[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Oct 12 20:15:42 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
f1d77364 by security tracker role at 2026-10-12T19:15:23+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
CVE-2026-9191 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-96618 (Improper Handling of Highly Compressed Data (Data Amplification) vulne ...)
TODO: check
CVE-2026-96612 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
@@ -7,11 +7,11 @@ CVE-2026-96612 (Improper Limitation of a Pathname to a Restricted Directory ('Pa
CVE-2026-94451 (Quarkus REST Data Panache provides a way to automatically generate RES ...)
TODO: check
CVE-2026-93695 (In Progress ShareFile Storage Zones Controller v5.12.6 and below, File ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-93694 (In Progress ShareFile Storage Zones Controller v5.12.6 and below, proc ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-93693 (In Progress ShareFile Storage Zones Controller v5.12.6 and below, impr ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-92877 (The JAXB factory methods historically relied solely on `FEATURE_SECURE ...)
TODO: check
CVE-2026-92682 (In @neo4j/graphql versions from 7.0.0 up to but not including 7.6.4, t ...)
@@ -19,71 +19,71 @@ CVE-2026-92682 (In @neo4j/graphql versions from 7.0.0 up to but not including 7.
CVE-2026-92681 (In @neo4j/graphql versions up to and including 7.6.3, @authentication ...)
TODO: check
CVE-2026-89140 (Temporal Server does not bind internal completion callbacks to the nam ...)
- TODO: check
+ NOT-FOR-US: Temporal Technologies
CVE-2026-87744 (A flaw was found in Quarkus REST Data Panache. This vulnerability allo ...)
TODO: check
CVE-2026-85976 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85975 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85974 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85973 (Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartex ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85972 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85971 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85970 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85969 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85968 (Progress MarkLogic Server 12.x releases before 12.1.0 contain an out-o ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85967 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85966 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85965 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85964 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85963 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85962 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85961 (On Azure deployments, Progress MarkLogic Server 12.x releases before 1 ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85960 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85959 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85958 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85957 (Affected Progress MarkLogic Server 11.x releases before 11.3.7 use a S ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85956 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85955 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85954 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85953 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85952 (Affected Linux-based Progress MarkLogic Server 12.x releases before 12 ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85951 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85950 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85949 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85948 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85947 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x release ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-85499 (Improper Authorization vulnerability in Apache SkyWalking BanyanDB. ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-85471 (A flaw was found in Quay. An authenticated repository administrator co ...)
TODO: check
CVE-2026-84286 (ExLlamaV3\u2019s EXL3 loader uses an untrusted, model-supplied index t ...)
@@ -95,7 +95,7 @@ CVE-2026-83535 (A flaw was found in openstack-network-exporter. When an operator
CVE-2026-81856 (Improper Neutralization of Escape, Meta, or Control Sequences vulnerab ...)
TODO: check
CVE-2026-78404 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5is vulnerable ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-77366 (obsidian-tc is a governed, agent-ready Model Context Protocol server f ...)
TODO: check
CVE-2026-77364 (obsidian-tc is a governed, agent-ready Model Context Protocol server f ...)
@@ -111,23 +111,23 @@ CVE-2026-68764
CVE-2026-65954 (PHPCSUtils is a suite of utility functions for use with PHP_CodeSniffe ...)
TODO: check
CVE-2026-61994 (Missing Authorization vulnerability in RocketGeek WP-Members wp-member ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-59977 (ConvertX is a self-hosted file conversion service. Prior to 0.18.0, th ...)
TODO: check
CVE-2026-59976 (ConvertX is a self-hosted file conversion service. Prior to 0.18.0, th ...)
TODO: check
CVE-2026-57143 (PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6. ...)
- TODO: check
+ NOT-FOR-US: PraisonAI
CVE-2026-57118 (PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6. ...)
- TODO: check
+ NOT-FOR-US: PraisonAI
CVE-2026-42689 (Concurrent Execution using Shared Resource with Improper Synchronizati ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-1907 (A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open S ...)
- TODO: check
+ NOT-FOR-US: Kong
CVE-2026-18390 (Improper neutralization of special elements used in an OS command ('OS ...)
TODO: check
CVE-2026-18166 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UN ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-12613 (Deserialization of untrusted data vulnerability in Ministry of Justice ...)
TODO: check
CVE-2026-109448 (Integer wraparound in psqlODBC SQLBindParameter allows an application, ...)
@@ -205,27 +205,27 @@ CVE-2026-109345 (DOMPurify before 3.4.16 contains a cross-site scripting vulnera
CVE-2026-109344 (DOMPurify from 3.4.13 before 3.4.16 contains a cross-site scripting vu ...)
TODO: check
CVE-2026-109343 (SurrealDB before 3.3.0 allows cross-tenant access because the SurrealQ ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109342 (SurrealDB from 3.0.0 before 3.3.0 contains a missing authentication vu ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109341 (SurrealDB before 3.3.0 contains an authorization bypass vulnerability ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109340 (SurrealDB from 3.1.0 before 3.3.0 contains an authorization bypass vul ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109339 (SurrealDB 3.1.0 before 3.3.0 lets Surrealism modules exhaust server me ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109338 (SurrealDB before 3.3.0 contains a denial of service vulnerability that ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109337 (SurrealDB before 3.3.0 contains an authorization bypass vulnerability ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109336 (SurrealDB before 3.3.0 contains an authorization bypass vulnerability ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109335 (SurrealDB from 3.0.0 before 3.3.0 contains an information disclosure v ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109334 (SurrealDB before 3.3.0 does not check the caller-selected namespace or ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109333 (SurrealDB from 3.0.0 before 3.3.0 contains an authorization bypass vul ...)
- TODO: check
+ NOT-FOR-US: SurrealDB
CVE-2026-109332 (Network-AI (npm network-ai) before 5.15.2 contains an origin validatio ...)
TODO: check
CVE-2026-109331 (Network-AI from 5.14.0 before 5.15.2 contains a security control bypas ...)
@@ -271,25 +271,25 @@ CVE-2026-109312 (Grav Login plugin 2.7.0 before 3.9.9 contains an authentication
CVE-2026-109311 (vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open() ...)
TODO: check
CVE-2026-109310 (SiYuan v3.1.12 before v3.8.6 fails to restrict the Sprig template func ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-109309 (SiYuan v3.7.0 before v3.8.6 contains an absolute path traversal vulner ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-109308 (Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 passes the raw ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-109307 (Craft CMS 5.0.0 before 5.10.14 contains a DOM-based cross-site scripti ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-109306 (Craft CMS from 5.0.0 before 5.10.14 contains a missing authorization v ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-109305 (Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass th ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-109304 (Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 contains an arb ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-109303 (Parse Server before 8.6.93 and 9.0.0 before 9.10.1-alpha.13 does not e ...)
- TODO: check
+ NOT-FOR-US: Parse Server
CVE-2026-109302 (Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 appl ...)
- TODO: check
+ NOT-FOR-US: Parse Server
CVE-2026-109301 (Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3 does not re ...)
- TODO: check
+ NOT-FOR-US: Parse Server
CVE-2026-109300 (Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scri ...)
TODO: check
CVE-2026-109299 (Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulne ...)
@@ -515,19 +515,19 @@ CVE-2026-108922 (A flaw has been found in KusalkaSilva Learning-Management-Syste
CVE-2026-108921 (A vulnerability was detected in KusalkaSilva Learning-Management-Syste ...)
TODO: check
CVE-2026-108920 (A security vulnerability has been detected in SourceCodester Drug Reco ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2026-108919 (A weakness has been identified in SourceCodester Drug Recommendation S ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2026-108918 (A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is a ...)
- TODO: check
+ NOT-FOR-US: Edimax
CVE-2026-108917 (A vulnerability was determined in Edimax BR-6208AC 1.32. This issue af ...)
- TODO: check
+ NOT-FOR-US: Edimax
CVE-2026-108916 (A vulnerability was found in Edimax BR-6208AC 1.32. This vulnerability ...)
- TODO: check
+ NOT-FOR-US: Edimax
CVE-2026-108915 (A vulnerability has been found in Edimax BR-6208AC 1.32. This affects ...)
- TODO: check
+ NOT-FOR-US: Edimax
CVE-2026-108914 (A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue ...)
- TODO: check
+ NOT-FOR-US: Edimax
CVE-2026-108909 (A security flaw has been discovered in Netcore NR268 1.7.121109. Affec ...)
TODO: check
CVE-2026-108908 (A vulnerability was identified in Netcore NR268 1.7.121109. Affected b ...)
@@ -547,15 +547,15 @@ CVE-2026-108898 (A vulnerability was detected in Netis WF2409E 3.3.42541. This a
CVE-2026-108897 (A security vulnerability has been detected in Smart Media4U Technology ...)
TODO: check
CVE-2026-108896 (A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects t ...)
- TODO: check
+ NOT-FOR-US: Linksys
CVE-2026-108895 (A weakness has been identified in Linksys E1700 1.0.0.4.003. The affec ...)
- TODO: check
+ NOT-FOR-US: Linksys
CVE-2026-108894 (A security flaw has been discovered in Linksys E1700 1.0.0.4.003. Impa ...)
- TODO: check
+ NOT-FOR-US: Linksys
CVE-2026-108893 (A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003. Thi ...)
- TODO: check
+ NOT-FOR-US: Linksys
CVE-2026-108892 (A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vuln ...)
- TODO: check
+ NOT-FOR-US: Linksys
CVE-2026-108890 (A vulnerability has been found in BlackBeltTechnology pi-agent-dashboa ...)
TODO: check
CVE-2026-108889 (A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affec ...)
@@ -581,7 +581,7 @@ CVE-2026-108826 (A vulnerability was found in Zen Cart up to 2.2.2. This impacts
CVE-2026-108825 (A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. Thi ...)
TODO: check
CVE-2026-108824 (A flaw has been found in DataEase up to 3.0.0. The impacted element is ...)
- TODO: check
+ NOT-FOR-US: DataEase
CVE-2026-108822 (A vulnerability was detected in Kamailio up to 6.0.7/6.1.3. The affect ...)
TODO: check
CVE-2026-108821 (A security vulnerability has been detected in Tencent WeKnora up to 0. ...)
@@ -609,75 +609,75 @@ CVE-2026-108811 (A weakness has been identified in WMCMS 4.446.1257. The affecte
CVE-2026-108810 (A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5 ...)
TODO: check
CVE-2026-108486 (Missing Authorization vulnerability in WPMU DEV Forminator forminator ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108482 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108481 (Cross-Site Request Forgery (CSRF) vulnerability in Patreon Patreon Wor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108479 (Cross-Site Request Forgery (CSRF) vulnerability in Patreon Patreon Wor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108478 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108477 (Missing Authorization vulnerability in Arraytics Booktics booktics all ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108476 (Missing Authorization vulnerability in VideoWhisper.com Paid Videochat ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108475 (Missing Authorization vulnerability in VideoWhisper.com Broadcast Live ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108168 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108094 (A use-after-free flaw was found in mutter in the Wayland color-managem ...)
TODO: check
CVE-2026-107869 (Missing Authorization vulnerability in WP Desk Flexible Subscriptions ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107866 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107865 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107864 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107863 (Missing Authorization vulnerability in Codection Products Restricted U ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107862 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107432 (Missing Authorization vulnerability in NOUS Ouvert Utile et Simple Eve ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107430 (Missing Authorization vulnerability in VideoWhisper.com VideoWhisper S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107429 (Improper Validation of Specified Quantity in Input vulnerability in Vi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107427 (Authorization Bypass Through User-Controlled Key vulnerability in NOUS ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107423 (Missing Authorization vulnerability in WP User Manager WP User Manager ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107418 (Missing Authorization vulnerability in Arraytics Booktics booktics all ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107248 (Thelia 3.0.0's back-office Email/Messages feature contains a server\u2 ...)
TODO: check
CVE-2026-107226 (The AsyncHttpClient (AHC) library allows Java applications to easily e ...)
TODO: check
CVE-2026-106605 (Improper Validation of Specified Quantity in Input vulnerability in WP ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-105668 (Protection Mechanism Failure vulnerability in hexpm hex allows the own ...)
TODO: check
CVE-2026-105466 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-105465 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 isvulnerable ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-105464 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UN ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-105412 (An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17. ...)
- TODO: check
+ NOT-FOR-US: Dassault Systemes
CVE-2026-105411 (An Authorization Bypass Through User-Controlled Key vulnerability affe ...)
- TODO: check
+ NOT-FOR-US: Dassault Systemes
CVE-2026-105410 (A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Ent ...)
- TODO: check
+ NOT-FOR-US: Dassault Systemes
CVE-2026-105409 (A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Ent ...)
- TODO: check
+ NOT-FOR-US: Dassault Systemes
CVE-2026-105408 (A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Ent ...)
- TODO: check
+ NOT-FOR-US: Dassault Systemes
CVE-2026-105407 (An OS Command Injection vulnerability affecting Tuleap Enterprise Edit ...)
- TODO: check
+ NOT-FOR-US: Dassault Systemes
CVE-2026-105283 (Generation of Error Message Containing Sensitive Information vulnerabi ...)
TODO: check
CVE-2026-105280 (Improper Validation of Integrity Check Value vulnerability in hexpm he ...)
@@ -689,11 +689,11 @@ CVE-2026-105081 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not p
CVE-2026-104710
REJECTED
CVE-2026-104355 (A connected peer cluster can modify a Temporal Server cluster's local ...)
- TODO: check
+ NOT-FOR-US: Temporal Technologies
CVE-2026-104102 (copyparty is a portable file server. Prior to 1.20.19, FTP upload path ...)
TODO: check
CVE-2026-103903 (An incorrect authorization vulnerability in the WinBox authentication ...)
- TODO: check
+ NOT-FOR-US: MikroTik
CVE-2026-103902 (Improper verification of cryptographic signature vulnerability in Digi ...)
TODO: check
CVE-2026-103537 (Thelia 2.6.1 contains an absolute path traversal vulnerability in its ...)
@@ -721,9 +721,9 @@ CVE-2026-103503 (Improper Certificate Validation vulnerability in hexpm hex allo
CVE-2026-103502 (Improper Certificate Validation vulnerability in hexpm hex_core allows ...)
TODO: check
CVE-2026-103356 (Missing Authorization vulnerability in VillaTheme TMDS tmds-dropshippi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-103080 (External Control of Assumed-Immutable Web Parameter vulnerability in V ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-103061 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
TODO: check
CVE-2026-103060 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
@@ -501987,7 +501987,7 @@ CVE-2023-25998 (Improper Control of Filename for Include/Require Statement in PH
CVE-2023-25997 (Missing Authorization vulnerability in SolaPlugins Sola Support Ticket ...)
NOT-FOR-US: WordPress plugin
CVE-2023-25996 (Insertion of Sensitive Information Into Sent Data vulnerability in Plu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2023-25995 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
NOT-FOR-US: WordPress plugin
CVE-2023-25994 (Cross-Site Request Forgery (CSRF) vulnerability in Alex Benfica Publis ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f1d773641625f8a9c2a8580314eeed8249d26ea5
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f1d773641625f8a9c2a8580314eeed8249d26ea5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261012/1cd4a8a2/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list