[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Mar 21 20:12:58 GMT 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4b1addc6 by security tracker role at 2026-03-21T20:12:51+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,4 +1,95 @@
+CVE-2026-4516 (A vulnerability was found in Foundation Agents MetaGPT up to 0.8.1. Th ...)
+	TODO: check
+CVE-2026-4515 (A vulnerability has been found in Foundation Agents MetaGPT up to 0.8. ...)
+	TODO: check
+CVE-2026-4514 (A flaw has been found in PbootCMS up to 3.2.12. Affected by this issue ...)
+	TODO: check
+CVE-2026-4513 (A vulnerability was detected in vanna-ai vanna up to 2.0.2. Affected b ...)
+	TODO: check
+CVE-2026-4511 (A security vulnerability has been detected in vanna-ai vanna up to 2.0 ...)
+	TODO: check
+CVE-2026-2756 (A security vulnerability has been detected in OmniPEMF NeoRhythm up to ...)
+	TODO: check
+CVE-2019-25582 (i-doit CMDB 1.12 contains an arbitrary file download vulnerability tha ...)
+	TODO: check
+CVE-2019-25581 (i-doit CMDB 1.12 contains an SQL injection vulnerability that allows u ...)
+	TODO: check
+CVE-2019-25580 (ownDMS 4.7 contains an SQL injection vulnerability that allows unauthe ...)
+	TODO: check
+CVE-2019-25579 (phpTransformer 2016.9 contains a directory traversal vulnerability tha ...)
+	TODO: check
+CVE-2019-25578 (phpTransformer 2016.9 contains an SQL injection vulnerability that all ...)
+	TODO: check
+CVE-2019-25577 (SeoToaster Ecommerce 3.0.0 contains a local file inclusion vulnerabili ...)
+	TODO: check
+CVE-2019-25576 (Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability th ...)
+	TODO: check
+CVE-2019-25575 (SimplePress CMS 1.0.7 contains an SQL injection vulnerability that all ...)
+	TODO: check
+CVE-2019-25574 (Green CMS 2.x contains a path traversal vulnerability that allows auth ...)
+	TODO: check
+CVE-2019-25573 (Green CMS 2.x contains an SQL injection vulnerability that allows auth ...)
+	TODO: check
+CVE-2019-25572 (NordVPN 6.19.6 contains a denial of service vulnerability that allows  ...)
+	TODO: check
+CVE-2019-25571 (MediaMonkey 4.1.23 contains a denial of service vulnerability that all ...)
+	TODO: check
+CVE-2019-25570 (RealTerm Serial Terminal 2.0.0.70 contains a denial of service vulnera ...)
+	TODO: check
+CVE-2019-25569 (RealTerm Serial Terminal 2.0.0.70 contains a stack-based buffer overfl ...)
+	TODO: check
+CVE-2019-25568 (Memu Play 6.0.7 contains an insecure file permissions vulnerability th ...)
+	TODO: check
+CVE-2019-25567 (Valentina Studio 9.0.5 Linux contains a buffer overflow vulnerability  ...)
+	TODO: check
+CVE-2019-25566 (TransMac 12.3 contains a buffer overflow vulnerability in the volume n ...)
+	TODO: check
+CVE-2019-25565 (Magic Iso Maker 5.5 build 281 contains a buffer overflow vulnerability ...)
+	TODO: check
+CVE-2019-25564 (PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that a ...)
+	TODO: check
+CVE-2019-25563 (PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that a ...)
+	TODO: check
+CVE-2019-25562 (jetAudio 8.1.7 contains a buffer overflow vulnerability in the video c ...)
+	TODO: check
+CVE-2019-25561 (Lyric Maker 2.0.1.0 contains a buffer overflow vulnerability that allo ...)
+	TODO: check
+CVE-2019-25560 (Lyric Video Creator 2.1 contains a denial of service vulnerability tha ...)
+	TODO: check
+CVE-2019-25559 (SpotPaltalk 1.1.5 contains a denial of service vulnerability in the re ...)
+	TODO: check
+CVE-2019-25558 (Selfie Studio 2.17 contains a denial of service vulnerability in the R ...)
+	TODO: check
+CVE-2019-25557 (TwistedBrush Pro Studio 24.06 contains a denial of service vulnerabili ...)
+	TODO: check
+CVE-2019-25556 (TwistedBrush Pro Studio 24.06 contains a denial of service vulnerabili ...)
+	TODO: check
+CVE-2019-25555 (TwistedBrush Pro Studio 24.06 contains a denial of service vulnerabili ...)
+	TODO: check
+CVE-2019-25554 (Tomabo MP4 Converter 3.25.22 contains a denial of service vulnerabilit ...)
+	TODO: check
+CVE-2019-25553 (CEWE PHOTO IMPORTER 6.4.3 contains a denial of service vulnerability t ...)
+	TODO: check
+CVE-2019-25552 (CEWE PHOTO SHOW 6.4.3 contains a denial of service vulnerability that  ...)
+	TODO: check
+CVE-2019-25551 (Sandboxie 5.30 contains a denial of service vulnerability that allows  ...)
+	TODO: check
+CVE-2019-25550 (Encrypt PDF 2.3 contains a buffer overflow vulnerability that allows l ...)
+	TODO: check
+CVE-2019-25549 (VeryPDF PCL Converter 2.7 contains a denial of service vulnerability t ...)
+	TODO: check
+CVE-2019-25548 (BlueStacks 4.80.0.1060 contains a denial of service vulnerability that ...)
+	TODO: check
+CVE-2019-25547 (NetAware 1.20 contains a buffer overflow vulnerability in the User Blo ...)
+	TODO: check
+CVE-2019-25546 (NetAware 1.20 contains a buffer overflow vulnerability in the Share Na ...)
+	TODO: check
+CVE-2019-25545 (Terminal Services Manager 3.2.1 contains a local buffer overflow vulne ...)
+	TODO: check
+CVE-2019-25544 (Pidgin 2.13.0 contains a denial of service vulnerability that allows l ...)
+	TODO: check
 CVE-2026-33250
+	{DSA-6173-1}
 	- freeciv <unfixed>
 CVE-2026-4510 (A weakness has been identified in PbootCMS up to 3.2.12. This impacts  ...)
 	NOT-FOR-US: PbootCMS
@@ -16481,6 +16572,7 @@ CVE-2026-20678 (An authorization issue was addressed with improved state managem
 CVE-2026-20677 (A race condition was addressed with improved handling of symbolic link ...)
 	NOT-FOR-US: Apple
 CVE-2026-20676 (This issue was addressed through improved state management. This issue ...)
+	{DSA-6172-1}
 	- webkit2gtk 2.50.6-1
 	- wpewebkit 2.50.6-1
 	[trixie] - wpewebkit <ignored> (wpewebkit not covered by security support in Trixie)
@@ -16520,6 +16612,7 @@ CVE-2026-20654 (The issue was addressed with improved memory handling. This issu
 CVE-2026-20653 (A parsing issue in the handling of directory paths was addressed with  ...)
 	NOT-FOR-US: Apple
 CVE-2026-20652 (The issue was addressed with improved memory handling. This issue is f ...)
+	{DSA-6172-1}
 	- webkit2gtk 2.50.6-1
 	- wpewebkit 2.50.6-1
 	[trixie] - wpewebkit <ignored> (wpewebkit not covered by security support in Trixie)
@@ -16539,6 +16632,7 @@ CVE-2026-20646 (A logging issue was addressed with improved data redaction. This
 CVE-2026-20645 (An inconsistent user interface issue was addressed with improved state ...)
 	NOT-FOR-US: Apple
 CVE-2026-20644 (The issue was addressed with improved memory handling. This issue is f ...)
+	{DSA-6172-1}
 	- webkit2gtk 2.50.6-1
 	- wpewebkit 2.50.6-1
 	[trixie] - wpewebkit <ignored> (wpewebkit not covered by security support in Trixie)
@@ -16554,6 +16648,7 @@ CVE-2026-20640 (An inconsistent user interface issue was addressed with improved
 CVE-2026-20638 (A logic issue was addressed with improved checks. This issue is fixed  ...)
 	NOT-FOR-US: Apple
 CVE-2026-20636 (The issue was addressed with improved memory handling. This issue is f ...)
+	{DSA-6172-1}
 	- webkit2gtk 2.50.6-1
 	- wpewebkit 2.50.6-1
 	[trixie] - wpewebkit <ignored> (wpewebkit not covered by security support in Trixie)
@@ -16561,6 +16656,7 @@ CVE-2026-20636 (The issue was addressed with improved memory handling. This issu
 	[bullseye] - wpewebkit <end-of-life> (see #1035997)
 	NOTE: https://webkitgtk.org/security/WSA-2026-0001.html
 CVE-2026-20635 (The issue was addressed with improved memory handling. This issue is f ...)
+	{DSA-6172-1}
 	- webkit2gtk 2.50.6-1
 	- wpewebkit 2.50.6-1
 	[trixie] - wpewebkit <ignored> (wpewebkit not covered by security support in Trixie)
@@ -16610,6 +16706,7 @@ CVE-2026-20610 (This issue was addressed with improved handling of symlinks. Thi
 CVE-2026-20609 (The issue was addressed with improved memory handling. This issue is f ...)
 	NOT-FOR-US: Apple
 CVE-2026-20608 (This issue was addressed through improved state management. This issue ...)
+	{DSA-6172-1}
 	- webkit2gtk 2.50.6-1
 	- wpewebkit 2.50.6-1
 	[trixie] - wpewebkit <ignored> (wpewebkit not covered by security support in Trixie)
@@ -42293,6 +42390,7 @@ CVE-2025-43513 (A permissions issue was addressed by removing the vulnerable cod
 CVE-2025-43512 (A logic issue was addressed with improved checks. This issue is fixed  ...)
 	NOT-FOR-US: Apple
 CVE-2025-43511 (A use-after-free issue was addressed with improved memory management.  ...)
+	{DSA-6172-1}
 	- webkit2gtk 2.50.5-1
 	- wpewebkit 2.50.5-1
 	[trixie] - wpewebkit <ignored> (wpewebkit not covered by security support in Trixie)
@@ -55716,6 +55814,7 @@ CVE-2025-43458 (This issue was addressed through improved state management. This
 	[bullseye] - wpewebkit <end-of-life> (see #1035997)
 	NOTE: https://webkitgtk.org/security/WSA-2025-0009.html
 CVE-2025-43457 (A use-after-free issue was addressed with improved memory management.  ...)
+	{DSA-6172-1}
 	- webkit2gtk 2.50.6-1
 	- wpewebkit 2.50.6-1
 	[trixie] - wpewebkit <ignored> (wpewebkit not covered by security support in Trixie)
@@ -89586,6 +89685,7 @@ CVE-2025-43216 (A use-after-free issue was addressed with improved memory manage
 CVE-2025-43215 (The issue was addressed with improved checks. This issue is fixed in m ...)
 	NOT-FOR-US: Apple
 CVE-2025-43214 (The issue was addressed with improved memory handling. This issue is f ...)
+	{DSA-6172-1}
 	- webkit2gtk 2.50.5-1
 	- wpewebkit 2.50.5-1
 	[trixie] - wpewebkit <ignored> (wpewebkit not covered by security support in Trixie)
@@ -922191,7 +922291,7 @@ CVE-2006-3972 (Directory traversal vulnerability in includes/operator_chattransc
 	NOT-FOR-US: Ajax Chat
 CVE-2006-3971 (Cross-site scripting (XSS) vulnerability in visitor/livesupport/chat.p ...)
 	NOT-FOR-US: Ajax Chat
-CVE-2006-10002 (XML::Parser versions through 2.47 for Perl could overflow the pre-allo ...)
+CVE-2006-10002 (XML::Parser versions through 2.45 for Perl could overflow the pre-allo ...)
 	- libxml-parser-perl 2.46-1 (bug #378411; medium)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/38106361/
 	NOTE: https://rt.cpan.org/Ticket/Display.html?id=19859



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4b1addc6ae152816f5146507ce55c72b78794f37

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4b1addc6ae152816f5146507ce55c72b78794f37
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260321/e7ab951e/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list