Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e2a03c6f by Salvatore Bonaccorso at 2026-11-03T10:25:00+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -347,7 +347,7 @@ CVE-2026-45514 (In multiple functions of SaveUi.java, there
is a possible bypass
CVE-2026-2613 (The Admin REST API accepts user-supplied input without
adequately sani ...)
NOT-FOR-US: WSO2
CVE-2026-2102 (wrensec-commons contains a reflected cross-site scripting (XSS)
vulner ...)
- TODO: check
+ NOT-FOR-US: WrenSecurity wrensec-commons
CVE-2026-29508 (ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3
contain a ...)
TODO: check
CVE-2026-28665 (In onCreate of SettingsApplication.java, there is a possible
cross-pro ...)
@@ -369,15 +369,15 @@ CVE-2026-18800 (When an Event Publisher output adapter is
configured with proper
CVE-2026-18199 (Zohocorp ManageEngine Password Manager Pro versions before
13236 and P ...)
NOT-FOR-US: Zoho
CVE-2026-16306 (Remote Code Execution in the `IModular.exe` URI handler in
INFINITT He ...)
- TODO: check
+ NOT-FOR-US: INFINITT
CVE-2026-16305 (Local privilege escalation in `SmartUpdate.exe` and
`SmartExecute.exe` ...)
- TODO: check
+ NOT-FOR-US: INFINITT
CVE-2026-120987 (Whale Browser before 5.39.412.57 allows an attacker to bypass
the ifra ...)
- TODO: check
+ NOT-FOR-US: Whale Browser
CVE-2026-120971 (A flaw was found in RESTEasy's default exception mapper. When
an unhan ...)
TODO: check
CVE-2026-120833 (labbench before 0.46.1 contains a deserialization of
untrusted data vu ...)
- TODO: check
+ NOT-FOR-US: labbench
CVE-2026-120831 (A flaw was found in libslirp in if_output(). When moving a
session fro ...)
TODO: check
CVE-2026-120830 (A flaw was found in libslirp in icmp_forward_error(). When
building an ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e2a03c6f3627fb4e2f285103fa9ffb6f60bc18cb
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e2a03c6f3627fb4e2f285103fa9ffb6f60bc18cb
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits