[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Oct 28 07:14:10 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
e42fba80 by security tracker role at 2026-10-28T07:14:03+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,479 @@
+CVE-2026-99100 (In the Linux kernel, the following vulnerability has been resolved: w ...)
+ TODO: check
+CVE-2026-97045 (In childTextNodesAreLiteral, walking up the tree previously stopped at ...)
+ TODO: check
+CVE-2026-97019 (The AMP for WP \u2013 Accelerated Mobile Pages plugin for WordPress is ...)
+ TODO: check
+CVE-2026-92098 (The Webheadcoder Multi-Step Forms for Contact Form 7 plugin for WordPr ...)
+ TODO: check
+CVE-2026-85898 (Access of resource using incompatible type ('type confusion') in Micro ...)
+ TODO: check
+CVE-2026-84999 (The Pie Register Premium plugin for WordPress is vulnerable to Unrestr ...)
+ TODO: check
+CVE-2026-83831 (Double free in Microsoft Edge (Chromium-based) allows an unauthorized ...)
+ TODO: check
+CVE-2026-78661 (When coalescing adjacent text nodes in addText and fosterParent, appen ...)
+ TODO: check
+CVE-2026-77871 (The Post Snippets \u2013 Custom WordPress Code Snippets Customizer plu ...)
+ TODO: check
+CVE-2026-77188 (The Waitlist Woocommerce ( Back in stock notifier ) plugin for WordPre ...)
+ TODO: check
+CVE-2026-76780 (The Beyondseo plugin for WordPress is vulnerable to unauthorized acces ...)
+ TODO: check
+CVE-2026-76058 (The PayPal Brasil para WooCommerce plugin for WordPress is vulnerable ...)
+ TODO: check
+CVE-2026-76005 (The WP Inventory Manager plugin for WordPress is vulnerable to time-ba ...)
+ TODO: check
+CVE-2026-63286 (Database backups are vulnerable to offline attacks. Backups created us ...)
+ TODO: check
+CVE-2026-62765 (Access of resource using incompatible type ('type confusion') in Micro ...)
+ TODO: check
+CVE-2026-59158 (Nuxt Ollama integrates the official Ollama JavaScript library into Nux ...)
+ TODO: check
+CVE-2026-58496 (Thor Vector Graphics (ThorVG) is a production-ready vector graphics en ...)
+ TODO: check
+CVE-2026-58257 (GRR is a resource management and reservation application. Prior to the ...)
+ TODO: check
+CVE-2026-58256 (GRR is a resource management and reservation application. Prior to the ...)
+ TODO: check
+CVE-2026-58255 (Cronicle is a multi-server task scheduler and runner, with a web based ...)
+ TODO: check
+CVE-2026-58205 (GRR is a resource management and reservation application. Prior to ver ...)
+ TODO: check
+CVE-2026-57203 (Asterisk is an open source private branch exchange and telephony toolk ...)
+ TODO: check
+CVE-2026-57200 (Asterisk is an open source private branch exchange and telephony toolk ...)
+ TODO: check
+CVE-2026-57199 (Asterisk is an open source private branch exchange and telephony toolk ...)
+ TODO: check
+CVE-2026-57195 (Asterisk is an open source private branch exchange and telephony toolk ...)
+ TODO: check
+CVE-2026-57192 (Asterisk is an open source private branch exchange and telephony toolk ...)
+ TODO: check
+CVE-2026-57191 (Asterisk is an open source private branch exchange and telephony toolk ...)
+ TODO: check
+CVE-2026-57190 (Asterisk is an open source private branch exchange and telephony toolk ...)
+ TODO: check
+CVE-2026-57186 (Asterisk is an open source private branch exchange and telephony toolk ...)
+ TODO: check
+CVE-2026-50571 (WebSub is a W3C recommendation produced by the Social Web Working Grou ...)
+ TODO: check
+CVE-2026-39928
+ REJECTED
+CVE-2026-2839 (The Advanced Custom Fields: Extended plugin for WordPress is vulnerabl ...)
+ TODO: check
+CVE-2026-22063 (The private keys of eight eMudhra intermediate CA certificates have be ...)
+ TODO: check
+CVE-2026-1928 (The Rank Math SEO \u2013 AI SEO Tools to Dominate SEO Rankings plugin ...)
+ TODO: check
+CVE-2026-18326
+ REJECTED
+CVE-2026-15323 (The Product Designer for WooCommerce WordPress | Lumise plugin for Wor ...)
+ TODO: check
+CVE-2026-118384 (GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in ...)
+ TODO: check
+CVE-2026-118378 (Tabularis before 0.28.0 contains an SQL injection vulnerability in its ...)
+ TODO: check
+CVE-2026-118377 (mews/pos through 2.0.0 contains an insufficient verification of data a ...)
+ TODO: check
+CVE-2026-118376 (WeKnora before 0.8.2 contains a server-side request forgery vulnerabil ...)
+ TODO: check
+CVE-2026-118375 (llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerab ...)
+ TODO: check
+CVE-2026-118374 (LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerab ...)
+ TODO: check
+CVE-2026-118373 (LibreSSL ocspcheck through 4.4.0 contains a cleartext transmission vul ...)
+ TODO: check
+CVE-2026-118372 (LibreSSL ocspcheck through 4.4.0 contains a CRLF injection vulnerabili ...)
+ TODO: check
+CVE-2026-118371 (LibreSSL through 4.4.0 contains a CRLF injection vulnerability in the ...)
+ TODO: check
+CVE-2026-118370 (libexpat through 2.9.0 contains a signed integer overflow vulnerabilit ...)
+ TODO: check
+CVE-2026-118359 (Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowe ...)
+ TODO: check
+CVE-2026-118358 (Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 ...)
+ TODO: check
+CVE-2026-118357 (Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 a ...)
+ TODO: check
+CVE-2026-118356 (Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed ...)
+ TODO: check
+CVE-2026-118355 (Improper input validation in Command in Google Chrome prior to 156.0.8 ...)
+ TODO: check
+CVE-2026-118354 (Improper input validation in Skia in Google Chrome prior to 156.0.8078 ...)
+ TODO: check
+CVE-2026-118353 (Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowe ...)
+ TODO: check
+CVE-2026-118352 (Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 all ...)
+ TODO: check
+CVE-2026-118351 (Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allo ...)
+ TODO: check
+CVE-2026-118350 (Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 all ...)
+ TODO: check
+CVE-2026-118349 (Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 ...)
+ TODO: check
+CVE-2026-118348 (Improper input validation in Skia in Google Chrome prior to 156.0.8078 ...)
+ TODO: check
+CVE-2026-118347 (Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 a ...)
+ TODO: check
+CVE-2026-118346 (Use after free in Compositing in Google Chrome prior to 156.0.8078.73 ...)
+ TODO: check
+CVE-2026-118345 (Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allow ...)
+ TODO: check
+CVE-2026-118344 (Use after free in Layout in Google Chrome prior to 156.0.8078.73 allow ...)
+ TODO: check
+CVE-2026-118343 (Improper input validation in ReadingList in Google Chrome prior to 156 ...)
+ TODO: check
+CVE-2026-118342 (Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 ...)
+ TODO: check
+CVE-2026-118341 (Use after free in Modularization in Google Chrome prior to 156.0.8078. ...)
+ TODO: check
+CVE-2026-118340 (Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allo ...)
+ TODO: check
+CVE-2026-118339 (Use after free in Animation in Google Chrome prior to 156.0.8078.73 al ...)
+ TODO: check
+CVE-2026-118338 (Use after free in Animation in Google Chrome prior to 156.0.8078.73 al ...)
+ TODO: check
+CVE-2026-118337 (Improper access control in Forms in Google Chrome prior to 156.0.8078. ...)
+ TODO: check
+CVE-2026-118336 (Improper input validation in Headless in Google Chrome prior to 156.0. ...)
+ TODO: check
+CVE-2026-118335 (Improper input validation in Metrics in Google Chrome on on Mac prior ...)
+ TODO: check
+CVE-2026-118334 (Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 ...)
+ TODO: check
+CVE-2026-118333 (Missing authorization in Video in Google Chrome prior to 156.0.8078.73 ...)
+ TODO: check
+CVE-2026-118332 (Improper input validation in Compositing in Google Chrome prior to 156 ...)
+ TODO: check
+CVE-2026-118331 (Improper input validation in FileAPI in Google Chrome prior to 156.0.8 ...)
+ TODO: check
+CVE-2026-118330 (Use after free in Browser in Google Chrome on on Windows prior to 156. ...)
+ TODO: check
+CVE-2026-118329 (Improper input validation in ANGLE in Google Chrome on on Mac prior to ...)
+ TODO: check
+CVE-2026-118328 (Improper input validation in WebRTC in Google Chrome prior to 156.0.80 ...)
+ TODO: check
+CVE-2026-118327 (Memory corruption in Media in Google Chrome prior to 156.0.8078.73 all ...)
+ TODO: check
+CVE-2026-118322 (Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.73 all ...)
+ TODO: check
+CVE-2026-118321 (Improper input validation in Core in Google Chrome on on Android prior ...)
+ TODO: check
+CVE-2026-118320 (Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowe ...)
+ TODO: check
+CVE-2026-118319 (Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allo ...)
+ TODO: check
+CVE-2026-118318 (Improper access control in V8 in Google Chrome prior to 156.0.8078.73 ...)
+ TODO: check
+CVE-2026-118317 (Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allo ...)
+ TODO: check
+CVE-2026-118316 (Improper input validation in V8 in Google Chrome prior to 156.0.8078.7 ...)
+ TODO: check
+CVE-2026-118315 (Improper input validation in SVG in Google Chrome prior to 156.0.8078. ...)
+ TODO: check
+CVE-2026-118314 (Improper input validation in UI in Google Chrome on on Android prior t ...)
+ TODO: check
+CVE-2026-118313 (Use after free in Video in Google Chrome prior to 156.0.8078.73 allowe ...)
+ TODO: check
+CVE-2026-118312 (Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 all ...)
+ TODO: check
+CVE-2026-118311 (Memory corruption in Media in Google Chrome prior to 156.0.8078.73 all ...)
+ TODO: check
+CVE-2026-118310 (Improper input validation in Views in Google Chrome on on Windows prio ...)
+ TODO: check
+CVE-2026-118309 (Improper input validation in UI in Google Chrome on on Android prior t ...)
+ TODO: check
+CVE-2026-118308 (Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed ...)
+ TODO: check
+CVE-2026-118307 (Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowe ...)
+ TODO: check
+CVE-2026-118306 (Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.7 ...)
+ TODO: check
+CVE-2026-118305 (Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 ...)
+ TODO: check
+CVE-2026-118304 (Improper input validation in SVG in Google Chrome prior to 156.0.8078. ...)
+ TODO: check
+CVE-2026-118276 (A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This ...)
+ TODO: check
+CVE-2026-118275 (A vulnerability was found in a2ui-project a2ui up to 0.10.6. This affe ...)
+ TODO: check
+CVE-2026-118274 (A vulnerability has been found in a2ui-project a2ui up to 0.10.6. Affe ...)
+ TODO: check
+CVE-2026-118273 (A flaw has been found in a2ui-project a2ui up to 0.10.6. Affected by t ...)
+ TODO: check
+CVE-2026-118272 (A vulnerability was detected in a2ui-project a2ui up to 0.10.6. Affect ...)
+ TODO: check
+CVE-2026-118271 (A security vulnerability has been detected in a2ui-project a2ui up to ...)
+ TODO: check
+CVE-2026-118169 (The Hustle \u2013 Email Marketing, Lead Generation, Optins, Popups plu ...)
+ TODO: check
+CVE-2026-118164 (The If-So Dynamic Content \u2013 Elementor & All Page Builders Persona ...)
+ TODO: check
+CVE-2026-118129 (A vulnerability was found in jeremyckahn Chitchatter up to f8253863381 ...)
+ TODO: check
+CVE-2026-118128 (A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impac ...)
+ TODO: check
+CVE-2026-117610 (libexpat through 2.9.0 contains a NULL pointer dereference vulnerabili ...)
+ TODO: check
+CVE-2026-117609 (rtl_433 through 25.12 contains a stack-based buffer overflow vulnerabi ...)
+ TODO: check
+CVE-2026-117608 (Assimp through 6.0.5 contains an integer overflow vulnerability in MD2 ...)
+ TODO: check
+CVE-2026-117607 (Xerte Online Toolkits through 3.15.5 contains a remote code execution ...)
+ TODO: check
+CVE-2026-117606 (NexoPOS through 6.3.0 contains a missing authorization vulnerability t ...)
+ TODO: check
+CVE-2026-117605 (nopCommerce before 5.00.0 contains a missing authorization vulnerabili ...)
+ TODO: check
+CVE-2026-116775 (pageant provides a PageantStream type that implements AsyncRead and As ...)
+ TODO: check
+CVE-2026-116774 (russh is a Rust SSH client and server library that includes an SSH age ...)
+ TODO: check
+CVE-2026-116773 (russh is a Rust SSH client and server library that includes an SSH age ...)
+ TODO: check
+CVE-2026-116761 (The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scrip ...)
+ TODO: check
+CVE-2026-116750 (The VikRentCar Car Rental Management System plugin for WordPress is vu ...)
+ TODO: check
+CVE-2026-116749 (The VikRentCar Car Rental Management System plugin for WordPress is vu ...)
+ TODO: check
+CVE-2026-116696 (russh is a Rust SSH client and server library that includes an SSH age ...)
+ TODO: check
+CVE-2026-116695 (Crass is a Ruby CSS parser that is compliant with the CSS Syntax Level ...)
+ TODO: check
+CVE-2026-116694 (OpenTelemetry Python provides the Python API and SDK for OpenTelemetry ...)
+ TODO: check
+CVE-2026-116693 (dd-trace is the Datadog APM client for Node.js. From 2.0.0 until 5.131 ...)
+ TODO: check
+CVE-2026-116692 (MLflow is an open source AI engineering platform for agents, large lan ...)
+ TODO: check
+CVE-2026-116691 (MLflow is an open source AI engineering platform for agents, large lan ...)
+ TODO: check
+CVE-2026-116690 (MLflow is an open source AI engineering platform for agents, large lan ...)
+ TODO: check
+CVE-2026-116689 (follow-redirects is a Node.js HTTP and HTTPS client wrapper that autom ...)
+ TODO: check
+CVE-2026-116688 (CKEditor 5 is a modern JavaScript rich-text editor with an MVC archite ...)
+ TODO: check
+CVE-2026-116687 (CKEditor 5 is a modern JavaScript rich-text editor with an MVC archite ...)
+ TODO: check
+CVE-2026-116686 (The Model Context Protocol Python SDK is the official Python SDK for M ...)
+ TODO: check
+CVE-2026-116685 (The Model Context Protocol Python SDK is the official Python SDK for M ...)
+ TODO: check
+CVE-2026-116684 (The Model Context Protocol Python SDK is the official Python SDK for M ...)
+ TODO: check
+CVE-2026-116613 (The Animated Text Block plugin for WordPress is vulnerable to Sensitiv ...)
+ TODO: check
+CVE-2026-116610 (The Clean Login plugin for WordPress is vulnerable to Missing Authoriz ...)
+ TODO: check
+CVE-2026-116609 (The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is ...)
+ TODO: check
+CVE-2026-115624 (GROWI contains a missing authorization check vulnerability in its coll ...)
+ TODO: check
+CVE-2026-115522 (Exposure of Resource to Wrong Sphere (CWE-668) in FileArtifactService ...)
+ TODO: check
+CVE-2026-115281 (The Recipe Card Blocks Lite WordPress plugin before 3.6.4 does not san ...)
+ TODO: check
+CVE-2026-115255 (The WP Roster WordPress plugin before 2.35 does not perform any capabi ...)
+ TODO: check
+CVE-2026-115225 (The Customer Engagement System WordPress plugin before 2.0.2 does not ...)
+ TODO: check
+CVE-2026-115224 (The Customer Engagement System WordPress plugin before 2.0.2 does not ...)
+ TODO: check
+CVE-2026-113813 (The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 d ...)
+ TODO: check
+CVE-2026-113494 (The GeoDirectory WordPress plugin before 2.8.195 does not perform any ...)
+ TODO: check
+CVE-2026-113488 (The GeoDirectory WordPress plugin before 2.8.196 does not properly es ...)
+ TODO: check
+CVE-2026-113487 (The GeoDirectory WordPress plugin before 2.8.196 does not properly sa ...)
+ TODO: check
+CVE-2026-113486 (The Media Library Assistant WordPress plugin before 3.42 does not veri ...)
+ TODO: check
+CVE-2026-113485 (The Media Library Assistant WordPress plugin before 3.42 does not cons ...)
+ TODO: check
+CVE-2026-112355 (The MembershipWorks plugin for WordPress before 6.17 contains an infor ...)
+ TODO: check
+CVE-2026-112352 (Sunhillo SureLine before 9.1.5 contains an authentication bypass vulne ...)
+ TODO: check
+CVE-2026-112351 (Sunhillo SureLine before 9.1.5 contains an OS command injection vulner ...)
+ TODO: check
+CVE-2026-112350 (Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability ...)
+ TODO: check
+CVE-2026-112155
+ REJECTED
+CVE-2026-111967 (The MP3 Audio Player WordPress plugin before 5.16 does not escape one ...)
+ TODO: check
+CVE-2026-111961 (The Royal MCP WordPress plugin before 1.5.10 does not perform an obje ...)
+ TODO: check
+CVE-2026-111960 (The Royal MCP WordPress plugin before 1.5.10 does not perform object- ...)
+ TODO: check
+CVE-2026-111727 (The Appointment Booking Calendar plugin for WordPress is vulnerable to ...)
+ TODO: check
+CVE-2026-111577 (The GoSMTP WordPress plugin before 1.2.5 does not perform a settings- ...)
+ TODO: check
+CVE-2026-111563
+ REJECTED
+CVE-2026-111479
+ REJECTED
+CVE-2026-111467
+ REJECTED
+CVE-2026-111372 (The AI ChatBot for WooCommerce \u2013 WoowBot plugin for WordPress is ...)
+ TODO: check
+CVE-2026-111314 (The affiliate-toolkit \u2013 Multi-Network Affiliate & Amazon Product ...)
+ TODO: check
+CVE-2026-111255 (The affiliate-toolkit \u2013 Multi-Network Affiliate & Amazon Product ...)
+ TODO: check
+CVE-2026-111213 (The Travelly \u2013 Tour & Travel Booking Manager for WooCommerce plug ...)
+ TODO: check
+CVE-2026-111120 (The VikRentCar Car Rental Management System plugin for WordPress is vu ...)
+ TODO: check
+CVE-2026-111111 (The Prime Slider \u2013 Hero Slider, Carousel, WooCommerce & Post Slid ...)
+ TODO: check
+CVE-2026-111068 (The DesignSetGo plugin for WordPress is vulnerable to Stored Cross-Sit ...)
+ TODO: check
+CVE-2026-111032 (The Welcart e-Commerce WordPress plugin before 2.12.6 does not properl ...)
+ TODO: check
+CVE-2026-111031 (The Welcart e-Commerce WordPress plugin before 2.12.6 does not validat ...)
+ TODO: check
+CVE-2026-111027 (The Welcart e-Commerce WordPress plugin before 2.12.6 does not properl ...)
+ TODO: check
+CVE-2026-111021 (The \u0627\u0641\u0632\u0648\u0646\u0647 \u067e\u06cc\u0627\u0645\u06a ...)
+ TODO: check
+CVE-2026-110747 (ProtobufParser._readStringKey() reads the length prefix of a protobuf ...)
+ TODO: check
+CVE-2026-110691 (The WPOrLogin WordPress plugin before 3.1.0 does not perform a capabi ...)
+ TODO: check
+CVE-2026-110662 (The MxChat \u2013 AI Chatbot & Content Generation for WordPress plugin ...)
+ TODO: check
+CVE-2026-110524 (The Copy Anything to Clipboard for WordPress WordPress plugin before ...)
+ TODO: check
+CVE-2026-110509 (The Essential Addons for Elementor WordPress plugin before 6.8.7 does ...)
+ TODO: check
+CVE-2026-110507 (The Page Builder by SiteOrigin WordPress plugin before 2.38.0 does not ...)
+ TODO: check
+CVE-2026-110506 (The Page Builder by SiteOrigin WordPress plugin before 2.38.0 does not ...)
+ TODO: check
+CVE-2026-110292 (The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 d ...)
+ TODO: check
+CVE-2026-110185 (The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCom ...)
+ TODO: check
+CVE-2026-110071 (The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site ...)
+ TODO: check
+CVE-2026-110020 (The Rich Showcase for Google Reviews plugin for WordPress is vulnerabl ...)
+ TODO: check
+CVE-2026-109999 (The AI Marketing Expert \u2014 AI Email Marketing, AI Content Generato ...)
+ TODO: check
+CVE-2026-109988 (The Product Addons for Woocommerce \u2013 Product Options with Custom ...)
+ TODO: check
+CVE-2026-109980 (The Related Posts for WordPress plugin for WordPress is vulnerable to ...)
+ TODO: check
+CVE-2026-109979 (The Related Posts for WordPress plugin for WordPress is vulnerable to ...)
+ TODO: check
+CVE-2026-109978 (The Cozy Blocks \u2013 Website Builder for WordPress Block Editor | Gu ...)
+ TODO: check
+CVE-2026-109975 (The Cozy Blocks \u2013 Website Builder for WordPress Block Editor | Gu ...)
+ TODO: check
+CVE-2026-109974 (The All-in-One Video Gallery \u2013 Video Player & Galleries for YouTu ...)
+ TODO: check
+CVE-2026-109972 (The s2Member \u2013 Excellent for All Kinds of Memberships, Content Re ...)
+ TODO: check
+CVE-2026-109848 (GROWI contains an authorization bypass vulnerability in its tag update ...)
+ TODO: check
+CVE-2026-109590 (The Tour Booking Manager plugin for WordPress is vulnerable to Stored ...)
+ TODO: check
+CVE-2026-109385 (The UiChemy \u2013 Convert Figma, Prompts and AI Builds to Elementor, ...)
+ TODO: check
+CVE-2026-109384 (The The Innovative Form Builder \u2013 IvyForms plugin for WordPress i ...)
+ TODO: check
+CVE-2026-109381 (The Mage Eventpress plugin for WordPress is vulnerable to privilege es ...)
+ TODO: check
+CVE-2026-109370 (The Document Embedder \u2013 let visitors read files without downloadi ...)
+ TODO: check
+CVE-2026-109236 (The Customer Email Verification for WooCommerce plugin for WordPress i ...)
+ TODO: check
+CVE-2026-109218 (The Contact Manager plugin for WordPress is vulnerable to Arbitrary Fi ...)
+ TODO: check
+CVE-2026-109209 (The All-in-One Video Gallery \u2013 Video Player & Galleries for YouTu ...)
+ TODO: check
+CVE-2026-108366 (The easy.jobs \u2013 AI powered Job Listing, Job Board, Career Page, R ...)
+ TODO: check
+CVE-2026-107745 (The AI Engine \u2013 The Chatbot, AI Framework & MCP for WordPress plu ...)
+ TODO: check
+CVE-2026-107710 (The Hustle \u2013 Email Marketing, Lead Generation, Optins, Popups plu ...)
+ TODO: check
+CVE-2026-107625 (The Ultimate Member \u2013 User Profile, Registration, Login, Member D ...)
+ TODO: check
+CVE-2026-107100 (The Royal Addons for Elementor WordPress plugin before 1.7.1070 does ...)
+ TODO: check
+CVE-2026-107098 (The Royal Addons for Elementor WordPress plugin before 1.7.1070 does ...)
+ TODO: check
+CVE-2026-107097 (The Royal Addons for Elementor WordPress plugin before 1.7.1070 does ...)
+ TODO: check
+CVE-2026-106647 (The Royal Addons for Elementor WordPress plugin before 1.7.1070 does ...)
+ TODO: check
+CVE-2026-106013 (The Jupiter X Core plugin for WordPress is vulnerable to Authenticatio ...)
+ TODO: check
+CVE-2026-106003 (The Court Reservation WordPress plugin before 1.12.4 does not perform ...)
+ TODO: check
+CVE-2026-106002 (The Court Reservation WordPress plugin before 1.12.4 does not perform ...)
+ TODO: check
+CVE-2026-105997 (The Booking Package WordPress plugin before 1.7.33 does not restrict w ...)
+ TODO: check
+CVE-2026-105972 (The Menu Cart for WooCommerce WordPress plugin before 3.2.1 does not s ...)
+ TODO: check
+CVE-2026-105272 (GROWI contains an authorization bypass vulnerability in its page viewi ...)
+ TODO: check
+CVE-2026-104895 (The asynchronous Smile parser (NonBlockingByteArrayParser) uses a raw- ...)
+ TODO: check
+CVE-2026-104743 (The Tainacan plugin for WordPress is vulnerable to Directory Traversal ...)
+ TODO: check
+CVE-2026-104740 (The If-So Dynamic Content \u2013 Elementor & All Page Builders Persona ...)
+ TODO: check
+CVE-2026-104729 (The Avada (Fusion) Builder plugin for WordPress is vulnerable to Store ...)
+ TODO: check
+CVE-2026-104694 (The Thrive Automator WordPress plugin before 11.2 does not properly sa ...)
+ TODO: check
+CVE-2026-104384 (Insufficiently Protected Credentials in tunnel gateway and provisionin ...)
+ TODO: check
+CVE-2026-104383 (Improper Control of Generation of Code in Pigeon MFA service in EagleC ...)
+ TODO: check
+CVE-2026-104016 (ProtobufParser parses length-prefixed protobuf string and bytes fields ...)
+ TODO: check
+CVE-2026-103996 (The If-So Dynamic Content \u2013 Elementor & All Page Builders Persona ...)
+ TODO: check
+CVE-2026-103995 (Response body and chunk parsing would handle non-hex or negative integ ...)
+ TODO: check
+CVE-2026-103688 (The Checkout Files Upload for WooCommerce WordPress plugin before 2.4. ...)
+ TODO: check
+CVE-2026-103382 (The Casso Flow WordPress plugin before 4.2.0 does not properly authen ...)
+ TODO: check
+CVE-2026-103372 (The Payconiq WordPress plugin through 1.0.4 does not check that a visi ...)
+ TODO: check
+CVE-2026-103370 (The Awesome Support \u2013 WordPress HelpDesk & Support Plugin plugin ...)
+ TODO: check
+CVE-2026-103331 (The UniPAY Payment Gateway For WooCommerce WordPress plugin through 2. ...)
+ TODO: check
+CVE-2026-100175 (The Postie plugin for WordPress is vulnerable to Stored Cross-Site Scr ...)
+ TODO: check
+CVE-2025-12534
+ REJECTED
+CVE-2015-20129 (CrushFTP before 7.3.0 contains a cross-site request forgery vulnerabil ...)
+ TODO: check
+CVE-2014-125138 (C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and ...)
+ TODO: check
+CVE-2014-125137 (C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and ...)
+ TODO: check
+CVE-2014-125136 (C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and ...)
+ TODO: check
+CVE-2013-20009 (Linksys WAG200G through 1.01.06 contains a stored cross-site scripting ...)
+ TODO: check
+CVE-2013-20008 (Linksys WAG200G through 1.01.06 contains a weak password change mechan ...)
+ TODO: check
+CVE-2013-20007 (Linksys WAG200G through 1.01.06 contains an OS command injection vulne ...)
+ TODO: check
CVE-2026-XXXX [GHSA-9vw2-f4vp-x7gf: PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling]
- phpunit 13.4.5+ds-1
[trixie] - phpunit <not-affected> (Vulnerable code introduced later)
@@ -3662,7 +4138,7 @@ CVE-2026-103299 (The Payment Gateway WordPress plugin through 2.2.0 does not en
NOT-FOR-US: WordPress plugin
CVE-2026-103298 (The CCAvenue Payment Gateway for WooCommerce WordPress plugin through ...)
NOT-FOR-US: WordPress plugin
-CVE-2026-110879
+CVE-2026-110879 (jackson-databind validates the outer class of a class-name type ID but ...)
- jackson-databind 2.22.4-1
[trixie] - jackson-databind <not-affected> (Incomplete fix for CVE-2026-54512 not applied)
NOTE: https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-m8xf-2cr7-77ph
@@ -63002,22 +63478,22 @@ CVE-2026-89793 (In the Linux kernel, the following vulnerability has been resolv
- linux 7.2.6-1
NOTE: https://git.kernel.org/linus/6e2b571b0a54755b06e092501913e1dfefe75d6c (7.3-rc2)
CVE-2026-19033 (For a secondary zone with transfers restricted by TSIG, `named` may st ...)
- {DSA-6505-1}
+ {DSA-6505-1 DLA-4865-1}
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-19033
NOTE: https://github.com/isc-projects/bind9/commit/5330f5ffbd864ff283c68116fdde59e2ae97bdaf (bind-9.18)
CVE-2026-19662 (An attacker may be able to cause a `named` resolver to abort. The atta ...)
- {DSA-6505-1}
+ {DSA-6505-1 DLA-4865-1}
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-19662
NOTE: https://github.com/isc-projects/bind9/commit/794b0dff3cda4d0f4bcb05d07a134def3f75ab90 (bind-9.18)
CVE-2026-19666 (On a resolver configured to use ``dns64``, if an applicable answer fro ...)
- {DSA-6505-1}
+ {DSA-6505-1 DLA-4865-1}
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-19666
NOTE: https://github.com/isc-projects/bind9/commit/78175f9749fecdac4eb0d4b08dd064968b4c55f8 (bind-9.18)
CVE-2026-19667 (If an attacker-controlled authoritative server can produce a negative ...)
- {DSA-6505-1}
+ {DSA-6505-1 DLA-4865-1}
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-19667
NOTE: [1/2] https://github.com/isc-projects/bind9/commit/993d10fe15adbac485d399f1e4144b55ed226ecf (bind-9.18)
@@ -63027,12 +63503,12 @@ CVE-2026-19668 (A BIND recursive resolver may experience excessive resource cons
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-19668
CVE-2026-19941 (An inapplicable NSEC record may be accepted by a `named` resolver as p ...)
- {DSA-6505-1}
+ {DSA-6505-1 DLA-4865-1}
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-19941
NOTE: https://github.com/isc-projects/bind9/commit/d9ae565b8aa553ccf025cb8fef842b2f5ad2f2e2 (bind-9.18)
CVE-2026-75029 (In a query response, an attacker may send `named` multiple copies of a ...)
- {DSA-6505-1}
+ {DSA-6505-1 DLA-4865-1}
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-75029
NOTE: https://github.com/isc-projects/bind9/commit/e3eeb6d9846b27758e076955b8310856b8d5d515 (bind-9.18)
@@ -63049,22 +63525,22 @@ CVE-2026-77692 (An attacker can cause `named` to abort by sending a crafted DNS-
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-77692
CVE-2026-78301 (A malformed zone may contain an NS or DNAME node above its origin, whi ...)
- {DSA-6505-1}
+ {DSA-6505-1 DLA-4865-1}
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-78301
NOTE: https://github.com/isc-projects/bind9/commit/a638cd47dc2b66e98cd912eb6fe090c6a72b14f6 (bind-9.18)
CVE-2026-80274 (If a BIND resolver sends a query for a DNSSEC-signed authoritative zon ...)
- {DSA-6505-1}
+ {DSA-6505-1 DLA-4865-1}
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-80274
NOTE: https://github.com/isc-projects/bind9/commit/2c72008b25c916d75dd4df34550954feb75a1ccd (bind-9.18)
CVE-2026-81563 (A BIND resolver encountering an SVCB/HTTPS AliasMode record referencin ...)
- {DSA-6505-1}
+ {DSA-6505-1 DLA-4865-1}
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-81563
NOTE: https://github.com/isc-projects/bind9/commit/2c06dd156f2338bb873d7ae775a7e2fca37d0bc9 (bind-9.18)
CVE-2026-81736 (If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, ...)
- {DSA-6505-1}
+ {DSA-6505-1 DLA-4865-1}
- bind9 1:9.20.29-1
NOTE: https://kb.isc.org/docs/cve-2026-81736
NOTE: https://github.com/isc-projects/bind9/commit/17177ec18a4a62b7c67a6d76b3e8efb94886caa6 (bind-9.18)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e42fba8059d8a28cb2ca078c2a0c5c9e0fb846f7
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e42fba8059d8a28cb2ca078c2a0c5c9e0fb846f7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261028/a0e96425/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list