[Git][security-tracker-team/security-tracker][master] Two Znuny issues CVEified

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5084addb by Salvatore Bonaccorso at 2026-10-15T09:29:06+02:00
Two Znuny issues CVEified

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2,10 +2,6 @@ CVE-2026-96540 (An improper access control vulnerability has been identified in
 	NOT-FOR-US: SonicWall
 CVE-2026-96537 (The Tutor LMS  WordPress plugin before 4.1.1 does not perform a capabi ...)
 	NOT-FOR-US: WordPress plugin
-CVE-2026-93484 (Znuny through 7.3.6 constructs a ticket-search database query by direc ...)
-	TODO: check
-CVE-2026-93483 (In Znuny through 7.3.6, an attacker can bypass specific standard login ...)
-	TODO: check
 CVE-2026-92429 (The Rede Ita\xfa for WooCommerce WordPress plugin before 5.5.3 does no ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-92428 (The Rede Ita\xfa for WooCommerce WordPress plugin before 5.5.3 does no ...)
@@ -33093,12 +33089,12 @@ CVE-2016-15059 (Net::IDN::Punycode versions before 2.301 for Perl allow a heap b
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/43753031/
 	NOTE: https://rt.cpan.org/Ticket/Display.html?id=118924
 	NOTE: Fixed by: https://github.com/robrwo/Net-IDN-Encode/commit/9a3ba07f15d22c0347eefee9625b012cbc803657 (Net-IDN-Encode-2.303)
-CVE-2026-XXXX [ZSA-2026-15]
+CVE-2026-93484 [ZSA-2026-15]
 	- znuny 6.5.25-1
 	[trixie] - znuny <no-dsa> (Non-free not supported)
 	[bookworm] - znuny <ignored> (Non-free not supported)
 	NOTE: https://www.znuny.org/en/advisories/zsa-2026-15
-CVE-2026-XXXX [ZSA-2026-14]
+CVE-2026-93483 [ZSA-2026-14]
 	- znuny 6.5.25-1
 	[trixie] - znuny <no-dsa> (Non-free not supported)
 	[bookworm] - znuny <ignored> (Non-free not supported)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5084addbf0df36ca1b9d886d1780516a435551e5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5084addbf0df36ca1b9d886d1780516a435551e5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261015/853b9d10/attachment-0001.htm>