Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
89edd8a9 by Salvatore Bonaccorso at 2026-10-09T21:22:33+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -21,13 +21,13 @@ CVE-2026-96518 (Missing Authorization vulnerability in
properfraction ProfilePre
CVE-2026-96461 (Missing Authorization vulnerability in TMS Amelia
ameliabooking allows ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-96396 (The Affinity by Canva application for macOS before 3.3.1
(October 2026 ...)
- TODO: check
+ NOT-FOR-US: Affinity by Canva application for macOS
CVE-2026-96395 (The Affinity by Canva app for macOS before 3.3.1 (October 2026
release ...)
- TODO: check
+ NOT-FOR-US: Affinity by Canva application for macOS
CVE-2026-96394 (The Affinity by Canva application for macOS before 3.3.1
(October 2026 ...)
- TODO: check
+ NOT-FOR-US: Affinity by Canva application for macOS
CVE-2026-96393 (The Affinity by Canva app before 3.3.1 (October 2026 release)
did not ...)
- TODO: check
+ NOT-FOR-US: Affinity by Canva application
CVE-2026-96337 (Missing Authorization vulnerability in properfraction
ProfilePress wp- ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-96336 (Authentication Bypass by Spoofing vulnerability in WPMU DEV
Forminator ...)
@@ -49,7 +49,7 @@ CVE-2026-96328 (Improper Neutralization of Special Elements
used in an SQL Comma
CVE-2026-96327 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-95702 (Use-after-free vulnerability in VFS in Google gVisor prior to
release ...)
- TODO: check
+ NOT-FOR-US: gVisor
CVE-2026-95610 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-95609 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
@@ -129,11 +129,11 @@ CVE-2026-94058 (Improper Neutralization of Input During
Web Page Generation ('Cr
CVE-2026-93947 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-92085 (Improper neutralization of input during web page generation
('cross-si ...)
- TODO: check
+ NOT-FOR-US: Talassoft Industrial Management Software
CVE-2026-90983 (Use of Client-Side authentication vulnerability in Hayat
Health Facili ...)
- TODO: check
+ NOT-FOR-US: Hayat Mobile
CVE-2026-8374 (Misuse and misconfiguration in Bluetooth communication in
SwitchBot Do ...)
- TODO: check
+ NOT-FOR-US: SwitchBot Door Lock Series
CVE-2026-89235 (The Testimonials by BestWebSoft WordPress plugin through 1.0.8
does no ...)
NOT-FOR-US: WordPress plugin
CVE-2026-87846 (The Shipping for Nova Poshta WordPress plugin through 1.19.8
does not ...)
@@ -143,11 +143,11 @@ CVE-2026-86851 (The Livees Checkout WordPress plugin
through 7.0.2 does not perf
CVE-2026-86463 (Apache CXF's FIQL query parser has a vulnerability in how it
searches ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-86405 (Improper verification of cryptographic signature vulnerability
in Sipa ...)
- TODO: check
+ NOT-FOR-US: PrestaShop Virtual POS Module
CVE-2026-85531 (Improper verification of cryptographic signature vulnerability
in Sipa ...)
- TODO: check
+ NOT-FOR-US: OpenCart Virtual POS Module:
CVE-2026-85479 (The STTP-based data publisher on openPDC accepts network
connections w ...)
- TODO: check
+ NOT-FOR-US: openPDC
CVE-2026-85348 (The GDPR Data Request Form WordPress plugin through 1.7.1 does
not hav ...)
NOT-FOR-US: WordPress plugin
CVE-2026-84224 (The Kirki WordPress plugin before 6.3.2 does not validate the
host of ...)
@@ -157,13 +157,13 @@ CVE-2026-84220 (The Kirki WordPress plugin before 6.3.2
does not prevent shortco
CVE-2026-79650 (Apache CXF\u2019s OIDC relying-party component could redirect
users to ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-79363 (Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting
(XSS) vul ...)
- TODO: check
+ NOT-FOR-US: Cloudron
CVE-2026-78835 (Rocket Software Rocket Remote Desktop 18.0.8583.1 is
vulnerable to Ins ...)
- TODO: check
+ NOT-FOR-US: Rocket Software Rocket Remote Desktop
CVE-2026-78796 (An issue in Netcore B11 Enterprise-level full Gigabit 9-port
shop wire ...)
- TODO: check
+ NOT-FOR-US: Netcore
CVE-2026-78795 (An issue in Netcore B11 Enterprise-level full Gigabit 9-port
shop wire ...)
- TODO: check
+ NOT-FOR-US: Netcore
CVE-2026-78384 (CompressionUtils.inflate() decompressed attacker-controlled
DEFLATE da ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-78341 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/89edd8a95e97cb12d163e77d674a1e65ff9f63e9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/89edd8a95e97cb12d163e77d674a1e65ff9f63e9
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
