Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e7530ec0 by Salvatore Bonaccorso at 2026-10-09T09:54:29+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
CVE-2026-9209 (mJobTime through build 15.7.3.32 contains an unauthenticated
SQL execu ...)
- TODO: check
+ NOT-FOR-US: mJobTime
CVE-2026-97076 (Executable Regular Expression Error vulnerability in WP Media
WP Rocke ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-96207 (Improper certificate validation in Microsoft Partner Center
allows an ...)
@@ -22,27 +22,27 @@ CVE-2026-95116 (An issue in libming through 0.4.8 allows a
remote attacker to ca
CVE-2026-94510 (Authorization bypass through user-controlled key in Microsoft
Bookings ...)
NOT-FOR-US: Microsoft
CVE-2026-93699 (Argument injection in WP Toolkit for cPanel allows local users
to exec ...)
- TODO: check
+ NOT-FOR-US: cPanel
CVE-2026-93548 (The FooSales WordPress plugin before 1.43.3 does not verify
that an a ...)
NOT-FOR-US: WordPress plugin
CVE-2026-93509 (The Wallet System for WooCommerce WordPress plugin before
2.8.0 does n ...)
NOT-FOR-US: WordPress plugin
CVE-2026-93034 (SGLang contains an arbitrary code execution vulnerability
caused by th ...)
- TODO: check
+ NOT-FOR-US: SGLang
CVE-2026-93017 (The `insights-operator-gather` ClusterRole grants the
operator's servi ...)
- TODO: check
+ NOT-FOR-US: Red Hat OpenShift
CVE-2026-92990 (The SendPress Newsletters WordPress plugin through 1.26.1.20
protects ...)
NOT-FOR-US: WordPress plugin
CVE-2026-92989 (The SendPress Newsletters WordPress plugin through 1.26.1.20
does not ...)
NOT-FOR-US: WordPress plugin
CVE-2026-92555 (Insertion of sensitive information into sent data
vulnerability in AKI ...)
- TODO: check
+ NOT-FOR-US: AKINSOFT WOLVOX Control Panel
CVE-2026-91844 (Unrestricted upload of file with dangerous type vulnerability
in \u013 ...)
- TODO: check
+ NOT-FOR-US: eimzamip
CVE-2026-89290 (Improper neutralization of Script-Related HTML tags in a web
page (bas ...)
- TODO: check
+ NOT-FOR-US: eimzamip
CVE-2026-89191 (Unsanitised input in the "template name" field of SQLView
KRIS's Workf ...)
- TODO: check
+ NOT-FOR-US: SQLView KRIS
CVE-2026-89091 (A flaw was found in ansible-core. When installing a collection
with `a ...)
TODO: check
CVE-2026-88931 (The Social Web Suite WordPress plugin through 4.1.12 does not
restric ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e7530ec0f81035274d41945cd6642f203fd730b6
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e7530ec0f81035274d41945cd6642f203fd730b6
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
