Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
07770036 by Salvatore Bonaccorso at 2026-10-23T15:35:28+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -338,9 +338,9 @@ CVE-2026-115416 (Incorrect authorization checks in Amazon
Athena engine version
CVE-2026-115414 (OS command injection in the Terraform hook in AWS SAM CLI
before 1.166 ...)
NOT-FOR-US: Amazon
CVE-2026-115411 (crawlseo before version 0.2.4 contains a server-side request
forgery v ...)
- TODO: check
+ NOT-FOR-US: crawlseo
CVE-2026-115400 (crawlseo before version 0.2.5 contains a cleartext storage
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: crawlseo
CVE-2026-115398 (Ghidra before 12.2 contains a resource allocation without
limits vulne ...)
- ghidra <itp> (bug #923851)
CVE-2026-115397 (Ghidra before 12.2 contains a resource allocation without
limits vulne ...)
@@ -445,21 +445,21 @@ CVE-2026-115330 (Lotus through 0.10.2 contains an sql
injection vulnerability th
CVE-2026-115329 (Lotus through 0.10.2 contains an insecure direct object
reference vuln ...)
NOT-FOR-US: Lotus
CVE-2026-115328 (JSON-SCADA before 0.65-alpha contains an sql injection
vulnerability i ...)
- TODO: check
+ NOT-FOR-US: JSON-SCADA
CVE-2026-115327 (libyang through 6.4.13 contains an uninitialized pointer free
vulnerab ...)
TODO: check
CVE-2026-115326 (QloApps through 1.7.0 contains an insecure direct object
reference vul ...)
- TODO: check
+ NOT-FOR-US: QloApps
CVE-2026-115325 (Netmaker through 1.7.0 contains an authorization bypass
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Netmaker
CVE-2026-115324 (mem0 0.1.117 before 1.0.8 contains an sql injection
vulnerability in m ...)
- TODO: check
+ NOT-FOR-US: mem0
CVE-2026-115323 (EverShop 1.2.2 before 2.2.1 contains a missing authorization
vulnerabi ...)
- TODO: check
+ NOT-FOR-US: EverShop
CVE-2026-115322 (Bytebase before 3.16.0 contains an authorization bypass
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Bytebase
CVE-2026-115321 (Bytebase before 3.16.0 contains an authorization bypass
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Bytebase
CVE-2026-115319 (fzf 0.36.0 through 0.74.5 contains an inefficient algorithmic
complexi ...)
TODO: check
CVE-2026-115253 (An incorrect permission assignment vulnerability in the
WatchGuard Age ...)
@@ -620,7 +620,7 @@ CVE-2026-113874 (SmileCDR HAPI FHIR allows an untrusted
bundle body to replace a
CVE-2026-113873 (SmileCDR HAPI FHIR does not properly handle highly compressed
data, al ...)
TODO: check
CVE-2026-113872 (multer is a middleware for Node.js that handles
multipart/form-data fi ...)
- TODO: check
+ NOT-FOR-US: Node multer
CVE-2026-113582 (UNSUPPORTED WHEN ASSIGNED Improper restriction of XML
external entity ...)
TODO: check
CVE-2026-113501 (The LiteSpeed Cache WordPress plugin before 7.9.2 does not
perform a c ...)
@@ -4093,7 +4093,7 @@ CVE-2026-101823 (Vulnerability in the Oracle Bills of
Material product of Oracle
CVE-2026-101822 (Vulnerability in the Oracle Bills of Material product of
Oracle E-Busi ...)
NOT-FOR-US: Oracle
CVE-2026-101821 (Vulnerability in the Oracle Compensation Workbench product of
Oracle E ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2026-101820 (Vulnerability in the Oracle General Ledger product of Oracle
E-Busines ...)
NOT-FOR-US: Oracle
CVE-2026-101819 (Vulnerability in the Oracle General Ledger product of Oracle
E-Busines ...)
@@ -4621,7 +4621,7 @@ CVE-2026-101548 (Vulnerability in Oracle Application
Testing Suite (component: O
CVE-2026-101547 (Vulnerability in the Oracle Demand Planning product of Oracle
Supply C ...)
NOT-FOR-US: Oracle
CVE-2026-101546 (Vulnerability in the Oracle Materials Requirement Planning
product of ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2026-101545 (Vulnerability in the Oracle Inventory Management product of
Oracle E-B ...)
NOT-FOR-US: Oracle
CVE-2026-101544 (Vulnerability in the Oracle Payroll product of Oracle
E-Business Suite ...)
@@ -4692,7 +4692,7 @@ CVE-2026-101512 (Vulnerability in the RDBMS component of
Oracle Database Server.
CVE-2026-101511 (Vulnerability in the Oracle Enterprise Manager Base Platform
product o ...)
NOT-FOR-US: Oracle
CVE-2026-101510 (Vulnerability in the Oracle Net Services component of Oracle
Database ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2026-101508 (Vulnerability in the Siebel CRM Integration product of Oracle
Siebel C ...)
NOT-FOR-US: Oracle
CVE-2026-101507 (Vulnerability in Oracle Trusted Answer Search (component:
PLSQL packag ...)
@@ -4738,7 +4738,7 @@ CVE-2026-101487 (Vulnerability in the PeopleSoft
Enterprise PeopleTools product
CVE-2026-101486 (Vulnerability in the PeopleSoft Enterprise PeopleTools
product of Orac ...)
NOT-FOR-US: Oracle
CVE-2026-101485 (Vulnerability in Oracle Autonomous Health Framework
(component: Trace ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2026-101484 (Vulnerability in Oracle Secure Backup (component: Backup and
Restore). ...)
NOT-FOR-US: Oracle
CVE-2026-101483 (Vulnerability in Oracle Secure Backup (component: Device
Management an ...)
@@ -4752,9 +4752,9 @@ CVE-2026-101480 (Vulnerability in Oracle Secure Backup
(component: NDMP daemon).
CVE-2026-101479 (Vulnerability in Oracle Secure Backup (component: Backup and
Restore). ...)
NOT-FOR-US: Oracle
CVE-2026-101478 (Vulnerability in Oracle Autonomous Health Framework
(component: Trace ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2026-101477 (Vulnerability in Oracle Autonomous Health Framework
(component: Trace ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2026-101476 (Vulnerability in the Siebel Apps - Marketing product of
Oracle Siebel ...)
NOT-FOR-US: Oracle
CVE-2026-101475 (Vulnerability in the Primavera Unifier product of Oracle
Construction ...)
@@ -4804,7 +4804,7 @@ CVE-2026-101454 (Vulnerability in the Siebel CRM
Development product of Oracle S
CVE-2026-101453 (Vulnerability in the Siebel CRM Deployment product of Oracle
Siebel CR ...)
NOT-FOR-US: Oracle
CVE-2026-101452 (Vulnerability in Oracle Autonomous Health Framework
(component: AHF In ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2026-101451 (Vulnerability in the Siebel Life Sciences product of Oracle
Siebel CRM ...)
NOT-FOR-US: Oracle
CVE-2026-101450 (Vulnerability in the PeopleSoft Enterprise PeopleTools
product of Orac ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/07770036f99de6e5750baa2f7bb74c014af44e1c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/07770036f99de6e5750baa2f7bb74c014af44e1c
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
