Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9940cf7c by Salvatore Bonaccorso at 2026-10-28T07:50:09+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -179,9 +179,9 @@ CVE-2026-65211 (This issue may allow an authenticated IPMI
Administrator to read
CVE-2026-65210 (This issue may allow an authenticated IPMI Administrator to
read arbit ...)
NOT-FOR-US: Supermicro
CVE-2026-65151 (NVIDIA NeMo Agent Toolkit contains vulnerability where an
attacker cou ...)
- TODO: check
+ NOT-FOR-US: NVIDIA
CVE-2026-65145 (NVIDIA NeMo Agent Toolkit contains a vulnerability where a
attacker co ...)
- TODO: check
+ NOT-FOR-US: NVIDIA
CVE-2026-65120 (NVIDIA TensorRT-LLM contains a vulnerability where an attacker
could c ...)
NOT-FOR-US: NVIDIA
CVE-2026-65119 (NVIDIA TensorRT-LLM for any platform contains a vulnerability
in KvCac ...)
@@ -231,7 +231,7 @@ CVE-2026-48379 (Substance3D - Painter is affected by a
Stack-based Buffer Overfl
CVE-2026-48360 (Adobe Connect is affected by an Improper Control of Generation
of Code ...)
NOT-FOR-US: Adobe
CVE-2026-47486 (NVIDIA PhysX for all platforms contains a vulnerability where
an attac ...)
- TODO: check
+ NOT-FOR-US: NVIDIA
CVE-2026-41022 (Eaton easySoft improperly validates TLS certificates presented
by easy ...)
NOT-FOR-US: Eaton
CVE-2026-41021 (Eaton easyE4 uses an insufficiently strong password policy. An
attacke ...)
@@ -1368,7 +1368,7 @@ CVE-2026-117860 (Same-origin policy bypass in the DOM:
Navigation component. Thi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117860
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117860
CVE-2026-117604 (Grav from 1.7.53.3 before 1.7.53.6 contains an authorization
bypass in ...)
- TODO: check
+ NOT-FOR-US: Grav CMS
CVE-2026-117603 (Electrum before 4.7.2 contains a spending limit bypass
vulnerability i ...)
TODO: check
CVE-2026-117602 (Electrum 4.6.0 before 4.7.2 contains an authorization bypass
in the ex ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9940cf7c3d75c3525592569a79870895fab3047b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9940cf7c3d75c3525592569a79870895fab3047b
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
