[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Aug 22 20:14:16 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
a906a806 by security tracker role at 2026-08-22T19:14:08+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,45 +1,45 @@
CVE-2026-78003 (The Mailgun for WordPress plugin for WordPress is vulnerable to Server ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-77992 (Joomla Extension - fabrikar.com - heredoc terminator breakout in the c ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-77988 (A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This ...)
- TODO: check
+ NOT-FOR-US: TRENDnet
CVE-2026-77946 (A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affec ...)
- TODO: check
+ NOT-FOR-US: TRENDnet
CVE-2026-77945 (A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. Affected i ...)
- TODO: check
+ NOT-FOR-US: TRENDnet
CVE-2026-77027 (Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76609 (Joomla Extension - fabrikar.com - Unauthenticated modification of any ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76608 (Joomla Extension - fabrikar.com - Unauthenticated disclosure of any co ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76607 (Joomla Extension - fabrikar.com - Missing ACL check in download elemen ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76606 (Joomla Extension - fabrikar.com - Path Traversal via image element in ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76605 (Joomla Extension - fabrikar.com - Remote code execution via image elem ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76604 (Joomla Extension - fabrikar.com - Unauthenticated remote code executio ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76603 (Joomla Extension - fabrikar.com - Unauthenticated row disclosure via f ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76602 (Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORD ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76601 (Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fa ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76600 (Joomla Extension - fabrikar.com - Unauthenticated deletion of any comm ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76599 (Joomla Extension - fabrikar.com - Unauthenticated database table list ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76598 (Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76597 (Joomla Extension - fabrikar.com - Unauthenticated arbitrary file uploa ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76596 (Joomla Extension - fabrikar.com - Unauthenticated table truncation via ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76571 (Joomla Extension - fabrikar.com - Unauthenticated SQL injection in lis ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-75870 (Punk versions before 0.18 for Perl allow session cookie forgery via an ...)
TODO: check
CVE-2026-75866 (Punk::OAuth2::Server versions through 0.03 for Perl issue access token ...)
@@ -61,9 +61,9 @@ CVE-2026-68767 (hashcat's fgetl() function in src/filehandling.c writes a null t
CVE-2026-68766 (hashcat fails to restrict command-line options when parsing restore fi ...)
TODO: check
CVE-2026-66917 (Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-66916 (Joomla Extension - joomgalleryfriends.net - Password-Protected Categor ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-66393 (NLTK versions before 3.9.4 contain an unbounded recursion vulnerabilit ...)
TODO: check
CVE-2026-65915 (NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPoint ...)
@@ -91,15 +91,15 @@ CVE-2026-62380 (Netty (io.netty:netty-codec-socks) versions 4.2.0.Final through
CVE-2026-62243 (Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.1 ...)
TODO: check
CVE-2026-62204 (SiYuan versions before v3.7.4 fail to validate that packageName matche ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-60084 (SiYuan versions before v3.7.4 contain an arbitrary file deletion vulne ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-60083 (SiYuan versions before v3.8.0 contain an incomplete path blocklist in ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-5093 (The GreenShift \u2013 Animation and Page Builder Blocks plugin for Wor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-59809 (SiYuan before v3.8.0 interpolates secret placeholders into the destina ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-59808 (AVideo through commit 9c39d8c8 contains an authentication bypass vulne ...)
TODO: check
CVE-2026-59256 (WWBN AVideo through commit 9c39d8c8 contains an authorization bypass v ...)
@@ -117,19 +117,19 @@ CVE-2026-57944 (AVideo through commit 9c39d8c8 contains a cross-site request for
CVE-2026-56380 (AVideo through commit 9c39d8c8 contains an information exposure vulner ...)
TODO: check
CVE-2026-4703 (The WS Form LITE \u2013 Drag & Drop Contact Form Builder plugin for Wo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-4561 (The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-4559 (The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulne ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-4245 (The Post Duplicator plugin for WordPress is vulnerable to authorizatio ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-4244 (The Post Duplicator plugin for WordPress is vulnerable to unauthorized ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-3424 (The The kk Star Ratings \u2013 Rate Post & Collect User Feedbacks plug ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-2996 (The Advanced Product Fields (Product Addons) for WooCommerce plugin fo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-12710 (A Missing Authorization vulnerability in the QueryEngineTask of Google ...)
TODO: check
CVE-2026-11948
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a906a8064b96dae3f5a6280f20153918f901cb14
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a906a8064b96dae3f5a6280f20153918f901cb14
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260822/065b170c/attachment.htm>
More information about the debian-security-tracker-commits
mailing list