[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Jul 15 09:50:06 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
cb9f04dc by Salvatore Bonaccorso at 2026-07-15T10:49:34+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5,7 +5,7 @@ CVE-2026-9653 (A denial-of-service security issue exists across all the 1756-EN2
CVE-2026-9636 (A security issue exists within CompactLogix\xae 5380, ControlLogix\xae ...)
NOT-FOR-US: Rockwell Automation
CVE-2026-9561 (Eclipse Kura versions prior to 5.6.2 trust the client-supplied X-Forwa ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-9341 (The Academy LMS \u2013 WordPress LMS Plugin for Complete eLearning Sol ...)
NOT-FOR-US: WordPress plugin
CVE-2026-9292 (A Stored Cross-Site Scripting security issue exists within FactoryTalk ...)
@@ -23,7 +23,7 @@ CVE-2026-8920 (Improper Restriction of Communication Channel to Intended Endpoin
CVE-2026-8919 (Permissive Cross-domain Security Policy with Untrusted Domains in ASUS ...)
NOT-FOR-US: ASUS
CVE-2026-8590 (Vulnerability in Spotfire Spotfire Enterprise (Spotfire Server modules ...)
- TODO: check
+ NOT-FOR-US: Spotfire
CVE-2026-8384 (In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/sec ...)
TODO: check
CVE-2026-8314 (A security issue exists within Arena\xae Simulation due to a memory co ...)
@@ -53,13 +53,13 @@ CVE-2026-62655 (A security flaw was found in certain NETGEAR Orbi models that co
CVE-2026-62422 (In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.14804 ...)
NOT-FOR-US: JetBrains
CVE-2026-61520 (Simple Machines Forum 2.1 prior to commit 4bf35cf and 3.0 prior to com ...)
- TODO: check
+ NOT-FOR-US: Simple Machines Forum
CVE-2026-60119 (Hi.Events before 1.11.0 contains a cross-site scripting vulnerability ...)
- TODO: check
+ NOT-FOR-US: Hi.Events
CVE-2026-60118 (Hi.Events before 1.11.0 contains a missing server-side visibility enfo ...)
- TODO: check
+ NOT-FOR-US: Hi.Events
CVE-2026-60114 (Sustainable Irrigation Platform (SIP) through version 5.2.16 contains ...)
- TODO: check
+ NOT-FOR-US: Sustainable Irrigation Platform (SIP)
CVE-2026-5270 (An authentication bypass vulnerability exists in certain releases of C ...)
TODO: check
CVE-2026-5269 (In Ciena's Navigator Network Control Suite (NCS) and Manage Control Pl ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb9f04dce7f0d2abf0d5c4ca7694d71d963f9d57
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb9f04dce7f0d2abf0d5c4ca7694d71d963f9d57
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260715/03a7a368/attachment.htm>
More information about the debian-security-tracker-commits
mailing list