Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
82e58df8 by Salvatore Bonaccorso at 2026-10-05T21:31:39+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -15,9 +15,9 @@ CVE-2026-97071 (Incorrect Calculation vulnerability in
VillaTheme CURCY woo-mult
CVE-2026-97070 (Authorization Bypass Through User-Controlled Key vulnerability
in Cozy ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-95166 (In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the
LabelFormat fi ...)
- TODO: check
+ NOT-FOR-US: Bacularis
CVE-2026-95165 (Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting
(XSS) in ...)
- TODO: check
+ NOT-FOR-US: Bacularis
CVE-2026-94669 (Missing Authorization vulnerability in WP ManageNinja LLC
Fluent Forms ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-93323 (The Dockerfile frontend loaded the Dockerfile and
.dockerignore files ...)
@@ -39,21 +39,21 @@ CVE-2026-92931 (CWE-918: Server-Side Request Forgery in the
Progress @progress/s
CVE-2026-89039 (The convert_playwright_script prompt in the k6 MCP server
accepts a fi ...)
NOT-FOR-US: Grafana
CVE-2026-88424 (FineAdmin v1.0 was discovered to contain a SQL injection
vulnerability ...)
- TODO: check
+ NOT-FOR-US: FineAdmin
CVE-2026-88397 (ApiAdmin v.5.0 and before is vulnerable to SQL Injection in
the user-l ...)
- TODO: check
+ NOT-FOR-US: ApiAdmin
CVE-2026-88396 (ApiAdmin v5.0 and before is vulnerable to Directory Traversal.
The adm ...)
- TODO: check
+ NOT-FOR-US: ApiAdmin
CVE-2026-88395 (GouGuOA v6.0.5 and before is vulnerable to SQL Injection in
/home/mess ...)
- TODO: check
+ NOT-FOR-US: GouGuOA
CVE-2026-88394 (WookTeam v1.6.6 and before is vulnerable to a Directory
Traversal. The ...)
- TODO: check
+ NOT-FOR-US: WookTeam
CVE-2026-88393 (WookTeam v1.6.6 and before is vulnerable to RCE in the project
task ex ...)
- TODO: check
+ NOT-FOR-US: WookTeam
CVE-2026-88392 (Unimall v4 is vulnerable to Directory Traversal in
FileUploadControlle ...)
- TODO: check
+ NOT-FOR-US: Unimall
CVE-2026-88391 (Northstar (dromara/northstar, quantitative trading platform)
<= 9.1.1 ...)
- TODO: check
+ NOT-FOR-US: Northstar
CVE-2026-86671 (In Eclipse Che versions 7.29.0 and later, the GET
`/api/scm/resolve` a ...)
NOT-FOR-US: Eclipse
CVE-2026-79820 (A remote user validation failure vulnerability exists in HPE
Integrate ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/82e58df859dc837335cf13cce19c193daf76c355
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/82e58df859dc837335cf13cce19c193daf76c355
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
