Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
174b8e64 by Salvatore Bonaccorso at 2026-11-05T08:21:58+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,9 +1,9 @@
CVE-2026-97702 (Open edX Platform enables the authoring and delivery of online
learnin ...)
- TODO: check
+ NOT-FOR-US: Open edX Platform
CVE-2026-97693 (Yuxi is a large-model-based intelligent knowledge base and
knowledge g ...)
- TODO: check
+ NOT-FOR-US: Yuxi
CVE-2026-97373 (draw.io is a configurable diagramming and whiteboarding
application. P ...)
- TODO: check
+ NOT-FOR-US: draw.io
CVE-2026-93389 (The LiteSpeed Cache plugin for WordPress is vulnerable to
unauthentica ...)
NOT-FOR-US: WordPress plugin
CVE-2026-91049 (The EWWW Image Optimizer WordPress plugin before 8.9.1 does
not proper ...)
@@ -27,7 +27,7 @@ CVE-2026-86795 (The Community Events WordPress plugin before
1.6.0 does not have
CVE-2026-86442 (The WP Event Manager WordPress plugin before 3.4.2 does not
verify th ...)
NOT-FOR-US: WordPress plugin
CVE-2026-86041 (ezBookkeeping is an open source, self-hosted personal finance
applicat ...)
- TODO: check
+ NOT-FOR-US: ezBookkeeping
CVE-2026-85570 (The Tutor LMS WordPress plugin before 4.2.0 does not prevent
the corr ...)
NOT-FOR-US: WordPress plugin
CVE-2026-85351 (The FV Flowplayer Video Player WordPress plugin before
7.5.56.7212 doe ...)
@@ -39,15 +39,15 @@ CVE-2026-85346 (The FV Flowplayer Video Player WordPress
plugin before 7.5.56.72
CVE-2026-82418 (IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could
allow a ...)
NOT-FOR-US: IBM
CVE-2026-77372 (VeraCrypt provides disk encryption with strong security based
on TrueC ...)
- TODO: check
+ NOT-FOR-US: VeraCrypt
CVE-2026-76893 (tsParticles is a TypeScript library for creating highly
customizable p ...)
- TODO: check
+ NOT-FOR-US: tsParticles
CVE-2026-76892 (tsParticles is a TypeScript library for creating highly
customizable p ...)
- TODO: check
+ NOT-FOR-US: tsParticles
CVE-2026-76826 (tsParticles is a TypeScript library for creating highly
customizable p ...)
- TODO: check
+ NOT-FOR-US: tsParticles
CVE-2026-76806 (Solidtime is an open-source time-tracking app. Prior to
0.16.0, TogglD ...)
- TODO: check
+ NOT-FOR-US: Solidtime
CVE-2026-69068 (Insufficient length validation in the GNSS firmware loader may
lead to ...)
NOT-FOR-US: Samsung Semiconductor
CVE-2026-69066 (Memory corruption in GPU driver due to improper validation of
VMID res ...)
@@ -101,31 +101,31 @@ CVE-2026-55368 (h2o is an HTTP server with support for
HTTP/1.x, HTTP/2 and HTTP
CVE-2026-55367 (h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and
HTTP/3. Pr ...)
TODO: check
CVE-2026-54384 (VitaFit cloud API before 2026-10-30 contained an
authentication bypass ...)
- TODO: check
+ NOT-FOR-US: VitaFit
CVE-2026-54383 (VitaFit cloud API before 2026-10-30 contained an excessive
data exposu ...)
- TODO: check
+ NOT-FOR-US: VitaFit
CVE-2026-54382 (VitaFit cloud API before 2026-10-30 contained an improper
access contr ...)
- TODO: check
+ NOT-FOR-US: VitaFit
CVE-2026-54381 (VitaFit cloud API before 2026-10-30 contained a misconfigured
cloud st ...)
- TODO: check
+ NOT-FOR-US: VitaFit
CVE-2026-54380 (VitaFit cloud API before 2026-10-30 contained a stored
cross-site scri ...)
- TODO: check
+ NOT-FOR-US: VitaFit
CVE-2026-54379
REJECTED
CVE-2026-54378 (VitaFit cloud API before 2026-10-30 contained a broken access
control ...)
- TODO: check
+ NOT-FOR-US: VitaFit
CVE-2026-54377 (VitaFit cloud API before 2026-10-30 contained an insecure
direct objec ...)
- TODO: check
+ NOT-FOR-US: VitaFit
CVE-2026-54376 (VitaFit Android application (com.vt.vitafit) before 2.8.1.0
contains a ...)
- TODO: check
+ NOT-FOR-US: VitaFit
CVE-2026-54375 (VitaFit Android application (com.vt.vitafit) before 2.8.1.0
contains a ...)
- TODO: check
+ NOT-FOR-US: VitaFit
CVE-2026-54374 (VitaFit Android application (com.vt.vitafit) before 2.8.1.0
contains a ...)
- TODO: check
+ NOT-FOR-US: VitaFit
CVE-2026-54373 (VitaFit Android application (com.vt.vitafit) before 2.8.1.0
contains a ...)
- TODO: check
+ NOT-FOR-US: VitaFit
CVE-2026-54372 (VitaFit Android application (com.vt.vitafit) before 2.8.1.0
contains a ...)
- TODO: check
+ NOT-FOR-US: VitaFit
CVE-2026-53631 (GLPI is a free asset and IT management software package. From
0.83 unt ...)
TODO: check
CVE-2026-52848 (GLPI is a free asset and IT management software package. From
11.0.0 u ...)
@@ -209,47 +209,47 @@ CVE-2026-123010 (@twilio-labs/netlify-okta-auth through
1.0.2 relies on an unver
CVE-2026-122992 (In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6,
dstarCall ...)
TODO: check
CVE-2026-122323 (Kyverno from 1.11.0 before 1.19.2 contains an unbounded
decompression ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122322 (Kyverno from 1.11.0 before 1.19.2 contains an unbounded
decompression ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122321 (Kyverno 1.18.0 before 1.19.2 contains a signature
verification bypass ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122320 (Kyverno before 1.19.2 contains a missing authorization
vulnerability t ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122319 (Kyverno before 1.19.2 contains a denial-of-service
vulnerability in th ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122318 (Kyverno before 1.19.2 contains an authentication bypass in
matchCertif ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122316 (Kyverno from 1.17.0 before 1.19.2 contains a missing
authorization vul ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122315 (Kyverno before 1.19.2 contains an unchecked type assertion in
buildSta ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122314 (Kyverno before 1.19.2 contains an unchecked type assertion in
its vari ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122313 (Kyverno from 1.17.0 before 1.19.2 contains a privilege
escalation vuln ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122312 (Kyverno from 1.19.1 before 1.19.2 contains a namespace
isolation bypas ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122311 (Kyverno from 1.16.0 before 1.19.2 fails to validate path
segments in t ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122310 (Kyverno from 1.19.1 before 1.19.2 validates a Policy's
context.apiCall ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122309 (Kyverno before 1.19.2 contains a denial of service
vulnerability that ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122308 (Kyverno before 1.19.2 contains an authorization bypass
vulnerability i ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122307 (Kyverno before 1.19.2 contains a policy bypass vulnerability
in the ad ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122306 (Kyverno before 1.19.2 contains a denial of service
vulnerability that ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122305 (Kyverno before 1.19.2 contains a denial of service
vulnerability in su ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122304 (Kyverno from 1.17.0 before 1.19.2 contains an authorization
bypass vul ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122303 (Kyverno from 1.17.0 before 1.19.2 contains an authorization
bypass vul ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122302 (Kyverno before 1.19.2 contains a privilege escalation
vulnerability th ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-122301 (Parse Server before 8.6.114 and 9.0.0 before 9.10.6-alpha.6
returns fi ...)
NOT-FOR-US: Parse Server
CVE-2026-122299 (Dulwich before 1.2.20 contains a commit object parsing
vulnerability w ...)
@@ -387,7 +387,7 @@ CVE-2026-116376 (IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4,
1.1.5 could allow a rem
CVE-2026-115770 (Pocket ID is an OIDC provider that allows users to
authenticate with t ...)
TODO: check
CVE-2026-115762 (draw.io is a configurable diagramming and whiteboarding
application. P ...)
- TODO: check
+ NOT-FOR-US: draw.io
CVE-2026-115758 (SumatraPDF is a multi-format reader for Windows. In version
3.6.1 and ...)
TODO: check
CVE-2026-115473 (Mongoose is an embedded web server and network library. Prior
to 7.22, ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/174b8e6458950d15b00f0fa6fc0bfa8d9081e747
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/174b8e6458950d15b00f0fa6fc0bfa8d9081e747
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
