Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c5056374 by Salvatore Bonaccorso at 2026-10-09T10:11:42+02:00
Proces more NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -55,7 +55,7 @@ CVE-2026-88648 (Incomplete X.509 implementation in GnuTLS
v3.8.13 allows attacke
CVE-2026-88647 (A hostname verification bypass in GnuTLS v3.8.13 allows
attackers to c ...)
TODO: check
CVE-2026-88257 (Improper Input Validation vulnerability in BeamMCP.Schema in
ScriptKit ...)
- TODO: check
+ NOT-FOR-US: BeamMCP.Schema
CVE-2026-88131 (Deserialization of untrusted data in Microsoft Dataverse
allows an una ...)
NOT-FOR-US: Microsoft
CVE-2026-87980 (IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow
a local ...)
@@ -63,11 +63,11 @@ CVE-2026-87980 (IBM Guardium Data Protection 12.0, 12.1,
and 12.2 could allow a
CVE-2026-87841 (The UnitechPay WordPress plugin through 1.0.6.3 does not
verify the a ...)
NOT-FOR-US: WordPress plugin
CVE-2026-87110 (An unauthenticated user with network access to the Ops Manager
web por ...)
- TODO: check
+ NOT-FOR-US: MongoDB Ops Manager
CVE-2026-87109 (An authenticated Ops Manager organization member can retrieve
another ...)
- TODO: check
+ NOT-FOR-US: MongoDB Ops Manager
CVE-2026-87108 (An authenticated Ops Manager user with a read-only project
role can re ...)
- TODO: check
+ NOT-FOR-US: MongoDB Ops Manager
CVE-2026-86850 (The SKU Error Fixer for WooCommerce WordPress plugin through
1.0 does ...)
NOT-FOR-US: WordPress plugin
CVE-2026-84891 (IBM Guardium Data Protection 12.0, 12.1, and 12.2could allow a
remote ...)
@@ -135,9 +135,9 @@ CVE-2026-81929 (The Ocean Pro Demos and Ocean eComm
Treasure Box plugins for Wor
CVE-2026-80381 (IBM Guardium Data Protection 12.0, 12.1, and 12.2could allow a
remote ...)
NOT-FOR-US: IBM
CVE-2026-7827 (A stack-based buffer overflow in the _RdbLoadEntity function of
the RD ...)
- TODO: check
+ NOT-FOR-US: FalkorDB
CVE-2026-7826 (A heap-based out-of-bounds read in the
BufferSerializerIOv2_ReadBuffer ...)
- TODO: check
+ NOT-FOR-US: FalkorDB
CVE-2026-79842 (An authentication bypass vulnerability exists in HPE
Intelligent Manag ...)
NOT-FOR-US: HPE
CVE-2026-78407 (IBM Security Verify Access 10.0 through 10.0.9.2 and IBM
Verify Identi ...)
@@ -193,13 +193,13 @@ CVE-2026-62127 (Improper Neutralization of Input During
Web Page Generation ('Cr
CVE-2026-61801 (The `github.com/moby/sys/user` package provides Go utilities
for parsi ...)
TODO: check
CVE-2026-5759 (A double free and use-after-free vulnerability in the
RdbLoadDeletedNo ...)
- TODO: check
+ NOT-FOR-US: FalkorDB
CVE-2026-50055 (A policy-enforcement flaw in Zimbra Collaboration Suite allows
an auth ...)
NOT-FOR-US: Zimbra
CVE-2026-50054 (An authorization flaw in Zimbra Collaboration Suite\u2019s
GrantRights ...)
NOT-FOR-US: Zimbra
CVE-2026-4894 (A vulnerability has been identified regarding insufficient
validation ...)
- TODO: check
+ NOT-FOR-US: Frappe
CVE-2026-44038 (A global out-of-bounds read in the Huffman decoder of the
bundled IJG ...)
- dcmtk <unfixed>
NOTE: https://support.dcmtk.org/redmine/issues/1221
@@ -383,31 +383,31 @@ CVE-2026-107886 (OpenPrinting CUPS before 2.4.20 contains
a double-free in print
CVE-2026-107885 (OpenPrinting CUPS through 2.4.20 contains a
resource-exhaustion vulner ...)
TODO: check
CVE-2026-107831 (Jivejdon through 5.0 contains a cross-site request forgery
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: Jivejdon
CVE-2026-107830 (Jivejdon from commit e0306088 through commit ee67a65e lacks
rate limit ...)
- TODO: check
+ NOT-FOR-US: Jivejdon
CVE-2026-107829 (Jivejdon through 5.0 contains a weak password storage
vulnerability th ...)
- TODO: check
+ NOT-FOR-US: Jivejdon
CVE-2026-107828 (Jivejdon through 5.0 contains an authentication bypass
vulnerability t ...)
- TODO: check
+ NOT-FOR-US: Jivejdon
CVE-2026-107802 (SumatraPDF is a multi-format reader for Windows. In 3.6.1 and
earlier, ...)
NOT-FOR-US: SumatraPDF
CVE-2026-107801 (Jivejdon through 5.0 contains a stored cross-site scripting
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: Jivejdon
CVE-2026-107800 (Jivejdon through 5.0 contains a stored cross-site scripting
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: Jivejdon
CVE-2026-107799 (Jivejdon through 5.0 contains a stored cross-site scripting
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: Jivejdon
CVE-2026-107798 (jivejdon from commit 595d8d22 through commit ee67a65e
contains a store ...)
- TODO: check
+ NOT-FOR-US: Jivejdon
CVE-2026-107797 (Jivejdon through 5.0 contains a reflected cross-site
scripting vulnera ...)
- TODO: check
+ NOT-FOR-US: Jivejdon
CVE-2026-107796 (Jivejdon from commit 5489372d through commit ee67a65e
contains a refle ...)
- TODO: check
+ NOT-FOR-US: Jivejdon
CVE-2026-107793 (Jivejdon through 5.0 contains an authorization bypass
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Jivejdon
CVE-2026-107792 (Jivejdon from commit d58a36b0 through commit ee67a65e
contains a missi ...)
- TODO: check
+ NOT-FOR-US: Jivejdon
CVE-2026-107782 (System Informer before 4.0.26241.138 contains an incorrect
authorizati ...)
TODO: check
CVE-2026-107781 (Dromara Skyeye through commit
003549ae5615bd114ba5bb8ddf6a8e8ead97c321 ...)
@@ -891,7 +891,7 @@ CVE-2026-101024 (Satel Netco Design versions prior to
v2.1.7 contains a relative
CVE-2026-100197
REJECTED
CVE-2025-71428 (Jivejdon through 5.0 contains a sql injection vulnerability in
Account ...)
- TODO: check
+ NOT-FOR-US: Jivejdon
CVE-2025-15700 (The AWP Classifieds WordPress plugin before 4.4.9 does not
validate th ...)
NOT-FOR-US: WordPress plugin
CVE-2026-97147 (In OpenStack Mistral through 23.0.0, several of the v2 API
write paths ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c50563744fa2d6c12d2d39d71687e3a0d4c470b6
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c50563744fa2d6c12d2d39d71687e3a0d4c470b6
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
