Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a6a2ddce by security tracker role at 2026-10-12T07:13:56+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,189 @@
+CVE-2026-98385 (In the Linux kernel, the following vulnerability has been
resolved: s ...)
+ TODO: check
+CVE-2026-93582 (The HTTP Basic Authentication modules in ((OTRS)) Community
Edition 6 ...)
+ TODO: check
+CVE-2026-93581 (User-controlled values are not sufficiently neutralized when
included ...)
+ TODO: check
+CVE-2026-87765 (In the kernel apsys DVFS driver, there is a possible
out-of-bounds rea ...)
+ TODO: check
+CVE-2026-87690 (The Metasploit Framework post module
post/apple_ios/gather/ios_image_g ...)
+ TODO: check
+CVE-2026-84167 (The Hotel Booking WordPress plugin through 3.8 does not verify
that a ...)
+ TODO: check
+CVE-2026-84166 (The Hotel Booking WordPress plugin through 3.8 does not
implement CSRF ...)
+ TODO: check
+CVE-2026-78359 (OTRS does not sufficiently enforce the uniqueness of customer
user ide ...)
+ TODO: check
+CVE-2026-78358 (Several administrative actions do not sufficiently validate
whether a ...)
+ TODO: check
+CVE-2026-78357 (Previously issued authentication tokens are not immediately
invalidate ...)
+ TODO: check
+CVE-2026-78356 (The OTRS Agent Frontend configuration endpoint can be accessed
without ...)
+ TODO: check
+CVE-2026-78355 (A path traversal vulnerability in the OTRSSendSupportBundle
functional ...)
+ TODO: check
+CVE-2026-66086 (In the modem OTA stack, there is a possible stack-based buffer
overflo ...)
+ TODO: check
+CVE-2026-66085 (In modem, there is a possible information disclosure due to
missing fi ...)
+ TODO: check
+CVE-2026-48212 (An OTRS administrator can enter arbitrary JavaScript into the
content ...)
+ TODO: check
+CVE-2026-48211 (An authenticated administrator can be induced to delete
administrative ...)
+ TODO: check
+CVE-2026-21139 (Improper access control in Samsung Continuity Service for
windows prio ...)
+ TODO: check
+CVE-2026-21138 (Insufficient verification of data authenticity in Smart Switch
prior t ...)
+ TODO: check
+CVE-2026-21137 (Path traversal in Smart Switch prior to version 3.7.73 allows
physical ...)
+ TODO: check
+CVE-2026-21136 (Improper authorization in Smart Switch prior to version 3.7.73
allows ...)
+ TODO: check
+CVE-2026-21135 (Improper access control in Samsung Internet prior to version
30.0.5.6 ...)
+ TODO: check
+CVE-2026-21134 (Improper authentication in Samsung Flow prior to version
4.9.22.4 allo ...)
+ TODO: check
+CVE-2026-21133 (Path traversal in Samsung Flow prior to version 4.9.22.1
allows local ...)
+ TODO: check
+CVE-2026-21132 (Improper input validation in Samsung Internet prior to version
30.0.5. ...)
+ TODO: check
+CVE-2026-21131 (Incorrect default permission in Samsung Flow prior to version
4.9.22.4 ...)
+ TODO: check
+CVE-2026-21130 (Improper input validation in CreditCardRetrieveActivity of
Samsung Che ...)
+ TODO: check
+CVE-2026-21129 (Improper input validation in GuestCreditCardRegisterActivity
of Samsun ...)
+ TODO: check
+CVE-2026-21128 (Improper input validation in CreditCardRegisterActivity of
Samsung Che ...)
+ TODO: check
+CVE-2026-21127 (Improper export of android application components in Samsung
Account p ...)
+ TODO: check
+CVE-2026-21126 (Improper input validation in getting cover image in
libsimba.heifdec.m ...)
+ TODO: check
+CVE-2026-21125 (Improper input validation in parsing sheifd in
libsimba.heifdec.media. ...)
+ TODO: check
+CVE-2026-21124 (Improper input validation in getting cover image in
libsimba.heifdec.m ...)
+ TODO: check
+CVE-2026-21123 (Improper privilege management in Locksettings prior to SMR
Oct-2026 Re ...)
+ TODO: check
+CVE-2026-21122 (Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026
Release ...)
+ TODO: check
+CVE-2026-21121 (Improper handling of insufficient permission in CmcCore prior
to SMR O ...)
+ TODO: check
+CVE-2026-21120 (Use after free in WSM service prior to SMR Oct-2026 Release 1
allows l ...)
+ TODO: check
+CVE-2026-21119 (Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so
prior to ...)
+ TODO: check
+CVE-2026-21118 (Improper access control in DownloadProvider prior to SMR
Oct-2026 Rele ...)
+ TODO: check
+CVE-2026-21117 (Improper access control in CocktailBarService prior to SMR
Oct-2026 Re ...)
+ TODO: check
+CVE-2026-21116 (Out-of-bounds write in libsmkvextractor.so prior to SMR
Oct-2026 Relea ...)
+ TODO: check
+CVE-2026-21115 (Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR
Oct-2026 ...)
+ TODO: check
+CVE-2026-21114 (Out-of-bounds write in libsmkvextractor.so prior to SMR
Oct-2026 Relea ...)
+ TODO: check
+CVE-2026-109082 (A flaw was found in the Client-Initiated Backchannel
Authentication CI ...)
+ TODO: check
+CVE-2026-109080 (SQL injection in the bulk license plate search of the Flock
Night Shif ...)
+ TODO: check
+CVE-2026-108985 (ZDR decoding in libnfs through 6.0.2 before 7613236 has an
out-of-boun ...)
+ TODO: check
+CVE-2026-108982 (VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows
unintended ...)
+ TODO: check
+CVE-2026-108981 (ngx_cache_purge before 3.0.4 can allow file deletion via a
symlink att ...)
+ TODO: check
+CVE-2026-108980 (Blinko through 1.8.8 allows directory traversal, overwriting
startup f ...)
+ TODO: check
+CVE-2026-108978 (Heap-based buffer overflow vulnerability in Samsung
Opensource rlottie ...)
+ TODO: check
+CVE-2026-108976 (GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS
command inje ...)
+ TODO: check
+CVE-2026-108963 (databasement before 1.8.2 allows remote code execution
because it runs ...)
+ TODO: check
+CVE-2026-108809 (A vulnerability was identified in Eleveo Call Recording
Software up to ...)
+ TODO: check
+CVE-2026-108808 (A vulnerability was determined in Eleveo Call Recording
Software up to ...)
+ TODO: check
+CVE-2026-108807 (A vulnerability was found in krupalshah
EmployeeRecruitmentSystem up t ...)
+ TODO: check
+CVE-2026-108806 (A vulnerability has been found in krupalshah
EmployeeRecruitmentSystem ...)
+ TODO: check
+CVE-2026-108805 (A flaw has been found in krupalshah EmployeeRecruitmentSystem
up to 92 ...)
+ TODO: check
+CVE-2026-108804 (A vulnerability was detected in TRENDnet TEW-751DR,
TEW-752DRU and TEW ...)
+ TODO: check
+CVE-2026-108803 (A security vulnerability has been detected in y_project RuoYi
up to 4. ...)
+ TODO: check
+CVE-2026-108802 (A weakness has been identified in y_project RuoYi up to
4.8.3. This af ...)
+ TODO: check
+CVE-2026-108801 (A security flaw has been discovered in prasathmani
TinyFileManager up ...)
+ TODO: check
+CVE-2026-108800 (A vulnerability was identified in yangzongzhuan RuoYi 4.8.3.
The affec ...)
+ TODO: check
+CVE-2026-108799 (A vulnerability was determined in jackq XCMS up to
3fab5342cc509945a7c ...)
+ TODO: check
+CVE-2026-108798 (A vulnerability was found in ZKTeco BioTime 9.5.6 Build
20260130.3206. ...)
+ TODO: check
+CVE-2026-108797 (A vulnerability has been found in ZKTeco BioTime 9.5.6 Build
20260130. ...)
+ TODO: check
+CVE-2026-108796 (A flaw has been found in ZKTeco BioTime 9.5.6 Build
20260130.3206. Thi ...)
+ TODO: check
+CVE-2026-108795 (A vulnerability was detected in ZKTeco BioTime 9.5.6 Build
20260130.32 ...)
+ TODO: check
+CVE-2026-108794 (A security vulnerability has been detected in ZKTeco BioTime
9.5.6 Bui ...)
+ TODO: check
+CVE-2026-108791 (A weakness has been identified in westboy CicadasCMS up to
2431154dac8 ...)
+ TODO: check
+CVE-2026-108790 (A security flaw has been discovered in westboy CicadasCMS up
to 243115 ...)
+ TODO: check
+CVE-2026-108789 (A vulnerability was identified in deepseek-ai
deepseek-harness up to 0 ...)
+ TODO: check
+CVE-2026-108788 (A vulnerability was determined in deepseek-ai
deepseek-harness up to 0 ...)
+ TODO: check
+CVE-2026-108787 (A vulnerability was found in houtini-ai voice-analyser-mcp up
to 2.1.1 ...)
+ TODO: check
+CVE-2026-108786 (A vulnerability has been found in houtini-ai seo-crawler-mcp
up to 2.1 ...)
+ TODO: check
+CVE-2026-108785 (A flaw has been found in macrozheng mall up to 1.0.3. This
issue affec ...)
+ TODO: check
+CVE-2026-108784 (A vulnerability was detected in macrozheng mall up to 1.0.3.
This vuln ...)
+ TODO: check
+CVE-2026-108783 (A security vulnerability has been detected in PRVTPRO
Amnezia-Web-Pane ...)
+ TODO: check
+CVE-2026-108782 (A weakness has been identified in erzhongxmu JEEWMS up to
2026.09.27-W ...)
+ TODO: check
+CVE-2026-108781 (A security flaw has been discovered in erzhongxmu JEEWMS up
to 2026.09 ...)
+ TODO: check
+CVE-2026-108779 (A vulnerability was identified in erzhongxmu JEEWMS up to
2026.09.27-W ...)
+ TODO: check
+CVE-2026-108778 (A vulnerability was determined in erzhongxmu JEEWMS up to
2026.09.27-W ...)
+ TODO: check
+CVE-2026-108777 (A vulnerability was found in erzhongxmu JEEWMS up to
2026.09.27-W39. T ...)
+ TODO: check
+CVE-2026-108775 (A vulnerability has been found in erzhongxmu JEEWMS up to
2026.09.27-W ...)
+ TODO: check
+CVE-2026-108774 (A flaw has been found in erzhongxmu JEEWMS up to
2026.09.27-W39. The a ...)
+ TODO: check
+CVE-2026-108773 (A vulnerability was detected in erzhongxmu JEEWMS up to
2026.09.27-W39 ...)
+ TODO: check
+CVE-2026-108772 (A security vulnerability has been detected in bleenco
abstruse up to 2 ...)
+ TODO: check
+CVE-2026-108770 (A weakness has been identified in Appwrite up to 2.3.0. This
vulnerabi ...)
+ TODO: check
+CVE-2026-108769 (A security flaw has been discovered in zhayujie CowAgent up
to 2.2.0. ...)
+ TODO: check
+CVE-2026-107791 (The WP Comment Cleaner WordPress plugin before 7.2 does not
perform a ...)
+ TODO: check
+CVE-2026-107437 (GV-E-Map Server V18.2.0A contains a plaintext database
password embedd ...)
+ TODO: check
+CVE-2026-107203 (An **incorrect authorization** flaw has been found in
**network interf ...)
+ TODO: check
+CVE-2026-107193 (A flaw has been found in **permission filters** in the
**foreman** pac ...)
+ TODO: check
+CVE-2026-104703
+ REJECTED
+CVE-2025-15703 (The HireZoot WordPress plugin before 4.0.0 does not sanitise
and esca ...)
+ TODO: check
CVE-2026-59508 (Improper neutralization of special elements used in an SQL
command ('S ...)
NOT-FOR-US: Interuse i-Bos
CVE-2026-19935 (The Bluetooth LE host queues received L2CAP
connection-oriented channe ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a6a2ddcec2e53a8fc2202adfa93397fd3d169109
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a6a2ddcec2e53a8fc2202adfa93397fd3d169109
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
