Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
59471ecc by Salvatore Bonaccorso at 2026-10-02T22:21:17+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -206,9 +206,9 @@ CVE-2026-85476 (Loop with unreachable exit condition
('infinite loop') vulnerabi
- thrift <unfixed>
NOTE: https://lists.apache.org/thread/1zdvscq7p3hf3z30s26h4tm9dvljm1jj
CVE-2026-85215 (Improper neutralization of special elements used in an SQL
command ('S ...)
- TODO: check
+ NOT-FOR-US: Paperwork
CVE-2026-85209 (Missing Authorization vulnerability in AVEZ Electronics
Communication ...)
- TODO: check
+ NOT-FOR-US: AVEZ Electronics Communication Training and Consultancy
Trade Inc. Learning Management System (LMS)
CVE-2026-85088 (Improper Validation of Certificate with Host Mismatch in the
C++ and D ...)
- thrift <unfixed>
NOTE: https://lists.apache.org/thread/zcgm7lx6037lvgvn87rc1tj3p0zhv371
@@ -234,13 +234,13 @@ CVE-2026-82458 (Memory allocation with excessive size
value, Allocation of resou
- thrift <unfixed>
NOTE: https://lists.apache.org/thread/7xqf651pvjykw0xr9vw0ooz0bwx7wzy7
CVE-2026-80464 (Server-Side request forgery (SSRF) vulnerability in HAVELSAN
Inc. Sef ...)
- TODO: check
+ NOT-FOR-US: Sef AI Chatbot Platform
CVE-2026-80443 (Improper certificate validation vulnerability in HAVELSAN Inc.
Sef - A ...)
- TODO: check
+ NOT-FOR-US: Sef AI Chatbot Platform
CVE-2026-80337 (Missing Authorization vulnerability in HAVELSAN Inc. Sef - AI
Chatbot ...)
- TODO: check
+ NOT-FOR-US: Sef AI Chatbot Platform
CVE-2026-80298 (Improper neutralization of special elements used in an SQL
command ('S ...)
- TODO: check
+ NOT-FOR-US: Sef AI Chatbot Platform
CVE-2026-67989 (crmne/ruby_llm at commit
fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 cont ...)
TODO: check
CVE-2026-66859 (NULL Pointer Dereference, Use of Uninitialized Variable
vulnerability ...)
@@ -438,77 +438,77 @@ CVE-2026-104609 (A weakness has been identified in
onetwothreeneth HospitalManag
CVE-2026-104606 (A security flaw has been discovered in itsourcecode Online
Admission S ...)
NOT-FOR-US: itsourcecode System
CVE-2026-104473 (YesWiki before 4.5.3 contains multiple reflected cross-site
scripting ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104472 (YesWiki before 4.6.7 contains a missing authorization
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104471 (YesWiki before 4.6.7 contains an unrestricted file upload
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104470 (YesWiki before 4.6.7 contains a server-side request forgery
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104469 (YesWiki before 4.6.7 contains a session fixation
vulnerability that al ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104468 (YesWiki before 4.6.7 contains an insufficient session
expiration vulne ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104467 (YesWiki before 4.6.7 contains an authorization bypass
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104466 (YesWiki before 4.6.7 contains a stored cross-site scripting
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104465 (YesWiki before 4.6.7 contains a reflected cross-site
scripting vulnera ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104464 (YesWiki before 4.6.7 contains a server-side request forgery
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104463 (YesWiki before 4.6.7 contains a server-side request forgery
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104462 (YesWiki before 4.6.7 contains an SQL injection vulnerability
in the Ba ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104461 (YesWiki before 4.6.7 contains a stored cross-site scripting
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104460 (YesWiki before 4.6.7 contains a blind SQL injection
vulnerability in t ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104459 (YesWiki before 4.6.7 contains a server-side request forgery
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104458 (YesWiki before 4.6.7 contains a server-side request forgery
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104457 (YesWiki before 4.6.7 contains an SQL injection vulnerability
in the Ba ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104456 (YesWiki before 4.6.7 contains a second-order SQL injection
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104455 (YesWiki before 4.6.7 contains an access control bypass
vulnerability t ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104454 (YesWiki before 4.6.7 contains an algorithmic-complexity
denial of serv ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104453 (YesWiki before 4.6.7 contains a cross-site request forgery
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104452 (YesWiki before 4.6.7 contains a cross-site request forgery
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104451 (YesWiki before 4.6.7 contains a cross-site request forgery
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104450 (YesWiki before 4.6.7 contains a missing authorization flaw in
the poin ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104449 (YesWiki before 4.6.7 contains an access control vulnerability
allowing ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104448 (YesWiki before 4.6.7 contains a cross-site request forgery
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104447 (YesWiki before 4.6.7 contains a cross-site request forgery
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104446 (YesWiki before 4.6.7 contains an authentication bypass in the
contact ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104445 (YesWiki before 4.6.7 contains an authentication bypass
vulnerability i ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104444 (YesWiki before 4.6.7 contains an authorization bypass
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104443 (YesWiki before 4.6.7 contains an empty-filter scope bypass in
the trip ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104442 (YesWiki before 4.6.7 contains an unauthenticated server-side
request f ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104441 (YesWiki before 4.6.7 contains an unauthenticated server-side
request f ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104440 (YesWiki before 4.6.7 contains a blind server-side request
forgery vuln ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104439 (YesWiki before 4.6.7 contains a user enumeration
vulnerability in Lost ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104438 (YesWiki before 4.6.7 contains a missing authorization
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: YesWiki
CVE-2026-104437 (Zebra before 4.4.0 contains a consensus divergence
vulnerability in V5 ...)
TODO: check
CVE-2026-104436 (Zebra before 4.5.0 contains an uncontrolled resource
consumption vulne ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/59471ecc14cc1406b59fce02374babf3a1dd8b70
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/59471ecc14cc1406b59fce02374babf3a1dd8b70
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
