Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5845165d by Salvatore Bonaccorso at 2026-10-31T10:09:53+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -200,9 +200,9 @@ CVE-2026-119977 (WordPress Core is vulnerable to Remote
Code Execution in versio
CVE-2026-119730 (Maxthon Browser for Android before 7.5.8.103 contains an
address bar s ...)
TODO: check
CVE-2026-119343 (Stirling-PDF is a locally hosted web application that
facilitates vari ...)
- TODO: check
+ NOT-FOR-US: Stirling-PDF
CVE-2026-119342 (Stirling-PDF is a locally hosted web application that
facilitates vari ...)
- TODO: check
+ NOT-FOR-US: Stirling-PDF
CVE-2026-119341 (Tesseract is an open source OCR engine. Prior to 5.5.4,
ReadAdaptedCla ...)
TODO: check
CVE-2026-119340 (Tesseract is an open source OCR engine. Prior to 5.5.4,
GENERIC_2D_ARR ...)
@@ -212,25 +212,25 @@ CVE-2026-119339 (Tesseract is an open source OCR engine.
Prior to 5.5.4, WeightM
CVE-2026-119338 (Tesseract is an open source OCR engine. From 5.4.0 until
5.5.4, Append ...)
TODO: check
CVE-2026-119337 (RAGFlow is an open-source RAG (Retrieval-Augmented
Generation) engine. ...)
- TODO: check
+ NOT-FOR-US: RAGFlow
CVE-2026-119336 (Pi-hole is a DNS sinkhole that protects devices from unwanted
content ...)
- TODO: check
+ NOT-FOR-US: Pi-hole
CVE-2026-119335 (Pi-hole is a DNS sinkhole that protects devices from unwanted
content ...)
- TODO: check
+ NOT-FOR-US: Pi-hole
CVE-2026-119334 (Pi-hole is a DNS sinkhole that protects devices from unwanted
content ...)
- TODO: check
+ NOT-FOR-US: Pi-hole
CVE-2026-119333 (draw.io Desktop is the official Electron build of draw.io.
Prior to 31 ...)
- TODO: check
+ NOT-FOR-US: draw.io
CVE-2026-119332 (Ladybird is a truly independent web browser. Prior to
209579c96473c75b ...)
TODO: check
CVE-2026-119331 (Ladybird is a truly independent web browser. Prior to the
c0d68bddf3e3 ...)
TODO: check
CVE-2026-119330 (Immich is a high-performance self-hosted photo and video
management so ...)
- TODO: check
+ NOT-FOR-US: Immich
CVE-2026-119329 (Immich is a high-performance self-hosted photo and video
management so ...)
- TODO: check
+ NOT-FOR-US: Immich
CVE-2026-119328 (Immich is a high-performance self-hosted photo and video
management so ...)
- TODO: check
+ NOT-FOR-US: Immich
CVE-2026-119166 (The Welcart e-Commerce plugin for WordPress is vulnerable to
Insecure ...)
NOT-FOR-US: WordPress plugin
CVE-2026-119163 (The FunnelKit Automations \u2013 Email Marketing Automation
and CRM fo ...)
@@ -930,15 +930,15 @@ CVE-2026-119299 (gopacket provides packet processing
capabilities for Go. Prior
CVE-2026-119298 (croc is a tool that allows any two computers to simply and
securely tr ...)
TODO: check
CVE-2026-119291 (Zuke is a code-first, strongly typed build automation system
for Deno. ...)
- TODO: check
+ NOT-FOR-US: Zuke
CVE-2026-119290 (Zuke is a code-first, strongly typed build automation system
for Deno. ...)
- TODO: check
+ NOT-FOR-US: Zuke
CVE-2026-119289 (Zuke is a code-first, strongly typed build automation system
for Deno. ...)
- TODO: check
+ NOT-FOR-US: Zuke
CVE-2026-119288 (Zuke is a code-first, strongly typed build automation system
for Deno. ...)
- TODO: check
+ NOT-FOR-US: Zuke
CVE-2026-119287 (Zuke is a code-first, strongly typed build automation system
for Deno. ...)
- TODO: check
+ NOT-FOR-US: Zuke
CVE-2026-119176 (The CP Multi View Events Calendar plugin for WordPress is
vulnerable t ...)
NOT-FOR-US: WordPress plugin
CVE-2026-119148 (Incomplete string validation in AWS aws-nitro-enclaves-sdk-c
before 0. ...)
@@ -958,11 +958,11 @@ CVE-2026-119113 (The GeoDirectory \u2013 WP Business
Directory Plugin and Classi
CVE-2026-119086 (Missing queue-set type validation in the queue-set selection
system ca ...)
NOT-FOR-US: Amazon
CVE-2026-119038 (Business::GoCardless versions before 1.01 for Perl complete
redirect f ...)
- TODO: check
+ NOT-FOR-US: Business::GoCardless Perl module
CVE-2026-119037 (Business::GoCardless versions before 1.01 for Perl accept
forged webho ...)
- TODO: check
+ NOT-FOR-US: Business::GoCardless Perl module
CVE-2026-119036 (Business::GoCardless versions before 1.01 for Perl allow
memory exhaus ...)
- TODO: check
+ NOT-FOR-US: Business::GoCardless Perl module
CVE-2026-118996 (CallBackery versions before 0.62.0 for Perl send users their
own passw ...)
NOT-FOR-US: CallBackery
CVE-2026-118995 (CallBackery versions before 0.62.0 for Perl accept unintended
values i ...)
@@ -1190,15 +1190,15 @@ CVE-2026-100355 (Campfire is a web-based chat
application. In version 1.4.4 and
CVE-2025-8574 (The Database Cleaner plugin for WordPress is vulnerable to
arbitrary t ...)
NOT-FOR-US: WordPress plugin
CVE-2025-68395 (ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a
note editor ...)
- TODO: check
+ NOT-FOR-US: ARKETEAM Protectel
CVE-2025-68394 (ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable
to SQL ...)
- TODO: check
+ NOT-FOR-US: ARKETEAM Protectel
CVE-2025-68393 (ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable
to SQL ...)
- TODO: check
+ NOT-FOR-US: ARKETEAM Protectel
CVE-2025-68392 (ARKETEAM Protectel modules PROTECTELMAJ and BDF allow low
privileged u ...)
- TODO: check
+ NOT-FOR-US: ARKETEAM Protectel
CVE-2025-68391 (ARKETEAM Protectel modulesPROTECTELMAJ andBDF are vulnerable
to arbitr ...)
- TODO: check
+ NOT-FOR-US: ARKETEAM Protectel
CVE-2025-49602 (An issue was discovered in Keyfactor EJBCA 9. When an
administrator is ...)
TODO: check
CVE-2025-31704 (A vulnerability has been found in the Dahua Intelligent
Connection Cen ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5845165d7d2a05dab136da05087290c2174db755
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5845165d7d2a05dab136da05087290c2174db755
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
