stored Cross-Site Scripting via custom content descriptions
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: baserCMS
CVE-2026-93463 (Cross-Site Scripting via Script Validation Bypass exists in
baserCMS. ...)
- TODO: check
+ NOT-FOR-US: baserCMS
CVE-2026-93462 (Missing authentication for critical function vulnerability
exists in b ...)
- TODO: check
+ NOT-FOR-US: baserCMS
CVE-2026-93460 (Stored Cross-site scripting via appended strings in email form
fields ...)
- TODO: check
+ NOT-FOR-US: baserCMS
CVE-2026-92899 (Apache WSS4J remembers the Nonce of each UsernameToken it
accepts, so ...)
TODO: check
CVE-2026-92873 (Pgpool-II contains an incorrect implementation of an
authentication al ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/75b8469097d911393b555cfdd9482e1109efd7fb
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/75b8469097d911393b555cfdd9482e1109efd7fb
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
