Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
cf84b1e6 by Salvatore Bonaccorso at 2026-10-06T09:35:58+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3,11 +3,11 @@ CVE-2026-97300 (Unauthenticated Broken Access Control in WP
Event Solution <= 4.
CVE-2026-97257 (Deserialization of Untrusted Data vulnerability in PressTigers
Simple ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-95265 (Feehi CMS 2.1.1 contains a Server-Side Request Forgery (SSRF)
vulnerab ...)
- TODO: check
+ NOT-FOR-US: Feehi CMS
CVE-2026-95264 (Feehi CMS 2.1.1 is vulnerable to Directory Traversal. An
authenticated ...)
- TODO: check
+ NOT-FOR-US: Feehi CMS
CVE-2026-95263 (Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A
low-privi ...)
- TODO: check
+ NOT-FOR-US: Feehi CMS
CVE-2026-94299 (The elegro Crypto Payment WordPress plugin through 1.0.1 does
not requ ...)
NOT-FOR-US: WordPress plugin
CVE-2026-94293 (An unauthenticated remote attacker can modify Asset
Administration She ...)
@@ -19,7 +19,7 @@ CVE-2026-94271 (The Deema Payment Gateway WordPress plugin
through 1.1.2 does no
CVE-2026-94270 (The Deema Payment Gateway WordPress plugin through 1.1.2 does
not veri ...)
NOT-FOR-US: WordPress plugin
CVE-2026-94201 (Ash stores :atom-typed attributes as strings and compares them
as stri ...)
- TODO: check
+ NOT-FOR-US: ash-project
CVE-2026-93617 (Deserialization of Untrusted Data vulnerability in WP Sunshine
Sunshin ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-93326 (A build step for a Git source, crafted in a specific way, can
bypass s ...)
@@ -37,13 +37,13 @@ CVE-2026-93315 (When proxy networking with CA injection is
enabled, a build can
CVE-2026-92821 (A flaw was found in SSSD. When configured to evaluate password
expirat ...)
TODO: check
CVE-2026-91107 (openSIS Classic 9.3 allows an authenticated user with the
built-in tea ...)
- TODO: check
+ NOT-FOR-US: OS4ED openSIS
CVE-2026-89289 (The Fast Courier WordPress plugin through 5.2.3 does not
restrict an ...)
NOT-FOR-US: WordPress plugin
CVE-2026-86786 (The Slider Pro WordPress plugin through 1.0.0 does not perform
any cap ...)
NOT-FOR-US: WordPress plugin
CVE-2026-84900 (Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10)
could p ...)
- TODO: check
+ NOT-FOR-US: HP
CVE-2026-82989 (There is an input injection in vCast exposed network services
in ViewS ...)
TODO: check
CVE-2026-82988 (There exists an arbitrary file download in vCast APK delivery
mechanis ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cf84b1e689e3ffb85167d1217f9b9698e2b279d5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cf84b1e689e3ffb85167d1217f9b9698e2b279d5
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
