Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
356712c1 by security tracker role at 2026-10-09T19:14:16+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,34 +1,532 @@
-CVE-2026-98384 [bpf: Fix out-of-bounds read of sk_protocol in
bpf_sock_destroy()]
+CVE-2026-97791 (In Apache CXF, STSTokenValidator checks whether a SAML
assertion is si ...)
+ TODO: check
+CVE-2026-97468 (Apache CXF's STSTokenValidator and Security Token Service
(STS) cached ...)
+ TODO: check
+CVE-2026-97075 (Missing Authorization vulnerability in WP Media WP Rocket
wp-rocket al ...)
+ TODO: check
+CVE-2026-96809 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2026-96761 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-96671 (Cross-Site Request Forgery (CSRF) vulnerability in fifu.app
Featured I ...)
+ TODO: check
+CVE-2026-96607 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-96553 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-96539 (Incorrect Privilege Assignment vulnerability in Ultimate
Member Ultima ...)
+ TODO: check
+CVE-2026-96518 (Missing Authorization vulnerability in properfraction
ProfilePress wp- ...)
+ TODO: check
+CVE-2026-96461 (Missing Authorization vulnerability in TMS Amelia
ameliabooking allows ...)
+ TODO: check
+CVE-2026-96396 (The Affinity by Canva application for macOS before 3.3.1
(October 2026 ...)
+ TODO: check
+CVE-2026-96395 (The Affinity by Canva app for macOS before 3.3.1 (October 2026
release ...)
+ TODO: check
+CVE-2026-96394 (The Affinity by Canva application for macOS before 3.3.1
(October 2026 ...)
+ TODO: check
+CVE-2026-96393 (The Affinity by Canva app before 3.3.1 (October 2026 release)
did not ...)
+ TODO: check
+CVE-2026-96337 (Missing Authorization vulnerability in properfraction
ProfilePress wp- ...)
+ TODO: check
+CVE-2026-96336 (Authentication Bypass by Spoofing vulnerability in WPMU DEV
Forminator ...)
+ TODO: check
+CVE-2026-96334 (Missing Authorization vulnerability in ThemeGrill User
Registration us ...)
+ TODO: check
+CVE-2026-96333 (Authentication Bypass by Spoofing vulnerability in Liquid Web
/ Stella ...)
+ TODO: check
+CVE-2026-96332 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-96331 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2026-96330 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2026-96329 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2026-96328 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2026-96327 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2026-95702 (Use-after-free vulnerability in VFS in Google gVisor prior to
release ...)
+ TODO: check
+CVE-2026-95610 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2026-95609 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-95608 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-95607 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2026-95599 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2026-95598 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-95597 (Missing Authorization vulnerability in codemstory
\uc6cc\ub4dc\ud504\u ...)
+ TODO: check
+CVE-2026-95596 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-95591 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-95589 (Missing Authorization vulnerability in Magepeople inc.
Deposits and Pa ...)
+ TODO: check
+CVE-2026-94668 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-94667 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-94666 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
+ TODO: check
+CVE-2026-94665 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-94664 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
+ TODO: check
+CVE-2026-94663 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2026-94661 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-94641 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-94632 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-94568 (Deserialization of Untrusted Data vulnerability in WP Hosting
AS Pay w ...)
+ TODO: check
+CVE-2026-94503 (Unrestricted Upload of File with Dangerous Type vulnerability
in PX-la ...)
+ TODO: check
+CVE-2026-94415 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-94170 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-94167 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-94166 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-94161 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-94159 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-94158 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-94067 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
+ TODO: check
+CVE-2026-94066 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-94065 (Deserialization of Untrusted Data vulnerability in
BuddhaThemes ColorF ...)
+ TODO: check
+CVE-2026-94064 (Deserialization of Untrusted Data vulnerability in
BuddhaThemes Neo | ...)
+ TODO: check
+CVE-2026-94063 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-94062 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
+ TODO: check
+CVE-2026-94061 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-94060 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-94059 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-94058 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-93947 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2026-92085 (Improper neutralization of input during web page generation
('cross-si ...)
+ TODO: check
+CVE-2026-90983 (Use of Client-Side authentication vulnerability in Hayat
Health Facili ...)
+ TODO: check
+CVE-2026-8374 (Misuse and misconfiguration in Bluetooth communication in
SwitchBot Do ...)
+ TODO: check
+CVE-2026-89235 (The Testimonials by BestWebSoft WordPress plugin through 1.0.8
does no ...)
+ TODO: check
+CVE-2026-87846 (The Shipping for Nova Poshta WordPress plugin through 1.19.8
does not ...)
+ TODO: check
+CVE-2026-86851 (The Livees Checkout WordPress plugin through 7.0.2 does not
perform an ...)
+ TODO: check
+CVE-2026-86463 (Apache CXF's FIQL query parser has a vulnerability in how it
searches ...)
+ TODO: check
+CVE-2026-86405 (Improper verification of cryptographic signature vulnerability
in Sipa ...)
+ TODO: check
+CVE-2026-85531 (Improper verification of cryptographic signature vulnerability
in Sipa ...)
+ TODO: check
+CVE-2026-85479 (The STTP-based data publisher on openPDC accepts network
connections w ...)
+ TODO: check
+CVE-2026-85348 (The GDPR Data Request Form WordPress plugin through 1.7.1 does
not hav ...)
+ TODO: check
+CVE-2026-84224 (The Kirki WordPress plugin before 6.3.2 does not validate the
host of ...)
+ TODO: check
+CVE-2026-84220 (The Kirki WordPress plugin before 6.3.2 does not prevent
shortcodes he ...)
+ TODO: check
+CVE-2026-79650 (Apache CXF\u2019s OIDC relying-party component could redirect
users to ...)
+ TODO: check
+CVE-2026-79363 (Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting
(XSS) vul ...)
+ TODO: check
+CVE-2026-78835 (Rocket Software Rocket Remote Desktop 18.0.8583.1 is
vulnerable to Ins ...)
+ TODO: check
+CVE-2026-78796 (An issue in Netcore B11 Enterprise-level full Gigabit 9-port
shop wire ...)
+ TODO: check
+CVE-2026-78795 (An issue in Netcore B11 Enterprise-level full Gigabit 9-port
shop wire ...)
+ TODO: check
+CVE-2026-78384 (CompressionUtils.inflate() decompressed attacker-controlled
DEFLATE da ...)
+ TODO: check
+CVE-2026-78341 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
+ TODO: check
+CVE-2026-78340 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
+ TODO: check
+CVE-2026-78339 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
+ TODO: check
+CVE-2026-78027 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
+ TODO: check
+CVE-2026-78026 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
+ TODO: check
+CVE-2026-78025 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
+ TODO: check
+CVE-2026-78024 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
+ TODO: check
+CVE-2026-78023 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
+ TODO: check
+CVE-2026-78022 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
+ TODO: check
+CVE-2026-78021 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
+ TODO: check
+CVE-2026-78020 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
+ TODO: check
+CVE-2026-78019 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
+ TODO: check
+CVE-2026-78018 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
+ TODO: check
+CVE-2026-78017 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
+ TODO: check
+CVE-2026-78016 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
+ TODO: check
+CVE-2026-78015 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
+ TODO: check
+CVE-2026-78013 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
+ TODO: check
+CVE-2026-76779 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
+ TODO: check
+CVE-2026-76769 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
+ TODO: check
+CVE-2026-75597 (pyLoad is a free and open-source download manager written in
Python. P ...)
+ TODO: check
+CVE-2026-75353 (OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in
the ser ...)
+ TODO: check
+CVE-2026-75352 (OpENer v2.3/commit 76b95cf, contains an integer underflow in
the serve ...)
+ TODO: check
+CVE-2026-75351 (OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in
the serv ...)
+ TODO: check
+CVE-2026-75350 (EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a
buffer ov ...)
+ TODO: check
+CVE-2026-75349 (EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf
contains an ou ...)
+ TODO: check
+CVE-2026-75348 (An out-of-bounds read vulnerability exists in EIPStackGroup
OpENer v2. ...)
+ TODO: check
+CVE-2026-75347 (EIPStackGroup OpENer v2.3 and master up to commit 76b95cf
contain an e ...)
+ TODO: check
+CVE-2026-75346 (An out-of-bounds read vulnerability exists in EIPStackGroup
OpENer v2. ...)
+ TODO: check
+CVE-2026-75345 (OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read
in the u ...)
+ TODO: check
+CVE-2026-73179 (Improper enforcement of single-use authorization code
semantics in the ...)
+ TODO: check
+CVE-2026-71884 (In Bouncy Castle for Java LTS before 2.73.13, the native
one-shot CTR ...)
+ TODO: check
+CVE-2026-71575 (The max_age authentication-freshness check in
OidcClientCodeRequestFil ...)
+ TODO: check
+CVE-2026-62049 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-62042 (Missing Authorization vulnerability in unFocus Projects
Scripts n Styl ...)
+ TODO: check
+CVE-2026-62041 (Missing Authorization vulnerability in Ashok Dudhat WP Event
Manager w ...)
+ TODO: check
+CVE-2026-62040 (Missing Authorization vulnerability in DEV Institute Restrict
User Acc ...)
+ TODO: check
+CVE-2026-62039 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-62036 (Exposure of Sensitive System Information to an Unauthorized
Control Sp ...)
+ TODO: check
+CVE-2026-62029 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-62028 (Missing Authorization vulnerability in bPlugins Before After
Image Com ...)
+ TODO: check
+CVE-2026-62026 (Cross-Site Request Forgery (CSRF) vulnerability in
MIGHTYminnow Dashbo ...)
+ TODO: check
+CVE-2026-55797 (Argo CD is a declarative, GitOps continuous delivery tool for
Kubernet ...)
+ TODO: check
+CVE-2026-4264 (Reflected Cross-Site Scripting (XSS) on the BeeTienda
e-commerce platf ...)
+ TODO: check
+CVE-2026-48484 (pyLoad is a free and open-source download manager written in
Python. P ...)
+ TODO: check
+CVE-2026-42695 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-39779 (Missing Authorization vulnerability in Asgaros Asgaros Forum
asgaros-f ...)
+ TODO: check
+CVE-2026-39460 (Usernames and passwords, including the default factory
credentials, ar ...)
+ TODO: check
+CVE-2026-39453 (Navigating to a certain URL on the switch\u2019s web server
causes the ...)
+ TODO: check
+CVE-2026-33367 (SNMP can be used to perform administrative actions such as
retrieving ...)
+ TODO: check
+CVE-2026-33272 (A malicious user with physical access to the device can boot
the switc ...)
+ TODO: check
+CVE-2026-32645 (Default factory credentials with administrative access are
enabled and ...)
+ TODO: check
+CVE-2026-29797 (No authentication is required when updating firmware or
bootloader, ma ...)
+ TODO: check
+CVE-2026-28745 (Usernames and passwords, including the default credentials,
are stored ...)
+ TODO: check
+CVE-2026-19575 (The user-mode verification handler for the device_deinit()
system call ...)
+ TODO: check
+CVE-2026-19574 (The ARM64 MMU back-end allocated address space identifiers
(ASIDs) for ...)
+ TODO: check
+CVE-2026-19571 (The ITE IT8xxx2 SHI host-command backend
(subsys/mgmt/ec_host_cmd/back ...)
+ TODO: check
+CVE-2026-19570 (The LE Audio Broadcast Sink in
subsys/bluetooth/audio/bap_broadcast_si ...)
+ TODO: check
+CVE-2026-19569 (dynamic_object_create() in kernel/userspace/userspace.c
computed the b ...)
+ TODO: check
+CVE-2026-15340 (lwIP SMTP client does not check the size of inputs,
potentially allowi ...)
+ TODO: check
+CVE-2026-108160 (AstronRPA through 1.1.6 contains a download of code without
integrity ...)
+ TODO: check
+CVE-2026-108159 (AstronRPA through 1.1.6 contains a cross-site scripting
vulnerability ...)
+ TODO: check
+CVE-2026-108158 (plugNmeet Server through 2.5.2 contains a path traversal
vulnerability ...)
+ TODO: check
+CVE-2026-108157 (Pingvin Share X from 0.19.0 before 1.22.0 contains an
improper authent ...)
+ TODO: check
+CVE-2026-108156 (LobsterAI 2026.5.27 through 2026.9.23 contains an external
control of ...)
+ TODO: check
+CVE-2026-108125 (Improper neutralization of special elements used in an SQL
command ('S ...)
+ TODO: check
+CVE-2026-108124 (Improper neutralization of special elements used in an SQL
command ('S ...)
+ TODO: check
+CVE-2026-108119 (A flaw was found in busybox. The tar applet's deferred
link-creation h ...)
+ TODO: check
+CVE-2026-108113 (ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted
file uploa ...)
+ TODO: check
+CVE-2026-108112 (ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization
vulnerab ...)
+ TODO: check
+CVE-2026-108111 (ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization
vulnerab ...)
+ TODO: check
+CVE-2026-108110 (MOVO through 0.2.3 contains an authorization bypass
vulnerability in t ...)
+ TODO: check
+CVE-2026-108109 (PHPNuxBill through 2025.3.20 contains an account takeover
vulnerabilit ...)
+ TODO: check
+CVE-2026-108108 (PHPNuxBill through 2025.3.20 contains an authentication
bypass vulnera ...)
+ TODO: check
+CVE-2026-108107 (PHPNuxBill through 2025.3.20 contains an unauthenticated SQL
injection ...)
+ TODO: check
+CVE-2026-108106 (Xerial snappy-java before 1.1.10.9 contains an unbounded
memory alloca ...)
+ TODO: check
+CVE-2026-108105 (Open5GS through 2.8.0 contains a reachable assertion
vulnerability in ...)
+ TODO: check
+CVE-2026-108104 (Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a
double rel ...)
+ TODO: check
+CVE-2026-108103 (Open5GS through 2.8.0 contains a heap out-of-bounds read
vulnerability ...)
+ TODO: check
+CVE-2026-108102 (Open5GS through 2.8.0 contains a heap out-of-bounds read
vulnerability ...)
+ TODO: check
+CVE-2026-108101 (HortusFox (hortusfox-web) through 6.3 contains an
unrestricted file up ...)
+ TODO: check
+CVE-2026-108100 (HortusFox (hortusfox-web) before 6.2 contains an SQL
injection vulnera ...)
+ TODO: check
+CVE-2026-108096 (Improper authorization in the query resolvers generated by
@aws-amplif ...)
+ TODO: check
+CVE-2026-108093 (A flaw was found in GIMP. The XCF loader processes
image-simulation-in ...)
+ TODO: check
+CVE-2026-108063 (A flaw was found in libhangul. When parsing Hanja dictionary
files, th ...)
+ TODO: check
+CVE-2026-108039 (By default, StaxUtils placed no limit on the total number of
elements ...)
+ TODO: check
+CVE-2026-107938 (In Apache CXF, the Netty-based HTTP client transport
(cxf-rt-transport ...)
+ TODO: check
+CVE-2026-107937 (In Apache CXF, the parser for multipart/MTOM attachment part
headers d ...)
+ TODO: check
+CVE-2026-107935 (A path traversal vulnerability was found in gvproxy, the
network forwa ...)
+ TODO: check
+CVE-2026-107841 (pacioli provides least-privilege governance and a governed
agent broke ...)
+ TODO: check
+CVE-2026-107840 (yopass is a service for securely sharing secrets, passwords,
and files ...)
+ TODO: check
+CVE-2026-107839 (ageLANServer provides a cross-platform web server and
launcher for off ...)
+ TODO: check
+CVE-2026-107838 (RIOT is an open-source microcontroller operating system
designed for I ...)
+ TODO: check
+CVE-2026-107837 (RIOT is an open-source microcontroller operating system
designed for I ...)
+ TODO: check
+CVE-2026-107836 (RIOT is an open-source microcontroller operating system
designed for I ...)
+ TODO: check
+CVE-2026-107835 (OWASP Coraza WAF is a golang modsecurity compatible web
application fi ...)
+ TODO: check
+CVE-2026-107834 (OWASP Coraza WAF is a golang modsecurity compatible web
application fi ...)
+ TODO: check
+CVE-2026-107833 (OWASP Coraza WAF is a golang modsecurity compatible web
application fi ...)
+ TODO: check
+CVE-2026-107826 (OWASP Coraza WAF is a golang modsecurity compatible web
application fi ...)
+ TODO: check
+CVE-2026-107825 (OWASP Coraza WAF is a golang modsecurity compatible web
application fi ...)
+ TODO: check
+CVE-2026-107824 (x64dbg-MCP Server is a native Model Context Protocol (MCP)
plugin for ...)
+ TODO: check
+CVE-2026-107823 (MariaDB server is a community developed fork of MySQL server.
From 10. ...)
+ TODO: check
+CVE-2026-107822 (MariaDB server is a community developed fork of MySQL server.
From 10. ...)
+ TODO: check
+CVE-2026-107821 (MariaDB server is a community developed fork of MySQL server.
From 10. ...)
+ TODO: check
+CVE-2026-107820 (x64dbg-MCP Server is a native Model Context Protocol (MCP)
plugin for ...)
+ TODO: check
+CVE-2026-107819 (MariaDB Connector/C is a C and C++ client library for
connecting appli ...)
+ TODO: check
+CVE-2026-107818 (MariaDB server is a community developed fork of MySQL server.
From 10. ...)
+ TODO: check
+CVE-2026-107817 (MariaDB server is a community developed fork of MySQL server.
From 10. ...)
+ TODO: check
+CVE-2026-107816 (MariaDB server is a community developed fork of MySQL server.
From 10. ...)
+ TODO: check
+CVE-2026-107815 (MariaDB server is a community developed fork of MySQL server.
From 10. ...)
+ TODO: check
+CVE-2026-107814 (MariaDB server is a community developed fork of MySQL server.
From 10. ...)
+ TODO: check
+CVE-2026-107813 (Nginx UI is a web user interface for the Nginx web server.
From 2.0.0 ...)
+ TODO: check
+CVE-2026-107812 (Nginx UI is a web user interface for the Nginx web server.
From 2.0.0 ...)
+ TODO: check
+CVE-2026-107811 (Nginx UI is a web user interface for the Nginx web server.
From 2.0.0 ...)
+ TODO: check
+CVE-2026-107810 (Nginx UI is a web user interface for the Nginx web server.
From 2.0.0 ...)
+ TODO: check
+CVE-2026-107809 (Nginx UI is a web user interface for the Nginx web server.
From 2.0.0 ...)
+ TODO: check
+CVE-2026-107808 (Nginx UI is a web user interface for the Nginx web server.
From 2.0.0 ...)
+ TODO: check
+CVE-2026-107807 (Nginx UI is a web user interface for the Nginx web server.
From 2.0.0 ...)
+ TODO: check
+CVE-2026-107806 (Nginx UI is a web user interface for the Nginx web server.
From 2.3.8 ...)
+ TODO: check
+CVE-2026-107805 (Nginx UI is a web user interface for the Nginx web server.
From 2.5.0 ...)
+ TODO: check
+CVE-2026-107804 (Nginx UI is a web user interface for the Nginx web server.
From 2.2.0 ...)
+ TODO: check
+CVE-2026-107803 (ProcessMaker is an open source workflow management software
suite. Pri ...)
+ TODO: check
+CVE-2026-107785 (Crux Agent from 1.9.0 before 2.0.3 uses the full SKA
bilocation key as ...)
+ TODO: check
+CVE-2026-107783 (Insertion of sensitive information into log file in AWS Tools
for Powe ...)
+ TODO: check
+CVE-2026-107655 (A flaw was found in CUPS. When processing embedded job ticket
comments ...)
+ TODO: check
+CVE-2026-107419 (Missing Authorization vulnerability in Cool Plugins AI
Translation for ...)
+ TODO: check
+CVE-2026-106602 (Authentication Bypass Using an Alternate Path or Channel
vulnerability ...)
+ TODO: check
+CVE-2026-106601 (Authentication Bypass Using an Alternate Path or Channel
vulnerability ...)
+ TODO: check
+CVE-2026-106581 (Before 4.92.0, Docker Desktop for Windows did not verify the
signature ...)
+ TODO: check
+CVE-2026-106155 (In Progress\xae Telerik\xae Report Server prior to version
12.2.26.100 ...)
+ TODO: check
+CVE-2026-106145 (In Progress\xae Telerik\xae Report Server prior to version
12.2.26.100 ...)
+ TODO: check
+CVE-2026-105883 (Missing Authorization vulnerability in ThemeHunk Th Shop
Mania th-shop ...)
+ TODO: check
+CVE-2026-105877 (Insertion of Sensitive Information Into Sent Data
vulnerability in Qua ...)
+ TODO: check
+CVE-2026-105872 (Deserialization of Untrusted Data vulnerability in mklacroix
Product C ...)
+ TODO: check
+CVE-2026-105870 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-105318 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-105281 (The internal data publisher on openPDC accepts network
connections wit ...)
+ TODO: check
+CVE-2026-105278 (The published Docker image for openPDC includes a fixed
administrative ...)
+ TODO: check
+CVE-2026-104635 (Uncontrolled Recursion vulnerability in Protobuf.JSON.Decode
in elixir ...)
+ TODO: check
+CVE-2026-104629 (A component loading mechanism in openPDC and openHistorian
will constr ...)
+ TODO: check
+CVE-2026-104392 (Deserialization of Untrusted Data vulnerability in
ExpressTech Quiz An ...)
+ TODO: check
+CVE-2026-104117 (A missing authorization check in the illumos IP management
daemon (ipm ...)
+ TODO: check
+CVE-2026-104116 (A missing authorization check in the illumos zones statistics
daemon ( ...)
+ TODO: check
+CVE-2026-104115 (A stack-based buffer overflow in the illumos reparse point
daemon (rep ...)
+ TODO: check
+CVE-2026-104114 (A NULL pointer dereference in the illumos Network Auto-Magic
daemon (n ...)
+ TODO: check
+CVE-2026-104113 (A double free in the IP management daemon (ipmgmtd) of OmniOS
and Smar ...)
+ TODO: check
+CVE-2026-104112 (A missing release of resources in the illumos name service
cache daemo ...)
+ TODO: check
+CVE-2026-104084 (SmarterMail before build 9777 contains a privilege escalation
vulnerab ...)
+ TODO: check
+CVE-2026-104083 (SmarterMail before build 9777 contains a stored mutation
cross-site sc ...)
+ TODO: check
+CVE-2026-104082 (SmarterMail before build 9777 contains a remote code
execution vulnera ...)
+ TODO: check
+CVE-2026-104081 (KodExplorer before 4.55 contains a path traversal
vulnerability in the ...)
+ TODO: check
+CVE-2026-104079 (Envira Gallery Lite before 1.16.2 contains a missing
authorization vul ...)
+ TODO: check
+CVE-2026-103413 (Improper input validation vulnerability in Apache Camel
Karavan. Wh ...)
+ TODO: check
+CVE-2026-103412 (Improper limitation of a pathname to a restricted directory
('path tra ...)
+ TODO: check
+CVE-2026-103329 (The Super Payments WordPress plugin before 1.43.1 does not
properly ve ...)
+ TODO: check
+CVE-2026-103220 (The Affinity by Canva application before 3.3.1 (October 2026
release) ...)
+ TODO: check
+CVE-2026-102916 (A reachable assertion in the illumos bhyve instruction
emulator allows ...)
+ TODO: check
+CVE-2026-102554 (Allocation of resources without limits or throttling
(CWE-770) during ...)
+ TODO: check
+CVE-2026-101130 (The Affinity by Canva application before 3.3.1 (October 2026
release) ...)
+ TODO: check
+CVE-2026-101094 (The Affinity by Canva application before 3.3.1 (October 2026
release) ...)
+ TODO: check
+CVE-2026-101022 (A Modbus connection feature on openPDC accepts a
caller-specified dest ...)
+ TODO: check
+CVE-2026-100730 (A service console interface on openPDC and openHistorian
deserializes ...)
+ TODO: check
+CVE-2026-100227 (Improper Verification of Cryptographic Signature
vulnerability in Apac ...)
+ TODO: check
+CVE-2025-61560 (A race condition vulnerability in the SessionManager of CNCF:
Cloud Na ...)
+ TODO: check
+CVE-2025-14123 (The Redux Framework plugin for WordPress is vulnerable to
privilege es ...)
+ TODO: check
+CVE-2016-20098 (Moderator Toolbox (reddit-moderator-toolbox) before 4.0.14
contains a ...)
+ TODO: check
+CVE-2026-98384 (In the Linux kernel, the following vulnerability has been
resolved: b ...)
- linux 7.2.9-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE:
https://git.kernel.org/linus/01b245ba016d44861690594e10f67e026ce8552f (7.3-rc5)
-CVE-2026-98383 [bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL]
+CVE-2026-98383 (In the Linux kernel, the following vulnerability has been
resolved: b ...)
- linux 7.2.9-1
NOTE:
https://git.kernel.org/linus/e4a62833adff6ef0fe7c0b90393204fe3c26b5c5 (7.3-rc5)
-CVE-2026-98382 [bpf: Reject dev-bound-only programs on other devices]
+CVE-2026-98382 (In the Linux kernel, the following vulnerability has been
resolved: b ...)
- linux 7.2.9-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE:
https://git.kernel.org/linus/6db1ce73e9853f533eb7f413f14ba00f8ec6f80d (7.3-rc5)
-CVE-2026-98381 [veth: manage XDP program pointers during channel resize]
+CVE-2026-98381 (In the Linux kernel, the following vulnerability has been
resolved: v ...)
- linux 7.2.9-1
NOTE:
https://git.kernel.org/linus/7104a370714346b667712913dc16abf14bbc97ed (7.3-rc5)
-CVE-2026-98380 [net/sched: reject IDR error pointers when deleting actions]
+CVE-2026-98380 (In the Linux kernel, the following vulnerability has been
resolved: n ...)
- linux 7.2.9-1
NOTE:
https://git.kernel.org/linus/c82b797abe668d0b668601a93ba2c0b071a63574 (7.3-rc5)
-CVE-2026-98379 [netfilter: ip6t_rpfilter: reject routes without inet6_dev]
+CVE-2026-98379 (In the Linux kernel, the following vulnerability has been
resolved: n ...)
- linux 7.2.9-1
NOTE:
https://git.kernel.org/linus/1b9b5323725e458906c7620a3bc10398b51ad954 (7.3-rc5)
-CVE-2026-98378 [bpf: Skip unsettled links in link iterator]
+CVE-2026-98378 (In the Linux kernel, the following vulnerability has been
resolved: b ...)
- linux 7.2.9-1
NOTE:
https://git.kernel.org/linus/50e80e2bb5e2be8515205b9c496b9640ddefa434 (7.3-rc5)
-CVE-2026-98377 [vlan: require the MAC header to be present in
__vlan_insert_inner_tag()]
+CVE-2026-98377 (In the Linux kernel, the following vulnerability has been
resolved: v ...)
- linux 7.2.9-1
NOTE:
https://git.kernel.org/linus/ab888242fce4f16f6c4d4c6ec53939ad36aa3b3a (7.3-rc5)
-CVE-2026-98376 [bpf: Use array_map_meta_equal for percpu array inner map
replacement]
+CVE-2026-98376 (In the Linux kernel, the following vulnerability has been
resolved: b ...)
- linux 7.1.3-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE:
https://git.kernel.org/linus/593980175389a05793f6060aa20e626330960395 (7.1-rc5)
-CVE-2026-98375
+CVE-2026-98375 (In the Linux kernel, the following vulnerability has been
resolved: x ...)
- linux <unfixed>
NOTE: https://xenbits.xen.org/xsa/advisory-522.html
NOTE:
https://git.kernel.org/linus/089e58805c452e52179482b1025a8e309a57f801
@@ -547,6 +1045,7 @@ CVE-2026-107700 (dot-access 0.0.3 through 1.0.0 contains a
code injection vulner
CVE-2026-107699 (ppt2png through 0.0.6 contains an OS command injection
vulnerability t ...)
NOT-FOR-US: ppt2png Node.js module
CVE-2026-107698 (FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a
server-side requ ...)
+ {DSA-6361-1 DSA-6276-1}
- ffmpeg 7:8.1-1
NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/ea9e85e54981b8402368d0f21648836d6738f1b1
(n8.1)
NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/f9aa8729bce10e99046e69754d61e43c00f7877b
(n8.0.2)
@@ -899,23 +1398,28 @@ CVE-2026-105829 (League CommonMark from 1.3.0 before
2.10.2 contains a cross-sit
TODO: check
CVE-2026-105828 (Parse Server 8.2.2 before 8.6.92 and 9.0.0 before
9.10.1-alpha.12 cont ...)
NOT-FOR-US: Parse Server
-CVE-2026-105827 (ImageMagick before 7.1.2-30 and 6.9.13-55 contains an
uncontrolled rec ...)
+CVE-2026-105827
+ REJECTED
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wxw6-98rj-hjfr
TODO: Duplicte of CVE-2026-106572, report to VulnCheck CNA for rejection
-CVE-2026-105826 (ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains
a securi ...)
+CVE-2026-105826
+ REJECTED
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3j4w-pvxj-fpjc
TODO: Duplicate of CVE-2026-107210, report to VulnCheck CNA for
rejection
-CVE-2026-105825 (ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains
a denial ...)
+CVE-2026-105825
+ REJECTED
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-27m9-54jx-fgvq
TODO: Duplicate of CVE-2026-107208, report to VulnCheck CNA for
rejection
-CVE-2026-105824 (ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains
a use-af ...)
+CVE-2026-105824
+ REJECTED
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f2r2-qw7g-3c8x
TODO: Duplicate of CVE-2026-107209, report to VulnCheck CNA for
rejection
-CVE-2026-105823 (ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a
security ...)
+CVE-2026-105823
+ REJECTED
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r868-pmwh-fv2c
TODO: Duplicate of CVE-2026-106580, report to VulnCheck CNA for
rejection
@@ -931,35 +1435,43 @@ CVE-2026-105452 (Docker Sandboxes could forward a
client-supplied credential alo
TODO: check
CVE-2026-105436 (Deserialization of Untrusted Data vulnerability in MainWP
MainWP Child ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-105405 (ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains
an inval ...)
+CVE-2026-105405
+ REJECTED
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6xf5-c3jx-rp39
TODO: Duplicate of CVE-2026-106578, report to VulnCheck CNA for
rejection
-CVE-2026-105404 (ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains
a code i ...)
+CVE-2026-105404
+ REJECTED
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5rg6-j44q-q892
TODO: Duplicate of CVE-2026-106577, report to VulnCheck CNA for
rejection
-CVE-2026-105403 (ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 allows a
security ...)
+CVE-2026-105403
+ REJECTED
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vcjj-32hg-qpx5
TODO: Duplicate of CVE-2026-106579, report to VulnCheck CNA for
rejection
-CVE-2026-105402 (ImageMagick before 7.1.2-31 contains a denial of service
vulnerability ...)
+CVE-2026-105402
+ REJECTED
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v45j-x8p4-3mh4
TODO: Duplicate of CVE-2026-106576, report to VulnCheck CNA for
rejection
-CVE-2026-105401 (ImageMagick before 7.1.2-31 contains a heap buffer overflow
vulnerabil ...)
+CVE-2026-105401
+ REJECTED
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4fq9-vrx7-gv92
TODO: Duplicate of CVE-2026-106574, report to VulnCheck CNA for
rejection
-CVE-2026-105400 (ImageMagick before 7.1.2-31 contains a resource leak
vulnerability tha ...)
+CVE-2026-105400
+ REJECTED
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2w4h-697j-4vrm
TODO: Duplicate of CVE-2026-106575, report to VulnCheck CNA for
rejection
-CVE-2026-105399 (ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains
a denial ...)
+CVE-2026-105399
+ REJECTED
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qr53-hc3p-fc62
TODO: Duplicate of CVE-2026-106573, report to VulnCheck CNA for
rejection
-CVE-2026-105398 (ImageMagick before 7.1.2-31 contains a heap buffer overflow
vulnerabil ...)
+CVE-2026-105398
+ REJECTED
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jvjm-9f73-fhpq
TODO: Duplicate of CVE-2026-106571, report to VulnCheck CNA for
rejection
@@ -3073,7 +3585,8 @@ CVE-2026-39727 (Subscriber Cross Site Scripting (XSS) in
WC Fields Factory <= 4.
NOT-FOR-US: WordPress plugin or theme
CVE-2026-39726 (Unauthenticated Cross Site Scripting (XSS) in Lumise Product
Designer ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-39725 (Contributor Remote Code Execution (RCE) in Content Visibility
for Divi ...)
+CVE-2026-39725
+ REJECTED
NOT-FOR-US: WordPress plugin or theme
CVE-2026-39724 (Unauthenticated Cross Site Scripting (XSS) in HTTP Requests
Manager <= ...)
NOT-FOR-US: WordPress plugin or theme
@@ -5063,7 +5576,7 @@ CVE-2026-XXXX [GHSA-w9hj-hq9p-m7f6: CUPS: malformed IPP
attribute names bypass C
- cups <unfixed>
NOTE:
https://github.com/OpenPrinting/cups/security/advisories/GHSA-w9hj-hq9p-m7f6
NOTE: Fixed by:
https://github.com/OpenPrinting/cups/commit/05fe6b0e848e51243e9d62e2c5adb6c3023f247e
(v2.4.20)
-CVE-2026-107888 [GHSA-qqm8-4q5h-jg55: NULL pointer dereference in
cupsdCheckJobs crashes cupsd after temporary printer deletion]
+CVE-2026-107888 (OpenPrinting CUPS before 2.4.20 contains a NULL pointer
dereference in ...)
- cups <unfixed>
NOTE:
https://github.com/OpenPrinting/cups/security/advisories/GHSA-qqm8-4q5h-jg55
NOTE: Fixed by:
https://github.com/OpenPrinting/cups/commit/c5fc041ca0a211f8e69854907be7b55f56955659
(v2.4.20)
@@ -5071,7 +5584,7 @@ CVE-2026-XXXX [GHSA-fw7q-ww8w-phx8:
`job-presets-supported` member values allow
- cups <unfixed>
NOTE:
https://github.com/OpenPrinting/cups/security/advisories/GHSA-fw7q-ww8w-phx8
NOTE: Fixed by:
https://github.com/OpenPrinting/cups/commit/28834c719ae76e97b75f8190ee5e941daedb3da8
(v2.4.20)
-CVE-2026-107890 [GHSA-wjc4-qhjr-5m5x: Unauthenticated Denial of Service in
cupsd via Repeated IPP Group Tags]
+CVE-2026-107890 (OpenPrinting CUPS before 2.4.20 contains a NULL pointer
dereference ca ...)
- cups <unfixed>
NOTE:
https://github.com/OpenPrinting/cups/security/advisories/GHSA-wjc4-qhjr-5m5x
NOTE: Fixed by:
https://github.com/OpenPrinting/cups/commit/f3fb41912e4e29dbbbe7c4afd4fe48508af21bc0
(v2.4.20)
@@ -5087,7 +5600,7 @@ CVE-2026-XXXX [GHSA-69qc-prxg-h2c7: CUPS fax option
values bypass the CVE-2026-3
- cups <unfixed>
NOTE:
https://github.com/OpenPrinting/cups/security/advisories/GHSA-69qc-prxg-h2c7
NOTE: Fixed by:
https://github.com/OpenPrinting/cups/commit/0cf4e7814d6810ed3c454222bce3aa342d541681
(v2.4.20)
-CVE-2026-107886 [GHSA-pwg4-pv39-8c22: Double-free in cupsd class management
via CUPS-Add-Modify-Class and CUPS-Delete-Class]
+CVE-2026-107886 (OpenPrinting CUPS before 2.4.20 contains a double-free in
printer-clas ...)
- cups <unfixed>
NOTE:
https://github.com/OpenPrinting/cups/security/advisories/GHSA-pwg4-pv39-8c22
NOTE: Fixed by:
https://github.com/OpenPrinting/cups/commit/13bc9d4f8d695403d54469cc3c8b675e34a7037f
(v2.4.20)
@@ -8429,7 +8942,7 @@ CVE-2026-97291 (Contributor PHP Object Injection in
Schema & Structured Data for
NOT-FOR-US: WordPress plugin or theme
CVE-2026-97290 (Unauthenticated Cross Site Scripting (XSS) in Photonic Gallery
& Light ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-97289 (Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey
Master < ...)
+CVE-2026-97289 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-97288 (Contributor Cross Site Scripting (XSS) in OAuth Server <=
4.5.1 versio ...)
NOT-FOR-US: WordPress plugin or theme
@@ -35315,7 +35828,7 @@ CVE-2026-93337 (NetworkManager-l2tp through 1.52.4,
fixed in 1.52.6, contains an
- network-manager-l2tp 1.52.6-1
NOTE:
https://github.com/nm-l2tp/NetworkManager-l2tp/security/advisories/GHSA-rp84-8h2r-5xc3
NOTE: Fixed by:
https://github.com/nm-l2tp/NetworkManager-l2tp/commit/64879ce0ad866f7c9a45babe4d95731a916ea00f
(1.52.6, 1.20.26)
-CVE-2026-107466 [GHSA-484h-v688-jq5j: Source URL scheme bypasses sandboxed
mode protections across multiple source subtypes]
+CVE-2026-107466 (A flaw was found in flatpak-builder. This vulnerability
allows an atta ...)
- flatpak-builder 1.4.11-1 (bug #1147701)
[trixie] - flatpak-builder <no-dsa> (Minor issue)
[bookworm] - flatpak-builder <postponed> (Minor issue)
@@ -279283,11 +279796,11 @@ CVE-2025-7874 (A vulnerability was found in
Metasoft \u7f8e\u7279\u8f6f\u4ef6 Me
NOT-FOR-US: Metasoft
CVE-2025-7873 (A vulnerability was found in Metasoft \u7f8e\u7279\u8f6f\u4ef6
MetaCRM ...)
NOT-FOR-US: Metasoft
-CVE-2025-7872 (A vulnerability was found in Portabilis i-Diario 1.5.0 and
classified ...)
+CVE-2025-7872 (A weakness has been identified in Portabilis i-Diario 1.5.0.
This affe ...)
NOT-FOR-US: Portabilis i-Diario
-CVE-2025-7871 (A vulnerability has been found in Portabilis i-Diario 1.5.0 and
classi ...)
+CVE-2025-7871 (A security flaw has been discovered in Portabilis i-Diario
1.5.0. The ...)
NOT-FOR-US: Portabilis i-Diario
-CVE-2025-7870 (A vulnerability, which was classified as problematic, was found
in Por ...)
+CVE-2025-7870 (A vulnerability was identified in Portabilis i-Diario 1.5.0.
The affec ...)
NOT-FOR-US: Portabilis i-Diario
CVE-2025-7869 (A vulnerability, which was classified as problematic, has been
found i ...)
NOT-FOR-US: Portabilis i-Educar
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/356712c1b71a23db42cd21d3d03fc2452841e8cf
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/356712c1b71a23db42cd21d3d03fc2452841e8cf
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
