Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
dff63dce by security tracker role at 2026-10-19T19:14:36+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,60 +1,636 @@
-CVE-2026-110688
+CVE-2026-91858 (FopProducer transforms the incoming XSL-FO message body by
creating a ...)
+ TODO: check
+CVE-2026-90910 (Missing authentication for critical function vulnerability in
Apache A ...)
+ TODO: check
+CVE-2026-8168 (Uncontrolled recursion in the SVG parser and renderer of the Qt
SVG mo ...)
+ TODO: check
+CVE-2026-88901 (Improper Restriction of XML External Entity Reference
vulnerability in ...)
+ TODO: check
+CVE-2026-88900 (Deserialization of Untrusted Data vulnerability in Apache
Camel Camel- ...)
+ TODO: check
+CVE-2026-86589 (Incorrect implementation of authentication algorithm
vulnerability in ...)
+ TODO: check
+CVE-2026-86375 (Dell Application Installer, versions prior to 26.09.0.1,
contain a Mis ...)
+ TODO: check
+CVE-2026-85317 (Use of Cache Containing Sensitive Information vulnerability in
Apache ...)
+ TODO: check
+CVE-2026-85316 (Insufficient Granularity of Access Control vulnerability in
Apache Cam ...)
+ TODO: check
+CVE-2026-85315 (Generation of Error Message Containing Sensitive Information
vulnerabi ...)
+ TODO: check
+CVE-2026-85314 (Improper Input Validation vulnerability in Apache Camel Mail
component ...)
+ TODO: check
+CVE-2026-85313 (Permissive Cross-domain Policy with Untrusted Domains
vulnerability in ...)
+ TODO: check
+CVE-2026-85312 (Improper Input Validation vulnerability in Apache Camel Core
component ...)
+ TODO: check
+CVE-2026-85301 (Improper Authentication vulnerability in Apache Camel Keycloak
compone ...)
+ TODO: check
+CVE-2026-85300 (Incorrect Default Permissions vulnerability in Apache Camel
PQC compon ...)
+ TODO: check
+CVE-2026-85296 (Exposure of Data Element to Wrong Session vulnerability in
Apache Came ...)
+ TODO: check
+CVE-2026-85260 (Insertion of Sensitive Information into Log File vulnerability
in Apac ...)
+ TODO: check
+CVE-2026-85257 (Generation of Error Message Containing Sensitive Information
vulnerabi ...)
+ TODO: check
+CVE-2026-85254 (Improper Handling of Case Sensitivity vulnerability in Apache
Camel Pl ...)
+ TODO: check
+CVE-2026-85251 (Exposure of Sensitive Information to an Unauthorized Actor
vulnerabili ...)
+ TODO: check
+CVE-2026-85250 (Improper Restriction of XML External Entity Reference
vulnerability in ...)
+ TODO: check
+CVE-2026-85249 (Improper Input Validation vulnerability in Apache Camel Tika
component ...)
+ TODO: check
+CVE-2026-85248 (Concurrent Execution using Shared Resource with Improper
Synchronizati ...)
+ TODO: check
+CVE-2026-85247 (Improper Certificate Validation vulnerability in Apache Camel
Knative ...)
+ TODO: check
+CVE-2026-85246 (Generation of Error Message Containing Sensitive Information
vulnerabi ...)
+ TODO: check
+CVE-2026-85245 (Exposure of Data Element to Wrong Session vulnerability in
Apache Came ...)
+ TODO: check
+CVE-2026-85243 (Improper Validation of Integrity Check Value vulnerability in
Apache C ...)
+ TODO: check
+CVE-2026-84181 (Improper Authentication vulnerability in Apache Camel Shiro
component. ...)
+ TODO: check
+CVE-2026-84180 (Generation of Error Message Containing Sensitive Information
vulnerabi ...)
+ TODO: check
+CVE-2026-84178 (Cross-Site Request Forgery (CSRF) vulnerability in Apache
Camel OAuth ...)
+ TODO: check
+CVE-2026-84176 (Permissive Cross-domain Policy with Untrusted Domains
vulnerability in ...)
+ TODO: check
+CVE-2026-83531 (Improper Control of Generation of Code ('Code Injection'),
Improper Ne ...)
+ TODO: check
+CVE-2026-80344 (Server-Side Request Forgery (SSRF) vulnerability in Apache
Camel AS2 c ...)
+ TODO: check
+CVE-2026-80343 (Improper Handling of Case Sensitivity vulnerability in Apache
Camel Ne ...)
+ TODO: check
+CVE-2026-80312 (Improper Authentication vulnerability in Apache Camel OAuth
component. ...)
+ TODO: check
+CVE-2026-79986 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
+ TODO: check
+CVE-2026-79985 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
+ TODO: check
+CVE-2026-79984 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
+ TODO: check
+CVE-2026-79983 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
+ TODO: check
+CVE-2026-79633 (vulnerability in Apache Answer. This issue affects Apache
Answer: t ...)
+ TODO: check
+CVE-2026-79624 (Insufficient session expiration vulnerability in Apache
Answer. Thi ...)
+ TODO: check
+CVE-2026-79620 (Exposure of sensitive information through data queries
vulnerability i ...)
+ TODO: check
+CVE-2026-79613 (vulnerability in Apache Answer. This issue affects Apache
Answer: t ...)
+ TODO: check
+CVE-2026-78165 (Deserialization of Untrusted Data vulnerability in Apache
Camel Spring ...)
+ TODO: check
+CVE-2026-78164 (Improper Neutralization of Special Elements Used in a Template
Engine ...)
+ TODO: check
+CVE-2026-78163 (Server-Side Request Forgery (SSRF), Improper Limitation of a
Pathname ...)
+ TODO: check
+CVE-2026-78162 (Deserialization of Untrusted Data vulnerability in Apache
Camel. Th ...)
+ TODO: check
+CVE-2026-77228
+ REJECTED
+CVE-2026-77227
+ REJECTED
+CVE-2026-77225
+ REJECTED
+CVE-2026-76994 (Exposure of Sensitive Information to an Unauthorized Actor
vulnerabili ...)
+ TODO: check
+CVE-2026-71563 (Missing Authorization vulnerability in Apache Answer. This
issue af ...)
+ TODO: check
+CVE-2026-71253 (Use of Externally-Controlled Input to Select Classes or Code
('Unsafe ...)
+ TODO: check
+CVE-2026-6930 (IBM Concert 1.0 through 3.0.0 uses weaker than expected
cryptographic ...)
+ TODO: check
+CVE-2026-6719 (IBM Concert 1.0 through 3.0.0 uses weaker than expected
cryptographic ...)
+ TODO: check
+CVE-2026-68482 (Missing Authorization vulnerability in Apache Answer. This
issue af ...)
+ TODO: check
+CVE-2026-67249 (A vulnerability in Apache Answer. This issue affects Apache
Answer: ...)
+ TODO: check
+CVE-2026-64945 (A vulnerability in Apache Answer. This issue affects Apache
Answer: ...)
+ TODO: check
+CVE-2026-64944 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-64943 (Insertion of Sensitive Information into Log File vulnerability
in Apac ...)
+ TODO: check
+CVE-2026-55644 (Element X iOS is a Matrix iOS Client provided by Element.
Element X iO ...)
+ TODO: check
+CVE-2026-4418 (IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML
inject ...)
+ TODO: check
+CVE-2026-4413 (IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site
scripting. T ...)
+ TODO: check
+CVE-2026-4405 (IBM Concert 1.0 through 3.0.0 allows web page cache to be
stored local ...)
+ TODO: check
+CVE-2026-3628 (IBM Concert 1.0 through 3.0.0 allows information disclosure
through ex ...)
+ TODO: check
+CVE-2026-3303 (IBM Concert 1.0 through 3.0.0 uses cross-origin resource
sharing (CORS ...)
+ TODO: check
+CVE-2026-3295 (IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to
cross site ...)
+ TODO: check
+CVE-2026-3161 (IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than
expected cr ...)
+ TODO: check
+CVE-2026-38671 (Cross Site Scripting vulnerability in Ellucian Banner Student
Registra ...)
+ TODO: check
+CVE-2026-1510 (IBM Concert 1.0 through 3.0.0 is vulnerable to Information
Disclosure ...)
+ TODO: check
+CVE-2026-1501 (IBM Concert 1.0 through 3.0.0 is vulnerable to Improper
Certificate Va ...)
+ TODO: check
+CVE-2026-15661 (IBM Concert 1.0 through 3.0.0 could allow an unauthorized user
to inje ...)
+ TODO: check
+CVE-2026-14511 (IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated
user to ca ...)
+ TODO: check
+CVE-2026-13695 (SQL injection (SQLi) vulnerability\u2014specifically a
UNION-based vul ...)
+ TODO: check
+CVE-2026-12727 (IBM MQ could allow an authenticated attacker to cause
potential proces ...)
+ TODO: check
+CVE-2026-12670 (IBM MQ could allow an authenticated attacker to cause a denial
of serv ...)
+ TODO: check
+CVE-2026-12669 (IBM MQ could allow an authenticated attacker to trigger a
minor out-of ...)
+ TODO: check
+CVE-2026-12665 (IBM MQ could allow a remote attacker to execute arbitrary code
due to ...)
+ TODO: check
+CVE-2026-12660 (IBM MQ Web Console could allow an authenticated administrator
to write ...)
+ TODO: check
+CVE-2026-12350 (IBM MQ could allow an authenticated attacker to cause a denial
of serv ...)
+ TODO: check
+CVE-2026-12343 (IBM MQ could allow an authenticated attacker to cause a denial
of serv ...)
+ TODO: check
+CVE-2026-12254 (Netskope is notified about a potential gap in its agent
(NSClient) whe ...)
+ TODO: check
+CVE-2026-12155 (IBM MQ could allow an authenticated attacker to cause a denial
of serv ...)
+ TODO: check
+CVE-2026-12148 (IBM MQ Operator could allow an authenticated attacker to cause
a denia ...)
+ TODO: check
+CVE-2026-11831 (IBM MQ could allow an authenticated attacker to cause a
limited denial ...)
+ TODO: check
+CVE-2026-11829 (IBM MQ could allow an authenticated attacker to cause a denial
of serv ...)
+ TODO: check
+CVE-2026-11828 (IBM MQ could allow a remote attacker with queue manager
control or man ...)
+ TODO: check
+CVE-2026-11319 (TickTick Android application (com.ticktick.task) 8.2.2.0
contains a pa ...)
+ TODO: check
+CVE-2026-112377 (CCC Attestation SIG attested-tls-poc through commit 731ca82
fails to b ...)
+ TODO: check
+CVE-2026-112368 (An uncontrolled recursion weakness in the BSON decoding logic
of the M ...)
+ TODO: check
+CVE-2026-112366 (Picomatch through 4.0.7 contains a regular expression denial
of servic ...)
+ TODO: check
+CVE-2026-112363 (Crawl4AI from 0.8.7 through 0.9.5 contains a server-side
request forge ...)
+ TODO: check
+CVE-2026-112329 (The Sensei LMS WordPress plugin before 4.26.4 contains a
broken access ...)
+ TODO: check
+CVE-2026-112328 (The Sensei LMS WordPress plugin before 4.26.4 contains a
broken access ...)
+ TODO: check
+CVE-2026-112310 (docling-core through 2.102.0 contains a local file disclosure
vulnerab ...)
+ TODO: check
+CVE-2026-112309 (@rvf/set-get before 7.0.4 contains a prototype pollution
vulnerability ...)
+ TODO: check
+CVE-2026-112308 (crewai-tools through 1.15.28 contains a server-side request
forgery vu ...)
+ TODO: check
+CVE-2026-112307 (sqlparse through 0.6.0 contains a PHP code injection
vulnerability tha ...)
+ TODO: check
+CVE-2026-112306 (NocoBase @nocobase/plugin-collection-sql through 2.2.28
contains an SQ ...)
+ TODO: check
+CVE-2026-112305 (Semaphore UI through 2.19.16 contains a remote code execution
vulnerab ...)
+ TODO: check
+CVE-2026-112304 (docTR through 1.1.0 contains an unsafe deserialization
vulnerability i ...)
+ TODO: check
+CVE-2026-112303 (GDevelop desktop app through 5.6.284 contains a credential
leak vulner ...)
+ TODO: check
+CVE-2026-112296 (FlyCms through commit edfdf724 contains a default credentials
vulnerab ...)
+ TODO: check
+CVE-2026-112295 (FlyCms through commit edfdf724 contains a mass assignment
vulnerabilit ...)
+ TODO: check
+CVE-2026-112294 (FlyCms through commit edfdf724 contains a missing
authorization vulner ...)
+ TODO: check
+CVE-2026-112293 (BoxyHQ Enterprise SaaS Starter Kit through 1.6.0 contains a
missing au ...)
+ TODO: check
+CVE-2026-112292 (CheckCle through 1.6.0 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-112291 (Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8
lacks authen ...)
+ TODO: check
+CVE-2026-112290 (Intelligence Community UI Kit @ukic/canary-web-components
3.0.0-canary ...)
+ TODO: check
+CVE-2026-112289 (Koalixcrm through 1.14.0 contains a stored cross-site
scripting vulner ...)
+ TODO: check
+CVE-2026-112288 (Krayin CRM 2.2.5 before 2.2.7 contains a server-side request
forgery f ...)
+ TODO: check
+CVE-2026-112287 (Krayin CRM before 2.2.7 contains a broken object level
authorization v ...)
+ TODO: check
+CVE-2026-112286 (Krayin CRM before 2.2.7 contains an insecure direct object
reference v ...)
+ TODO: check
+CVE-2026-112285 (Thelia before 3.1.5 and 3.2.x before 3.2.4 contains a
business logic v ...)
+ TODO: check
+CVE-2026-112284 (libaribcaption 1.1.0 through 1.1.2 contains a global
out-of-bounds rea ...)
+ TODO: check
+CVE-2026-112283 (VideoLAN libbluray through 1.5.1 contains an uncontrolled
memory alloc ...)
+ TODO: check
+CVE-2026-112282 (VideoLAN libbluray through 1.5.1 contains an out-of-bounds
read vulner ...)
+ TODO: check
+CVE-2026-112281 (libaribb24 (aribb24) through 1.0.3 contains a stack-based
buffer overf ...)
+ TODO: check
+CVE-2026-112280 (libaribb24 (aribb24) through 1.0.3 contains a heap-based
buffer overfl ...)
+ TODO: check
+CVE-2026-112279 (rdesktop through 1.9.0 contains a heap out-of-bounds read
vulnerabilit ...)
+ TODO: check
+CVE-2026-112278 (rdesktop through 1.9.0 contains a heap out-of-bounds read
vulnerabilit ...)
+ TODO: check
+CVE-2026-112277 (rdesktop through 1.9.0 contains a heap out-of-bounds read
vulnerabilit ...)
+ TODO: check
+CVE-2026-112276 (Netpbm through 11.16.00 contains a heap out-of-bounds read
vulnerabili ...)
+ TODO: check
+CVE-2026-112275 (Netpbm through 11.16.00 contains a heap out-of-bounds write
vulnerabil ...)
+ TODO: check
+CVE-2026-112274 (libtins through 4.6 contains an out-of-bounds read
vulnerability in DN ...)
+ TODO: check
+CVE-2026-112273 (libtins through 4.6 contains a heap out-of-bounds read
vulnerability i ...)
+ TODO: check
+CVE-2026-112272 (Libdisplay-info 0.4.0 contains a heap out-of-bounds read
vulnerability ...)
+ TODO: check
+CVE-2026-112271 (libdisplay-info through 0.4.0 contains a heap out-of-bounds
read vulne ...)
+ TODO: check
+CVE-2026-112270 (SGLang through 0.5.22 with the Mooncake disaggregation
backend contain ...)
+ TODO: check
+CVE-2026-112269 (SGLang through 0.5.22 with the Mooncake disaggregation
backend accepts ...)
+ TODO: check
+CVE-2026-112268 (sglang-router (sgl-model-gateway) through 0.3.2 contains an
authorizat ...)
+ TODO: check
+CVE-2026-112267 (SGLang through 0.5.22 in prefill/decode disaggregation mode
contains a ...)
+ TODO: check
+CVE-2026-112266 (SGLang through 0.5.22 contains a denial of service
vulnerability that ...)
+ TODO: check
+CVE-2026-112265 (LangBot through 4.11.0 contains a missing authenticity
verification vu ...)
+ TODO: check
+CVE-2026-112264 (BentoML through 1.4.39 contains a Dockerfile instruction
injection vul ...)
+ TODO: check
+CVE-2026-112263 (Television (tv) 0.15.0 through 0.15.9 contains an OS command
injection ...)
+ TODO: check
+CVE-2026-112262 (RisingWave before 3.1.0 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-112259 (A flaw was found in GIMP. Importing a crafted SBZ palette
without a co ...)
+ TODO: check
+CVE-2026-112252 (A vulnerability has been found in Wuxi Wubang Security
Software Wubang ...)
+ TODO: check
+CVE-2026-112251 (A vulnerability was detected in antoinersx clawhost up to
0.0.45. This ...)
+ TODO: check
+CVE-2026-112249 (A vulnerability was detected in grandnode grandnode2 up to
2.3.0. Affe ...)
+ TODO: check
+CVE-2026-112248 (A security vulnerability has been detected in grandnode
grandnode2 up ...)
+ TODO: check
+CVE-2026-112247 (A weakness has been identified in Wuxi Wubang Security
Software Five-i ...)
+ TODO: check
+CVE-2026-112222 (Missing Authorization vulnerability in Surfer Surfer
surferseo allows ...)
+ TODO: check
+CVE-2026-112214 (A flaw was found in the GStreamer ASF demuxer in
gst-plugins-ugly. Whe ...)
+ TODO: check
+CVE-2026-112210 (A flaw was found in the rhc-canonical-facts.service systemd
unit shipp ...)
+ TODO: check
+CVE-2026-112199 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-112195 (A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5.
The affect ...)
+ TODO: check
+CVE-2026-112193 (A vulnerability was detected in Webkul Aureus ERP up to
1.6.0. Impacte ...)
+ TODO: check
+CVE-2026-112192 (MISP contains a vulnerability in the handling of module
plugin setting ...)
+ TODO: check
+CVE-2026-112190 (A security vulnerability has been detected in Webkul Aureus
ERP up to ...)
+ TODO: check
+CVE-2026-112188 (MISP contains a vulnerability in its server settings lookup
mechanism ...)
+ TODO: check
+CVE-2026-112184 (MISP contains a reflected cross-site scripting (XSS)
vulnerability in ...)
+ TODO: check
+CVE-2026-112183 (MISP contains a CSS injection vulnerability in the remote
event previe ...)
+ TODO: check
+CVE-2026-112180 (MISP contains a data integrity flaw in its event deletion
logic. When ...)
+ TODO: check
+CVE-2026-112179 (In MISP, the event synchronization process contained a logic
error in ...)
+ TODO: check
+CVE-2026-112178 (MISP contains an access control flaw in the proposal (shadow
attribute ...)
+ TODO: check
+CVE-2026-112161 (MobaXterm Personal Edition (Portable) 26.4 GA extracts the
CygUtils64. ...)
+ TODO: check
+CVE-2026-112159 (A security vulnerability has been detected in JumpServer up
to 4.10.19 ...)
+ TODO: check
+CVE-2026-112158 (A weakness has been identified in MikroTik RouterOS up to
6.40.5/6.44/ ...)
+ TODO: check
+CVE-2026-112157 (A weakness has been identified in MemTensor memmy-agent up to
1.0.9/1. ...)
+ TODO: check
+CVE-2026-112153 (A vulnerability was detected in vraj404
Criminal-Management-System up ...)
+ TODO: check
+CVE-2026-112152 (A security vulnerability has been detected in vraj404
Criminal-Managem ...)
+ TODO: check
+CVE-2026-112151 (A weakness has been identified in vraj404 Criminal Management
System u ...)
+ TODO: check
+CVE-2026-112150 (A security flaw has been discovered in vraj404
Criminal-Management-Sys ...)
+ TODO: check
+CVE-2026-112149 (A vulnerability was identified in vraj404
Criminal-Management-System u ...)
+ TODO: check
+CVE-2026-112147 (A vulnerability was found in ai-genius-automations octoally
up to 1.0. ...)
+ TODO: check
+CVE-2026-112146 (A vulnerability was detected in D-Link E15, M32, R15 and R32.
This iss ...)
+ TODO: check
+CVE-2026-112145 (A security vulnerability has been detected in speaches-ai
speaches up ...)
+ TODO: check
+CVE-2026-112144 (A weakness has been identified in satya-vinay
Events-Management-System ...)
+ TODO: check
+CVE-2026-112143 (A security flaw has been discovered in satya-vinay
Events-Management-S ...)
+ TODO: check
+CVE-2026-112142 (A vulnerability was identified in satya-vinay
Events-Management-System ...)
+ TODO: check
+CVE-2026-112141 (A vulnerability was determined in satya-vinay
Events-Management-System ...)
+ TODO: check
+CVE-2026-112140 (A vulnerability was found in llSourcell Doctor-Dignity up to
3f2ffb6c8 ...)
+ TODO: check
+CVE-2026-112139 (A vulnerability has been found in subhajitkhan
online-clinic-managemen ...)
+ TODO: check
+CVE-2026-112138 (A flaw has been found in diem-project diem up to 5.1.3. The
impacted e ...)
+ TODO: check
+CVE-2026-112108 (A vulnerability was determined in ztxz16 fastllm up to
0.1.8.2. This i ...)
+ TODO: check
+CVE-2026-112107 (A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected
by this ...)
+ TODO: check
+CVE-2026-112106 (A security vulnerability has been detected in TufayelLUS
TikTok-Video- ...)
+ TODO: check
+CVE-2026-112105 (A vulnerability has been found in GlitterWare Passy up to
1.10.1. The ...)
+ TODO: check
+CVE-2026-112104 (A flaw has been found in eremef bandcamp-player up to
1.8.33-beta. The ...)
+ TODO: check
+CVE-2026-112103 (A vulnerability has been found in f3-factory fatfree-core up
to 3.9.2. ...)
+ TODO: check
+CVE-2026-112102 (A vulnerability was detected in AXA Group NLP.js 4.27.0. This
impacts ...)
+ TODO: check
+CVE-2026-112101 (A vulnerability was determined in BlackBeltTechnology
pi-agent-dashboa ...)
+ TODO: check
+CVE-2026-112100 (A vulnerability was determined in DeepPavlov up to 1.7.0.
This affects ...)
+ TODO: check
+CVE-2026-112098 (A security flaw has been discovered in DeepPavlov up to
1.7.0. Impacte ...)
+ TODO: check
+CVE-2026-112097 (A vulnerability was found in SourceCodester Inventory System
1.0. This ...)
+ TODO: check
+CVE-2026-112096 (A vulnerability has been found in SourceCodester Inventory
System 1.0. ...)
+ TODO: check
+CVE-2026-112095 (A flaw has been found in SourceCodester Inventory System 1.0.
This aff ...)
+ TODO: check
+CVE-2026-112094 (A security vulnerability has been detected in michaelrsweet
mxml 4.0.5 ...)
+ TODO: check
+CVE-2026-112093 (A vulnerability has been found in subhajitkhan
online-clinic-managemen ...)
+ TODO: check
+CVE-2026-112092 (A flaw has been found in subhajitkhan
online-clinic-management-system ...)
+ TODO: check
+CVE-2026-112091 (A flaw has been found in Dav-ee dairy-management-system
31ace9692d1e1e ...)
+ TODO: check
+CVE-2026-112090 (A vulnerability was detected in Dav-ee
dairy-management-system 31ace96 ...)
+ TODO: check
+CVE-2026-111939 (Frappe Helpdesk before 1.26.0 contains an authorization
bypass vulnera ...)
+ TODO: check
+CVE-2026-111938 (Frappe CRM before 1.74.0 contains a missing authorization
vulnerabilit ...)
+ TODO: check
+CVE-2026-111937 (Frappe CRM before 1.81.2 contains a missing authorization
vulnerabilit ...)
+ TODO: check
+CVE-2026-111936 (Sigma File Manager through 2.2.0 contains a server-side
request forger ...)
+ TODO: check
+CVE-2026-111935 (NoteGen through 0.38.3 contains an external control of file
path vulne ...)
+ TODO: check
+CVE-2026-111925 (Mopidy before 4.0.5 contains a path traversal vulnerability
that allow ...)
+ TODO: check
+CVE-2026-111915 (Yank Note before 3.93.1 contains a path traversal
vulnerability that a ...)
+ TODO: check
+CVE-2026-111899 (KitchenOwl through 0.7.10 contains a server-side request
forgery vulne ...)
+ TODO: check
+CVE-2026-111883 (Locust through 2.46.7 contains a cross-site request forgery
vulnerabil ...)
+ TODO: check
+CVE-2026-111862 (Rank Math SEO PRO for WordPress is affected by a supply-chain
compromi ...)
+ TODO: check
+CVE-2026-111845 (Missing Authorization vulnerability in YITH YITH WooCommerce
Product B ...)
+ TODO: check
+CVE-2026-111839 (Missing Authorization vulnerability in VideoWhisper.com
Broadcast Live ...)
+ TODO: check
+CVE-2026-111836 (Missing Authorization vulnerability in WP ManageNinja LLC
FluentCommun ...)
+ TODO: check
+CVE-2026-111831 (Missing Authorization vulnerability in WP ManageNinja LLC
FluentForm f ...)
+ TODO: check
+CVE-2026-111829 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
+ TODO: check
+CVE-2026-111828 (Improper Validation of Specified Quantity in Input
vulnerability in Ma ...)
+ TODO: check
+CVE-2026-111759 (markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2,
when typ ...)
+ TODO: check
+CVE-2026-111757 (Hono is a Web application framework that provides support for
any Java ...)
+ TODO: check
+CVE-2026-111755 (follow-redirects is a Node.js HTTP and HTTPS client wrapper
that autom ...)
+ TODO: check
+CVE-2026-111750 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
+ TODO: check
+CVE-2026-111749 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
+ TODO: check
+CVE-2026-111748 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
+ TODO: check
+CVE-2026-111439 (\u5728 openGauss-server\u7684
src/common/backend/utils/adt/genfile.cpp ...)
+ TODO: check
+CVE-2026-111438 (\u5728 openGauss-server \u7684
src/common/backend/libpq/hba.cpp \u4e2d ...)
+ TODO: check
+CVE-2026-111414 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-111410 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-111408 (Deserialization of Untrusted Data vulnerability in
ExpressTech Quiz An ...)
+ TODO: check
+CVE-2026-111407 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-111406 (Unrestricted Upload of File with Dangerous Type vulnerability
in PT No ...)
+ TODO: check
+CVE-2026-111398 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
+ TODO: check
+CVE-2026-111066 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
+ TODO: check
+CVE-2026-111065 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
+ TODO: check
+CVE-2026-111064 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
+ TODO: check
+CVE-2026-111063 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
+ TODO: check
+CVE-2026-111061 (russh is a Rust SSH client and server library that includes
an SSH age ...)
+ TODO: check
+CVE-2026-111059 (Mercury is a Python framework for sharing Jupyter notebooks
as web app ...)
+ TODO: check
+CVE-2026-111058 (Mercury is a Python framework for sharing Jupyter notebooks
as web app ...)
+ TODO: check
+CVE-2026-111057 (Mercury is a Python framework for sharing Jupyter notebooks
as web app ...)
+ TODO: check
+CVE-2026-111056 (FOSSBilling is an open source billing and client-management
platform. ...)
+ TODO: check
+CVE-2026-111053 (FOSSBilling is an open source billing and client-management
platform. ...)
+ TODO: check
+CVE-2026-111046 (FOSSBilling is an open source billing and client-management
platform. ...)
+ TODO: check
+CVE-2026-111045 (CLI Bridge provides filesystem access within a workspace
root. Prior t ...)
+ TODO: check
+CVE-2026-110902 (Authorization Bypass Through User-Controlled Key
vulnerability in Liqu ...)
+ TODO: check
+CVE-2026-110898 (Incorrect Privilege Assignment vulnerability in WPDeveloper
Essential ...)
+ TODO: check
+CVE-2026-110887 (Improper Control of Generation of Code ('Code Injection')
vulnerabilit ...)
+ TODO: check
+CVE-2026-110379 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-110363 (Missing Authorization vulnerability in ThimPress LearnPress
learnpress ...)
+ TODO: check
+CVE-2026-110008 (@fastify/oauth2 is a Fastify wrapper for OAuth2 login flows.
In versio ...)
+ TODO: check
+CVE-2026-10743 (IBM MQ could allow an authenticated attacker to cause a denial
of serv ...)
+ TODO: check
+CVE-2026-10574 (IBM MQ could allow an authenticated attacker to cause a denial
of serv ...)
+ TODO: check
+CVE-2026-10572 (IBM MQ could allow an authenticated attacker to cause a denial
of serv ...)
+ TODO: check
+CVE-2026-109437 (Cognition before 0.13.0 contains an unauthenticated remote
code execut ...)
+ TODO: check
+CVE-2026-109434 (Fenrir Sleipnir Browser for Android before 3.9.0 contains a
UI spoofin ...)
+ TODO: check
+CVE-2026-109433 (Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17
contains an au ...)
+ TODO: check
+CVE-2026-109432 (Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17
contains an ex ...)
+ TODO: check
+CVE-2026-109431 (Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17
contains a mis ...)
+ TODO: check
+CVE-2026-108837 (Allocation of resources without limits or throttling
vulnerability in ...)
+ TODO: check
+CVE-2026-108833 (Default startup profile miss security settingsin Apache
Kylin. Any dep ...)
+ TODO: check
+CVE-2026-108823 (Exposure of Sensitive Information to an Unauthorized Actor
during job ...)
+ TODO: check
+CVE-2026-108780 (Potential JDBC source configuration validationvulnerability
in Apache ...)
+ TODO: check
+CVE-2026-108776 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2026-108771 (Missing authentication for in-house broadcast andpolymorphic
deseriali ...)
+ TODO: check
+CVE-2026-108766 (Missing authorization on jdbc source config update in Apache
Kylin.Imp ...)
+ TODO: check
+CVE-2026-108764 (Server-Side request forgery (SSRF) vulnerability in Apache
Kylin.Impac ...)
+ TODO: check
+CVE-2026-108762 (Path-confinement bypassduring metadata backup deletion in
Apache Kylin ...)
+ TODO: check
+CVE-2026-107571 (Incorrect default permissions in the Windows installer of
Progressive ...)
+ TODO: check
+CVE-2026-107569 (Unchecked input for a loop condition in Progressive Robot
hMailServer ...)
+ TODO: check
+CVE-2026-107568 (Missing authorization in the Sieve notify action (6.2.22
through 6.3.6 ...)
+ TODO: check
+CVE-2026-107567 (Use of a less trusted source in the DKIM signing of
Progressive Robot ...)
+ TODO: check
+CVE-2026-107566 (Missing authorization in the Sieve editheader action (6.2.22
through 6 ...)
+ TODO: check
+CVE-2026-107188 (A user can upload export reports with any file contents and
specify an ...)
+ TODO: check
+CVE-2026-107187 (A user can access any database details, such as usernames and
password ...)
+ TODO: check
+CVE-2026-107186 (An unauthenticated user can send a DWR request with
isPasswordUppercas ...)
+ TODO: check
+CVE-2026-107084 (Slims (Senayan Library Management Systems) 9 Bulian 9.8.0
allows cross ...)
+ TODO: check
+CVE-2026-107083 (SENAYAN Library Management System (SLiMS) Bulian
(slims9_bulian) 9.8.0 ...)
+ TODO: check
+CVE-2026-107082 (Slims (Senayan Library Management Systems) 9 Bulian 9.8.0
allows an au ...)
+ TODO: check
+CVE-2026-107081 (SQL injection via identifier injection in the tableName and
tableField ...)
+ TODO: check
+CVE-2026-105810 (Tapo C320WS V2.0 contains an authenticated stack-based buffer
overflow ...)
+ TODO: check
+CVE-2026-104679 (VOCALOID6 Editor provided by Yamaha Corporation improperly
restricts X ...)
+ TODO: check
+CVE-2026-103314 (A flaw was found in Red Hat Advanced Cluster Security for
Kubernetes ( ...)
+ TODO: check
+CVE-2026-103038 (PingTools Network Utilities 4.64 Free accepts an arbitrary
value in th ...)
+ TODO: check
+CVE-2025-7203 (The Management Console and product files expose sensitive data,
includ ...)
+ TODO: check
+CVE-2025-7043 (The ForgeRock client fails to correctly validate refresh
tokens. This ...)
+ TODO: check
+CVE-2025-6623 (The carbon console accepts user-supplied XML input without
sufficientl ...)
+ TODO: check
+CVE-2025-60482 (A heap use-after-free in the gf_odf_ac4_cfg_clean_list
function (/odf/ ...)
+ TODO: check
+CVE-2025-60480 (A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info
function ...)
+ TODO: check
+CVE-2025-55667 (A segmentation violation in the dump_isom_saps function
(/mp4box/filed ...)
+ TODO: check
+CVE-2025-55654 (A use-after-free in the gf_filter_pid_get_packet function
(filter_core ...)
+ TODO: check
+CVE-2025-52290 (A NULL pointer dereference in the
avpriv_h264_has_num_reorder_frames f ...)
+ TODO: check
+CVE-2025-13591 (The authentication endpoint of WSO2 Identity Server fails to
provide a ...)
+ TODO: check
+CVE-2025-13173 (Tokens associated with user sessions are not revoked when the
correspo ...)
+ TODO: check
+CVE-2025-10149 (The SCIM endpoint does not sufficiently validate authorization
for fed ...)
+ TODO: check
+CVE-2024-4412 (The software accepts user-supplied data without sufficient
validation, ...)
+ TODO: check
+CVE-2023-38375 (IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to
cross-site ...)
+ TODO: check
+CVE-2026-110688 (Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl
allow quadrat ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479935/
NOTE: Fixed by;
https://github.com/rurban/Cpanel-JSON-XS/commit/384309f6a297384e69c851b5d64e1c421d9b2dcc
(4.80)
-CVE-2026-110687
+CVE-2026-110687 (Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl
misorder byte ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479909/
NOTE: Fixed by:
https://github.com/rurban/Cpanel-JSON-XS/commit/bb9da30b67f637f4d57922f0e043376363f28f0c
(4.80)
-CVE-2026-110686
+CVE-2026-110686 (Cpanel::JSON::XS versions before 4.80 for Perl use freed
filter callba ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479884/
NOTE: Fixed by:
https://github.com/rurban/Cpanel-JSON-XS/commit/c3e7e3c5b0b72d82b072c6a7cfb8c34cec4c7ea2
(4.80)
-CVE-2026-110685
+CVE-2026-110685 (Cpanel::JSON::XS versions before 4.80 for Perl leak the
decoded argume ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479881/
NOTE: Fixed by:
https://github.com/rurban/Cpanel-JSON-XS/commit/9ab010221c069a7af9ef7463454ecd3b8ace9c58
(4.80)
-CVE-2026-110684
+CVE-2026-110684 (Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl
leak memory ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479877/
NOTE: Fixed by:
https://github.com/rurban/Cpanel-JSON-XS/commit/5b15916b5e7841e447664ace51fb50c12d1e0f39
(4.80)
-CVE-2026-110682
+CVE-2026-110682 (Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let
input chu ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479866/
NOTE: Fixed by:
https://github.com/rurban/Cpanel-JSON-XS/commit/f632d6690d82c14cd2d76d648805325201c52b83
(4.80)
-CVE-2026-110681
+CVE-2026-110681 (Cpanel::JSON::XS versions before 4.80 for Perl use the parent
interpre ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479851/
NOTE: Fixed by:
https://github.com/rurban/Cpanel-JSON-XS/commit/c53eefbaa59c344abd4c71762118da04280987e8
(4.80)
-CVE-2026-110680
+CVE-2026-110680 (Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl
write out of ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479835/
NOTE: Fixed by:
https://github.com/rurban/Cpanel-JSON-XS/commit/44c4591cc62ea7f453a0ed931abf24394e1560a1
(4.80)
-CVE-2026-110678
+CVE-2026-110678 (Cpanel::JSON::XS versions before 4.80 for Perl allow memory
exhaustion ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479789/
NOTE: Fixed by:
https://github.com/rurban/Cpanel-JSON-XS/commit/d516f296b1714e06b0fb9eaae72f4558ae3d83d6
(4.80)
-CVE-2026-110677
+CVE-2026-110677 (Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak
the arra ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479737/
NOTE: Fixed by:
https://github.com/rurban/Cpanel-JSON-XS/commit/edb13030a708afc2cde0d2629fb6bdd31288ce6c
(4.80)
-CVE-2026-110676
+CVE-2026-110676 (Cpanel::JSON::XS versions before 4.80 for Perl allow memory
exhaustion ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479732/
NOTE: Fixed by:
https://github.com/rurban/Cpanel-JSON-XS/commit/996ab96972b967a917536d291947b5f3cf42e960
(4.80)
-CVE-2026-110675
+CVE-2026-110675 (Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl
accept malfor ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479714/
NOTE: Fixed by:
https://github.com/rurban/Cpanel-JSON-XS/commit/c2cd02281b9d6904ca0aff2740154e742abc070c
(4.80)
-CVE-2026-110674
+CVE-2026-110674 (Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss
duplicat ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479709/
NOTE: Fixed by:
https://github.com/rurban/Cpanel-JSON-XS/commit/c52037857d6a99d96ebd1ce3e2fa769505f028cf
(4.80)
-CVE-2026-110673
+CVE-2026-110673 (Cpanel::JSON::XS versions before 4.80 for Perl allow stack
exhaustion ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479705/
NOTE: Fixed by:
https://github.com/rurban/Cpanel-JSON-XS/commit/995eb484a9351753e2a8ec3317918b5b4a4e086a
(4.80)
-CVE-2026-110672
+CVE-2026-110672 (Cpanel::JSON::XS versions before 4.80 for Perl leak the
decoded key of ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479703/
NOTE: Fixed by:
https://github.com/rurban/Cpanel-JSON-XS/commit/532b53cf8d2ca5ab6bc24048325566d1f7132425
(4.80)
@@ -1350,7 +1926,8 @@ CVE-2026-98655 (In the Linux kernel, the following
vulnerability has been resolv
- linux 7.2.10-1
[trixie] - linux 6.12.113-1
NOTE:
https://git.kernel.org/linus/357e8a77a501d96c9517f01f4a211eed5e9c9184 (7.3-rc6)
-CVE-2026-98654 (In the Linux kernel, the following vulnerability has been
resolved: d ...)
+CVE-2026-98654
+ REJECTED
- linux <not-affected> (Vulnerable code not present)
NOTE:
https://git.kernel.org/linus/63e19ef3ddab806c472748c825f4dc88dcd994e8 (7.3-rc4)
CVE-2026-98653 (In the Linux kernel, the following vulnerability has been
resolved: K ...)
@@ -17676,7 +18253,7 @@ CVE-2026-107204 (LMCache through 0.5.5 contains an
unauthenticated remote code e
NOT-FOR-US: LMCache
CVE-2026-107202 (A command injection vulnerability exists in the h-ui (version
v0.0.25 ...)
NOT-FOR-US: h-ui
-CVE-2026-107194 (Sungrow iSolarCloud before 2026 allows authentication bypass
and accou ...)
+CVE-2026-107194 (Sungrow iSolarCloud before 2026-08-25 allows authentication
bypass and ...)
NOT-FOR-US: Sungrow iSolarCloud
CVE-2026-107183 (llama.cpp before b11393 contains a use-after-free and double
free vuln ...)
- llama.cpp <unfixed>
@@ -20247,7 +20824,8 @@ CVE-2026-98166 (In the Linux kernel, the following
vulnerability has been resolv
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE:
https://git.kernel.org/linus/3db7d7d583419f7b1f2e141e36418802dbb25cf8 (7.3-rc4)
-CVE-2026-98165 (In the Linux kernel, the following vulnerability has been
resolved: d ...)
+CVE-2026-98165
+ REJECTED
- linux <not-affected> (Vulnerable code not present)
NOTE:
https://git.kernel.org/linus/bd1f08246b8a2564d8ac61df715b6bcd5f994729 (7.3-rc2)
CVE-2026-98370 (In the Linux kernel, the following vulnerability has been
resolved: x ...)
@@ -21074,8 +21652,8 @@ CVE-2026-25267 (Memory corruption when non-secure
loader rewrites page tables be
NOT-FOR-US: Qualcomm
CVE-2026-25263 (Memory corruption while processing IOCTL command called from
user spac ...)
NOT-FOR-US: Qualcomm
-CVE-2026-21589
- REJECTED
+CVE-2026-21589 (This is a vulnerability in Bitbucket Data Center, Confluence
Data Cent ...)
+ TODO: check
CVE-2026-105786 (Joplin is an open source note-taking and to-do application
that organi ...)
- joplin <itp> (bug #931306)
CVE-2026-105785 (Joplin is an open source note-taking and to-do application
that organi ...)
@@ -42336,7 +42914,8 @@ CVE-2026-90059 (In the Linux kernel, the following
vulnerability has been resolv
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE:
https://git.kernel.org/linus/23680bf5f8c69c923546b84a8e6c401bef8b88fe (7.3-rc1)
-CVE-2026-90052 (In the Linux kernel, the following vulnerability has been
resolved: d ...)
+CVE-2026-90052
+ REJECTED
- linux <not-affected> (Vulnerable code not present)
NOTE:
https://git.kernel.org/linus/59e6f919d77d72ec79cbf171256f2f7819737580 (7.3-rc2)
CVE-2026-90051 (In the Linux kernel, the following vulnerability has been
resolved: t ...)
@@ -42344,7 +42923,8 @@ CVE-2026-90051 (In the Linux kernel, the following
vulnerability has been resolv
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE:
https://git.kernel.org/linus/125755776bc6d4dd53eaf551c87e3d460625d638 (7.3-rc3)
-CVE-2026-90050 (In the Linux kernel, the following vulnerability has been
resolved: n ...)
+CVE-2026-90050
+ REJECTED
- linux <not-affected> (Vulnerable code not present)
NOTE:
https://git.kernel.org/linus/094cc07f98dfe70a34e2a1923af17fd29b8cf622 (7.3-rc3)
CVE-2026-93204 (In the Linux kernel, the following vulnerability has been
resolved: b ...)
@@ -99592,7 +100172,7 @@ CVE-2026-XXXX [Command injection issue with zip]
[trixie] - zip 3.0-15+deb13u1
[bookworm] - zip 3.0-13+deb12u1
NOTE:
https://sintonen.fi/advisories/infozip-test-option-command-injection.txt
-CVE-2026-8325 (A maliciously crafted PDF file, when parsed through certain
Autodesk p ...)
+CVE-2026-8325 (A maliciously crafted PDF file, when parsed through Autodesk
Revit, ca ...)
NOT-FOR-US: Autodesk
CVE-2026-7406 (A maliciously crafted BMP file, when parsed through certain
Autodesk p ...)
NOT-FOR-US: Autodesk
@@ -99962,7 +100542,7 @@ CVE-2026-3415 (The XML and schema validation
functionalities within the SchemaVa
NOT-FOR-US: WSO2
CVE-2026-33181
REJECTED
-CVE-2026-1289 (A maliciously crafted PDF file, when parsed through certain
Autodesk p ...)
+CVE-2026-1289 (A maliciously crafted PDF file, when parsed through Autodesk
Revit, ca ...)
NOT-FOR-US: Autodesk
CVE-2026-19196 (A vulnerability was found in SourceCodester Photo Share
Website 1.0. T ...)
NOT-FOR-US: SourceCodester
@@ -100123,7 +100703,7 @@ CVE-2026-11976 (The official MonsterInsights Pro
update distribution bucket (`mo
NOT-FOR-US: WordPress plugin
CVE-2026-11907 (The Stream plugin for WordPress is vulnerable to authorization
bypass ...)
NOT-FOR-US: WordPress plugin
-CVE-2026-11803 (A maliciously crafted PDF file, when parsed through certain
Autodesk p ...)
+CVE-2026-11803 (A maliciously crafted PDF file, when parsed through Autodesk
Revit, ca ...)
NOT-FOR-US: Autodesk
CVE-2026-11361 (The Formidable Forms WordPress plugin before 6.32.1 does not
properly ...)
NOT-FOR-US: WordPress plugin
@@ -244814,7 +245394,7 @@ CVE-2025-10900 (AA maliciously crafted MODEL file,
when parsed through certain A
NOT-FOR-US: Autodesk
CVE-2025-10899 (AA maliciously crafted MODEL file, when parsed through certain
Autodes ...)
NOT-FOR-US: Autodesk
-CVE-2025-10898 (AA maliciously crafted MODEL file, when parsed through certain
Autodes ...)
+CVE-2025-10898 (A maliciously crafted MODEL file, when parsed through certain
Autodesk ...)
NOT-FOR-US: Autodesk
CVE-2025-10889 (A maliciously crafted CATPART file, when parsed through
certain Autode ...)
NOT-FOR-US: Autodesk
@@ -244828,7 +245408,7 @@ CVE-2025-10884 (AA maliciously crafted CATPART file,
when parsed through certain
NOT-FOR-US: Autodesk
CVE-2025-10883 (A maliciously crafted CATPRODUCT file, when parsed through
certain Aut ...)
NOT-FOR-US: Autodesk
-CVE-2025-10882 (AA maliciously crafted X_T file, when parsed through certain
Autodesk ...)
+CVE-2025-10882 (A maliciously crafted X_T file, when parsed through certain
Autodesk p ...)
NOT-FOR-US: Autodesk
CVE-2025-10881 (A maliciously crafted CATPRODUCT file, when parsed through
certain Aut ...)
NOT-FOR-US: Autodesk
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dff63dcee0491143e9adc98c092dfb86040a6592
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dff63dcee0491143e9adc98c092dfb86040a6592
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
