[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Oct 17 20:17:55 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
24ae3e04 by security tracker role at 2026-10-17T19:17:33+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -41,79 +41,79 @@ CVE-2026-111913 (Admidio from 5.0.0 before 5.0.16 contains an authorization bypa
CVE-2026-111912 (Admidio from 5.0.0 before 5.0.16 contains an insecure direct object re ...)
TODO: check
CVE-2026-111911 (phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerab ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111910 (phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an au ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111909 (phpMyFAQ before 4.1.9 contains a missing authorization vulnerability i ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111908 (phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111907 (phpMyFAQ 4.0.0 before 4.1.9 contains a cross-site request forgery vuln ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111906 (phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cro ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111905 (phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111904 (phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an information disclos ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111903 (phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a stored cross-site sc ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111902 (phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypas ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111901 (phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resour ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111900 (phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an im ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111898 (phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypa ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111897 (phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypas ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111896 (phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a stored cross-si ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111895 (phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an au ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111894 (phpMyFAQ 3.2.1 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111893 (phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111892 (phpMyFAQ 4.2.0-alpha before 4.2.0-beta lacks effective rate limiting o ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111891 (phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege esc ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111890 (phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege esc ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111889 (phpMyFAQ from 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta con ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111888 (phpMyFAQ from 4.0.0 before 4.1.9 contains an incorrect authorization v ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111887 (phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an ac ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111886 (phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta lacks brute-force lockou ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111885 (phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a missing authori ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111884 (phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta does not requi ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111882 (phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta co ...)
- TODO: check
+ NOT-FOR-US: phpMyFAQ
CVE-2026-111881 (FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the ...)
TODO: check
CVE-2026-111880 (FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds ...)
TODO: check
CVE-2026-111110 (The Payment forms, Buy now buttons, and Invoicing System | GetPaid plu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110889 (Generation of Error Message Containing Sensitive Information vulnerabi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-110882 (Missing Authorization vulnerability in Cozy Vision Technologies Pvt. L ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-110253 (The weForms \u2013 Easy Drag & Drop Contact Form Builder For WordPress ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109983 (The YMC Filter plugin for WordPress is vulnerable to Stored DOM-Based ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109701 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-100316 (The European VAT Compliance Assistant for WooCommerce plugin for WordP ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2025-71435 (Coder before 2.23.0 contains a session expiration bypass vulnerability ...)
TODO: check
CVE-2024-58398 (Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.1 ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/24ae3e04ee5270f8e8b34f42a9ca9d44b0b6b1eb
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/24ae3e04ee5270f8e8b34f42a9ca9d44b0b6b1eb
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/3d8f5132/attachment.htm>
More information about the debian-security-tracker-commits
mailing list