Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8e8e2448 by Salvatore Bonaccorso at 2026-11-06T20:52:12+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3,15 +3,15 @@ CVE-2026-97642 (The Wp Parsidate plugin for WordPress is
vulnerable to Stored Cr
CVE-2026-92895 (The Live2DWebCanvas plugin for WordPress is vulnerable to
Arbitrary Fi ...)
NOT-FOR-US: WordPress plugin
CVE-2026-92080 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
- TODO: check
+ NOT-FOR-US: pardus-boot-repair
CVE-2026-90975 (A vulnerability in Realtek's RtUsbA64.sys USB audio driver
allows a lo ...)
- TODO: check
+ NOT-FOR-US: Realtek's RtUsbA64.sys USB audio driver
CVE-2026-90436 (** UNSUPPORTED WHEN ASSIGNED ** Deserialization of an inbound
SOAP fau ...)
TODO: check
CVE-2026-89101 (The Everest Forms \u2013 Contact Form, Payment Form, Quiz,
Survey & Cu ...)
NOT-FOR-US: WordPress plugin
CVE-2026-89017 (Skyline DataMiner BrokerGateway contains an embedded API key
vulnerabi ...)
- TODO: check
+ NOT-FOR-US: Skyline DataMiner BrokerGateway
CVE-2026-88801 (The MDJM Event Management and Mobile Events Manager WordPress
plugins ...)
NOT-FOR-US: WordPress plugin
CVE-2026-88800 (The MDJM Event Management and Mobile Events Manager WordPress
plugins ...)
@@ -29,7 +29,7 @@ CVE-2026-85743 (FreeScout is a self-hosted help desk and
shared mailbox. Prior t
CVE-2026-85742 (FreeScout is a self-hosted help desk and shared mailbox. Prior
to 1.8. ...)
NOT-FOR-US: FreeScout
CVE-2026-85111 (Allocation of Resources Without Limits or Throttling in Apache
James M ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-85108 (Allocation of Resources Without Limits or Throttling in Apache
James M ...)
TODO: check
CVE-2026-84473 (Authentication Bypass / Missing Brute-Force Protection in
remote.php/w ...)
@@ -43,11 +43,11 @@ CVE-2026-84155 (CodeChecker's web server fails to fully
invalidate a session tok
CVE-2026-82308 (A pre-authentication heap-based buffer overflow vulnerability
has been ...)
NOT-FOR-US: SonicWall
CVE-2026-80303 (An integer underflow vulnerability in the Avast Windows
Filtering Plat ...)
- TODO: check
+ NOT-FOR-US: Gen Digital Inc.
CVE-2026-80302 (Insufficient isolation in the Avast sandbox file
virtualization layer ...)
- TODO: check
+ NOT-FOR-US: Gen Digital Inc.
CVE-2026-80301 (Improper isolation in the Avast sandbox on Windows allows a
local, low ...)
- TODO: check
+ NOT-FOR-US: Gen Digital Inc.
CVE-2026-76171 (In Apache James server prior version 3.9.1 improper validation
in JMAP ...)
TODO: check
CVE-2026-76168 (In Apache James server prior version 3.9.1 relying on the
SieveFileRep ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8e8e244883f11b1c3b39a68b680f65e97859b926
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8e8e244883f11b1c3b39a68b680f65e97859b926
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
