[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Aug 7 21:36:39 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
b7d74ba2 by Salvatore Bonaccorso at 2026-08-07T22:36:14+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -40,17 +40,17 @@ CVE-2026-71556 (go-git is an extensible git implementation library written in pu
NOTE: Fixed by: https://github.com/go-git/go-git/commit/661d1c7f101d34e002a3cfcf8dbea5b7421d07ac (v6.0.0-alpha.5)
NOTE: Fixed by: https://github.com/go-git/go-git/commit/008a78f2dd86f52544ddff8b8e8ddeecdf3f7aab (v5.19.2)
CVE-2026-70561 (TestLink 1.9.20 and prior contains an insecure direct object reference ...)
- TODO: check
+ NOT-FOR-US: TestLink
CVE-2026-69127 (Kirby is an open-source content management system. Prior to 4.9.5 and ...)
- TODO: check
+ NOT-FOR-US: Kirby CMS
CVE-2026-68772 (ZenML 0.94.6 contains a remote code execution vulnerability in the Clo ...)
- TODO: check
+ NOT-FOR-US: ZenML
CVE-2026-67585 (Allocation of Resources Without Limits or Throttling vulnerability in ...)
- TODO: check
+ NOT-FOR-US: DivvyPayHQ absinthe_federation
CVE-2026-66914 (Joomla Extension - seblod.com - Unauthenticated path traversal in SEBL ...)
NOT-FOR-US: Joomla
CVE-2026-66838 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: elixir-ecto postgrex
CVE-2026-66494 (Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shap ...)
NOT-FOR-US: Joomla
CVE-2026-66493 (Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Co ...)
@@ -60,17 +60,17 @@ CVE-2026-66492 (Joomla Extension - phoca.cz - Path Traversal vulnerability in Ph
CVE-2026-66491 (Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1 ...)
NOT-FOR-US: Joomla
CVE-2026-66062 (SvelteKit is a framework for rapidly developing robust, performant web ...)
- TODO: check
+ NOT-FOR-US: SvelteKit
CVE-2026-66059 (Frappe is a full-stack web application framework. Prior to 16.20.0 and ...)
- TODO: check
+ NOT-FOR-US: Frappe
CVE-2026-66058 (Frappe is a full-stack web application framework. Prior to 16.20.0 and ...)
- TODO: check
+ NOT-FOR-US: Frappe
CVE-2026-66000 (Frappe is a full-stack web application framework. Prior to 16.23.0 and ...)
- TODO: check
+ NOT-FOR-US: Frappe
CVE-2026-64637 (Improper privilege management in the XML-RPC API of Plesk before 18.0. ...)
- TODO: check
+ NOT-FOR-US: Plesk
CVE-2026-64636 (An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Lin ...)
- TODO: check
+ NOT-FOR-US: Plesk
CVE-2026-62996 (Smarty is a template engine for PHP, facilitating the separation of pr ...)
TODO: check
CVE-2026-62992 (Smarty is a template engine for PHP, facilitating the separation of pr ...)
@@ -80,45 +80,45 @@ CVE-2026-56794 (Dell OpenManage Server Administrator, versions prior to 11.1.0.2
CVE-2026-56793 (Dell OpenManage Server Administrator, versions prior to 11.1.0.2, cont ...)
NOT-FOR-US: Dell / EMC
CVE-2026-54218 (Use of hard-coded cryptographic key vulnerability in Tobit Laboratorie ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54217 (Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54216 (Tobit Laboratories AG TeamDavid's Webbox application contains a reflec ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54215 (Tobit Laboratories AG TeamDavid's Webbox contains an open redirect vu ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54214 (Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54213 (Tobit Laboratories AG TeamDavid's Webbox application exposes a functio ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54212 (Tobit Laboratories AG TeamDavid's Webbox application implements an API ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54211 (Tobit Laboratories AG TeamDavid's Webbox application\u2019s endpoint \ ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54210 (Tobit Laboratories AG TeamDavid's Webbox application implements variou ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54209 (Tobit Laboratories AG TeamDavid's Webbox application handles password ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54208 (Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54207 (Tobit Laboratories AG TeamDavid's Webbox 's move archive functionality ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54206 (Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, e ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54205 (Tobit Laboratories AG TeamDavid's Webbox 's link storing functionality ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54204 (Tobit Laboratories AG TeamDavid's Webbox 's search functionality accep ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54203 (Memory Leak to an Unauthorized Actor vulnerability in Tobit Laboratori ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54202 (Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path trav ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54201 (Tobit Laboratories AG TeamDavid's Webbox does not enforce authenticat ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54200 (Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a local fil ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-54199 (Tobit Laboratories AG TeamDavid's Webbox is vulnerable to HTTP header ...)
- TODO: check
+ NOT-FOR-US: Tobit
CVE-2026-49008 (By accessing unencrypted information in the device firmware, an attack ...)
NOT-FOR-US: ZTE
CVE-2026-49007 (By accessing unencrypted information in the device firmware, an attack ...)
@@ -126,21 +126,21 @@ CVE-2026-49007 (By accessing unencrypted information in the device firmware, an
CVE-2026-49006 (By accessing unencrypted information in the device firmware, an attack ...)
NOT-FOR-US: ZTE
CVE-2026-48098 (NexTor IP Changer is a command-line tool that leverages the Tor networ ...)
- TODO: check
+ NOT-FOR-US: NexTor IP Changer
CVE-2026-48097 (NexTor IP Changer is a command-line tool that leverages the Tor networ ...)
- TODO: check
+ NOT-FOR-US: NexTor IP Changer
CVE-2026-48094 (The ShareOpenly WordPress plugin prior to version 1.2.1 contains a Cro ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-48093 (The Code Embed WordPress plugin prior to version 2.6.1 is vulnerable t ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-47364 (On every successful login, the Datadog Android application calls Fireb ...)
- TODO: check
+ NOT-FOR-US: Datadog Android application
CVE-2026-47363 (The launcher activity AppActivity in the Datadog Android application i ...)
- TODO: check
+ NOT-FOR-US: Datadog Android application
CVE-2026-47362 (The Datadog Android application stores operationally sensitive content ...)
- TODO: check
+ NOT-FOR-US: Datadog Android application
CVE-2026-47361 (BubbleChatActivity in the Datadog Android application is declared andr ...)
- TODO: check
+ NOT-FOR-US: Datadog Android application
CVE-2026-44965 (Six Android App Widget configuration activities in the Datadog Android ...)
TODO: check
CVE-2026-44964 (The OnCallNotificationActivity in the Datadog Android application is d ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b7d74ba2f34f0847fcba52a9e6177d79961288a0
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b7d74ba2f34f0847fcba52a9e6177d79961288a0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260807/549cd80b/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list