Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
bdec1468 by security tracker role at 2026-10-25T19:14:34+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,205 @@
+CVE-2026-116211 (YesWiki 4.5.0 before 4.7.0 contains an SQL injection
vulnerability in ...)
+ TODO: check
+CVE-2026-116208 (YesWiki from 4.6.2 before 4.7.0 contains a missing
authorization vulne ...)
+ TODO: check
+CVE-2026-116207 (YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before
5.0.0-alpha4 contai ...)
+ TODO: check
+CVE-2026-116206 (YesWiki from 4.2.0 before 4.7.0 contains a stored cross-site
scripting ...)
+ TODO: check
+CVE-2026-116205 (YesWiki before 4.7.0 contains an unauthenticated server-side
request f ...)
+ TODO: check
+CVE-2026-116204 (YesWiki before 4.7.0 contains a cross-site request forgery
vulnerabili ...)
+ TODO: check
+CVE-2026-116203 (YesWiki before 4.7.0 contains a stored cross-site scripting
vulnerabil ...)
+ TODO: check
+CVE-2026-116202 (YesWiki before 4.7.0 contains a stored cross-site scripting
vulnerabil ...)
+ TODO: check
+CVE-2026-116201 (Snipe-IT before 8.5.0 contains a SAML assertion replay
vulnerability t ...)
+ TODO: check
+CVE-2026-116200 (Snipe-IT before 8.6.3 ignores the ldap_start_tls() return
value in Lda ...)
+ TODO: check
+CVE-2026-116199 (Snipe-IT before 8.6.3 contains an authentication bypass in
GoogleAuthC ...)
+ TODO: check
+CVE-2026-116198 (Snipe-IT before 8.7.0 contains a missing encryption
vulnerability in A ...)
+ TODO: check
+CVE-2026-116197 (Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains
a non-det ...)
+ TODO: check
+CVE-2026-116196 (Rclone before v1.75.2 contains a credential exposure
vulnerability in ...)
+ TODO: check
+CVE-2026-116195 (Rclone before 1.75.2 contains a path traversal vulnerability
in the lo ...)
+ TODO: check
+CVE-2026-116194 (Rclone from 1.52.0 before 1.75.2 contains a cross-site
request forgery ...)
+ TODO: check
+CVE-2026-116193 (Rclone from 1.64.0 before 1.75.2 contains an authentication
bypass vul ...)
+ TODO: check
+CVE-2026-116192 (rclone from 1.37 before 1.74.2 contains a server-side request
forgery ...)
+ TODO: check
+CVE-2026-116191 (Rclone before 1.75.2 contains a path traversal vulnerability
in serve ...)
+ TODO: check
+CVE-2026-116190 (rclone from v1.56.0 before v1.75.2 contains an information
disclosure ...)
+ TODO: check
+CVE-2026-116189 (rclone from 1.55.0 before 1.75.2 contains a signature
verification byp ...)
+ TODO: check
+CVE-2026-116188 (rclone serve s3 versions 1.75.0 before 1.75.2 contain an
integer overf ...)
+ TODO: check
+CVE-2026-116187 (Rclone from v1.68.0 before v1.75.2 contains an authorization
bypass vu ...)
+ TODO: check
+CVE-2026-116186 (OpenRemote core (openremote-manager) before 1.31.0 does not
perform re ...)
+ TODO: check
+CVE-2026-116185 (OpenRemote core before 1.31.0 contains an authorization
bypass vulnera ...)
+ TODO: check
+CVE-2026-116184 (OpenRemote before 1.31.0 contains an authorization bypass
vulnerabilit ...)
+ TODO: check
+CVE-2026-116183 (phpMyFAQ before 4.1.10 contains an object-level authorization
bypass v ...)
+ TODO: check
+CVE-2026-116182 (phpMyFAQ before 4.1.10 contains a server-side request forgery
vulnerab ...)
+ TODO: check
+CVE-2026-116181 (vLLM from 0.20.1 before 0.29.0 contains an improper input
validation v ...)
+ TODO: check
+CVE-2026-116180 (vLLM from 0.8.5 before 0.31.0 has a denial of service flaw.
LogprobsTe ...)
+ TODO: check
+CVE-2026-116179 (vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion
vulnerab ...)
+ TODO: check
+CVE-2026-116178 (vLLM from 0.20.0 before 0.30.0 contains a denial of service
vulnerabil ...)
+ TODO: check
+CVE-2026-116177 (vLLM from 0.10.2 before 0.25.0 contains an uncontrolled
resource consu ...)
+ TODO: check
+CVE-2026-116176 (vLLM from 0.9.2 before 0.24.0 contains a server-side request
forgery v ...)
+ TODO: check
+CVE-2026-116175 (vLLM from 0.19.0 before 0.24.0 contains a decompression bomb
vulnerabi ...)
+ TODO: check
+CVE-2026-116174 (vLLM from 0.22.0 before 0.24.0 contains an improper input
validation v ...)
+ TODO: check
+CVE-2026-116173 (vLLM from 0.22.0 before 0.24.0 contains a denial of service
vulnerabil ...)
+ TODO: check
+CVE-2026-116172 (vLLM from 0.22.0 before 0.24.0 contains an improper input
validation v ...)
+ TODO: check
+CVE-2026-116171 (SiYuan 3.5.4 before 3.8.7 on Windows contains a
sensitive-path denylis ...)
+ TODO: check
+CVE-2026-116170 (SiYuan before v3.8.7 contains an sql injection vulnerability
that allo ...)
+ TODO: check
+CVE-2026-116169 (SiYuan from 2.10.0 before 3.8.7 contains a stored cross-site
scripting ...)
+ TODO: check
+CVE-2026-116168 (SiYuan before 3.8.7 contains a path traversal vulnerability
in the MCP ...)
+ TODO: check
+CVE-2026-116167 (SiYuan from 2.9.0 before 3.8.7 contains a cross-site
scripting vulnera ...)
+ TODO: check
+CVE-2026-116166 (SiYuan 3.6.0 before 3.8.7 accepts and persists the
networkServeTLS set ...)
+ TODO: check
+CVE-2026-116165 (Parse Server before 8.6.101 and 9.0.0 before 9.10.4-alpha.4
contains a ...)
+ TODO: check
+CVE-2026-116164 (Parse Server before 8.6.100 and 9.0.0 before 9.10.4-alpha.3
does not r ...)
+ TODO: check
+CVE-2026-116163 (Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2
contains a ...)
+ TODO: check
+CVE-2026-116162 (Parse Server before 8.6.104 and 9.0.0 before 9.10.5-alpha.5
saves the ...)
+ TODO: check
+CVE-2026-116161 (Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4
contains a ...)
+ TODO: check
+CVE-2026-116160 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a heap-b ...)
+ TODO: check
+CVE-2026-116159 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
+ TODO: check
+CVE-2026-116158 (ImageMagick before 7.1.2-33 contains a memory leak
vulnerability in th ...)
+ TODO: check
+CVE-2026-116157 (ImageMagick before 7.1.2-33 contains a memory leak
vulnerability in Pe ...)
+ TODO: check
+CVE-2026-116156 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
+ TODO: check
+CVE-2026-116155 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
+ TODO: check
+CVE-2026-116154 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
+ TODO: check
+CVE-2026-116153 (ImageMagick before 7.1.2-33 contains a heap buffer overflow
vulnerabil ...)
+ TODO: check
+CVE-2026-116152 (ImageMagick before 7.1.2-33 contains a memory leak
vulnerability in th ...)
+ TODO: check
+CVE-2026-116151 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
+ TODO: check
+CVE-2026-116150 (ImageMagick before 7.1.2-33 contains a memory leak
vulnerability in th ...)
+ TODO: check
+CVE-2026-116149 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a stack- ...)
+ TODO: check
+CVE-2026-116148 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
an injec ...)
+ TODO: check
+CVE-2026-116147 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a null p ...)
+ TODO: check
+CVE-2026-116146 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
+ TODO: check
+CVE-2026-116145 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains
a securi ...)
+ TODO: check
+CVE-2026-116144 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
uncontro ...)
+ TODO: check
+CVE-2026-116143 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a policy ...)
+ TODO: check
+CVE-2026-116142 (ImageMagick before 7.1.2-33 contains a heap buffer over-read
vulnerabi ...)
+ TODO: check
+CVE-2026-116141 (ImageMagick before 7.1.2-33 contains a policy bypass
vulnerability in ...)
+ TODO: check
+CVE-2026-116140 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33
incorrectly parse ...)
+ TODO: check
+CVE-2026-116139 (WWBN AVideo 26.0 through 29.3.0 contains a stored cross-site
scripting ...)
+ TODO: check
+CVE-2026-116137 (adm-zip through 0.6.1 contains a duplicate-entry validation
bypass tha ...)
+ TODO: check
+CVE-2026-116136 (ProjectSend 2.0.0 through 2.7.1 contains an incomplete
authorization v ...)
+ TODO: check
+CVE-2026-116073 (Leon before commit 50df142 contains a path traversal
vulnerability in ...)
+ TODO: check
+CVE-2026-116072 (Infinity for Reddit through 8.3.4 contains a login cross-site
request ...)
+ TODO: check
+CVE-2026-116071 (rotki before 1.44.2 contains a weak key derivation
vulnerability that ...)
+ TODO: check
+CVE-2026-116070 (Docker-Proxy through 5.1.9 contains a missing authentication
vulnerabi ...)
+ TODO: check
+CVE-2026-116069 (NiubiGEO before 0.3.2 contains an unauthenticated server-side
request ...)
+ TODO: check
+CVE-2026-116068 (Dokploy through 0.30.10 contains an authorization bypass
vulnerability ...)
+ TODO: check
+CVE-2026-116067 (Paisa before 0.7.8 contains a path traversal vulnerability in
the GetF ...)
+ TODO: check
+CVE-2026-116066 (Firecrawl before 2.11.586 contains a server-side request
forgery vulne ...)
+ TODO: check
+CVE-2026-116063 (A weakness has been identified in DedeCMS up to 5.7.118.
Impacted is t ...)
+ TODO: check
+CVE-2026-116062 (A security flaw has been discovered in SourceCodester
Performance Indi ...)
+ TODO: check
+CVE-2026-116061 (A vulnerability was identified in SourceCodester Performance
Indicator ...)
+ TODO: check
+CVE-2026-116060 (A vulnerability was determined in SourceCodester Performance
Indicator ...)
+ TODO: check
+CVE-2026-116058 (A vulnerability was found in Alfresco Activiti up to
7.21.0-rc.692. Af ...)
+ TODO: check
+CVE-2026-116057 (A vulnerability has been found in KodCloud KodExplorer up to
4.55. Aff ...)
+ TODO: check
+CVE-2026-116056 (A flaw has been found in KodCloud KodExplorer up to 4.56.
Affected is ...)
+ TODO: check
+CVE-2026-116055 (A vulnerability was detected in SourceCodester Performance
Indicator S ...)
+ TODO: check
+CVE-2026-116054 (A security vulnerability has been detected in SH3. This
affects an unk ...)
+ TODO: check
+CVE-2026-116053 (A weakness has been identified in dbcli mycli up to
2.29.4/2.30.1. The ...)
+ TODO: check
+CVE-2026-116052 (A security flaw has been discovered in LinkStackOrg LinkStack
up to 4. ...)
+ TODO: check
+CVE-2026-116050 (A vulnerability has been found in krupalshah Employee
Recruitment Syst ...)
+ TODO: check
+CVE-2026-116049 (A flaw has been found in krupalshah EmployeeRecruitmentSystem
up to 92 ...)
+ TODO: check
+CVE-2026-116048 (A vulnerability was detected in krupalshah
EmployeeRecruitmentSystem u ...)
+ TODO: check
+CVE-2026-116047 (A vulnerability has been found in Privoce Vocechat up to
0.9.121. This ...)
+ TODO: check
+CVE-2026-115825 (HTTP::Server::PSGI versions before 1.0056 for Perl allow a
single requ ...)
+ TODO: check
+CVE-2026-115824 (Starman versions before 0.4019 for Perl allow memory
exhaustion via un ...)
+ TODO: check
+CVE-2026-115823 (Starman versions before 0.4019 for Perl send response bodies
for HEAD ...)
+ TODO: check
+CVE-2026-115822 (Starman versions before 0.4019 for Perl allow CPU exhaustion
via quadr ...)
+ TODO: check
+CVE-2026-115817 (Starman versions before 0.4019 for Perl allow a stalled
request body t ...)
+ TODO: check
CVE-2026-XXXX [GStreamer-SA-2026-0090]
- gstreamer-editing-services1.0 1.28.8-1
NOTE: https://gstreamer.freedesktop.org/security/sa-2026-0090.html
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bdec14681436cc5856f0d67a46b85e7ae953693e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bdec14681436cc5856f0d67a46b85e7ae953693e
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
