Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5797fa06 by Salvatore Bonaccorso at 2026-10-01T09:50:59+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -19,9 +19,9 @@ CVE-2026-92412 (The Five Star Restaurant Reviews WordPress
plugin before 2.3.14
CVE-2026-92245 (The Simply Schedule Appointments plugin for WordPress is
vulnerable to ...)
NOT-FOR-US: WordPress plugin
CVE-2026-92173 (Prior to v74.0.0.878.1682 of Meta Horizon OS,
MediaSyncJobReceiver cou ...)
- TODO: check
+ NOT-FOR-US: Meta Horizon OS
CVE-2026-92172 (Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService
could be ...)
- TODO: check
+ NOT-FOR-US: Meta Horizon OS
CVE-2026-91109 (The Simply Schedule Appointments plugin for WordPress is
vulnerable to ...)
NOT-FOR-US: WordPress plugin
CVE-2026-90974 (The WP Fusion Lite WordPress plugin before 3.48.0 does not
require au ...)
@@ -57,23 +57,23 @@ CVE-2026-81809 (The Paytm Payment Gateway WordPress plugin
before 2.8.9 does not
CVE-2026-81739 (The Paytm Payment Gateway WordPress plugin before 2.8.9 does
not sanit ...)
NOT-FOR-US: WordPress plugin
CVE-2026-80276 (Comelit Multi-User Gateway for VIP System (model 1456B)
firmware versi ...)
- TODO: check
+ NOT-FOR-US: Comelit Multi-User Gateway for VIP System (model 1456B)
firmware
CVE-2026-80275 (Comelit Multi-User Gateway for VIP System (model 1456B)
firmware versi ...)
- TODO: check
+ NOT-FOR-US: Comelit Multi-User Gateway for VIP System (model 1456B)
firmware
CVE-2026-78210 (In affected versions of Octopus Server, users with certain
scoped perm ...)
NOT-FOR-US: Octopus Deploy
CVE-2026-76147 (A path traversal (ZIP Slip) vulnerability caused by
insufficient autho ...)
- TODO: check
+ NOT-FOR-US: Genian
CVE-2026-76146 (An OS command injection vulnerability in Genian SSL PNS allows
an atta ...)
- TODO: check
+ NOT-FOR-US: Genian
CVE-2026-76145 (An improper privilege management vulnerability in Genian SSL
PNS allow ...)
- TODO: check
+ NOT-FOR-US: Genian
CVE-2026-76144 (An unrestricted file upload vulnerability caused by
insufficient file ...)
- TODO: check
+ NOT-FOR-US: Genian
CVE-2026-76143 (A missing authorization vulnerability in Genian SSL PNS allows
an atta ...)
- TODO: check
+ NOT-FOR-US: Genian
CVE-2026-76142 (Insufficient authentication and access control on the
internal-only IP ...)
- TODO: check
+ NOT-FOR-US: Genian
CVE-2026-67075 (HCL Digital Experience is affected by improper input
sanitation. This ...)
NOT-FOR-US: HCL
CVE-2026-51872 (Devika v1.0 is vulnerable to Code Injection via the
Runner.run_code fu ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5797fa06ada18bf6ede85d633094abb662d2e71f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5797fa06ada18bf6ede85d633094abb662d2e71f
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
