Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
84af96e2 by security tracker role at 2026-10-25T07:13:18+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,65 @@
+CVE-2026-94295 (The Chikkili- Google Pay India for Woocommerce WordPress
plugin throug ...)
+ TODO: check
+CVE-2026-89284
+ REJECTED
+CVE-2026-116046 (A flaw has been found in eventcatalog sdk up to 2.29.0. This
vulnerabi ...)
+ TODO: check
+CVE-2026-116045 (A vulnerability was detected in 1999AZZAR designer-mcp up to
2.1.0. Th ...)
+ TODO: check
+CVE-2026-116044 (A security vulnerability has been detected in prasathmani
TinyFileMana ...)
+ TODO: check
+CVE-2026-116007 (A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro
up to 2026 ...)
+ TODO: check
+CVE-2026-116006 (A vulnerability was detected in YunaiV/zhijiantianya
ruoyi-vue-pro up ...)
+ TODO: check
+CVE-2026-116004 (A security vulnerability has been detected in onyx-dot-app
Onyx up to ...)
+ TODO: check
+CVE-2026-116000 (A security flaw has been discovered in Zylon PrivateGPT
1.0.0/1.0.1. T ...)
+ TODO: check
+CVE-2026-115999 (A vulnerability has been found in mansi-k Restaurant_IMS
d7ad49f61ab7c ...)
+ TODO: check
+CVE-2026-115997 (A flaw has been found in pig-mesh pig up to 4.1.0. This
impacts the fu ...)
+ TODO: check
+CVE-2026-115996 (A vulnerability was detected in Unitree Robotics Unitree Go2
up to 1.1 ...)
+ TODO: check
+CVE-2026-115995 (A security vulnerability has been detected in Unitree
Robotics Unitree ...)
+ TODO: check
+CVE-2026-115982 (A vulnerability was detected in phpIPAM up to 1.8.3. Affected
by this ...)
+ TODO: check
+CVE-2026-115981 (A security vulnerability has been detected in phpIPAM up to
1.8.3. Aff ...)
+ TODO: check
+CVE-2026-115251 (The Duplicator WordPress plugin before 5.0.0 does not
restrict its on ...)
+ TODO: check
+CVE-2026-115214 (The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1
does not ...)
+ TODO: check
+CVE-2026-115183 (The Qi Addons For Elementor WordPress plugin before 1.11.2
does not pr ...)
+ TODO: check
+CVE-2026-114743 (The InstaWP Connect WordPress plugin before 0.1.4.2 does not
perform ...)
+ TODO: check
+CVE-2026-114742 (The WPVR WordPress plugin before 9.0.3 does not perform
object-level ...)
+ TODO: check
+CVE-2026-114741 (The WPVR WordPress plugin before 9.0.3 does not perform
object-level ...)
+ TODO: check
+CVE-2026-114740 (The WPVR WordPress plugin before 9.1.3 does not correctly
check user ...)
+ TODO: check
+CVE-2026-111981 (The GiveWP WordPress plugin before 4.19.0.1 does not perform
a capabi ...)
+ TODO: check
+CVE-2026-111980 (The GiveWP WordPress plugin before 4.19.0.1 does not
correctly determ ...)
+ TODO: check
+CVE-2026-111979 (The GiveWP WordPress plugin before 4.19.0.1 does not
properly sanitis ...)
+ TODO: check
+CVE-2026-111978 (The GiveWP WordPress plugin before 4.19.0.1 does not
properly validat ...)
+ TODO: check
+CVE-2026-111976 (The GiveWP WordPress plugin before 4.19.0.1 does not perform
any stat ...)
+ TODO: check
+CVE-2026-111326
+ REJECTED
+CVE-2026-110285 (The WP Stripe Checkout WordPress plugin before 1.2.2.62 does
not verif ...)
+ TODO: check
+CVE-2026-109111
+ REJECTED
+CVE-2025-15705 (The Contact Form by Supsystic WordPress plugin before 1.8.0
does not ...)
+ TODO: check
CVE-2026-94075 (Deserialization of Untrusted Data vulnerability in Tribulant
Software ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-116020 (BookStack before 26.09.2 contains an incorrect authorization
vulnerabi ...)
@@ -54614,6 +54676,7 @@ CVE-2026-90053 (In the Linux kernel, the following
vulnerability has been resolv
- linux 7.2.6-1
NOTE:
https://git.kernel.org/linus/729c4896ab829169f95915d65edd530325910b37 (7.3-rc1)
CVE-2026-93894 (In Vinyl Cache before 9.0,2, workspace buffer overflow
vulnerability w ...)
+ {DSA-6584-1}
- vinyl-cache <unfixed> (bug #1148187)
- varnish <removed>
[bookworm] - varnish <postponed> (Minor issue, DoS)
@@ -207708,6 +207771,7 @@ CVE-2026-3457 (Improper Neutralization of Input
During Web Page Generation (XSS
CVE-2026-3098 (The Smart Slider 3 plugin for WordPress is vulnerable to
Arbitrary Fil ...)
NOT-FOR-US: WordPress plugin
CVE-2026-34475 (Varnish Cache before 8.0.1 and Varnish Enterprise before
6.0.16r12, in ...)
+ {DSA-6584-1}
- vinyl-cache <not-affected> (Fixed before initial upload to Debian)
- varnish <removed> (bug #1132231)
[bookworm] - varnish <no-dsa> (Minor issue; can be mitigated by VCL
rule)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/84af96e26b183a12a5a5a89558f334c64b1c182a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/84af96e26b183a12a5a5a89558f334c64b1c182a
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
