Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e42fba80 by security tracker role at 2026-10-28T07:14:03+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,479 @@
+CVE-2026-99100 (In the Linux kernel, the following vulnerability has been
resolved: w ...)
+ TODO: check
+CVE-2026-97045 (In childTextNodesAreLiteral, walking up the tree previously
stopped at ...)
+ TODO: check
+CVE-2026-97019 (The AMP for WP \u2013 Accelerated Mobile Pages plugin for
WordPress is ...)
+ TODO: check
+CVE-2026-92098 (The Webheadcoder Multi-Step Forms for Contact Form 7 plugin
for WordPr ...)
+ TODO: check
+CVE-2026-85898 (Access of resource using incompatible type ('type confusion')
in Micro ...)
+ TODO: check
+CVE-2026-84999 (The Pie Register Premium plugin for WordPress is vulnerable to
Unrestr ...)
+ TODO: check
+CVE-2026-83831 (Double free in Microsoft Edge (Chromium-based) allows an
unauthorized ...)
+ TODO: check
+CVE-2026-78661 (When coalescing adjacent text nodes in addText and
fosterParent, appen ...)
+ TODO: check
+CVE-2026-77871 (The Post Snippets \u2013 Custom WordPress Code Snippets
Customizer plu ...)
+ TODO: check
+CVE-2026-77188 (The Waitlist Woocommerce ( Back in stock notifier ) plugin for
WordPre ...)
+ TODO: check
+CVE-2026-76780 (The Beyondseo plugin for WordPress is vulnerable to
unauthorized acces ...)
+ TODO: check
+CVE-2026-76058 (The PayPal Brasil para WooCommerce plugin for WordPress is
vulnerable ...)
+ TODO: check
+CVE-2026-76005 (The WP Inventory Manager plugin for WordPress is vulnerable to
time-ba ...)
+ TODO: check
+CVE-2026-63286 (Database backups are vulnerable to offline attacks. Backups
created us ...)
+ TODO: check
+CVE-2026-62765 (Access of resource using incompatible type ('type confusion')
in Micro ...)
+ TODO: check
+CVE-2026-59158 (Nuxt Ollama integrates the official Ollama JavaScript library
into Nux ...)
+ TODO: check
+CVE-2026-58496 (Thor Vector Graphics (ThorVG) is a production-ready vector
graphics en ...)
+ TODO: check
+CVE-2026-58257 (GRR is a resource management and reservation application.
Prior to the ...)
+ TODO: check
+CVE-2026-58256 (GRR is a resource management and reservation application.
Prior to the ...)
+ TODO: check
+CVE-2026-58255 (Cronicle is a multi-server task scheduler and runner, with a
web based ...)
+ TODO: check
+CVE-2026-58205 (GRR is a resource management and reservation application.
Prior to ver ...)
+ TODO: check
+CVE-2026-57203 (Asterisk is an open source private branch exchange and
telephony toolk ...)
+ TODO: check
+CVE-2026-57200 (Asterisk is an open source private branch exchange and
telephony toolk ...)
+ TODO: check
+CVE-2026-57199 (Asterisk is an open source private branch exchange and
telephony toolk ...)
+ TODO: check
+CVE-2026-57195 (Asterisk is an open source private branch exchange and
telephony toolk ...)
+ TODO: check
+CVE-2026-57192 (Asterisk is an open source private branch exchange and
telephony toolk ...)
+ TODO: check
+CVE-2026-57191 (Asterisk is an open source private branch exchange and
telephony toolk ...)
+ TODO: check
+CVE-2026-57190 (Asterisk is an open source private branch exchange and
telephony toolk ...)
+ TODO: check
+CVE-2026-57186 (Asterisk is an open source private branch exchange and
telephony toolk ...)
+ TODO: check
+CVE-2026-50571 (WebSub is a W3C recommendation produced by the Social Web
Working Grou ...)
+ TODO: check
+CVE-2026-39928
+ REJECTED
+CVE-2026-2839 (The Advanced Custom Fields: Extended plugin for WordPress is
vulnerabl ...)
+ TODO: check
+CVE-2026-22063 (The private keys of eight eMudhra intermediate CA certificates
have be ...)
+ TODO: check
+CVE-2026-1928 (The Rank Math SEO \u2013 AI SEO Tools to Dominate SEO Rankings
plugin ...)
+ TODO: check
+CVE-2026-18326
+ REJECTED
+CVE-2026-15323 (The Product Designer for WooCommerce WordPress | Lumise plugin
for Wor ...)
+ TODO: check
+CVE-2026-118384 (GNU mtools through 4.0.49 has an out-of-bounds write in
parse_vses in ...)
+ TODO: check
+CVE-2026-118378 (Tabularis before 0.28.0 contains an SQL injection
vulnerability in its ...)
+ TODO: check
+CVE-2026-118377 (mews/pos through 2.0.0 contains an insufficient verification
of data a ...)
+ TODO: check
+CVE-2026-118376 (WeKnora before 0.8.2 contains a server-side request forgery
vulnerabil ...)
+ TODO: check
+CVE-2026-118375 (llama.cpp b8841 before b11865 contains an out-of-bounds write
vulnerab ...)
+ TODO: check
+CVE-2026-118374 (LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion
vulnerab ...)
+ TODO: check
+CVE-2026-118373 (LibreSSL ocspcheck through 4.4.0 contains a cleartext
transmission vul ...)
+ TODO: check
+CVE-2026-118372 (LibreSSL ocspcheck through 4.4.0 contains a CRLF injection
vulnerabili ...)
+ TODO: check
+CVE-2026-118371 (LibreSSL through 4.4.0 contains a CRLF injection
vulnerability in the ...)
+ TODO: check
+CVE-2026-118370 (libexpat through 2.9.0 contains a signed integer overflow
vulnerabilit ...)
+ TODO: check
+CVE-2026-118359 (Memory corruption in V8 in Google Chrome prior to
156.0.8078.73 allowe ...)
+ TODO: check
+CVE-2026-118358 (Memory corruption in WebAudio in Google Chrome prior to
156.0.8078.73 ...)
+ TODO: check
+CVE-2026-118357 (Use after free in FileSystem in Google Chrome prior to
156.0.8078.73 a ...)
+ TODO: check
+CVE-2026-118356 (Use after free in WTF in Google Chrome prior to 156.0.8078.73
allowed ...)
+ TODO: check
+CVE-2026-118355 (Improper input validation in Command in Google Chrome prior
to 156.0.8 ...)
+ TODO: check
+CVE-2026-118354 (Improper input validation in Skia in Google Chrome prior to
156.0.8078 ...)
+ TODO: check
+CVE-2026-118353 (Use after free in Paint in Google Chrome prior to
156.0.8078.73 allowe ...)
+ TODO: check
+CVE-2026-118352 (Memory corruption in Cache in Google Chrome prior to
156.0.8078.73 all ...)
+ TODO: check
+CVE-2026-118351 (Memory corruption in Skia in Google Chrome prior to
156.0.8078.73 allo ...)
+ TODO: check
+CVE-2026-118350 (Use after free in Turbolev in Google Chrome prior to
156.0.8078.73 all ...)
+ TODO: check
+CVE-2026-118349 (Memory corruption in Payments in Google Chrome prior to
156.0.8078.73 ...)
+ TODO: check
+CVE-2026-118348 (Improper input validation in Skia in Google Chrome prior to
156.0.8078 ...)
+ TODO: check
+CVE-2026-118347 (Use after free in FileSystem in Google Chrome prior to
156.0.8078.73 a ...)
+ TODO: check
+CVE-2026-118346 (Use after free in Compositing in Google Chrome prior to
156.0.8078.73 ...)
+ TODO: check
+CVE-2026-118345 (Use after free in PDFium in Google Chrome prior to
156.0.8078.73 allow ...)
+ TODO: check
+CVE-2026-118344 (Use after free in Layout in Google Chrome prior to
156.0.8078.73 allow ...)
+ TODO: check
+CVE-2026-118343 (Improper input validation in ReadingList in Google Chrome
prior to 156 ...)
+ TODO: check
+CVE-2026-118342 (Out of bounds write in Editing in Google Chrome prior to
156.0.8078.73 ...)
+ TODO: check
+CVE-2026-118341 (Use after free in Modularization in Google Chrome prior to
156.0.8078. ...)
+ TODO: check
+CVE-2026-118340 (Memory corruption in Skia in Google Chrome prior to
156.0.8078.73 allo ...)
+ TODO: check
+CVE-2026-118339 (Use after free in Animation in Google Chrome prior to
156.0.8078.73 al ...)
+ TODO: check
+CVE-2026-118338 (Use after free in Animation in Google Chrome prior to
156.0.8078.73 al ...)
+ TODO: check
+CVE-2026-118337 (Improper access control in Forms in Google Chrome prior to
156.0.8078. ...)
+ TODO: check
+CVE-2026-118336 (Improper input validation in Headless in Google Chrome prior
to 156.0. ...)
+ TODO: check
+CVE-2026-118335 (Improper input validation in Metrics in Google Chrome on on
Mac prior ...)
+ TODO: check
+CVE-2026-118334 (Use after free in ImageCapture in Google Chrome prior to
156.0.8078.73 ...)
+ TODO: check
+CVE-2026-118333 (Missing authorization in Video in Google Chrome prior to
156.0.8078.73 ...)
+ TODO: check
+CVE-2026-118332 (Improper input validation in Compositing in Google Chrome
prior to 156 ...)
+ TODO: check
+CVE-2026-118331 (Improper input validation in FileAPI in Google Chrome prior
to 156.0.8 ...)
+ TODO: check
+CVE-2026-118330 (Use after free in Browser in Google Chrome on on Windows
prior to 156. ...)
+ TODO: check
+CVE-2026-118329 (Improper input validation in ANGLE in Google Chrome on on Mac
prior to ...)
+ TODO: check
+CVE-2026-118328 (Improper input validation in WebRTC in Google Chrome prior to
156.0.80 ...)
+ TODO: check
+CVE-2026-118327 (Memory corruption in Media in Google Chrome prior to
156.0.8078.73 all ...)
+ TODO: check
+CVE-2026-118322 (Memory corruption in ANGLE in Google Chrome prior to
156.0.8078.73 all ...)
+ TODO: check
+CVE-2026-118321 (Improper input validation in Core in Google Chrome on on
Android prior ...)
+ TODO: check
+CVE-2026-118320 (Memory corruption in V8 in Google Chrome prior to
156.0.8078.73 allowe ...)
+ TODO: check
+CVE-2026-118319 (Memory corruption in Skia in Google Chrome prior to
156.0.8078.73 allo ...)
+ TODO: check
+CVE-2026-118318 (Improper access control in V8 in Google Chrome prior to
156.0.8078.73 ...)
+ TODO: check
+CVE-2026-118317 (Memory corruption in HTML in Google Chrome prior to
156.0.8078.73 allo ...)
+ TODO: check
+CVE-2026-118316 (Improper input validation in V8 in Google Chrome prior to
156.0.8078.7 ...)
+ TODO: check
+CVE-2026-118315 (Improper input validation in SVG in Google Chrome prior to
156.0.8078. ...)
+ TODO: check
+CVE-2026-118314 (Improper input validation in UI in Google Chrome on on
Android prior t ...)
+ TODO: check
+CVE-2026-118313 (Use after free in Video in Google Chrome prior to
156.0.8078.73 allowe ...)
+ TODO: check
+CVE-2026-118312 (Memory corruption in Paint in Google Chrome prior to
156.0.8078.73 all ...)
+ TODO: check
+CVE-2026-118311 (Memory corruption in Media in Google Chrome prior to
156.0.8078.73 all ...)
+ TODO: check
+CVE-2026-118310 (Improper input validation in Views in Google Chrome on on
Windows prio ...)
+ TODO: check
+CVE-2026-118309 (Improper input validation in UI in Google Chrome on on
Android prior t ...)
+ TODO: check
+CVE-2026-118308 (Use after free in SVG in Google Chrome prior to 156.0.8078.73
allowed ...)
+ TODO: check
+CVE-2026-118307 (Use after free in Paint in Google Chrome prior to
156.0.8078.73 allowe ...)
+ TODO: check
+CVE-2026-118306 (Memory corruption in FileSystem in Google Chrome prior to
156.0.8078.7 ...)
+ TODO: check
+CVE-2026-118305 (Memory corruption in Turbolev in Google Chrome prior to
156.0.8078.73 ...)
+ TODO: check
+CVE-2026-118304 (Improper input validation in SVG in Google Chrome prior to
156.0.8078. ...)
+ TODO: check
+CVE-2026-118276 (A vulnerability was determined in a2ui-project a2ui up to
0.10.6. This ...)
+ TODO: check
+CVE-2026-118275 (A vulnerability was found in a2ui-project a2ui up to 0.10.6.
This affe ...)
+ TODO: check
+CVE-2026-118274 (A vulnerability has been found in a2ui-project a2ui up to
0.10.6. Affe ...)
+ TODO: check
+CVE-2026-118273 (A flaw has been found in a2ui-project a2ui up to 0.10.6.
Affected by t ...)
+ TODO: check
+CVE-2026-118272 (A vulnerability was detected in a2ui-project a2ui up to
0.10.6. Affect ...)
+ TODO: check
+CVE-2026-118271 (A security vulnerability has been detected in a2ui-project
a2ui up to ...)
+ TODO: check
+CVE-2026-118169 (The Hustle \u2013 Email Marketing, Lead Generation, Optins,
Popups plu ...)
+ TODO: check
+CVE-2026-118164 (The If-So Dynamic Content \u2013 Elementor & All Page
Builders Persona ...)
+ TODO: check
+CVE-2026-118129 (A vulnerability was found in jeremyckahn Chitchatter up to
f8253863381 ...)
+ TODO: check
+CVE-2026-118128 (A vulnerability has been found in a2aproject a2a-js up to
1.1.0. Impac ...)
+ TODO: check
+CVE-2026-117610 (libexpat through 2.9.0 contains a NULL pointer dereference
vulnerabili ...)
+ TODO: check
+CVE-2026-117609 (rtl_433 through 25.12 contains a stack-based buffer overflow
vulnerabi ...)
+ TODO: check
+CVE-2026-117608 (Assimp through 6.0.5 contains an integer overflow
vulnerability in MD2 ...)
+ TODO: check
+CVE-2026-117607 (Xerte Online Toolkits through 3.15.5 contains a remote code
execution ...)
+ TODO: check
+CVE-2026-117606 (NexoPOS through 6.3.0 contains a missing authorization
vulnerability t ...)
+ TODO: check
+CVE-2026-117605 (nopCommerce before 5.00.0 contains a missing authorization
vulnerabili ...)
+ TODO: check
+CVE-2026-116775 (pageant provides a PageantStream type that implements
AsyncRead and As ...)
+ TODO: check
+CVE-2026-116774 (russh is a Rust SSH client and server library that includes
an SSH age ...)
+ TODO: check
+CVE-2026-116773 (russh is a Rust SSH client and server library that includes
an SSH age ...)
+ TODO: check
+CVE-2026-116761 (The CMB2 plugin for WordPress is vulnerable to Stored
Cross-Site Scrip ...)
+ TODO: check
+CVE-2026-116750 (The VikRentCar Car Rental Management System plugin for
WordPress is vu ...)
+ TODO: check
+CVE-2026-116749 (The VikRentCar Car Rental Management System plugin for
WordPress is vu ...)
+ TODO: check
+CVE-2026-116696 (russh is a Rust SSH client and server library that includes
an SSH age ...)
+ TODO: check
+CVE-2026-116695 (Crass is a Ruby CSS parser that is compliant with the CSS
Syntax Level ...)
+ TODO: check
+CVE-2026-116694 (OpenTelemetry Python provides the Python API and SDK for
OpenTelemetry ...)
+ TODO: check
+CVE-2026-116693 (dd-trace is the Datadog APM client for Node.js. From 2.0.0
until 5.131 ...)
+ TODO: check
+CVE-2026-116692 (MLflow is an open source AI engineering platform for agents,
large lan ...)
+ TODO: check
+CVE-2026-116691 (MLflow is an open source AI engineering platform for agents,
large lan ...)
+ TODO: check
+CVE-2026-116690 (MLflow is an open source AI engineering platform for agents,
large lan ...)
+ TODO: check
+CVE-2026-116689 (follow-redirects is a Node.js HTTP and HTTPS client wrapper
that autom ...)
+ TODO: check
+CVE-2026-116688 (CKEditor 5 is a modern JavaScript rich-text editor with an
MVC archite ...)
+ TODO: check
+CVE-2026-116687 (CKEditor 5 is a modern JavaScript rich-text editor with an
MVC archite ...)
+ TODO: check
+CVE-2026-116686 (The Model Context Protocol Python SDK is the official Python
SDK for M ...)
+ TODO: check
+CVE-2026-116685 (The Model Context Protocol Python SDK is the official Python
SDK for M ...)
+ TODO: check
+CVE-2026-116684 (The Model Context Protocol Python SDK is the official Python
SDK for M ...)
+ TODO: check
+CVE-2026-116613 (The Animated Text Block plugin for WordPress is vulnerable to
Sensitiv ...)
+ TODO: check
+CVE-2026-116610 (The Clean Login plugin for WordPress is vulnerable to Missing
Authoriz ...)
+ TODO: check
+CVE-2026-116609 (The WP Visitor Statistics (Real Time Traffic) plugin for
WordPress is ...)
+ TODO: check
+CVE-2026-115624 (GROWI contains a missing authorization check vulnerability in
its coll ...)
+ TODO: check
+CVE-2026-115522 (Exposure of Resource to Wrong Sphere (CWE-668) in
FileArtifactService ...)
+ TODO: check
+CVE-2026-115281 (The Recipe Card Blocks Lite WordPress plugin before 3.6.4
does not san ...)
+ TODO: check
+CVE-2026-115255 (The WP Roster WordPress plugin before 2.35 does not perform
any capabi ...)
+ TODO: check
+CVE-2026-115225 (The Customer Engagement System WordPress plugin before 2.0.2
does not ...)
+ TODO: check
+CVE-2026-115224 (The Customer Engagement System WordPress plugin before 2.0.2
does not ...)
+ TODO: check
+CVE-2026-113813 (The PayPlug for WooCommerce (Official) WordPress plugin
before 3.1.1 d ...)
+ TODO: check
+CVE-2026-113494 (The GeoDirectory WordPress plugin before 2.8.195 does not
perform any ...)
+ TODO: check
+CVE-2026-113488 (The GeoDirectory WordPress plugin before 2.8.196 does not
properly es ...)
+ TODO: check
+CVE-2026-113487 (The GeoDirectory WordPress plugin before 2.8.196 does not
properly sa ...)
+ TODO: check
+CVE-2026-113486 (The Media Library Assistant WordPress plugin before 3.42 does
not veri ...)
+ TODO: check
+CVE-2026-113485 (The Media Library Assistant WordPress plugin before 3.42 does
not cons ...)
+ TODO: check
+CVE-2026-112355 (The MembershipWorks plugin for WordPress before 6.17 contains
an infor ...)
+ TODO: check
+CVE-2026-112352 (Sunhillo SureLine before 9.1.5 contains an authentication
bypass vulne ...)
+ TODO: check
+CVE-2026-112351 (Sunhillo SureLine before 9.1.5 contains an OS command
injection vulner ...)
+ TODO: check
+CVE-2026-112350 (Sunhillo SureLine before 9.1.5 contains a path traversal
vulnerability ...)
+ TODO: check
+CVE-2026-112155
+ REJECTED
+CVE-2026-111967 (The MP3 Audio Player WordPress plugin before 5.16 does not
escape one ...)
+ TODO: check
+CVE-2026-111961 (The Royal MCP WordPress plugin before 1.5.10 does not
perform an obje ...)
+ TODO: check
+CVE-2026-111960 (The Royal MCP WordPress plugin before 1.5.10 does not
perform object- ...)
+ TODO: check
+CVE-2026-111727 (The Appointment Booking Calendar plugin for WordPress is
vulnerable to ...)
+ TODO: check
+CVE-2026-111577 (The GoSMTP WordPress plugin before 1.2.5 does not perform a
settings- ...)
+ TODO: check
+CVE-2026-111563
+ REJECTED
+CVE-2026-111479
+ REJECTED
+CVE-2026-111467
+ REJECTED
+CVE-2026-111372 (The AI ChatBot for WooCommerce \u2013 WoowBot plugin for
WordPress is ...)
+ TODO: check
+CVE-2026-111314 (The affiliate-toolkit \u2013 Multi-Network Affiliate & Amazon
Product ...)
+ TODO: check
+CVE-2026-111255 (The affiliate-toolkit \u2013 Multi-Network Affiliate & Amazon
Product ...)
+ TODO: check
+CVE-2026-111213 (The Travelly \u2013 Tour & Travel Booking Manager for
WooCommerce plug ...)
+ TODO: check
+CVE-2026-111120 (The VikRentCar Car Rental Management System plugin for
WordPress is vu ...)
+ TODO: check
+CVE-2026-111111 (The Prime Slider \u2013 Hero Slider, Carousel, WooCommerce &
Post Slid ...)
+ TODO: check
+CVE-2026-111068 (The DesignSetGo plugin for WordPress is vulnerable to Stored
Cross-Sit ...)
+ TODO: check
+CVE-2026-111032 (The Welcart e-Commerce WordPress plugin before 2.12.6 does
not properl ...)
+ TODO: check
+CVE-2026-111031 (The Welcart e-Commerce WordPress plugin before 2.12.6 does
not validat ...)
+ TODO: check
+CVE-2026-111027 (The Welcart e-Commerce WordPress plugin before 2.12.6 does
not properl ...)
+ TODO: check
+CVE-2026-111021 (The \u0627\u0641\u0632\u0648\u0646\u0647
\u067e\u06cc\u0627\u0645\u06a ...)
+ TODO: check
+CVE-2026-110747 (ProtobufParser._readStringKey() reads the length prefix of a
protobuf ...)
+ TODO: check
+CVE-2026-110691 (The WPOrLogin WordPress plugin before 3.1.0 does not perform
a capabi ...)
+ TODO: check
+CVE-2026-110662 (The MxChat \u2013 AI Chatbot & Content Generation for
WordPress plugin ...)
+ TODO: check
+CVE-2026-110524 (The Copy Anything to Clipboard for WordPress WordPress
plugin before ...)
+ TODO: check
+CVE-2026-110509 (The Essential Addons for Elementor WordPress plugin before
6.8.7 does ...)
+ TODO: check
+CVE-2026-110507 (The Page Builder by SiteOrigin WordPress plugin before 2.38.0
does not ...)
+ TODO: check
+CVE-2026-110506 (The Page Builder by SiteOrigin WordPress plugin before 2.38.0
does not ...)
+ TODO: check
+CVE-2026-110292 (The PayPlug for WooCommerce (Official) WordPress plugin
before 3.1.1 d ...)
+ TODO: check
+CVE-2026-110185 (The Bit Flows: AI Agent Automation & Integrations for Forms,
CRM, eCom ...)
+ TODO: check
+CVE-2026-110071 (The Mang Board plugin for WordPress is vulnerable to Stored
Cross-Site ...)
+ TODO: check
+CVE-2026-110020 (The Rich Showcase for Google Reviews plugin for WordPress is
vulnerabl ...)
+ TODO: check
+CVE-2026-109999 (The AI Marketing Expert \u2014 AI Email Marketing, AI Content
Generato ...)
+ TODO: check
+CVE-2026-109988 (The Product Addons for Woocommerce \u2013 Product Options
with Custom ...)
+ TODO: check
+CVE-2026-109980 (The Related Posts for WordPress plugin for WordPress is
vulnerable to ...)
+ TODO: check
+CVE-2026-109979 (The Related Posts for WordPress plugin for WordPress is
vulnerable to ...)
+ TODO: check
+CVE-2026-109978 (The Cozy Blocks \u2013 Website Builder for WordPress Block
Editor | Gu ...)
+ TODO: check
+CVE-2026-109975 (The Cozy Blocks \u2013 Website Builder for WordPress Block
Editor | Gu ...)
+ TODO: check
+CVE-2026-109974 (The All-in-One Video Gallery \u2013 Video Player & Galleries
for YouTu ...)
+ TODO: check
+CVE-2026-109972 (The s2Member \u2013 Excellent for All Kinds of Memberships,
Content Re ...)
+ TODO: check
+CVE-2026-109848 (GROWI contains an authorization bypass vulnerability in its
tag update ...)
+ TODO: check
+CVE-2026-109590 (The Tour Booking Manager plugin for WordPress is vulnerable
to Stored ...)
+ TODO: check
+CVE-2026-109385 (The UiChemy \u2013 Convert Figma, Prompts and AI Builds to
Elementor, ...)
+ TODO: check
+CVE-2026-109384 (The The Innovative Form Builder \u2013 IvyForms plugin for
WordPress i ...)
+ TODO: check
+CVE-2026-109381 (The Mage Eventpress plugin for WordPress is vulnerable to
privilege es ...)
+ TODO: check
+CVE-2026-109370 (The Document Embedder \u2013 let visitors read files without
downloadi ...)
+ TODO: check
+CVE-2026-109236 (The Customer Email Verification for WooCommerce plugin for
WordPress i ...)
+ TODO: check
+CVE-2026-109218 (The Contact Manager plugin for WordPress is vulnerable to
Arbitrary Fi ...)
+ TODO: check
+CVE-2026-109209 (The All-in-One Video Gallery \u2013 Video Player & Galleries
for YouTu ...)
+ TODO: check
+CVE-2026-108366 (The easy.jobs \u2013 AI powered Job Listing, Job Board,
Career Page, R ...)
+ TODO: check
+CVE-2026-107745 (The AI Engine \u2013 The Chatbot, AI Framework & MCP for
WordPress plu ...)
+ TODO: check
+CVE-2026-107710 (The Hustle \u2013 Email Marketing, Lead Generation, Optins,
Popups plu ...)
+ TODO: check
+CVE-2026-107625 (The Ultimate Member \u2013 User Profile, Registration, Login,
Member D ...)
+ TODO: check
+CVE-2026-107100 (The Royal Addons for Elementor WordPress plugin before
1.7.1070 does ...)
+ TODO: check
+CVE-2026-107098 (The Royal Addons for Elementor WordPress plugin before
1.7.1070 does ...)
+ TODO: check
+CVE-2026-107097 (The Royal Addons for Elementor WordPress plugin before
1.7.1070 does ...)
+ TODO: check
+CVE-2026-106647 (The Royal Addons for Elementor WordPress plugin before
1.7.1070 does ...)
+ TODO: check
+CVE-2026-106013 (The Jupiter X Core plugin for WordPress is vulnerable to
Authenticatio ...)
+ TODO: check
+CVE-2026-106003 (The Court Reservation WordPress plugin before 1.12.4 does
not perform ...)
+ TODO: check
+CVE-2026-106002 (The Court Reservation WordPress plugin before 1.12.4 does
not perform ...)
+ TODO: check
+CVE-2026-105997 (The Booking Package WordPress plugin before 1.7.33 does not
restrict w ...)
+ TODO: check
+CVE-2026-105972 (The Menu Cart for WooCommerce WordPress plugin before 3.2.1
does not s ...)
+ TODO: check
+CVE-2026-105272 (GROWI contains an authorization bypass vulnerability in its
page viewi ...)
+ TODO: check
+CVE-2026-104895 (The asynchronous Smile parser (NonBlockingByteArrayParser)
uses a raw- ...)
+ TODO: check
+CVE-2026-104743 (The Tainacan plugin for WordPress is vulnerable to Directory
Traversal ...)
+ TODO: check
+CVE-2026-104740 (The If-So Dynamic Content \u2013 Elementor & All Page
Builders Persona ...)
+ TODO: check
+CVE-2026-104729 (The Avada (Fusion) Builder plugin for WordPress is vulnerable
to Store ...)
+ TODO: check
+CVE-2026-104694 (The Thrive Automator WordPress plugin before 11.2 does not
properly sa ...)
+ TODO: check
+CVE-2026-104384 (Insufficiently Protected Credentials in tunnel gateway and
provisionin ...)
+ TODO: check
+CVE-2026-104383 (Improper Control of Generation of Code in Pigeon MFA service
in EagleC ...)
+ TODO: check
+CVE-2026-104016 (ProtobufParser parses length-prefixed protobuf string and
bytes fields ...)
+ TODO: check
+CVE-2026-103996 (The If-So Dynamic Content \u2013 Elementor & All Page
Builders Persona ...)
+ TODO: check
+CVE-2026-103995 (Response body and chunk parsing would handle non-hex or
negative integ ...)
+ TODO: check
+CVE-2026-103688 (The Checkout Files Upload for WooCommerce WordPress plugin
before 2.4. ...)
+ TODO: check
+CVE-2026-103382 (The Casso Flow WordPress plugin before 4.2.0 does not
properly authen ...)
+ TODO: check
+CVE-2026-103372 (The Payconiq WordPress plugin through 1.0.4 does not check
that a visi ...)
+ TODO: check
+CVE-2026-103370 (The Awesome Support \u2013 WordPress HelpDesk & Support
Plugin plugin ...)
+ TODO: check
+CVE-2026-103331 (The UniPAY Payment Gateway For WooCommerce WordPress plugin
through 2. ...)
+ TODO: check
+CVE-2026-100175 (The Postie plugin for WordPress is vulnerable to Stored
Cross-Site Scr ...)
+ TODO: check
+CVE-2025-12534
+ REJECTED
+CVE-2015-20129 (CrushFTP before 7.3.0 contains a cross-site request forgery
vulnerabil ...)
+ TODO: check
+CVE-2014-125138 (C97net qEngine CMS through 6.0.0, Kemana Directory through
1.5.6, and ...)
+ TODO: check
+CVE-2014-125137 (C97net qEngine CMS through 6.0.0, Kemana Directory through
1.5.6, and ...)
+ TODO: check
+CVE-2014-125136 (C97net qEngine CMS through 6.0.0, Kemana Directory through
1.5.6, and ...)
+ TODO: check
+CVE-2013-20009 (Linksys WAG200G through 1.01.06 contains a stored cross-site
scripting ...)
+ TODO: check
+CVE-2013-20008 (Linksys WAG200G through 1.01.06 contains a weak password
change mechan ...)
+ TODO: check
+CVE-2013-20007 (Linksys WAG200G through 1.01.06 contains an OS command
injection vulne ...)
+ TODO: check
CVE-2026-XXXX [GHSA-9vw2-f4vp-x7gf: PHPUnit vulnerable to code execution by
other local users via shared temporary directory in PHPT code coverage handling]
- phpunit 13.4.5+ds-1
[trixie] - phpunit <not-affected> (Vulnerable code introduced later)
@@ -3662,7 +4138,7 @@ CVE-2026-103299 (The Payment Gateway WordPress plugin
through 2.2.0 does not en
NOT-FOR-US: WordPress plugin
CVE-2026-103298 (The CCAvenue Payment Gateway for WooCommerce WordPress plugin
through ...)
NOT-FOR-US: WordPress plugin
-CVE-2026-110879
+CVE-2026-110879 (jackson-databind validates the outer class of a class-name
type ID but ...)
- jackson-databind 2.22.4-1
[trixie] - jackson-databind <not-affected> (Incomplete fix for
CVE-2026-54512 not applied)
NOTE:
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-m8xf-2cr7-77ph
@@ -63002,22 +63478,22 @@ CVE-2026-89793 (In the Linux kernel, the following
vulnerability has been resolv
- linux 7.2.6-1
NOTE:
https://git.kernel.org/linus/6e2b571b0a54755b06e092501913e1dfefe75d6c (7.3-rc2)
CVE-2026-19033 (For a secondary zone with transfers restricted by TSIG,
`named` may st ...)
- {DSA-6505-1}
+ {DSA-6505-1 DLA-4865-1}
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-19033
NOTE:
https://github.com/isc-projects/bind9/commit/5330f5ffbd864ff283c68116fdde59e2ae97bdaf
(bind-9.18)
CVE-2026-19662 (An attacker may be able to cause a `named` resolver to abort.
The atta ...)
- {DSA-6505-1}
+ {DSA-6505-1 DLA-4865-1}
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-19662
NOTE:
https://github.com/isc-projects/bind9/commit/794b0dff3cda4d0f4bcb05d07a134def3f75ab90
(bind-9.18)
CVE-2026-19666 (On a resolver configured to use ``dns64``, if an applicable
answer fro ...)
- {DSA-6505-1}
+ {DSA-6505-1 DLA-4865-1}
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-19666
NOTE:
https://github.com/isc-projects/bind9/commit/78175f9749fecdac4eb0d4b08dd064968b4c55f8
(bind-9.18)
CVE-2026-19667 (If an attacker-controlled authoritative server can produce a
negative ...)
- {DSA-6505-1}
+ {DSA-6505-1 DLA-4865-1}
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-19667
NOTE: [1/2]
https://github.com/isc-projects/bind9/commit/993d10fe15adbac485d399f1e4144b55ed226ecf
(bind-9.18)
@@ -63027,12 +63503,12 @@ CVE-2026-19668 (A BIND recursive resolver may
experience excessive resource cons
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-19668
CVE-2026-19941 (An inapplicable NSEC record may be accepted by a `named`
resolver as p ...)
- {DSA-6505-1}
+ {DSA-6505-1 DLA-4865-1}
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-19941
NOTE:
https://github.com/isc-projects/bind9/commit/d9ae565b8aa553ccf025cb8fef842b2f5ad2f2e2
(bind-9.18)
CVE-2026-75029 (In a query response, an attacker may send `named` multiple
copies of a ...)
- {DSA-6505-1}
+ {DSA-6505-1 DLA-4865-1}
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-75029
NOTE:
https://github.com/isc-projects/bind9/commit/e3eeb6d9846b27758e076955b8310856b8d5d515
(bind-9.18)
@@ -63049,22 +63525,22 @@ CVE-2026-77692 (An attacker can cause `named` to
abort by sending a crafted DNS-
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-77692
CVE-2026-78301 (A malformed zone may contain an NS or DNAME node above its
origin, whi ...)
- {DSA-6505-1}
+ {DSA-6505-1 DLA-4865-1}
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-78301
NOTE:
https://github.com/isc-projects/bind9/commit/a638cd47dc2b66e98cd912eb6fe090c6a72b14f6
(bind-9.18)
CVE-2026-80274 (If a BIND resolver sends a query for a DNSSEC-signed
authoritative zon ...)
- {DSA-6505-1}
+ {DSA-6505-1 DLA-4865-1}
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-80274
NOTE:
https://github.com/isc-projects/bind9/commit/2c72008b25c916d75dd4df34550954feb75a1ccd
(bind-9.18)
CVE-2026-81563 (A BIND resolver encountering an SVCB/HTTPS AliasMode record
referencin ...)
- {DSA-6505-1}
+ {DSA-6505-1 DLA-4865-1}
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-81563
NOTE:
https://github.com/isc-projects/bind9/commit/2c06dd156f2338bb873d7ae775a7e2fca37d0bc9
(bind-9.18)
CVE-2026-81736 (If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode
records, ...)
- {DSA-6505-1}
+ {DSA-6505-1 DLA-4865-1}
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-81736
NOTE:
https://github.com/isc-projects/bind9/commit/17177ec18a4a62b7c67a6d76b3e8efb94886caa6
(bind-9.18)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e42fba8059d8a28cb2ca078c2a0c5c9e0fb846f7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e42fba8059d8a28cb2ca078c2a0c5c9e0fb846f7
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
