Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2552994b by security tracker role at 2026-10-12T07:14:55+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5,13 +5,13 @@ CVE-2026-93582 (The HTTP Basic Authentication modules in
((OTRS)) Community Edit
CVE-2026-93581 (User-controlled values are not sufficiently neutralized when
included ...)
TODO: check
CVE-2026-87765 (In the kernel apsys DVFS driver, there is a possible
out-of-bounds rea ...)
- TODO: check
+ NOT-FOR-US: Unisoc
CVE-2026-87690 (The Metasploit Framework post module
post/apple_ios/gather/ios_image_g ...)
TODO: check
CVE-2026-84167 (The Hotel Booking WordPress plugin through 3.8 does not verify
that a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-84166 (The Hotel Booking WordPress plugin through 3.8 does not
implement CSRF ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-78359 (OTRS does not sufficiently enforce the uniqueness of customer
user ide ...)
TODO: check
CVE-2026-78358 (Several administrative actions do not sufficiently validate
whether a ...)
@@ -23,65 +23,65 @@ CVE-2026-78356 (The OTRS Agent Frontend configuration
endpoint can be accessed w
CVE-2026-78355 (A path traversal vulnerability in the OTRSSendSupportBundle
functional ...)
TODO: check
CVE-2026-66086 (In the modem OTA stack, there is a possible stack-based buffer
overflo ...)
- TODO: check
+ NOT-FOR-US: Unisoc
CVE-2026-66085 (In modem, there is a possible information disclosure due to
missing fi ...)
- TODO: check
+ NOT-FOR-US: Unisoc
CVE-2026-48212 (An OTRS administrator can enter arbitrary JavaScript into the
content ...)
TODO: check
CVE-2026-48211 (An authenticated administrator can be induced to delete
administrative ...)
TODO: check
CVE-2026-21139 (Improper access control in Samsung Continuity Service for
windows prio ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21138 (Insufficient verification of data authenticity in Smart Switch
prior t ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21137 (Path traversal in Smart Switch prior to version 3.7.73 allows
physical ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21136 (Improper authorization in Smart Switch prior to version 3.7.73
allows ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21135 (Improper access control in Samsung Internet prior to version
30.0.5.6 ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21134 (Improper authentication in Samsung Flow prior to version
4.9.22.4 allo ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21133 (Path traversal in Samsung Flow prior to version 4.9.22.1
allows local ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21132 (Improper input validation in Samsung Internet prior to version
30.0.5. ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21131 (Incorrect default permission in Samsung Flow prior to version
4.9.22.4 ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21130 (Improper input validation in CreditCardRetrieveActivity of
Samsung Che ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21129 (Improper input validation in GuestCreditCardRegisterActivity
of Samsun ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21128 (Improper input validation in CreditCardRegisterActivity of
Samsung Che ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21127 (Improper export of android application components in Samsung
Account p ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21126 (Improper input validation in getting cover image in
libsimba.heifdec.m ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21125 (Improper input validation in parsing sheifd in
libsimba.heifdec.media. ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21124 (Improper input validation in getting cover image in
libsimba.heifdec.m ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21123 (Improper privilege management in Locksettings prior to SMR
Oct-2026 Re ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21122 (Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026
Release ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21121 (Improper handling of insufficient permission in CmcCore prior
to SMR O ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21120 (Use after free in WSM service prior to SMR Oct-2026 Release 1
allows l ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21119 (Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so
prior to ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21118 (Improper access control in DownloadProvider prior to SMR
Oct-2026 Rele ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21117 (Improper access control in CocktailBarService prior to SMR
Oct-2026 Re ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21116 (Out-of-bounds write in libsmkvextractor.so prior to SMR
Oct-2026 Relea ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21115 (Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR
Oct-2026 ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21114 (Out-of-bounds write in libsmkvextractor.so prior to SMR
Oct-2026 Relea ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-109082 (A flaw was found in the Client-Initiated Backchannel
Authentication CI ...)
TODO: check
CVE-2026-109080 (SQL injection in the bulk license plate search of the Flock
Night Shif ...)
@@ -111,7 +111,7 @@ CVE-2026-108806 (A vulnerability has been found in
krupalshah EmployeeRecruitmen
CVE-2026-108805 (A flaw has been found in krupalshah EmployeeRecruitmentSystem
up to 92 ...)
TODO: check
CVE-2026-108804 (A vulnerability was detected in TRENDnet TEW-751DR,
TEW-752DRU and TEW ...)
- TODO: check
+ NOT-FOR-US: TRENDnet
CVE-2026-108803 (A security vulnerability has been detected in y_project RuoYi
up to 4. ...)
TODO: check
CVE-2026-108802 (A weakness has been identified in y_project RuoYi up to
4.8.3. This af ...)
@@ -173,9 +173,9 @@ CVE-2026-108770 (A weakness has been identified in Appwrite
up to 2.3.0. This vu
CVE-2026-108769 (A security flaw has been discovered in zhayujie CowAgent up
to 2.2.0. ...)
TODO: check
CVE-2026-107791 (The WP Comment Cleaner WordPress plugin before 7.2 does not
perform a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107437 (GV-E-Map Server V18.2.0A contains a plaintext database
password embedd ...)
- TODO: check
+ NOT-FOR-US: GeoVision
CVE-2026-107203 (An **incorrect authorization** flaw has been found in
**network interf ...)
TODO: check
CVE-2026-107193 (A flaw has been found in **permission filters** in the
**foreman** pac ...)
@@ -183,7 +183,7 @@ CVE-2026-107193 (A flaw has been found in **permission
filters** in the **forema
CVE-2026-104703
REJECTED
CVE-2025-15703 (The HireZoot WordPress plugin before 4.0.0 does not sanitise
and esca ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-59508 (Improper neutralization of special elements used in an SQL
command ('S ...)
NOT-FOR-US: Interuse i-Bos
CVE-2026-19935 (The Bluetooth LE host queues received L2CAP
connection-oriented channe ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2552994be2f006edba200d9f19e71ebf9bdc1502
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2552994be2f006edba200d9f19e71ebf9bdc1502
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
