Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
929f45f8 by Salvatore Bonaccorso at 2026-10-02T09:41:39+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5,19 +5,19 @@ CVE-2026-97317 (The Giveaways and Contests by RafflePress
WordPress plugin befo
CVE-2026-97219 (The MStore API WordPress plugin before 4.22.1 does not
restrict which ...)
NOT-FOR-US: WordPress plugin
CVE-2026-96780 (figlet.js is a FIG driver written in JavaScript that aims to
implement ...)
- TODO: check
+ NOT-FOR-US: figlet.js
CVE-2026-94298 (The BuildKit WordPress plugin before 1.0.29 does not properly
sanitis ...)
NOT-FOR-US: WordPress plugin
CVE-2026-93832 (A component of one of the Motorola system applications was
exported wi ...)
NOT-FOR-US: Lenovo
CVE-2026-93698 (Insufficient validation allows arbitrary commands to be
executed via t ...)
- TODO: check
+ NOT-FOR-US: Webpros cPanel
CVE-2026-93697 (There is a stored XSS vulnerability allowing arbitrary code
execution ...)
- TODO: check
+ NOT-FOR-US: Webpros cPanel
CVE-2026-93367 (The Visitors Traffic Real Time Statistics Pro plugin for
WordPress is ...)
NOT-FOR-US: WordPress plugin
CVE-2026-93029 (There is a stored XSS vulnerability allowing arbitrary code
execution ...)
- TODO: check
+ NOT-FOR-US: Webpros cPanel
CVE-2026-92924 (The Unlimited Elements for Elementor WordPress plugin before
2.0.21 do ...)
NOT-FOR-US: WordPress plugin
CVE-2026-92820 (The Ninja Forms - File Uploads plugin for WordPress is
vulnerable to a ...)
@@ -51,9 +51,9 @@ CVE-2026-84925 (The Avada | Website Builder For WordPress &
WooCommerce theme fo
CVE-2026-84740 (The Events Calendar WordPress plugin before 6.17.5.1 does not
validate ...)
NOT-FOR-US: WordPress plugin
CVE-2026-82358 (RT-Labs AB C-Open CANopen contains a write protection bypass
in the SD ...)
- TODO: check
+ NOT-FOR-US: RT-Labs AB C-Open CANopen
CVE-2026-82357 (RT-Labs AB C-Open CANopen contains a NULL pointer dereference
if the L ...)
- TODO: check
+ NOT-FOR-US: RT-Labs AB C-Open CANopen
CVE-2026-81740 (The Paytm Payment Gateway WordPress plugin before 2.8.9 does
not verif ...)
NOT-FOR-US: WordPress plugin
CVE-2026-79618 (The WP User Frontend WordPress plugin before 4.3.12 does not
enforce i ...)
@@ -61,7 +61,7 @@ CVE-2026-79618 (The WP User Frontend WordPress plugin before
4.3.12 does not enf
CVE-2026-78471 (The Autoptimize plugin for WordPress is vulnerable to Stored
Cross-Sit ...)
NOT-FOR-US: WordPress plugin
CVE-2026-71542 (GetSimple CMS is a content management system (CMS), and
GetSimple CMS ...)
- TODO: check
+ NOT-FOR-US: GetSimple CMS
CVE-2026-71454 (Improper neutralization of input during web page generation
('cross-si ...)
NOT-FOR-US: Johnson Controls
CVE-2026-71453 (- External Control of File Name or Path vulnerability in
Johnson Contr ...)
@@ -75,9 +75,9 @@ CVE-2026-71449 (: Use of Hard-coded Cryptographic Key
vulnerability in Johnson C
CVE-2026-71448 (: Insecure Default Initialization of Resource vulnerability in
Johnson ...)
NOT-FOR-US: Johnson Controls
CVE-2026-71426 (GetSimple CMS is a content management system (CMS), and
GetSimple CMS ...)
- TODO: check
+ NOT-FOR-US: GetSimple CMS
CVE-2026-70650 (GetSimple CMS is a content management system (CMS), and
GetSimple CMS ...)
- TODO: check
+ NOT-FOR-US: GetSimple CMS
CVE-2026-64893 (- Cleartext Transmission of Sensitive Information
vulnerability in Joh ...)
NOT-FOR-US: Johnson Controls
CVE-2026-64892 (- Exposure of Sensitive Information vulnerability in Johnson
Controls ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/929f45f85b004cb1e2b355c057bee1aaba807040
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/929f45f85b004cb1e2b355c057bee1aaba807040
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
