[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Oct 19 20:14:46 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
dff63dce by security tracker role at 2026-10-19T19:14:36+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,60 +1,636 @@
-CVE-2026-110688
+CVE-2026-91858 (FopProducer transforms the incoming XSL-FO message body by creating a ...)
+ TODO: check
+CVE-2026-90910 (Missing authentication for critical function vulnerability in Apache A ...)
+ TODO: check
+CVE-2026-8168 (Uncontrolled recursion in the SVG parser and renderer of the Qt SVG mo ...)
+ TODO: check
+CVE-2026-88901 (Improper Restriction of XML External Entity Reference vulnerability in ...)
+ TODO: check
+CVE-2026-88900 (Deserialization of Untrusted Data vulnerability in Apache Camel Camel- ...)
+ TODO: check
+CVE-2026-86589 (Incorrect implementation of authentication algorithm vulnerability in ...)
+ TODO: check
+CVE-2026-86375 (Dell Application Installer, versions prior to 26.09.0.1, contain a Mis ...)
+ TODO: check
+CVE-2026-85317 (Use of Cache Containing Sensitive Information vulnerability in Apache ...)
+ TODO: check
+CVE-2026-85316 (Insufficient Granularity of Access Control vulnerability in Apache Cam ...)
+ TODO: check
+CVE-2026-85315 (Generation of Error Message Containing Sensitive Information vulnerabi ...)
+ TODO: check
+CVE-2026-85314 (Improper Input Validation vulnerability in Apache Camel Mail component ...)
+ TODO: check
+CVE-2026-85313 (Permissive Cross-domain Policy with Untrusted Domains vulnerability in ...)
+ TODO: check
+CVE-2026-85312 (Improper Input Validation vulnerability in Apache Camel Core component ...)
+ TODO: check
+CVE-2026-85301 (Improper Authentication vulnerability in Apache Camel Keycloak compone ...)
+ TODO: check
+CVE-2026-85300 (Incorrect Default Permissions vulnerability in Apache Camel PQC compon ...)
+ TODO: check
+CVE-2026-85296 (Exposure of Data Element to Wrong Session vulnerability in Apache Came ...)
+ TODO: check
+CVE-2026-85260 (Insertion of Sensitive Information into Log File vulnerability in Apac ...)
+ TODO: check
+CVE-2026-85257 (Generation of Error Message Containing Sensitive Information vulnerabi ...)
+ TODO: check
+CVE-2026-85254 (Improper Handling of Case Sensitivity vulnerability in Apache Camel Pl ...)
+ TODO: check
+CVE-2026-85251 (Exposure of Sensitive Information to an Unauthorized Actor vulnerabili ...)
+ TODO: check
+CVE-2026-85250 (Improper Restriction of XML External Entity Reference vulnerability in ...)
+ TODO: check
+CVE-2026-85249 (Improper Input Validation vulnerability in Apache Camel Tika component ...)
+ TODO: check
+CVE-2026-85248 (Concurrent Execution using Shared Resource with Improper Synchronizati ...)
+ TODO: check
+CVE-2026-85247 (Improper Certificate Validation vulnerability in Apache Camel Knative ...)
+ TODO: check
+CVE-2026-85246 (Generation of Error Message Containing Sensitive Information vulnerabi ...)
+ TODO: check
+CVE-2026-85245 (Exposure of Data Element to Wrong Session vulnerability in Apache Came ...)
+ TODO: check
+CVE-2026-85243 (Improper Validation of Integrity Check Value vulnerability in Apache C ...)
+ TODO: check
+CVE-2026-84181 (Improper Authentication vulnerability in Apache Camel Shiro component. ...)
+ TODO: check
+CVE-2026-84180 (Generation of Error Message Containing Sensitive Information vulnerabi ...)
+ TODO: check
+CVE-2026-84178 (Cross-Site Request Forgery (CSRF) vulnerability in Apache Camel OAuth ...)
+ TODO: check
+CVE-2026-84176 (Permissive Cross-domain Policy with Untrusted Domains vulnerability in ...)
+ TODO: check
+CVE-2026-83531 (Improper Control of Generation of Code ('Code Injection'), Improper Ne ...)
+ TODO: check
+CVE-2026-80344 (Server-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 c ...)
+ TODO: check
+CVE-2026-80343 (Improper Handling of Case Sensitivity vulnerability in Apache Camel Ne ...)
+ TODO: check
+CVE-2026-80312 (Improper Authentication vulnerability in Apache Camel OAuth component. ...)
+ TODO: check
+CVE-2026-79986 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
+ TODO: check
+CVE-2026-79985 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
+ TODO: check
+CVE-2026-79984 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
+ TODO: check
+CVE-2026-79983 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
+ TODO: check
+CVE-2026-79633 (vulnerability in Apache Answer. This issue affects Apache Answer: t ...)
+ TODO: check
+CVE-2026-79624 (Insufficient session expiration vulnerability in Apache Answer. Thi ...)
+ TODO: check
+CVE-2026-79620 (Exposure of sensitive information through data queries vulnerability i ...)
+ TODO: check
+CVE-2026-79613 (vulnerability in Apache Answer. This issue affects Apache Answer: t ...)
+ TODO: check
+CVE-2026-78165 (Deserialization of Untrusted Data vulnerability in Apache Camel Spring ...)
+ TODO: check
+CVE-2026-78164 (Improper Neutralization of Special Elements Used in a Template Engine ...)
+ TODO: check
+CVE-2026-78163 (Server-Side Request Forgery (SSRF), Improper Limitation of a Pathname ...)
+ TODO: check
+CVE-2026-78162 (Deserialization of Untrusted Data vulnerability in Apache Camel. Th ...)
+ TODO: check
+CVE-2026-77228
+ REJECTED
+CVE-2026-77227
+ REJECTED
+CVE-2026-77225
+ REJECTED
+CVE-2026-76994 (Exposure of Sensitive Information to an Unauthorized Actor vulnerabili ...)
+ TODO: check
+CVE-2026-71563 (Missing Authorization vulnerability in Apache Answer. This issue af ...)
+ TODO: check
+CVE-2026-71253 (Use of Externally-Controlled Input to Select Classes or Code ('Unsafe ...)
+ TODO: check
+CVE-2026-6930 (IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic ...)
+ TODO: check
+CVE-2026-6719 (IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic ...)
+ TODO: check
+CVE-2026-68482 (Missing Authorization vulnerability in Apache Answer. This issue af ...)
+ TODO: check
+CVE-2026-67249 (A vulnerability in Apache Answer. This issue affects Apache Answer: ...)
+ TODO: check
+CVE-2026-64945 (A vulnerability in Apache Answer. This issue affects Apache Answer: ...)
+ TODO: check
+CVE-2026-64944 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-64943 (Insertion of Sensitive Information into Log File vulnerability in Apac ...)
+ TODO: check
+CVE-2026-55644 (Element X iOS is a Matrix iOS Client provided by Element. Element X iO ...)
+ TODO: check
+CVE-2026-4418 (IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML inject ...)
+ TODO: check
+CVE-2026-4413 (IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. T ...)
+ TODO: check
+CVE-2026-4405 (IBM Concert 1.0 through 3.0.0 allows web page cache to be stored local ...)
+ TODO: check
+CVE-2026-3628 (IBM Concert 1.0 through 3.0.0 allows information disclosure through ex ...)
+ TODO: check
+CVE-2026-3303 (IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS ...)
+ TODO: check
+CVE-2026-3295 (IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site ...)
+ TODO: check
+CVE-2026-3161 (IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cr ...)
+ TODO: check
+CVE-2026-38671 (Cross Site Scripting vulnerability in Ellucian Banner Student Registra ...)
+ TODO: check
+CVE-2026-1510 (IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure ...)
+ TODO: check
+CVE-2026-1501 (IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Va ...)
+ TODO: check
+CVE-2026-15661 (IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inje ...)
+ TODO: check
+CVE-2026-14511 (IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to ca ...)
+ TODO: check
+CVE-2026-13695 (SQL injection (SQLi) vulnerability\u2014specifically a UNION-based vul ...)
+ TODO: check
+CVE-2026-12727 (IBM MQ could allow an authenticated attacker to cause potential proces ...)
+ TODO: check
+CVE-2026-12670 (IBM MQ could allow an authenticated attacker to cause a denial of serv ...)
+ TODO: check
+CVE-2026-12669 (IBM MQ could allow an authenticated attacker to trigger a minor out-of ...)
+ TODO: check
+CVE-2026-12665 (IBM MQ could allow a remote attacker to execute arbitrary code due to ...)
+ TODO: check
+CVE-2026-12660 (IBM MQ Web Console could allow an authenticated administrator to write ...)
+ TODO: check
+CVE-2026-12350 (IBM MQ could allow an authenticated attacker to cause a denial of serv ...)
+ TODO: check
+CVE-2026-12343 (IBM MQ could allow an authenticated attacker to cause a denial of serv ...)
+ TODO: check
+CVE-2026-12254 (Netskope is notified about a potential gap in its agent (NSClient) whe ...)
+ TODO: check
+CVE-2026-12155 (IBM MQ could allow an authenticated attacker to cause a denial of serv ...)
+ TODO: check
+CVE-2026-12148 (IBM MQ Operator could allow an authenticated attacker to cause a denia ...)
+ TODO: check
+CVE-2026-11831 (IBM MQ could allow an authenticated attacker to cause a limited denial ...)
+ TODO: check
+CVE-2026-11829 (IBM MQ could allow an authenticated attacker to cause a denial of serv ...)
+ TODO: check
+CVE-2026-11828 (IBM MQ could allow a remote attacker with queue manager control or man ...)
+ TODO: check
+CVE-2026-11319 (TickTick Android application (com.ticktick.task) 8.2.2.0 contains a pa ...)
+ TODO: check
+CVE-2026-112377 (CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to b ...)
+ TODO: check
+CVE-2026-112368 (An uncontrolled recursion weakness in the BSON decoding logic of the M ...)
+ TODO: check
+CVE-2026-112366 (Picomatch through 4.0.7 contains a regular expression denial of servic ...)
+ TODO: check
+CVE-2026-112363 (Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forge ...)
+ TODO: check
+CVE-2026-112329 (The Sensei LMS WordPress plugin before 4.26.4 contains a broken access ...)
+ TODO: check
+CVE-2026-112328 (The Sensei LMS WordPress plugin before 4.26.4 contains a broken access ...)
+ TODO: check
+CVE-2026-112310 (docling-core through 2.102.0 contains a local file disclosure vulnerab ...)
+ TODO: check
+CVE-2026-112309 (@rvf/set-get before 7.0.4 contains a prototype pollution vulnerability ...)
+ TODO: check
+CVE-2026-112308 (crewai-tools through 1.15.28 contains a server-side request forgery vu ...)
+ TODO: check
+CVE-2026-112307 (sqlparse through 0.6.0 contains a PHP code injection vulnerability tha ...)
+ TODO: check
+CVE-2026-112306 (NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQ ...)
+ TODO: check
+CVE-2026-112305 (Semaphore UI through 2.19.16 contains a remote code execution vulnerab ...)
+ TODO: check
+CVE-2026-112304 (docTR through 1.1.0 contains an unsafe deserialization vulnerability i ...)
+ TODO: check
+CVE-2026-112303 (GDevelop desktop app through 5.6.284 contains a credential leak vulner ...)
+ TODO: check
+CVE-2026-112296 (FlyCms through commit edfdf724 contains a default credentials vulnerab ...)
+ TODO: check
+CVE-2026-112295 (FlyCms through commit edfdf724 contains a mass assignment vulnerabilit ...)
+ TODO: check
+CVE-2026-112294 (FlyCms through commit edfdf724 contains a missing authorization vulner ...)
+ TODO: check
+CVE-2026-112293 (BoxyHQ Enterprise SaaS Starter Kit through 1.6.0 contains a missing au ...)
+ TODO: check
+CVE-2026-112292 (CheckCle through 1.6.0 contains a missing authorization vulnerability ...)
+ TODO: check
+CVE-2026-112291 (Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 lacks authen ...)
+ TODO: check
+CVE-2026-112290 (Intelligence Community UI Kit @ukic/canary-web-components 3.0.0-canary ...)
+ TODO: check
+CVE-2026-112289 (Koalixcrm through 1.14.0 contains a stored cross-site scripting vulner ...)
+ TODO: check
+CVE-2026-112288 (Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery f ...)
+ TODO: check
+CVE-2026-112287 (Krayin CRM before 2.2.7 contains a broken object level authorization v ...)
+ TODO: check
+CVE-2026-112286 (Krayin CRM before 2.2.7 contains an insecure direct object reference v ...)
+ TODO: check
+CVE-2026-112285 (Thelia before 3.1.5 and 3.2.x before 3.2.4 contains a business logic v ...)
+ TODO: check
+CVE-2026-112284 (libaribcaption 1.1.0 through 1.1.2 contains a global out-of-bounds rea ...)
+ TODO: check
+CVE-2026-112283 (VideoLAN libbluray through 1.5.1 contains an uncontrolled memory alloc ...)
+ TODO: check
+CVE-2026-112282 (VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulner ...)
+ TODO: check
+CVE-2026-112281 (libaribb24 (aribb24) through 1.0.3 contains a stack-based buffer overf ...)
+ TODO: check
+CVE-2026-112280 (libaribb24 (aribb24) through 1.0.3 contains a heap-based buffer overfl ...)
+ TODO: check
+CVE-2026-112279 (rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerabilit ...)
+ TODO: check
+CVE-2026-112278 (rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerabilit ...)
+ TODO: check
+CVE-2026-112277 (rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerabilit ...)
+ TODO: check
+CVE-2026-112276 (Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerabili ...)
+ TODO: check
+CVE-2026-112275 (Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerabil ...)
+ TODO: check
+CVE-2026-112274 (libtins through 4.6 contains an out-of-bounds read vulnerability in DN ...)
+ TODO: check
+CVE-2026-112273 (libtins through 4.6 contains a heap out-of-bounds read vulnerability i ...)
+ TODO: check
+CVE-2026-112272 (Libdisplay-info 0.4.0 contains a heap out-of-bounds read vulnerability ...)
+ TODO: check
+CVE-2026-112271 (libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulne ...)
+ TODO: check
+CVE-2026-112270 (SGLang through 0.5.22 with the Mooncake disaggregation backend contain ...)
+ TODO: check
+CVE-2026-112269 (SGLang through 0.5.22 with the Mooncake disaggregation backend accepts ...)
+ TODO: check
+CVE-2026-112268 (sglang-router (sgl-model-gateway) through 0.3.2 contains an authorizat ...)
+ TODO: check
+CVE-2026-112267 (SGLang through 0.5.22 in prefill/decode disaggregation mode contains a ...)
+ TODO: check
+CVE-2026-112266 (SGLang through 0.5.22 contains a denial of service vulnerability that ...)
+ TODO: check
+CVE-2026-112265 (LangBot through 4.11.0 contains a missing authenticity verification vu ...)
+ TODO: check
+CVE-2026-112264 (BentoML through 1.4.39 contains a Dockerfile instruction injection vul ...)
+ TODO: check
+CVE-2026-112263 (Television (tv) 0.15.0 through 0.15.9 contains an OS command injection ...)
+ TODO: check
+CVE-2026-112262 (RisingWave before 3.1.0 contains a missing authorization vulnerability ...)
+ TODO: check
+CVE-2026-112259 (A flaw was found in GIMP. Importing a crafted SBZ palette without a co ...)
+ TODO: check
+CVE-2026-112252 (A vulnerability has been found in Wuxi Wubang Security Software Wubang ...)
+ TODO: check
+CVE-2026-112251 (A vulnerability was detected in antoinersx clawhost up to 0.0.45. This ...)
+ TODO: check
+CVE-2026-112249 (A vulnerability was detected in grandnode grandnode2 up to 2.3.0. Affe ...)
+ TODO: check
+CVE-2026-112248 (A security vulnerability has been detected in grandnode grandnode2 up ...)
+ TODO: check
+CVE-2026-112247 (A weakness has been identified in Wuxi Wubang Security Software Five-i ...)
+ TODO: check
+CVE-2026-112222 (Missing Authorization vulnerability in Surfer Surfer surferseo allows ...)
+ TODO: check
+CVE-2026-112214 (A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. Whe ...)
+ TODO: check
+CVE-2026-112210 (A flaw was found in the rhc-canonical-facts.service systemd unit shipp ...)
+ TODO: check
+CVE-2026-112199 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-112195 (A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affect ...)
+ TODO: check
+CVE-2026-112193 (A vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacte ...)
+ TODO: check
+CVE-2026-112192 (MISP contains a vulnerability in the handling of module plugin setting ...)
+ TODO: check
+CVE-2026-112190 (A security vulnerability has been detected in Webkul Aureus ERP up to ...)
+ TODO: check
+CVE-2026-112188 (MISP contains a vulnerability in its server settings lookup mechanism ...)
+ TODO: check
+CVE-2026-112184 (MISP contains a reflected cross-site scripting (XSS) vulnerability in ...)
+ TODO: check
+CVE-2026-112183 (MISP contains a CSS injection vulnerability in the remote event previe ...)
+ TODO: check
+CVE-2026-112180 (MISP contains a data integrity flaw in its event deletion logic. When ...)
+ TODO: check
+CVE-2026-112179 (In MISP, the event synchronization process contained a logic error in ...)
+ TODO: check
+CVE-2026-112178 (MISP contains an access control flaw in the proposal (shadow attribute ...)
+ TODO: check
+CVE-2026-112161 (MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64. ...)
+ TODO: check
+CVE-2026-112159 (A security vulnerability has been detected in JumpServer up to 4.10.19 ...)
+ TODO: check
+CVE-2026-112158 (A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/ ...)
+ TODO: check
+CVE-2026-112157 (A weakness has been identified in MemTensor memmy-agent up to 1.0.9/1. ...)
+ TODO: check
+CVE-2026-112153 (A vulnerability was detected in vraj404 Criminal-Management-System up ...)
+ TODO: check
+CVE-2026-112152 (A security vulnerability has been detected in vraj404 Criminal-Managem ...)
+ TODO: check
+CVE-2026-112151 (A weakness has been identified in vraj404 Criminal Management System u ...)
+ TODO: check
+CVE-2026-112150 (A security flaw has been discovered in vraj404 Criminal-Management-Sys ...)
+ TODO: check
+CVE-2026-112149 (A vulnerability was identified in vraj404 Criminal-Management-System u ...)
+ TODO: check
+CVE-2026-112147 (A vulnerability was found in ai-genius-automations octoally up to 1.0. ...)
+ TODO: check
+CVE-2026-112146 (A vulnerability was detected in D-Link E15, M32, R15 and R32. This iss ...)
+ TODO: check
+CVE-2026-112145 (A security vulnerability has been detected in speaches-ai speaches up ...)
+ TODO: check
+CVE-2026-112144 (A weakness has been identified in satya-vinay Events-Management-System ...)
+ TODO: check
+CVE-2026-112143 (A security flaw has been discovered in satya-vinay Events-Management-S ...)
+ TODO: check
+CVE-2026-112142 (A vulnerability was identified in satya-vinay Events-Management-System ...)
+ TODO: check
+CVE-2026-112141 (A vulnerability was determined in satya-vinay Events-Management-System ...)
+ TODO: check
+CVE-2026-112140 (A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c8 ...)
+ TODO: check
+CVE-2026-112139 (A vulnerability has been found in subhajitkhan online-clinic-managemen ...)
+ TODO: check
+CVE-2026-112138 (A flaw has been found in diem-project diem up to 5.1.3. The impacted e ...)
+ TODO: check
+CVE-2026-112108 (A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This i ...)
+ TODO: check
+CVE-2026-112107 (A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this ...)
+ TODO: check
+CVE-2026-112106 (A security vulnerability has been detected in TufayelLUS TikTok-Video- ...)
+ TODO: check
+CVE-2026-112105 (A vulnerability has been found in GlitterWare Passy up to 1.10.1. The ...)
+ TODO: check
+CVE-2026-112104 (A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The ...)
+ TODO: check
+CVE-2026-112103 (A vulnerability has been found in f3-factory fatfree-core up to 3.9.2. ...)
+ TODO: check
+CVE-2026-112102 (A vulnerability was detected in AXA Group NLP.js 4.27.0. This impacts ...)
+ TODO: check
+CVE-2026-112101 (A vulnerability was determined in BlackBeltTechnology pi-agent-dashboa ...)
+ TODO: check
+CVE-2026-112100 (A vulnerability was determined in DeepPavlov up to 1.7.0. This affects ...)
+ TODO: check
+CVE-2026-112098 (A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacte ...)
+ TODO: check
+CVE-2026-112097 (A vulnerability was found in SourceCodester Inventory System 1.0. This ...)
+ TODO: check
+CVE-2026-112096 (A vulnerability has been found in SourceCodester Inventory System 1.0. ...)
+ TODO: check
+CVE-2026-112095 (A flaw has been found in SourceCodester Inventory System 1.0. This aff ...)
+ TODO: check
+CVE-2026-112094 (A security vulnerability has been detected in michaelrsweet mxml 4.0.5 ...)
+ TODO: check
+CVE-2026-112093 (A vulnerability has been found in subhajitkhan online-clinic-managemen ...)
+ TODO: check
+CVE-2026-112092 (A flaw has been found in subhajitkhan online-clinic-management-system ...)
+ TODO: check
+CVE-2026-112091 (A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e ...)
+ TODO: check
+CVE-2026-112090 (A vulnerability was detected in Dav-ee dairy-management-system 31ace96 ...)
+ TODO: check
+CVE-2026-111939 (Frappe Helpdesk before 1.26.0 contains an authorization bypass vulnera ...)
+ TODO: check
+CVE-2026-111938 (Frappe CRM before 1.74.0 contains a missing authorization vulnerabilit ...)
+ TODO: check
+CVE-2026-111937 (Frappe CRM before 1.81.2 contains a missing authorization vulnerabilit ...)
+ TODO: check
+CVE-2026-111936 (Sigma File Manager through 2.2.0 contains a server-side request forger ...)
+ TODO: check
+CVE-2026-111935 (NoteGen through 0.38.3 contains an external control of file path vulne ...)
+ TODO: check
+CVE-2026-111925 (Mopidy before 4.0.5 contains a path traversal vulnerability that allow ...)
+ TODO: check
+CVE-2026-111915 (Yank Note before 3.93.1 contains a path traversal vulnerability that a ...)
+ TODO: check
+CVE-2026-111899 (KitchenOwl through 0.7.10 contains a server-side request forgery vulne ...)
+ TODO: check
+CVE-2026-111883 (Locust through 2.46.7 contains a cross-site request forgery vulnerabil ...)
+ TODO: check
+CVE-2026-111862 (Rank Math SEO PRO for WordPress is affected by a supply-chain compromi ...)
+ TODO: check
+CVE-2026-111845 (Missing Authorization vulnerability in YITH YITH WooCommerce Product B ...)
+ TODO: check
+CVE-2026-111839 (Missing Authorization vulnerability in VideoWhisper.com Broadcast Live ...)
+ TODO: check
+CVE-2026-111836 (Missing Authorization vulnerability in WP ManageNinja LLC FluentCommun ...)
+ TODO: check
+CVE-2026-111831 (Missing Authorization vulnerability in WP ManageNinja LLC FluentForm f ...)
+ TODO: check
+CVE-2026-111829 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+ TODO: check
+CVE-2026-111828 (Improper Validation of Specified Quantity in Input vulnerability in Ma ...)
+ TODO: check
+CVE-2026-111759 (markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typ ...)
+ TODO: check
+CVE-2026-111757 (Hono is a Web application framework that provides support for any Java ...)
+ TODO: check
+CVE-2026-111755 (follow-redirects is a Node.js HTTP and HTTPS client wrapper that autom ...)
+ TODO: check
+CVE-2026-111750 (AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...)
+ TODO: check
+CVE-2026-111749 (AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...)
+ TODO: check
+CVE-2026-111748 (AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...)
+ TODO: check
+CVE-2026-111439 (\u5728 openGauss-server\u7684 src/common/backend/utils/adt/genfile.cpp ...)
+ TODO: check
+CVE-2026-111438 (\u5728 openGauss-server \u7684 src/common/backend/libpq/hba.cpp \u4e2d ...)
+ TODO: check
+CVE-2026-111414 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-111410 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-111408 (Deserialization of Untrusted Data vulnerability in ExpressTech Quiz An ...)
+ TODO: check
+CVE-2026-111407 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-111406 (Unrestricted Upload of File with Dangerous Type vulnerability in PT No ...)
+ TODO: check
+CVE-2026-111398 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
+ TODO: check
+CVE-2026-111066 (AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...)
+ TODO: check
+CVE-2026-111065 (AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...)
+ TODO: check
+CVE-2026-111064 (AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...)
+ TODO: check
+CVE-2026-111063 (AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...)
+ TODO: check
+CVE-2026-111061 (russh is a Rust SSH client and server library that includes an SSH age ...)
+ TODO: check
+CVE-2026-111059 (Mercury is a Python framework for sharing Jupyter notebooks as web app ...)
+ TODO: check
+CVE-2026-111058 (Mercury is a Python framework for sharing Jupyter notebooks as web app ...)
+ TODO: check
+CVE-2026-111057 (Mercury is a Python framework for sharing Jupyter notebooks as web app ...)
+ TODO: check
+CVE-2026-111056 (FOSSBilling is an open source billing and client-management platform. ...)
+ TODO: check
+CVE-2026-111053 (FOSSBilling is an open source billing and client-management platform. ...)
+ TODO: check
+CVE-2026-111046 (FOSSBilling is an open source billing and client-management platform. ...)
+ TODO: check
+CVE-2026-111045 (CLI Bridge provides filesystem access within a workspace root. Prior t ...)
+ TODO: check
+CVE-2026-110902 (Authorization Bypass Through User-Controlled Key vulnerability in Liqu ...)
+ TODO: check
+CVE-2026-110898 (Incorrect Privilege Assignment vulnerability in WPDeveloper Essential ...)
+ TODO: check
+CVE-2026-110887 (Improper Control of Generation of Code ('Code Injection') vulnerabilit ...)
+ TODO: check
+CVE-2026-110379 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-110363 (Missing Authorization vulnerability in ThimPress LearnPress learnpress ...)
+ TODO: check
+CVE-2026-110008 (@fastify/oauth2 is a Fastify wrapper for OAuth2 login flows. In versio ...)
+ TODO: check
+CVE-2026-10743 (IBM MQ could allow an authenticated attacker to cause a denial of serv ...)
+ TODO: check
+CVE-2026-10574 (IBM MQ could allow an authenticated attacker to cause a denial of serv ...)
+ TODO: check
+CVE-2026-10572 (IBM MQ could allow an authenticated attacker to cause a denial of serv ...)
+ TODO: check
+CVE-2026-109437 (Cognition before 0.13.0 contains an unauthenticated remote code execut ...)
+ TODO: check
+CVE-2026-109434 (Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofin ...)
+ TODO: check
+CVE-2026-109433 (Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an au ...)
+ TODO: check
+CVE-2026-109432 (Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an ex ...)
+ TODO: check
+CVE-2026-109431 (Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a mis ...)
+ TODO: check
+CVE-2026-108837 (Allocation of resources without limits or throttling vulnerability in ...)
+ TODO: check
+CVE-2026-108833 (Default startup profile miss security settingsin Apache Kylin. Any dep ...)
+ TODO: check
+CVE-2026-108823 (Exposure of Sensitive Information to an Unauthorized Actor during job ...)
+ TODO: check
+CVE-2026-108780 (Potential JDBC source configuration validationvulnerability in Apache ...)
+ TODO: check
+CVE-2026-108776 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-108771 (Missing authentication for in-house broadcast andpolymorphic deseriali ...)
+ TODO: check
+CVE-2026-108766 (Missing authorization on jdbc source config update in Apache Kylin.Imp ...)
+ TODO: check
+CVE-2026-108764 (Server-Side request forgery (SSRF) vulnerability in Apache Kylin.Impac ...)
+ TODO: check
+CVE-2026-108762 (Path-confinement bypassduring metadata backup deletion in Apache Kylin ...)
+ TODO: check
+CVE-2026-107571 (Incorrect default permissions in the Windows installer of Progressive ...)
+ TODO: check
+CVE-2026-107569 (Unchecked input for a loop condition in Progressive Robot hMailServer ...)
+ TODO: check
+CVE-2026-107568 (Missing authorization in the Sieve notify action (6.2.22 through 6.3.6 ...)
+ TODO: check
+CVE-2026-107567 (Use of a less trusted source in the DKIM signing of Progressive Robot ...)
+ TODO: check
+CVE-2026-107566 (Missing authorization in the Sieve editheader action (6.2.22 through 6 ...)
+ TODO: check
+CVE-2026-107188 (A user can upload export reports with any file contents and specify an ...)
+ TODO: check
+CVE-2026-107187 (A user can access any database details, such as usernames and password ...)
+ TODO: check
+CVE-2026-107186 (An unauthenticated user can send a DWR request with isPasswordUppercas ...)
+ TODO: check
+CVE-2026-107084 (Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross ...)
+ TODO: check
+CVE-2026-107083 (SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 ...)
+ TODO: check
+CVE-2026-107082 (Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an au ...)
+ TODO: check
+CVE-2026-107081 (SQL injection via identifier injection in the tableName and tableField ...)
+ TODO: check
+CVE-2026-105810 (Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow ...)
+ TODO: check
+CVE-2026-104679 (VOCALOID6 Editor provided by Yamaha Corporation improperly restricts X ...)
+ TODO: check
+CVE-2026-103314 (A flaw was found in Red Hat Advanced Cluster Security for Kubernetes ( ...)
+ TODO: check
+CVE-2026-103038 (PingTools Network Utilities 4.64 Free accepts an arbitrary value in th ...)
+ TODO: check
+CVE-2025-7203 (The Management Console and product files expose sensitive data, includ ...)
+ TODO: check
+CVE-2025-7043 (The ForgeRock client fails to correctly validate refresh tokens. This ...)
+ TODO: check
+CVE-2025-6623 (The carbon console accepts user-supplied XML input without sufficientl ...)
+ TODO: check
+CVE-2025-60482 (A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/ ...)
+ TODO: check
+CVE-2025-60480 (A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function ...)
+ TODO: check
+CVE-2025-55667 (A segmentation violation in the dump_isom_saps function (/mp4box/filed ...)
+ TODO: check
+CVE-2025-55654 (A use-after-free in the gf_filter_pid_get_packet function (filter_core ...)
+ TODO: check
+CVE-2025-52290 (A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames f ...)
+ TODO: check
+CVE-2025-13591 (The authentication endpoint of WSO2 Identity Server fails to provide a ...)
+ TODO: check
+CVE-2025-13173 (Tokens associated with user sessions are not revoked when the correspo ...)
+ TODO: check
+CVE-2025-10149 (The SCIM endpoint does not sufficiently validate authorization for fed ...)
+ TODO: check
+CVE-2024-4412 (The software accepts user-supplied data without sufficient validation, ...)
+ TODO: check
+CVE-2023-38375 (IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site ...)
+ TODO: check
+CVE-2026-110688 (Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadrat ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479935/
NOTE: Fixed by; https://github.com/rurban/Cpanel-JSON-XS/commit/384309f6a297384e69c851b5d64e1c421d9b2dcc (4.80)
-CVE-2026-110687
+CVE-2026-110687 (Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479909/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/bb9da30b67f637f4d57922f0e043376363f28f0c (4.80)
-CVE-2026-110686
+CVE-2026-110686 (Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callba ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479884/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/c3e7e3c5b0b72d82b072c6a7cfb8c34cec4c7ea2 (4.80)
-CVE-2026-110685
+CVE-2026-110685 (Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded argume ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479881/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/9ab010221c069a7af9ef7463454ecd3b8ace9c58 (4.80)
-CVE-2026-110684
+CVE-2026-110684 (Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479877/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/5b15916b5e7841e447664ace51fb50c12d1e0f39 (4.80)
-CVE-2026-110682
+CVE-2026-110682 (Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chu ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479866/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/f632d6690d82c14cd2d76d648805325201c52b83 (4.80)
-CVE-2026-110681
+CVE-2026-110681 (Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpre ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479851/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/c53eefbaa59c344abd4c71762118da04280987e8 (4.80)
-CVE-2026-110680
+CVE-2026-110680 (Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479835/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/44c4591cc62ea7f453a0ed931abf24394e1560a1 (4.80)
-CVE-2026-110678
+CVE-2026-110678 (Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479789/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/d516f296b1714e06b0fb9eaae72f4558ae3d83d6 (4.80)
-CVE-2026-110677
+CVE-2026-110677 (Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the arra ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479737/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/edb13030a708afc2cde0d2629fb6bdd31288ce6c (4.80)
-CVE-2026-110676
+CVE-2026-110676 (Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479732/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/996ab96972b967a917536d291947b5f3cf42e960 (4.80)
-CVE-2026-110675
+CVE-2026-110675 (Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malfor ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479714/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/c2cd02281b9d6904ca0aff2740154e742abc070c (4.80)
-CVE-2026-110674
+CVE-2026-110674 (Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicat ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479709/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/c52037857d6a99d96ebd1ce3e2fa769505f028cf (4.80)
-CVE-2026-110673
+CVE-2026-110673 (Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479705/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/995eb484a9351753e2a8ec3317918b5b4a4e086a (4.80)
-CVE-2026-110672
+CVE-2026-110672 (Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of ...)
- libcpanel-json-xs-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44479703/
NOTE: Fixed by: https://github.com/rurban/Cpanel-JSON-XS/commit/532b53cf8d2ca5ab6bc24048325566d1f7132425 (4.80)
@@ -1350,7 +1926,8 @@ CVE-2026-98655 (In the Linux kernel, the following vulnerability has been resolv
- linux 7.2.10-1
[trixie] - linux 6.12.113-1
NOTE: https://git.kernel.org/linus/357e8a77a501d96c9517f01f4a211eed5e9c9184 (7.3-rc6)
-CVE-2026-98654 (In the Linux kernel, the following vulnerability has been resolved: d ...)
+CVE-2026-98654
+ REJECTED
- linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/63e19ef3ddab806c472748c825f4dc88dcd994e8 (7.3-rc4)
CVE-2026-98653 (In the Linux kernel, the following vulnerability has been resolved: K ...)
@@ -17676,7 +18253,7 @@ CVE-2026-107204 (LMCache through 0.5.5 contains an unauthenticated remote code e
NOT-FOR-US: LMCache
CVE-2026-107202 (A command injection vulnerability exists in the h-ui (version v0.0.25 ...)
NOT-FOR-US: h-ui
-CVE-2026-107194 (Sungrow iSolarCloud before 2026 allows authentication bypass and accou ...)
+CVE-2026-107194 (Sungrow iSolarCloud before 2026-08-25 allows authentication bypass and ...)
NOT-FOR-US: Sungrow iSolarCloud
CVE-2026-107183 (llama.cpp before b11393 contains a use-after-free and double free vuln ...)
- llama.cpp <unfixed>
@@ -20247,7 +20824,8 @@ CVE-2026-98166 (In the Linux kernel, the following vulnerability has been resolv
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/3db7d7d583419f7b1f2e141e36418802dbb25cf8 (7.3-rc4)
-CVE-2026-98165 (In the Linux kernel, the following vulnerability has been resolved: d ...)
+CVE-2026-98165
+ REJECTED
- linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/bd1f08246b8a2564d8ac61df715b6bcd5f994729 (7.3-rc2)
CVE-2026-98370 (In the Linux kernel, the following vulnerability has been resolved: x ...)
@@ -21074,8 +21652,8 @@ CVE-2026-25267 (Memory corruption when non-secure loader rewrites page tables be
NOT-FOR-US: Qualcomm
CVE-2026-25263 (Memory corruption while processing IOCTL command called from user spac ...)
NOT-FOR-US: Qualcomm
-CVE-2026-21589
- REJECTED
+CVE-2026-21589 (This is a vulnerability in Bitbucket Data Center, Confluence Data Cent ...)
+ TODO: check
CVE-2026-105786 (Joplin is an open source note-taking and to-do application that organi ...)
- joplin <itp> (bug #931306)
CVE-2026-105785 (Joplin is an open source note-taking and to-do application that organi ...)
@@ -42336,7 +42914,8 @@ CVE-2026-90059 (In the Linux kernel, the following vulnerability has been resolv
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/23680bf5f8c69c923546b84a8e6c401bef8b88fe (7.3-rc1)
-CVE-2026-90052 (In the Linux kernel, the following vulnerability has been resolved: d ...)
+CVE-2026-90052
+ REJECTED
- linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/59e6f919d77d72ec79cbf171256f2f7819737580 (7.3-rc2)
CVE-2026-90051 (In the Linux kernel, the following vulnerability has been resolved: t ...)
@@ -42344,7 +42923,8 @@ CVE-2026-90051 (In the Linux kernel, the following vulnerability has been resolv
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/125755776bc6d4dd53eaf551c87e3d460625d638 (7.3-rc3)
-CVE-2026-90050 (In the Linux kernel, the following vulnerability has been resolved: n ...)
+CVE-2026-90050
+ REJECTED
- linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/094cc07f98dfe70a34e2a1923af17fd29b8cf622 (7.3-rc3)
CVE-2026-93204 (In the Linux kernel, the following vulnerability has been resolved: b ...)
@@ -99592,7 +100172,7 @@ CVE-2026-XXXX [Command injection issue with zip]
[trixie] - zip 3.0-15+deb13u1
[bookworm] - zip 3.0-13+deb12u1
NOTE: https://sintonen.fi/advisories/infozip-test-option-command-injection.txt
-CVE-2026-8325 (A maliciously crafted PDF file, when parsed through certain Autodesk p ...)
+CVE-2026-8325 (A maliciously crafted PDF file, when parsed through Autodesk Revit, ca ...)
NOT-FOR-US: Autodesk
CVE-2026-7406 (A maliciously crafted BMP file, when parsed through certain Autodesk p ...)
NOT-FOR-US: Autodesk
@@ -99962,7 +100542,7 @@ CVE-2026-3415 (The XML and schema validation functionalities within the SchemaVa
NOT-FOR-US: WSO2
CVE-2026-33181
REJECTED
-CVE-2026-1289 (A maliciously crafted PDF file, when parsed through certain Autodesk p ...)
+CVE-2026-1289 (A maliciously crafted PDF file, when parsed through Autodesk Revit, ca ...)
NOT-FOR-US: Autodesk
CVE-2026-19196 (A vulnerability was found in SourceCodester Photo Share Website 1.0. T ...)
NOT-FOR-US: SourceCodester
@@ -100123,7 +100703,7 @@ CVE-2026-11976 (The official MonsterInsights Pro update distribution bucket (`mo
NOT-FOR-US: WordPress plugin
CVE-2026-11907 (The Stream plugin for WordPress is vulnerable to authorization bypass ...)
NOT-FOR-US: WordPress plugin
-CVE-2026-11803 (A maliciously crafted PDF file, when parsed through certain Autodesk p ...)
+CVE-2026-11803 (A maliciously crafted PDF file, when parsed through Autodesk Revit, ca ...)
NOT-FOR-US: Autodesk
CVE-2026-11361 (The Formidable Forms WordPress plugin before 6.32.1 does not properly ...)
NOT-FOR-US: WordPress plugin
@@ -244814,7 +245394,7 @@ CVE-2025-10900 (AA maliciously crafted MODEL file, when parsed through certain A
NOT-FOR-US: Autodesk
CVE-2025-10899 (AA maliciously crafted MODEL file, when parsed through certain Autodes ...)
NOT-FOR-US: Autodesk
-CVE-2025-10898 (AA maliciously crafted MODEL file, when parsed through certain Autodes ...)
+CVE-2025-10898 (A maliciously crafted MODEL file, when parsed through certain Autodesk ...)
NOT-FOR-US: Autodesk
CVE-2025-10889 (A maliciously crafted CATPART file, when parsed through certain Autode ...)
NOT-FOR-US: Autodesk
@@ -244828,7 +245408,7 @@ CVE-2025-10884 (AA maliciously crafted CATPART file, when parsed through certain
NOT-FOR-US: Autodesk
CVE-2025-10883 (A maliciously crafted CATPRODUCT file, when parsed through certain Aut ...)
NOT-FOR-US: Autodesk
-CVE-2025-10882 (AA maliciously crafted X_T file, when parsed through certain Autodesk ...)
+CVE-2025-10882 (A maliciously crafted X_T file, when parsed through certain Autodesk p ...)
NOT-FOR-US: Autodesk
CVE-2025-10881 (A maliciously crafted CATPRODUCT file, when parsed through certain Aut ...)
NOT-FOR-US: Autodesk
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dff63dcee0491143e9adc98c092dfb86040a6592
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dff63dcee0491143e9adc98c092dfb86040a6592
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261019/0c1be934/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list