Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f1d77364 by security tracker role at 2026-10-12T19:15:23+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
CVE-2026-9191 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-96618 (Improper Handling of Highly Compressed Data (Data
Amplification) vulne ...)
TODO: check
CVE-2026-96612 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
@@ -7,11 +7,11 @@ CVE-2026-96612 (Improper Limitation of a Pathname to a
Restricted Directory ('Pa
CVE-2026-94451 (Quarkus REST Data Panache provides a way to automatically
generate RES ...)
TODO: check
CVE-2026-93695 (In Progress ShareFile Storage Zones Controller v5.12.6 and
below, File ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-93694 (In Progress ShareFile Storage Zones Controller v5.12.6 and
below, proc ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-93693 (In Progress ShareFile Storage Zones Controller v5.12.6 and
below, impr ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-92877 (The JAXB factory methods historically relied solely on
`FEATURE_SECURE ...)
TODO: check
CVE-2026-92682 (In @neo4j/graphql versions from 7.0.0 up to but not including
7.6.4, t ...)
@@ -19,71 +19,71 @@ CVE-2026-92682 (In @neo4j/graphql versions from 7.0.0 up to
but not including 7.
CVE-2026-92681 (In @neo4j/graphql versions up to and including 7.6.3,
@authentication ...)
TODO: check
CVE-2026-89140 (Temporal Server does not bind internal completion callbacks to
the nam ...)
- TODO: check
+ NOT-FOR-US: Temporal Technologies
CVE-2026-87744 (A flaw was found in Quarkus REST Data Panache. This
vulnerability allo ...)
TODO: check
CVE-2026-85976 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85975 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85974 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85973 (Progress MarkLogic Server 12.x releases before 12.1.0 may use
cleartex ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85972 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85971 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85970 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85969 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85968 (Progress MarkLogic Server 12.x releases before 12.1.0 contain
an out-o ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85967 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85966 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85965 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85964 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85963 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85962 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85961 (On Azure deployments, Progress MarkLogic Server 12.x releases
before 1 ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85960 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85959 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85958 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85957 (Affected Progress MarkLogic Server 11.x releases before 11.3.7
use a S ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85956 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85955 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85954 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85953 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85952 (Affected Linux-based Progress MarkLogic Server 12.x releases
before 12 ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85951 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85950 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85949 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85948 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85947 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85499 (Improper Authorization vulnerability in Apache SkyWalking
BanyanDB. ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-85471 (A flaw was found in Quay. An authenticated repository
administrator co ...)
TODO: check
CVE-2026-84286 (ExLlamaV3\u2019s EXL3 loader uses an untrusted, model-supplied
index t ...)
@@ -95,7 +95,7 @@ CVE-2026-83535 (A flaw was found in
openstack-network-exporter. When an operator
CVE-2026-81856 (Improper Neutralization of Escape, Meta, or Control Sequences
vulnerab ...)
TODO: check
CVE-2026-78404 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5is
vulnerable ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-77366 (obsidian-tc is a governed, agent-ready Model Context Protocol
server f ...)
TODO: check
CVE-2026-77364 (obsidian-tc is a governed, agent-ready Model Context Protocol
server f ...)
@@ -111,23 +111,23 @@ CVE-2026-68764
CVE-2026-65954 (PHPCSUtils is a suite of utility functions for use with
PHP_CodeSniffe ...)
TODO: check
CVE-2026-61994 (Missing Authorization vulnerability in RocketGeek WP-Members
wp-member ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-59977 (ConvertX is a self-hosted file conversion service. Prior to
0.18.0, th ...)
TODO: check
CVE-2026-59976 (ConvertX is a self-hosted file conversion service. Prior to
0.18.0, th ...)
TODO: check
CVE-2026-57143 (PraisonAI is a multi-agent teams system. Prior to
praisonaiagents 1.6. ...)
- TODO: check
+ NOT-FOR-US: PraisonAI
CVE-2026-57118 (PraisonAI is a multi-agent teams system. Prior to
praisonaiagents 1.6. ...)
- TODO: check
+ NOT-FOR-US: PraisonAI
CVE-2026-42689 (Concurrent Execution using Shared Resource with Improper
Synchronizati ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-1907 (A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and
Open S ...)
- TODO: check
+ NOT-FOR-US: Kong
CVE-2026-18390 (Improper neutralization of special elements used in an OS
command ('OS ...)
TODO: check
CVE-2026-18166 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for
Linux, UN ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-12613 (Deserialization of untrusted data vulnerability in Ministry of
Justice ...)
TODO: check
CVE-2026-109448 (Integer wraparound in psqlODBC SQLBindParameter allows an
application, ...)
@@ -205,27 +205,27 @@ CVE-2026-109345 (DOMPurify before 3.4.16 contains a
cross-site scripting vulnera
CVE-2026-109344 (DOMPurify from 3.4.13 before 3.4.16 contains a cross-site
scripting vu ...)
TODO: check
CVE-2026-109343 (SurrealDB before 3.3.0 allows cross-tenant access because the
SurrealQ ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109342 (SurrealDB from 3.0.0 before 3.3.0 contains a missing
authentication vu ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109341 (SurrealDB before 3.3.0 contains an authorization bypass
vulnerability ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109340 (SurrealDB from 3.1.0 before 3.3.0 contains an authorization
bypass vul ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109339 (SurrealDB 3.1.0 before 3.3.0 lets Surrealism modules exhaust
server me ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109338 (SurrealDB before 3.3.0 contains a denial of service
vulnerability that ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109337 (SurrealDB before 3.3.0 contains an authorization bypass
vulnerability ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109336 (SurrealDB before 3.3.0 contains an authorization bypass
vulnerability ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109335 (SurrealDB from 3.0.0 before 3.3.0 contains an information
disclosure v ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109334 (SurrealDB before 3.3.0 does not check the caller-selected
namespace or ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109333 (SurrealDB from 3.0.0 before 3.3.0 contains an authorization
bypass vul ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109332 (Network-AI (npm network-ai) before 5.15.2 contains an origin
validatio ...)
TODO: check
CVE-2026-109331 (Network-AI from 5.14.0 before 5.15.2 contains a security
control bypas ...)
@@ -271,25 +271,25 @@ CVE-2026-109312 (Grav Login plugin 2.7.0 before 3.9.9
contains an authentication
CVE-2026-109311 (vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg
av.open() ...)
TODO: check
CVE-2026-109310 (SiYuan v3.1.12 before v3.8.6 fails to restrict the Sprig
template func ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-109309 (SiYuan v3.7.0 before v3.8.6 contains an absolute path
traversal vulner ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-109308 (Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 passes
the raw ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-109307 (Craft CMS 5.0.0 before 5.10.14 contains a DOM-based
cross-site scripti ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-109306 (Craft CMS from 5.0.0 before 5.10.14 contains a missing
authorization v ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-109305 (Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox
bypass th ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-109304 (Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14
contains an arb ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-109303 (Parse Server before 8.6.93 and 9.0.0 before 9.10.1-alpha.13
does not e ...)
- TODO: check
+ NOT-FOR-US: Parse Server
CVE-2026-109302 (Parse Server 8.2.2 before 8.6.94 and 9.0.0 before
9.10.1-alpha.14 appl ...)
- TODO: check
+ NOT-FOR-US: Parse Server
CVE-2026-109301 (Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3
does not re ...)
- TODO: check
+ NOT-FOR-US: Parse Server
CVE-2026-109300 (Open WebUI from 0.6.31 before 0.11.4 contains a stored
cross-site scri ...)
TODO: check
CVE-2026-109299 (Open WebUI from 0.9.0 before 0.11.4 contains a denial of
service vulne ...)
@@ -515,19 +515,19 @@ CVE-2026-108922 (A flaw has been found in KusalkaSilva
Learning-Management-Syste
CVE-2026-108921 (A vulnerability was detected in KusalkaSilva
Learning-Management-Syste ...)
TODO: check
CVE-2026-108920 (A security vulnerability has been detected in SourceCodester
Drug Reco ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2026-108919 (A weakness has been identified in SourceCodester Drug
Recommendation S ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2026-108918 (A vulnerability was identified in Edimax BR-6208AC 1.32.
Impacted is a ...)
- TODO: check
+ NOT-FOR-US: Edimax
CVE-2026-108917 (A vulnerability was determined in Edimax BR-6208AC 1.32. This
issue af ...)
- TODO: check
+ NOT-FOR-US: Edimax
CVE-2026-108916 (A vulnerability was found in Edimax BR-6208AC 1.32. This
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Edimax
CVE-2026-108915 (A vulnerability has been found in Edimax BR-6208AC 1.32. This
affects ...)
- TODO: check
+ NOT-FOR-US: Edimax
CVE-2026-108914 (A flaw has been found in Edimax BR-6208AC 1.32. Affected by
this issue ...)
- TODO: check
+ NOT-FOR-US: Edimax
CVE-2026-108909 (A security flaw has been discovered in Netcore NR268
1.7.121109. Affec ...)
TODO: check
CVE-2026-108908 (A vulnerability was identified in Netcore NR268 1.7.121109.
Affected b ...)
@@ -547,15 +547,15 @@ CVE-2026-108898 (A vulnerability was detected in Netis
WF2409E 3.3.42541. This a
CVE-2026-108897 (A security vulnerability has been detected in Smart Media4U
Technology ...)
TODO: check
CVE-2026-108896 (A vulnerability was found in Linksys E1700 1.0.0.4.003. This
affects t ...)
- TODO: check
+ NOT-FOR-US: Linksys
CVE-2026-108895 (A weakness has been identified in Linksys E1700 1.0.0.4.003.
The affec ...)
- TODO: check
+ NOT-FOR-US: Linksys
CVE-2026-108894 (A security flaw has been discovered in Linksys E1700
1.0.0.4.003. Impa ...)
- TODO: check
+ NOT-FOR-US: Linksys
CVE-2026-108893 (A vulnerability was identified in Linksys E1700 up to
1.0.0.4.003. Thi ...)
- TODO: check
+ NOT-FOR-US: Linksys
CVE-2026-108892 (A vulnerability was determined in Linksys E1700 1.0.0.4.003.
This vuln ...)
- TODO: check
+ NOT-FOR-US: Linksys
CVE-2026-108890 (A vulnerability has been found in BlackBeltTechnology
pi-agent-dashboa ...)
TODO: check
CVE-2026-108889 (A flaw has been found in Yungengxin Cloud Billing
2024.11.28.11. Affec ...)
@@ -581,7 +581,7 @@ CVE-2026-108826 (A vulnerability was found in Zen Cart up
to 2.2.2. This impacts
CVE-2026-108825 (A vulnerability has been found in yangzongzhuan RuoYi up to
4.8.3. Thi ...)
TODO: check
CVE-2026-108824 (A flaw has been found in DataEase up to 3.0.0. The impacted
element is ...)
- TODO: check
+ NOT-FOR-US: DataEase
CVE-2026-108822 (A vulnerability was detected in Kamailio up to 6.0.7/6.1.3.
The affect ...)
TODO: check
CVE-2026-108821 (A security vulnerability has been detected in Tencent WeKnora
up to 0. ...)
@@ -609,75 +609,75 @@ CVE-2026-108811 (A weakness has been identified in WMCMS
4.446.1257. The affecte
CVE-2026-108810 (A security flaw has been discovered in tsi-coop tsi-dpdp-cms
0.5.0/0.5 ...)
TODO: check
CVE-2026-108486 (Missing Authorization vulnerability in WPMU DEV Forminator
forminator ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108482 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108481 (Cross-Site Request Forgery (CSRF) vulnerability in Patreon
Patreon Wor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108479 (Cross-Site Request Forgery (CSRF) vulnerability in Patreon
Patreon Wor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108478 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108477 (Missing Authorization vulnerability in Arraytics Booktics
booktics all ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108476 (Missing Authorization vulnerability in VideoWhisper.com Paid
Videochat ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108475 (Missing Authorization vulnerability in VideoWhisper.com
Broadcast Live ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108168 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108094 (A use-after-free flaw was found in mutter in the Wayland
color-managem ...)
TODO: check
CVE-2026-107869 (Missing Authorization vulnerability in WP Desk Flexible
Subscriptions ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107866 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107865 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107864 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107863 (Missing Authorization vulnerability in Codection Products
Restricted U ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107862 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107432 (Missing Authorization vulnerability in NOUS Ouvert Utile et
Simple Eve ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107430 (Missing Authorization vulnerability in VideoWhisper.com
VideoWhisper S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107429 (Improper Validation of Specified Quantity in Input
vulnerability in Vi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107427 (Authorization Bypass Through User-Controlled Key
vulnerability in NOUS ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107423 (Missing Authorization vulnerability in WP User Manager WP
User Manager ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107418 (Missing Authorization vulnerability in Arraytics Booktics
booktics all ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107248 (Thelia 3.0.0's back-office Email/Messages feature contains a
server\u2 ...)
TODO: check
CVE-2026-107226 (The AsyncHttpClient (AHC) library allows Java applications to
easily e ...)
TODO: check
CVE-2026-106605 (Improper Validation of Specified Quantity in Input
vulnerability in WP ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-105668 (Protection Mechanism Failure vulnerability in hexpm hex
allows the own ...)
TODO: check
CVE-2026-105466 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is
vulnerable ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-105465 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5
isvulnerable ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-105464 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for
Linux, UN ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-105412 (An SQL Injection vulnerability affecting Tuleap Enterprise
Edition 17. ...)
- TODO: check
+ NOT-FOR-US: Dassault Systemes
CVE-2026-105411 (An Authorization Bypass Through User-Controlled Key
vulnerability affe ...)
- TODO: check
+ NOT-FOR-US: Dassault Systemes
CVE-2026-105410 (A Stored Cross-site Scripting (XSS) vulnerability affecting
Tuleap Ent ...)
- TODO: check
+ NOT-FOR-US: Dassault Systemes
CVE-2026-105409 (A Stored Cross-site Scripting (XSS) vulnerability affecting
Tuleap Ent ...)
- TODO: check
+ NOT-FOR-US: Dassault Systemes
CVE-2026-105408 (A Stored Cross-site Scripting (XSS) vulnerability affecting
Tuleap Ent ...)
- TODO: check
+ NOT-FOR-US: Dassault Systemes
CVE-2026-105407 (An OS Command Injection vulnerability affecting Tuleap
Enterprise Edit ...)
- TODO: check
+ NOT-FOR-US: Dassault Systemes
CVE-2026-105283 (Generation of Error Message Containing Sensitive Information
vulnerabi ...)
TODO: check
CVE-2026-105280 (Improper Validation of Integrity Check Value vulnerability in
hexpm he ...)
@@ -689,11 +689,11 @@ CVE-2026-105081 (ImageMagick before 6.9.13-58 and 7.x
before 7.1.2-33 does not p
CVE-2026-104710
REJECTED
CVE-2026-104355 (A connected peer cluster can modify a Temporal Server
cluster's local ...)
- TODO: check
+ NOT-FOR-US: Temporal Technologies
CVE-2026-104102 (copyparty is a portable file server. Prior to 1.20.19, FTP
upload path ...)
TODO: check
CVE-2026-103903 (An incorrect authorization vulnerability in the WinBox
authentication ...)
- TODO: check
+ NOT-FOR-US: MikroTik
CVE-2026-103902 (Improper verification of cryptographic signature
vulnerability in Digi ...)
TODO: check
CVE-2026-103537 (Thelia 2.6.1 contains an absolute path traversal
vulnerability in its ...)
@@ -721,9 +721,9 @@ CVE-2026-103503 (Improper Certificate Validation
vulnerability in hexpm hex allo
CVE-2026-103502 (Improper Certificate Validation vulnerability in hexpm
hex_core allows ...)
TODO: check
CVE-2026-103356 (Missing Authorization vulnerability in VillaTheme TMDS
tmds-dropshippi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-103080 (External Control of Assumed-Immutable Web Parameter
vulnerability in V ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-103061 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
TODO: check
CVE-2026-103060 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
@@ -501987,7 +501987,7 @@ CVE-2023-25998 (Improper Control of Filename for
Include/Require Statement in PH
CVE-2023-25997 (Missing Authorization vulnerability in SolaPlugins Sola
Support Ticket ...)
NOT-FOR-US: WordPress plugin
CVE-2023-25996 (Insertion of Sensitive Information Into Sent Data
vulnerability in Plu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2023-25995 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
NOT-FOR-US: WordPress plugin
CVE-2023-25994 (Cross-Site Request Forgery (CSRF) vulnerability in Alex
Benfica Publis ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f1d773641625f8a9c2a8580314eeed8249d26ea5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f1d773641625f8a9c2a8580314eeed8249d26ea5
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
