[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b05c1261 by Salvatore Bonaccorso at 2026-10-14T16:44:38+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2838,7 +2838,7 @@ CVE-2026-110445 (TeamPlus Messenger developed by Teamplus Technology has a Code
 CVE-2026-110444 (TeamPlus Messenger developed by Teamplus Technology has a Code Injecti ...)
 	NOT-FOR-US: TeamPlus Messenger
 CVE-2026-110392 (Improper neutralization of special elements used in an OS command ('OS ...)
-	TODO: check
+	NOT-FOR-US: Samsung Open Source QA-Board
 CVE-2026-110385 (A remote code execution vulnerability in ONLYOFFICE Document Server ve ...)
 	NOT-FOR-US: ONLYOFFICEE
 CVE-2026-110359 (Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local p ...)
@@ -3831,7 +3831,7 @@ CVE-2026-92088 (Improper handling of undefined values vulnerability in upKeeper
 CVE-2026-91013 (Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vuln ...)
 	NOT-FOR-US: Adobe
 CVE-2026-89309 (The authorization middleware of the WMS MobileServer fails to require  ...)
-	TODO: check
+	NOT-FOR-US: WMS MobileServer
 CVE-2026-89279 (Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology ...)
 	NOT-FOR-US: authtake
 CVE-2026-89208 (A vulnerability has been identified in Capital Embedded AR Classic 431 ...)
@@ -4148,7 +4148,7 @@ CVE-2026-110222 (Razorpay IFSC Ruby gem through 2.0.62 contains a server-side re
 CVE-2026-110221 (QloApps through 1.7.0 contains a reflected cross-site scripting vulner ...)
 	NOT-FOR-US: QloApps
 CVE-2026-110220 (Kubeflow Model Registry through 0.3.17 contains a server-side request  ...)
-	TODO: check
+	NOT-FOR-US: Kubeflow Model Registry
 CVE-2026-110219 (QloApps through 1.7.0 contains a reflected cross-site scripting vulner ...)
 	NOT-FOR-US: QloApps
 CVE-2026-110218 (Aureus ERP through 1.6.0 contains an authorization bypass vulnerabilit ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b05c1261974aa3e31292e71ffe575f4a42fe6800

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b05c1261974aa3e31292e71ffe575f4a42fe6800
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/f59689e6/attachment.htm>