[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Oct 9 20:14:24 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
356712c1 by security tracker role at 2026-10-09T19:14:16+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,34 +1,532 @@
-CVE-2026-98384 [bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()]
+CVE-2026-97791 (In Apache CXF, STSTokenValidator checks whether a SAML assertion is si ...)
+	TODO: check
+CVE-2026-97468 (Apache CXF's STSTokenValidator and Security Token Service (STS) cached ...)
+	TODO: check
+CVE-2026-97075 (Missing Authorization vulnerability in WP Media WP Rocket wp-rocket al ...)
+	TODO: check
+CVE-2026-96809 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+	TODO: check
+CVE-2026-96761 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-96671 (Cross-Site Request Forgery (CSRF) vulnerability in fifu.app Featured I ...)
+	TODO: check
+CVE-2026-96607 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-96553 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-96539 (Incorrect Privilege Assignment vulnerability in Ultimate Member Ultima ...)
+	TODO: check
+CVE-2026-96518 (Missing Authorization vulnerability in properfraction ProfilePress wp- ...)
+	TODO: check
+CVE-2026-96461 (Missing Authorization vulnerability in TMS Amelia ameliabooking allows ...)
+	TODO: check
+CVE-2026-96396 (The Affinity by Canva application for macOS before 3.3.1 (October 2026 ...)
+	TODO: check
+CVE-2026-96395 (The Affinity by Canva app for macOS before 3.3.1 (October 2026 release ...)
+	TODO: check
+CVE-2026-96394 (The Affinity by Canva application for macOS before 3.3.1 (October 2026 ...)
+	TODO: check
+CVE-2026-96393 (The Affinity by Canva app before 3.3.1 (October 2026 release) did not  ...)
+	TODO: check
+CVE-2026-96337 (Missing Authorization vulnerability in properfraction ProfilePress wp- ...)
+	TODO: check
+CVE-2026-96336 (Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator ...)
+	TODO: check
+CVE-2026-96334 (Missing Authorization vulnerability in ThemeGrill User Registration us ...)
+	TODO: check
+CVE-2026-96333 (Authentication Bypass by Spoofing vulnerability in Liquid Web / Stella ...)
+	TODO: check
+CVE-2026-96332 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-96331 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+	TODO: check
+CVE-2026-96330 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+	TODO: check
+CVE-2026-96329 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+	TODO: check
+CVE-2026-96328 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+	TODO: check
+CVE-2026-96327 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+	TODO: check
+CVE-2026-95702 (Use-after-free vulnerability in VFS in Google gVisor prior to release  ...)
+	TODO: check
+CVE-2026-95610 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+	TODO: check
+CVE-2026-95609 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-95608 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-95607 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+	TODO: check
+CVE-2026-95599 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+	TODO: check
+CVE-2026-95598 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-95597 (Missing Authorization vulnerability in codemstory \uc6cc\ub4dc\ud504\u ...)
+	TODO: check
+CVE-2026-95596 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-95591 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-95589 (Missing Authorization vulnerability in Magepeople inc. Deposits and Pa ...)
+	TODO: check
+CVE-2026-94668 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-94667 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-94666 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
+	TODO: check
+CVE-2026-94665 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-94664 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
+	TODO: check
+CVE-2026-94663 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+	TODO: check
+CVE-2026-94661 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-94641 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-94632 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-94568 (Deserialization of Untrusted Data vulnerability in WP Hosting AS Pay w ...)
+	TODO: check
+CVE-2026-94503 (Unrestricted Upload of File with Dangerous Type vulnerability in PX-la ...)
+	TODO: check
+CVE-2026-94415 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-94170 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-94167 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-94166 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-94161 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-94159 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-94158 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-94067 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+	TODO: check
+CVE-2026-94066 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-94065 (Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorF ...)
+	TODO: check
+CVE-2026-94064 (Deserialization of Untrusted Data vulnerability in BuddhaThemes Neo |  ...)
+	TODO: check
+CVE-2026-94063 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-94062 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+	TODO: check
+CVE-2026-94061 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-94060 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-94059 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-94058 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-93947 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+	TODO: check
+CVE-2026-92085 (Improper neutralization of input during web page generation ('cross-si ...)
+	TODO: check
+CVE-2026-90983 (Use of Client-Side authentication vulnerability in Hayat Health Facili ...)
+	TODO: check
+CVE-2026-8374 (Misuse and misconfiguration in Bluetooth communication in SwitchBot Do ...)
+	TODO: check
+CVE-2026-89235 (The Testimonials by BestWebSoft WordPress plugin through 1.0.8 does no ...)
+	TODO: check
+CVE-2026-87846 (The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not  ...)
+	TODO: check
+CVE-2026-86851 (The Livees Checkout WordPress plugin through 7.0.2 does not perform an ...)
+	TODO: check
+CVE-2026-86463 (Apache CXF's FIQL query parser has a vulnerability in how it searches  ...)
+	TODO: check
+CVE-2026-86405 (Improper verification of cryptographic signature vulnerability in Sipa ...)
+	TODO: check
+CVE-2026-85531 (Improper verification of cryptographic signature vulnerability in Sipa ...)
+	TODO: check
+CVE-2026-85479 (The STTP-based data publisher on openPDC accepts network connections w ...)
+	TODO: check
+CVE-2026-85348 (The GDPR Data Request Form WordPress plugin through 1.7.1 does not hav ...)
+	TODO: check
+CVE-2026-84224 (The Kirki WordPress plugin before 6.3.2 does not validate the host of  ...)
+	TODO: check
+CVE-2026-84220 (The Kirki WordPress plugin before 6.3.2 does not prevent shortcodes he ...)
+	TODO: check
+CVE-2026-79650 (Apache CXF\u2019s OIDC relying-party component could redirect users to ...)
+	TODO: check
+CVE-2026-79363 (Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting (XSS) vul ...)
+	TODO: check
+CVE-2026-78835 (Rocket Software Rocket Remote Desktop 18.0.8583.1 is vulnerable to Ins ...)
+	TODO: check
+CVE-2026-78796 (An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wire ...)
+	TODO: check
+CVE-2026-78795 (An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wire ...)
+	TODO: check
+CVE-2026-78384 (CompressionUtils.inflate() decompressed attacker-controlled DEFLATE da ...)
+	TODO: check
+CVE-2026-78341 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
+	TODO: check
+CVE-2026-78340 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
+	TODO: check
+CVE-2026-78339 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
+	TODO: check
+CVE-2026-78027 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
+	TODO: check
+CVE-2026-78026 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
+	TODO: check
+CVE-2026-78025 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
+	TODO: check
+CVE-2026-78024 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
+	TODO: check
+CVE-2026-78023 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
+	TODO: check
+CVE-2026-78022 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
+	TODO: check
+CVE-2026-78021 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
+	TODO: check
+CVE-2026-78020 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
+	TODO: check
+CVE-2026-78019 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
+	TODO: check
+CVE-2026-78018 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
+	TODO: check
+CVE-2026-78017 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
+	TODO: check
+CVE-2026-78016 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
+	TODO: check
+CVE-2026-78015 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
+	TODO: check
+CVE-2026-78013 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
+	TODO: check
+CVE-2026-76779 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
+	TODO: check
+CVE-2026-76769 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
+	TODO: check
+CVE-2026-75597 (pyLoad is a free and open-source download manager written in Python. P ...)
+	TODO: check
+CVE-2026-75353 (OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the ser ...)
+	TODO: check
+CVE-2026-75352 (OpENer v2.3/commit 76b95cf, contains an integer underflow in the serve ...)
+	TODO: check
+CVE-2026-75351 (OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the serv ...)
+	TODO: check
+CVE-2026-75350 (EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer ov ...)
+	TODO: check
+CVE-2026-75349 (EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an ou ...)
+	TODO: check
+CVE-2026-75348 (An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2. ...)
+	TODO: check
+CVE-2026-75347 (EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an e ...)
+	TODO: check
+CVE-2026-75346 (An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2. ...)
+	TODO: check
+CVE-2026-75345 (OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the u ...)
+	TODO: check
+CVE-2026-73179 (Improper enforcement of single-use authorization code semantics in the ...)
+	TODO: check
+CVE-2026-71884 (In Bouncy Castle for Java LTS before 2.73.13, the native one-shot CTR  ...)
+	TODO: check
+CVE-2026-71575 (The max_age authentication-freshness check in OidcClientCodeRequestFil ...)
+	TODO: check
+CVE-2026-62049 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-62042 (Missing Authorization vulnerability in unFocus Projects Scripts n Styl ...)
+	TODO: check
+CVE-2026-62041 (Missing Authorization vulnerability in Ashok Dudhat WP Event Manager w ...)
+	TODO: check
+CVE-2026-62040 (Missing Authorization vulnerability in DEV Institute Restrict User Acc ...)
+	TODO: check
+CVE-2026-62039 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-62036 (Exposure of Sensitive System Information to an Unauthorized Control Sp ...)
+	TODO: check
+CVE-2026-62029 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-62028 (Missing Authorization vulnerability in bPlugins Before After Image Com ...)
+	TODO: check
+CVE-2026-62026 (Cross-Site Request Forgery (CSRF) vulnerability in MIGHTYminnow Dashbo ...)
+	TODO: check
+CVE-2026-55797 (Argo CD is a declarative, GitOps continuous delivery tool for Kubernet ...)
+	TODO: check
+CVE-2026-4264 (Reflected Cross-Site Scripting (XSS) on the BeeTienda e-commerce platf ...)
+	TODO: check
+CVE-2026-48484 (pyLoad is a free and open-source download manager written in Python. P ...)
+	TODO: check
+CVE-2026-42695 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-39779 (Missing Authorization vulnerability in Asgaros Asgaros Forum asgaros-f ...)
+	TODO: check
+CVE-2026-39460 (Usernames and passwords, including the default factory credentials, ar ...)
+	TODO: check
+CVE-2026-39453 (Navigating to a certain URL on the switch\u2019s web server causes the ...)
+	TODO: check
+CVE-2026-33367 (SNMP can be used to perform administrative actions such as retrieving  ...)
+	TODO: check
+CVE-2026-33272 (A malicious user with physical access to the device can boot the switc ...)
+	TODO: check
+CVE-2026-32645 (Default factory credentials with administrative access are enabled and ...)
+	TODO: check
+CVE-2026-29797 (No authentication is required when updating firmware or bootloader, ma ...)
+	TODO: check
+CVE-2026-28745 (Usernames and passwords, including the default credentials, are stored ...)
+	TODO: check
+CVE-2026-19575 (The user-mode verification handler for the device_deinit() system call ...)
+	TODO: check
+CVE-2026-19574 (The ARM64 MMU back-end allocated address space identifiers (ASIDs) for ...)
+	TODO: check
+CVE-2026-19571 (The ITE IT8xxx2 SHI host-command backend (subsys/mgmt/ec_host_cmd/back ...)
+	TODO: check
+CVE-2026-19570 (The LE Audio Broadcast Sink in subsys/bluetooth/audio/bap_broadcast_si ...)
+	TODO: check
+CVE-2026-19569 (dynamic_object_create() in kernel/userspace/userspace.c computed the b ...)
+	TODO: check
+CVE-2026-15340 (lwIP SMTP client does not check the size of inputs, potentially allowi ...)
+	TODO: check
+CVE-2026-108160 (AstronRPA through 1.1.6 contains a download of code without integrity  ...)
+	TODO: check
+CVE-2026-108159 (AstronRPA through 1.1.6 contains a cross-site scripting vulnerability  ...)
+	TODO: check
+CVE-2026-108158 (plugNmeet Server through 2.5.2 contains a path traversal vulnerability ...)
+	TODO: check
+CVE-2026-108157 (Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authent ...)
+	TODO: check
+CVE-2026-108156 (LobsterAI 2026.5.27 through 2026.9.23 contains an external control of  ...)
+	TODO: check
+CVE-2026-108125 (Improper neutralization of special elements used in an SQL command ('S ...)
+	TODO: check
+CVE-2026-108124 (Improper neutralization of special elements used in an SQL command ('S ...)
+	TODO: check
+CVE-2026-108119 (A flaw was found in busybox. The tar applet's deferred link-creation h ...)
+	TODO: check
+CVE-2026-108113 (ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file uploa ...)
+	TODO: check
+CVE-2026-108112 (ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerab ...)
+	TODO: check
+CVE-2026-108111 (ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerab ...)
+	TODO: check
+CVE-2026-108110 (MOVO through 0.2.3 contains an authorization bypass vulnerability in t ...)
+	TODO: check
+CVE-2026-108109 (PHPNuxBill through 2025.3.20 contains an account takeover vulnerabilit ...)
+	TODO: check
+CVE-2026-108108 (PHPNuxBill through 2025.3.20 contains an authentication bypass vulnera ...)
+	TODO: check
+CVE-2026-108107 (PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection ...)
+	TODO: check
+CVE-2026-108106 (Xerial snappy-java before 1.1.10.9 contains an unbounded memory alloca ...)
+	TODO: check
+CVE-2026-108105 (Open5GS through 2.8.0 contains a reachable assertion vulnerability in  ...)
+	TODO: check
+CVE-2026-108104 (Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double rel ...)
+	TODO: check
+CVE-2026-108103 (Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability ...)
+	TODO: check
+CVE-2026-108102 (Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability ...)
+	TODO: check
+CVE-2026-108101 (HortusFox (hortusfox-web) through 6.3 contains an unrestricted file up ...)
+	TODO: check
+CVE-2026-108100 (HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnera ...)
+	TODO: check
+CVE-2026-108096 (Improper authorization in the query resolvers generated by @aws-amplif ...)
+	TODO: check
+CVE-2026-108093 (A flaw was found in GIMP. The XCF loader processes image-simulation-in ...)
+	TODO: check
+CVE-2026-108063 (A flaw was found in libhangul. When parsing Hanja dictionary files, th ...)
+	TODO: check
+CVE-2026-108039 (By default, StaxUtils placed no limit on the total number of elements  ...)
+	TODO: check
+CVE-2026-107938 (In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transport ...)
+	TODO: check
+CVE-2026-107937 (In Apache CXF, the parser for multipart/MTOM attachment part headers d ...)
+	TODO: check
+CVE-2026-107935 (A path traversal vulnerability was found in gvproxy, the network forwa ...)
+	TODO: check
+CVE-2026-107841 (pacioli provides least-privilege governance and a governed agent broke ...)
+	TODO: check
+CVE-2026-107840 (yopass is a service for securely sharing secrets, passwords, and files ...)
+	TODO: check
+CVE-2026-107839 (ageLANServer provides a cross-platform web server and launcher for off ...)
+	TODO: check
+CVE-2026-107838 (RIOT is an open-source microcontroller operating system designed for I ...)
+	TODO: check
+CVE-2026-107837 (RIOT is an open-source microcontroller operating system designed for I ...)
+	TODO: check
+CVE-2026-107836 (RIOT is an open-source microcontroller operating system designed for I ...)
+	TODO: check
+CVE-2026-107835 (OWASP Coraza WAF is a golang modsecurity compatible web application fi ...)
+	TODO: check
+CVE-2026-107834 (OWASP Coraza WAF is a golang modsecurity compatible web application fi ...)
+	TODO: check
+CVE-2026-107833 (OWASP Coraza WAF is a golang modsecurity compatible web application fi ...)
+	TODO: check
+CVE-2026-107826 (OWASP Coraza WAF is a golang modsecurity compatible web application fi ...)
+	TODO: check
+CVE-2026-107825 (OWASP Coraza WAF is a golang modsecurity compatible web application fi ...)
+	TODO: check
+CVE-2026-107824 (x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for  ...)
+	TODO: check
+CVE-2026-107823 (MariaDB server is a community developed fork of MySQL server. From 10. ...)
+	TODO: check
+CVE-2026-107822 (MariaDB server is a community developed fork of MySQL server. From 10. ...)
+	TODO: check
+CVE-2026-107821 (MariaDB server is a community developed fork of MySQL server. From 10. ...)
+	TODO: check
+CVE-2026-107820 (x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for  ...)
+	TODO: check
+CVE-2026-107819 (MariaDB Connector/C is a C and C++ client library for connecting appli ...)
+	TODO: check
+CVE-2026-107818 (MariaDB server is a community developed fork of MySQL server. From 10. ...)
+	TODO: check
+CVE-2026-107817 (MariaDB server is a community developed fork of MySQL server. From 10. ...)
+	TODO: check
+CVE-2026-107816 (MariaDB server is a community developed fork of MySQL server. From 10. ...)
+	TODO: check
+CVE-2026-107815 (MariaDB server is a community developed fork of MySQL server. From 10. ...)
+	TODO: check
+CVE-2026-107814 (MariaDB server is a community developed fork of MySQL server. From 10. ...)
+	TODO: check
+CVE-2026-107813 (Nginx UI is a web user interface for the Nginx web server. From 2.0.0  ...)
+	TODO: check
+CVE-2026-107812 (Nginx UI is a web user interface for the Nginx web server. From 2.0.0  ...)
+	TODO: check
+CVE-2026-107811 (Nginx UI is a web user interface for the Nginx web server. From 2.0.0  ...)
+	TODO: check
+CVE-2026-107810 (Nginx UI is a web user interface for the Nginx web server. From 2.0.0  ...)
+	TODO: check
+CVE-2026-107809 (Nginx UI is a web user interface for the Nginx web server. From 2.0.0  ...)
+	TODO: check
+CVE-2026-107808 (Nginx UI is a web user interface for the Nginx web server. From 2.0.0  ...)
+	TODO: check
+CVE-2026-107807 (Nginx UI is a web user interface for the Nginx web server. From 2.0.0  ...)
+	TODO: check
+CVE-2026-107806 (Nginx UI is a web user interface for the Nginx web server. From 2.3.8  ...)
+	TODO: check
+CVE-2026-107805 (Nginx UI is a web user interface for the Nginx web server. From 2.5.0  ...)
+	TODO: check
+CVE-2026-107804 (Nginx UI is a web user interface for the Nginx web server. From 2.2.0  ...)
+	TODO: check
+CVE-2026-107803 (ProcessMaker is an open source workflow management software suite. Pri ...)
+	TODO: check
+CVE-2026-107785 (Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as ...)
+	TODO: check
+CVE-2026-107783 (Insertion of sensitive information into log file in AWS Tools for Powe ...)
+	TODO: check
+CVE-2026-107655 (A flaw was found in CUPS. When processing embedded job ticket comments ...)
+	TODO: check
+CVE-2026-107419 (Missing Authorization vulnerability in Cool Plugins AI Translation for ...)
+	TODO: check
+CVE-2026-106602 (Authentication Bypass Using an Alternate Path or Channel vulnerability ...)
+	TODO: check
+CVE-2026-106601 (Authentication Bypass Using an Alternate Path or Channel vulnerability ...)
+	TODO: check
+CVE-2026-106581 (Before 4.92.0, Docker Desktop for Windows did not verify the signature ...)
+	TODO: check
+CVE-2026-106155 (In Progress\xae Telerik\xae Report Server prior to version 12.2.26.100 ...)
+	TODO: check
+CVE-2026-106145 (In Progress\xae Telerik\xae Report Server prior to version 12.2.26.100 ...)
+	TODO: check
+CVE-2026-105883 (Missing Authorization vulnerability in ThemeHunk Th Shop Mania th-shop ...)
+	TODO: check
+CVE-2026-105877 (Insertion of Sensitive Information Into Sent Data vulnerability in Qua ...)
+	TODO: check
+CVE-2026-105872 (Deserialization of Untrusted Data vulnerability in mklacroix Product C ...)
+	TODO: check
+CVE-2026-105870 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-105318 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+	TODO: check
+CVE-2026-105281 (The internal data publisher on openPDC accepts network connections wit ...)
+	TODO: check
+CVE-2026-105278 (The published Docker image for openPDC includes a fixed administrative ...)
+	TODO: check
+CVE-2026-104635 (Uncontrolled Recursion vulnerability in Protobuf.JSON.Decode in elixir ...)
+	TODO: check
+CVE-2026-104629 (A component loading mechanism in openPDC and openHistorian will constr ...)
+	TODO: check
+CVE-2026-104392 (Deserialization of Untrusted Data vulnerability in ExpressTech Quiz An ...)
+	TODO: check
+CVE-2026-104117 (A missing authorization check in the illumos IP management daemon (ipm ...)
+	TODO: check
+CVE-2026-104116 (A missing authorization check in the illumos zones statistics daemon ( ...)
+	TODO: check
+CVE-2026-104115 (A stack-based buffer overflow in the illumos reparse point daemon (rep ...)
+	TODO: check
+CVE-2026-104114 (A NULL pointer dereference in the illumos Network Auto-Magic daemon (n ...)
+	TODO: check
+CVE-2026-104113 (A double free in the IP management daemon (ipmgmtd) of OmniOS and Smar ...)
+	TODO: check
+CVE-2026-104112 (A missing release of resources in the illumos name service cache daemo ...)
+	TODO: check
+CVE-2026-104084 (SmarterMail before build 9777 contains a privilege escalation vulnerab ...)
+	TODO: check
+CVE-2026-104083 (SmarterMail before build 9777 contains a stored mutation cross-site sc ...)
+	TODO: check
+CVE-2026-104082 (SmarterMail before build 9777 contains a remote code execution vulnera ...)
+	TODO: check
+CVE-2026-104081 (KodExplorer before 4.55 contains a path traversal vulnerability in the ...)
+	TODO: check
+CVE-2026-104079 (Envira Gallery Lite before 1.16.2 contains a missing authorization vul ...)
+	TODO: check
+CVE-2026-103413 (Improper input validation vulnerability in Apache Camel Karavan.    Wh ...)
+	TODO: check
+CVE-2026-103412 (Improper limitation of a pathname to a restricted directory ('path tra ...)
+	TODO: check
+CVE-2026-103329 (The Super Payments WordPress plugin before 1.43.1 does not properly ve ...)
+	TODO: check
+CVE-2026-103220 (The Affinity by Canva application before 3.3.1 (October 2026 release)  ...)
+	TODO: check
+CVE-2026-102916 (A reachable assertion in the illumos bhyve instruction emulator allows ...)
+	TODO: check
+CVE-2026-102554 (Allocation of resources without limits or throttling (CWE-770) during  ...)
+	TODO: check
+CVE-2026-101130 (The Affinity by Canva application before 3.3.1 (October 2026 release)  ...)
+	TODO: check
+CVE-2026-101094 (The Affinity by Canva application before 3.3.1 (October 2026 release)  ...)
+	TODO: check
+CVE-2026-101022 (A Modbus connection feature on openPDC accepts a caller-specified dest ...)
+	TODO: check
+CVE-2026-100730 (A service console interface on openPDC and openHistorian deserializes  ...)
+	TODO: check
+CVE-2026-100227 (Improper Verification of Cryptographic Signature vulnerability in Apac ...)
+	TODO: check
+CVE-2025-61560 (A race condition vulnerability in the SessionManager of CNCF: Cloud Na ...)
+	TODO: check
+CVE-2025-14123 (The Redux Framework plugin for WordPress is vulnerable to privilege es ...)
+	TODO: check
+CVE-2016-20098 (Moderator Toolbox (reddit-moderator-toolbox) before 4.0.14 contains a  ...)
+	TODO: check
+CVE-2026-98384 (In the Linux kernel, the following vulnerability has been resolved:  b ...)
 	- linux 7.2.9-1
 	[bookworm] - linux <not-affected> (Vulnerable code not present)
 	NOTE: https://git.kernel.org/linus/01b245ba016d44861690594e10f67e026ce8552f (7.3-rc5)
-CVE-2026-98383 [bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL]
+CVE-2026-98383 (In the Linux kernel, the following vulnerability has been resolved:  b ...)
 	- linux 7.2.9-1
 	NOTE: https://git.kernel.org/linus/e4a62833adff6ef0fe7c0b90393204fe3c26b5c5 (7.3-rc5)
-CVE-2026-98382 [bpf: Reject dev-bound-only programs on other devices]
+CVE-2026-98382 (In the Linux kernel, the following vulnerability has been resolved:  b ...)
 	- linux 7.2.9-1
 	[bookworm] - linux <not-affected> (Vulnerable code not present)
 	NOTE: https://git.kernel.org/linus/6db1ce73e9853f533eb7f413f14ba00f8ec6f80d (7.3-rc5)
-CVE-2026-98381 [veth: manage XDP program pointers during channel resize]
+CVE-2026-98381 (In the Linux kernel, the following vulnerability has been resolved:  v ...)
 	- linux 7.2.9-1
 	NOTE: https://git.kernel.org/linus/7104a370714346b667712913dc16abf14bbc97ed (7.3-rc5)
-CVE-2026-98380 [net/sched: reject IDR error pointers when deleting actions]
+CVE-2026-98380 (In the Linux kernel, the following vulnerability has been resolved:  n ...)
 	- linux 7.2.9-1
 	NOTE: https://git.kernel.org/linus/c82b797abe668d0b668601a93ba2c0b071a63574 (7.3-rc5)
-CVE-2026-98379 [netfilter: ip6t_rpfilter: reject routes without inet6_dev]
+CVE-2026-98379 (In the Linux kernel, the following vulnerability has been resolved:  n ...)
 	- linux 7.2.9-1
 	NOTE: https://git.kernel.org/linus/1b9b5323725e458906c7620a3bc10398b51ad954 (7.3-rc5)
-CVE-2026-98378 [bpf: Skip unsettled links in link iterator]
+CVE-2026-98378 (In the Linux kernel, the following vulnerability has been resolved:  b ...)
 	- linux 7.2.9-1
 	NOTE: https://git.kernel.org/linus/50e80e2bb5e2be8515205b9c496b9640ddefa434 (7.3-rc5)
-CVE-2026-98377 [vlan: require the MAC header to be present in __vlan_insert_inner_tag()]
+CVE-2026-98377 (In the Linux kernel, the following vulnerability has been resolved:  v ...)
 	- linux 7.2.9-1
 	NOTE: https://git.kernel.org/linus/ab888242fce4f16f6c4d4c6ec53939ad36aa3b3a (7.3-rc5)
-CVE-2026-98376 [bpf: Use array_map_meta_equal for percpu array inner map replacement]
+CVE-2026-98376 (In the Linux kernel, the following vulnerability has been resolved:  b ...)
 	- linux 7.1.3-1
 	[bookworm] - linux <not-affected> (Vulnerable code not present)
 	NOTE: https://git.kernel.org/linus/593980175389a05793f6060aa20e626330960395 (7.1-rc5)
-CVE-2026-98375
+CVE-2026-98375 (In the Linux kernel, the following vulnerability has been resolved:  x ...)
 	- linux <unfixed>
 	NOTE: https://xenbits.xen.org/xsa/advisory-522.html
 	NOTE: https://git.kernel.org/linus/089e58805c452e52179482b1025a8e309a57f801
@@ -547,6 +1045,7 @@ CVE-2026-107700 (dot-access 0.0.3 through 1.0.0 contains a code injection vulner
 CVE-2026-107699 (ppt2png through 0.0.6 contains an OS command injection vulnerability t ...)
 	NOT-FOR-US: ppt2png Node.js module
 CVE-2026-107698 (FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side requ ...)
+	{DSA-6361-1 DSA-6276-1}
 	- ffmpeg 7:8.1-1
 	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/ea9e85e54981b8402368d0f21648836d6738f1b1 (n8.1)
 	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/f9aa8729bce10e99046e69754d61e43c00f7877b (n8.0.2)
@@ -899,23 +1398,28 @@ CVE-2026-105829 (League CommonMark from 1.3.0 before 2.10.2 contains a cross-sit
 	TODO: check
 CVE-2026-105828 (Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 cont ...)
 	NOT-FOR-US: Parse Server
-CVE-2026-105827 (ImageMagick before 7.1.2-30 and 6.9.13-55 contains an uncontrolled rec ...)
+CVE-2026-105827
+	REJECTED
 	- imagemagick 8:7.1.2.31+dfsg1-1
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wxw6-98rj-hjfr
 	TODO: Duplicte of CVE-2026-106572, report to VulnCheck CNA for rejection
-CVE-2026-105826 (ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a securi ...)
+CVE-2026-105826
+	REJECTED
 	- imagemagick 8:7.1.2.31+dfsg1-1
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3j4w-pvxj-fpjc
 	TODO: Duplicate of CVE-2026-107210, report to VulnCheck CNA for rejection
-CVE-2026-105825 (ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a denial ...)
+CVE-2026-105825
+	REJECTED
 	- imagemagick 8:7.1.2.31+dfsg1-1
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-27m9-54jx-fgvq
 	TODO: Duplicate of CVE-2026-107208, report to VulnCheck CNA for rejection
-CVE-2026-105824 (ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a use-af ...)
+CVE-2026-105824
+	REJECTED
 	- imagemagick 8:7.1.2.31+dfsg1-1
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f2r2-qw7g-3c8x
 	TODO: Duplicate of CVE-2026-107209, report to VulnCheck CNA for rejection
-CVE-2026-105823 (ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a security  ...)
+CVE-2026-105823
+	REJECTED
 	- imagemagick 8:7.1.2.31+dfsg1-1
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r868-pmwh-fv2c
 	TODO: Duplicate of CVE-2026-106580, report to VulnCheck CNA for rejection
@@ -931,35 +1435,43 @@ CVE-2026-105452 (Docker Sandboxes could forward a client-supplied credential alo
 	TODO: check
 CVE-2026-105436 (Deserialization of Untrusted Data vulnerability in MainWP MainWP Child ...)
 	NOT-FOR-US: WordPress plugin or theme
-CVE-2026-105405 (ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains an inval ...)
+CVE-2026-105405
+	REJECTED
 	- imagemagick 8:7.1.2.31+dfsg1-1
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6xf5-c3jx-rp39
 	TODO: Duplicate of CVE-2026-106578, report to VulnCheck CNA for rejection
-CVE-2026-105404 (ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a code i ...)
+CVE-2026-105404
+	REJECTED
 	- imagemagick 8:7.1.2.31+dfsg1-1
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5rg6-j44q-q892
 	TODO: Duplicate of CVE-2026-106577, report to VulnCheck CNA for rejection
-CVE-2026-105403 (ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 allows a security ...)
+CVE-2026-105403
+	REJECTED
 	- imagemagick 8:7.1.2.31+dfsg1-1
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vcjj-32hg-qpx5
 	TODO: Duplicate of CVE-2026-106579, report to VulnCheck CNA for rejection
-CVE-2026-105402 (ImageMagick before 7.1.2-31 contains a denial of service vulnerability ...)
+CVE-2026-105402
+	REJECTED
 	- imagemagick 8:7.1.2.31+dfsg1-1
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v45j-x8p4-3mh4
 	TODO: Duplicate of CVE-2026-106576, report to VulnCheck CNA for rejection
-CVE-2026-105401 (ImageMagick before 7.1.2-31 contains a heap buffer overflow vulnerabil ...)
+CVE-2026-105401
+	REJECTED
 	- imagemagick 8:7.1.2.31+dfsg1-1
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4fq9-vrx7-gv92
 	TODO: Duplicate of CVE-2026-106574, report to VulnCheck CNA for rejection
-CVE-2026-105400 (ImageMagick before 7.1.2-31 contains a resource leak vulnerability tha ...)
+CVE-2026-105400
+	REJECTED
 	- imagemagick 8:7.1.2.31+dfsg1-1
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2w4h-697j-4vrm
 	TODO: Duplicate of CVE-2026-106575, report to VulnCheck CNA for rejection
-CVE-2026-105399 (ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a denial ...)
+CVE-2026-105399
+	REJECTED
 	- imagemagick 8:7.1.2.31+dfsg1-1
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qr53-hc3p-fc62
 	TODO: Duplicate of CVE-2026-106573, report to VulnCheck CNA for rejection
-CVE-2026-105398 (ImageMagick before 7.1.2-31 contains a heap buffer overflow vulnerabil ...)
+CVE-2026-105398
+	REJECTED
 	- imagemagick 8:7.1.2.31+dfsg1-1
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jvjm-9f73-fhpq
 	TODO: Duplicate of CVE-2026-106571, report to VulnCheck CNA for rejection
@@ -3073,7 +3585,8 @@ CVE-2026-39727 (Subscriber Cross Site Scripting (XSS) in WC Fields Factory <= 4.
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-39726 (Unauthenticated Cross Site Scripting (XSS) in Lumise Product Designer  ...)
 	NOT-FOR-US: WordPress plugin or theme
-CVE-2026-39725 (Contributor Remote Code Execution (RCE) in Content Visibility for Divi ...)
+CVE-2026-39725
+	REJECTED
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-39724 (Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager <= ...)
 	NOT-FOR-US: WordPress plugin or theme
@@ -5063,7 +5576,7 @@ CVE-2026-XXXX [GHSA-w9hj-hq9p-m7f6: CUPS: malformed IPP attribute names bypass C
 	- cups <unfixed>
 	NOTE: https://github.com/OpenPrinting/cups/security/advisories/GHSA-w9hj-hq9p-m7f6
 	NOTE: Fixed by: https://github.com/OpenPrinting/cups/commit/05fe6b0e848e51243e9d62e2c5adb6c3023f247e (v2.4.20)
-CVE-2026-107888 [GHSA-qqm8-4q5h-jg55: NULL pointer dereference in cupsdCheckJobs crashes cupsd after temporary printer deletion]
+CVE-2026-107888 (OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in ...)
 	- cups <unfixed>
 	NOTE: https://github.com/OpenPrinting/cups/security/advisories/GHSA-qqm8-4q5h-jg55
 	NOTE: Fixed by: https://github.com/OpenPrinting/cups/commit/c5fc041ca0a211f8e69854907be7b55f56955659 (v2.4.20)
@@ -5071,7 +5584,7 @@ CVE-2026-XXXX [GHSA-fw7q-ww8w-phx8: `job-presets-supported` member values allow
 	- cups <unfixed>
 	NOTE: https://github.com/OpenPrinting/cups/security/advisories/GHSA-fw7q-ww8w-phx8
 	NOTE: Fixed by: https://github.com/OpenPrinting/cups/commit/28834c719ae76e97b75f8190ee5e941daedb3da8 (v2.4.20)
-CVE-2026-107890 [GHSA-wjc4-qhjr-5m5x: Unauthenticated Denial of Service in cupsd via Repeated IPP Group Tags]
+CVE-2026-107890 (OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference ca ...)
 	- cups <unfixed>
 	NOTE: https://github.com/OpenPrinting/cups/security/advisories/GHSA-wjc4-qhjr-5m5x
 	NOTE: Fixed by: https://github.com/OpenPrinting/cups/commit/f3fb41912e4e29dbbbe7c4afd4fe48508af21bc0 (v2.4.20)
@@ -5087,7 +5600,7 @@ CVE-2026-XXXX [GHSA-69qc-prxg-h2c7: CUPS fax option values bypass the CVE-2026-3
 	- cups <unfixed>
 	NOTE: https://github.com/OpenPrinting/cups/security/advisories/GHSA-69qc-prxg-h2c7
 	NOTE: Fixed by: https://github.com/OpenPrinting/cups/commit/0cf4e7814d6810ed3c454222bce3aa342d541681 (v2.4.20)
-CVE-2026-107886 [GHSA-pwg4-pv39-8c22: Double-free in cupsd class management via CUPS-Add-Modify-Class and CUPS-Delete-Class]
+CVE-2026-107886 (OpenPrinting CUPS before 2.4.20 contains a double-free in printer-clas ...)
 	- cups <unfixed>
 	NOTE: https://github.com/OpenPrinting/cups/security/advisories/GHSA-pwg4-pv39-8c22
 	NOTE: Fixed by: https://github.com/OpenPrinting/cups/commit/13bc9d4f8d695403d54469cc3c8b675e34a7037f (v2.4.20)
@@ -8429,7 +8942,7 @@ CVE-2026-97291 (Contributor PHP Object Injection in Schema & Structured Data for
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-97290 (Unauthenticated Cross Site Scripting (XSS) in Photonic Gallery & Light ...)
 	NOT-FOR-US: WordPress plugin or theme
-CVE-2026-97289 (Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master < ...)
+CVE-2026-97289 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-97288 (Contributor Cross Site Scripting (XSS) in OAuth Server <= 4.5.1 versio ...)
 	NOT-FOR-US: WordPress plugin or theme
@@ -35315,7 +35828,7 @@ CVE-2026-93337 (NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains an
 	- network-manager-l2tp 1.52.6-1
 	NOTE: https://github.com/nm-l2tp/NetworkManager-l2tp/security/advisories/GHSA-rp84-8h2r-5xc3
 	NOTE: Fixed by: https://github.com/nm-l2tp/NetworkManager-l2tp/commit/64879ce0ad866f7c9a45babe4d95731a916ea00f (1.52.6, 1.20.26)
-CVE-2026-107466 [GHSA-484h-v688-jq5j: Source URL scheme bypasses sandboxed mode protections across multiple source subtypes]
+CVE-2026-107466 (A flaw was found in flatpak-builder. This vulnerability allows an atta ...)
 	- flatpak-builder 1.4.11-1 (bug #1147701)
 	[trixie] - flatpak-builder <no-dsa> (Minor issue)
 	[bookworm] - flatpak-builder <postponed> (Minor issue)
@@ -279283,11 +279796,11 @@ CVE-2025-7874 (A vulnerability was found in Metasoft \u7f8e\u7279\u8f6f\u4ef6 Me
 	NOT-FOR-US: Metasoft
 CVE-2025-7873 (A vulnerability was found in Metasoft \u7f8e\u7279\u8f6f\u4ef6 MetaCRM ...)
 	NOT-FOR-US: Metasoft
-CVE-2025-7872 (A vulnerability was found in Portabilis i-Diario 1.5.0 and classified  ...)
+CVE-2025-7872 (A weakness has been identified in Portabilis i-Diario 1.5.0. This affe ...)
 	NOT-FOR-US: Portabilis i-Diario
-CVE-2025-7871 (A vulnerability has been found in Portabilis i-Diario 1.5.0 and classi ...)
+CVE-2025-7871 (A security flaw has been discovered in Portabilis i-Diario 1.5.0. The  ...)
 	NOT-FOR-US: Portabilis i-Diario
-CVE-2025-7870 (A vulnerability, which was classified as problematic, was found in Por ...)
+CVE-2025-7870 (A vulnerability was identified in Portabilis i-Diario 1.5.0. The affec ...)
 	NOT-FOR-US: Portabilis i-Diario
 CVE-2025-7869 (A vulnerability, which was classified as problematic, has been found i ...)
 	NOT-FOR-US: Portabilis i-Educar



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/356712c1b71a23db42cd21d3d03fc2452841e8cf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/356712c1b71a23db42cd21d3d03fc2452841e8cf
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/c1c54615/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list