Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e69344fc by Salvatore Bonaccorso at 2026-10-15T09:53:11+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -21,9 +21,9 @@ CVE-2026-78087 (The VK Blocks plugin for WordPress is
vulnerable to Stored Cross
CVE-2026-78001 (The Post and Page Builder by BoldGrid \u2013 Visual Drag and
Drop Edit ...)
NOT-FOR-US: WordPress plugin
CVE-2026-77931 (MoviePilot through 3.1.5 contains a command injection
vulnerability th ...)
- TODO: check
+ NOT-FOR-US: MoviePilot
CVE-2026-77427 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-76668 (A security vulnerability inHPE NonStop Kernel may allow user
space acc ...)
NOT-FOR-US: HPE
CVE-2026-76667 (A security vulnerability inHPE NonStop EXPAND may result in
out-of-bou ...)
@@ -47,19 +47,19 @@ CVE-2026-76659 (A vulnerability in the finger daemon of HPE
NonStop TCP/IP UTILI
CVE-2026-76656 (A vulnerability in HPE NonStop TCP/IP UTILITIES could allow
an unaut ...)
NOT-FOR-US: HPE
CVE-2026-76066 (IntentKit through 2.6.3 contains an authorization bypass
vulnerability ...)
- TODO: check
+ NOT-FOR-US: IntentKit
CVE-2026-74920 (The Document Gallery WordPress plugin through 5.1.1 does not
properly ...)
NOT-FOR-US: WordPress plugin
CVE-2026-73799 (A security vulnerability inHPE NonStop SNMP Trap Multiplexer
may cause ...)
NOT-FOR-US: HPE
CVE-2026-71854 (OpenAEV is an open source platform allowing organizations to
plan, sch ...)
- TODO: check
+ NOT-FOR-US: OpenAEV
CVE-2026-69194 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-69193 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-69191 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-64856 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
TODO: check
CVE-2026-62664 (FileRise is a self-hosted web-based file manager with
multi-file uploa ...)
@@ -564,33 +564,33 @@ CVE-2026-86476 (A flaw was found in gst-plugins-base. A
heap buffer overflow can
CVE-2026-86461 (The FV Flowplayer Video Player plugin for WordPress is
vulnerable to L ...)
NOT-FOR-US: WordPress plugin
CVE-2026-86002 (Dokku is a docker-powered platform as a service. In Dokku
versions bef ...)
- TODO: check
+ NOT-FOR-US: Dokku
CVE-2026-85714 (Stirling-PDF is a locally hosted web application that
facilitates vari ...)
- TODO: check
+ NOT-FOR-US: Stirling-PDF
CVE-2026-85298 (An Incorrect Authorization vulnerability in the AuthConfig
validation ...)
- TODO: check
+ NOT-FOR-US: Google Cloud Application Integration
CVE-2026-82844 (The WPForms Lite WordPress plugin before 2.0.2.2 does not
verify serve ...)
NOT-FOR-US: WordPress plugin
CVE-2026-82402 (Gogs is an open source self-hosted Git service. Prior to
0.15.0+dev, a ...)
- TODO: check
+ NOT-FOR-US: Go Git Service
CVE-2026-82153 (Dell OS Recovery Tool, versions prior to 2.4.4, contains an
Insecure S ...)
NOT-FOR-US: Dell / EMC
CVE-2026-82026 (Radar before 1.12.2 contains a missing authorization
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Radar
CVE-2026-79957 (ServiceNext contains an insecure direct object reference
(IDOR) in the ...)
- TODO: check
+ NOT-FOR-US: ServiceNext
CVE-2026-78433 (Gitea's web attachment handler skips its cross-repository
ownership ch ...)
NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-78231 (When OpenID sign-in is enabled, Gitea processes
unauthenticated assert ...)
NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-77572 (VeraCrypt provides disk encryption with strong security based
on TrueC ...)
- TODO: check
+ NOT-FOR-US: VeraCrypt
CVE-2026-77564 (Talos Linux is a Linux distribution built for Kubernetes
deployments. ...)
- TODO: check
+ NOT-FOR-US: Talos Linux
CVE-2026-77524 (KEDA is a Kubernetes-based Event Driven Autoscaling component.
In vers ...)
- TODO: check
+ NOT-FOR-US: KEDA
CVE-2026-77371 (Redash is a package for data visualization and sharing. From
26.0.0 un ...)
- TODO: check
+ NOT-FOR-US: Redash
CVE-2026-76655 (A security vulnerability inHPE NonStop SNMP Trap Multiplexer
may allow ...)
NOT-FOR-US: HPE
CVE-2026-76519 (A vulnerability in the Advanced Malware Protection (AMP)
feature of Ci ...)
@@ -598,7 +598,7 @@ CVE-2026-76519 (A vulnerability in the Advanced Malware
Protection (AMP) feature
CVE-2026-76113 (Dell Terraform Provider for Redfish, versions 1.1.0 through
1.6.1, con ...)
NOT-FOR-US: Dell / EMC
CVE-2026-76083 (Redash is a package for data visualization and sharing. From
10.0.0 un ...)
- TODO: check
+ NOT-FOR-US: Redash
CVE-2026-75085 (The STM32WBA IEEE 802.15.4 driver in
drivers/ieee802154/ieee802154_stm ...)
NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-75084 (The CC1200 sub-GHz IEEE 802.15.4 driver takes the PHY packet
length fr ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e69344fcb1c80f28fcff52604d5f88a2a568b25e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e69344fcb1c80f28fcff52604d5f88a2a568b25e
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
