[Git][security-tracker-team/security-tracker][master] Process some more NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Oct 28 20:47:33 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
a5e245c4 by Salvatore Bonaccorso at 2026-10-28T21:47:11+01:00
Process some more NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -205,41 +205,41 @@ CVE-2026-118640 (n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorizati
CVE-2026-118633 (A path traversal vulnerability allows a remote unauthenticated attacke ...)
NOT-FOR-US: Sophos
CVE-2026-118619 (Ultralytics Google Drive Download Path Traversal Remote Code Execution ...)
- TODO: check
+ NOT-FOR-US: Ultralytics
CVE-2026-118618 (Ultralytics parse_model Code Injection Remote Code Execution Vulnerabi ...)
- TODO: check
+ NOT-FOR-US: Ultralytics
CVE-2026-118617 (Ultralytics load_dataset_cache_file Deserialization of Untrusted Data ...)
- TODO: check
+ NOT-FOR-US: Ultralytics
CVE-2026-118616 (Ultralytics parse_model Code Injection Remote Code Execution Vulnerabi ...)
- TODO: check
+ NOT-FOR-US: Ultralytics
CVE-2026-118615 (Ultralytics torch_safe_load Command Injection Remote Code Execution Vu ...)
- TODO: check
+ NOT-FOR-US: Ultralytics
CVE-2026-118614 (Ultralytics check_det_dataset Code Injection Remote Code Execution Vul ...)
- TODO: check
+ NOT-FOR-US: Ultralytics
CVE-2026-118613 (Ultralytics torch_load Deserialization of Untrusted Data Remote Code E ...)
- TODO: check
+ NOT-FOR-US: Ultralytics
CVE-2026-118611 (Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overf ...)
- TODO: check
+ NOT-FOR-US: Alpine iLX-F511
CVE-2026-118610 (Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remot ...)
- TODO: check
+ NOT-FOR-US: Alpine iLX-F511
CVE-2026-118609 (Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Ove ...)
- TODO: check
+ NOT-FOR-US: Alpine iLX-F511
CVE-2026-118608 (Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bou ...)
- TODO: check
+ NOT-FOR-US: Alpine iLX-F511
CVE-2026-118607 (Alpine iLX-F511 diagapp Command Injection Vulnerability. This vulnerab ...)
- TODO: check
+ NOT-FOR-US: Alpine iLX-F511
CVE-2026-118606 (Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Co ...)
- TODO: check
+ NOT-FOR-US: Alpine iLX-F511
CVE-2026-118605 (Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overf ...)
- TODO: check
+ NOT-FOR-US: Alpine iLX-F511
CVE-2026-118604 (Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote C ...)
- TODO: check
+ NOT-FOR-US: Alpine iLX-F511
CVE-2026-118603 (Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code ...)
- TODO: check
+ NOT-FOR-US: Alpine iLX-F511
CVE-2026-118602 (Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Es ...)
- TODO: check
+ NOT-FOR-US: Alpine iLX-F511
CVE-2026-118601 (Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulne ...)
- TODO: check
+ NOT-FOR-US: Alpine iLX-F511
CVE-2026-118581 (A BSON encoding component of the MongoDB Java Driver does not verify t ...)
TODO: check
CVE-2026-118510 (A type-handling flaw in the relationship query building of this MongoD ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5e245c45f18fe91e64915ded44f1d227daba3b8
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5e245c45f18fe91e64915ded44f1d227daba3b8
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261028/57791bff/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list