Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0a390a11 by Salvatore Bonaccorso at 2026-10-01T21:28:11+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -47,7 +47,7 @@ CVE-2026-95588 (Unauthenticated Arbitrary File Deletion in
AcyMailing SMTP Newsl
CVE-2026-95137
REJECTED
CVE-2026-94620 (Classroom 50 is a free and open-source tool for managing and
grading p ...)
- TODO: check
+ NOT-FOR-US: Classroom 50
CVE-2026-94390 (Editor PHP Object Injection in Hide Shipping Method For
WooCommerce <= ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-94276 (Improper Authentication vulnerability in Apache APISIX. On a
route us ...)
@@ -85,13 +85,13 @@ CVE-2026-84682 (A command injection vulnerability exists in
the TDDPv2 service (
CVE-2026-82806 (Exposure of data element to wrong session vulnerability in
Apache APIS ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-7176 (CVE-2026-7176: the Help text and Title parameters in the
endpoint /eve ...)
- TODO: check
+ NOT-FOR-US: Crocantickets Entradium
CVE-2026-7175 (CVE-2026-7175: the Business Name parameter in the
/promoters/edit endp ...)
- TODO: check
+ NOT-FOR-US: Crocantickets Entradium
CVE-2026-7174 (CVE-2026-7174: Stored Cross-Site Scripting vulnerability in
Entradium, ...)
- TODO: check
+ NOT-FOR-US: Crocantickets Entradium
CVE-2026-7173 (CVE-2026-7173: Cross-Site Scripting vulnerability in Entradium,
by Cro ...)
- TODO: check
+ NOT-FOR-US: Crocantickets Entradium
CVE-2026-79901 (In deployments using BoKS keytab management, affected versions
of boks ...)
NOT-FOR-US: Fortra
CVE-2026-79900 (boks_ksllogsd accepts a checksum algorithm name in the MD
field of an ...)
@@ -107,7 +107,7 @@ CVE-2026-78578 (Tapo C120 v1 and C200 v5 do not enforce
authentication for do me
CVE-2026-78577 (Tapo C120 v1 and C200 V5 contain a vulnerability in the HTTPS
onboardi ...)
NOT-FOR-US: TPLink
CVE-2026-78249 (A path traversal vulnerability exists in the web management
interface ...)
- TODO: check
+ NOT-FOR-US: Fujifilm Apeos
CVE-2026-78242 (Insertion of sensitive information into log file vulnerability
in Apac ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-77387 (geopy is a geocoding library for Python. Prior to 2.5.0,
geopy.Point a ...)
@@ -117,9 +117,9 @@ CVE-2026-75957 (The Ultimate Multisite \u2013 WordPress
Multisite SaaS & WaaS Pl
CVE-2026-75786 (Unsanitized concatenation of the module parameter in the
Grafana datas ...)
NOT-FOR-US: Pandora FMS
CVE-2026-73976 (djehuty is a research data repository system developed by
4TU.Research ...)
- TODO: check
+ NOT-FOR-US: djehuty
CVE-2026-73975 (djehuty is a research data repository system developed by
4TU.Research ...)
- TODO: check
+ NOT-FOR-US: djehuty
CVE-2026-68496 (The Smile parser in FasterXML jackson-dataformats-binary never
invokes ...)
TODO: check
CVE-2026-68495 (The CBOR parser in FasterXML jackson-dataformats-binary never
invokes ...)
@@ -1205,7 +1205,7 @@ CVE-2026-94673 (Unauthenticated Insecure Direct Object
References (IDOR) in Simp
CVE-2026-94672 (Contributor Insecure Direct Object References (IDOR) in Safe
SVG <= 2. ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-94545 (Satori is a library to convert HTML and CSS to SVG. Starting
in versio ...)
- TODO: check
+ NOT-FOR-US: Satori
CVE-2026-94499 (Subscriber Broken Access Control in FormGent <= 1.12.2
versions.)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-94389 (Unauthenticated Remote Code Execution (RCE) in AcyMailing SMTP
Newslet ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0a390a115237b8fcb40097acead35341d25bcff6
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0a390a115237b8fcb40097acead35341d25bcff6
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
