[Git][security-tracker-team/security-tracker][master] Process some more NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6b5143b5 by Salvatore Bonaccorso at 2026-10-29T20:38:38+01:00
Process some more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3,9 +3,9 @@ CVE-2026-9536 (A heap-based buffer overflow vulnerability exists in the vtkWindB
 CVE-2026-9535 (A out-of-bounds read vulnerability exists in the vtkChacoReader InputG ...)
 	TODO: check
 CVE-2026-97860 (YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windo ...)
-	TODO: check
+	NOT-FOR-US: YMS-VPN8 and YMS-VPN8-CP
 CVE-2026-97854 (Yamaha wireless LAN router NWR100 provided by Yamaha Corporation conta ...)
-	TODO: check
+	NOT-FOR-US: Yamaha wireless LAN router NWR100
 CVE-2026-97073 (Missing Authorization vulnerability in myCred myCred mycred allows Exp ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-96767 (The NEX-Forms \u2013 Ultimate Forms Plugin for WordPress plugin for Wo ...)
@@ -25,9 +25,9 @@ CVE-2026-96187 (Access of resource using incompatible type ('type confusion') in
 CVE-2026-93680 (IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to ...)
 	NOT-FOR-US: IBM
 CVE-2026-93571 (Szafir is vulnerable to Path Traversal in the uploaded filename. A man ...)
-	TODO: check
+	NOT-FOR-US: Szafir
 CVE-2026-93570 (Szafir and Szafir Weryfikuj\u0105ca are vulnerable to XML External Ent ...)
-	TODO: check
+	NOT-FOR-US: Szafir
 CVE-2026-93011 (A flaw was found in dnsmasq. After a reduction of internal domain-name ...)
 	TODO: check
 CVE-2026-93010 (A flaw was found in dnsmasq. When DHCP leasequery is enabled without l ...)
@@ -77,7 +77,7 @@ CVE-2026-8824 (A memory corruption vulnerability exists in the vtkBMPReader Exec
 CVE-2026-8822 (A memory corruption vulnerability exists in the vtkDEMReader ReadProfi ...)
 	TODO: check
 CVE-2026-88941 (Kaspersky has fixed a vulnerability in the Network Agent for Windows m ...)
-	TODO: check
+	NOT-FOR-US: Kaspersky
 CVE-2026-88090 (Access of resource using incompatible type ('type confusion') in Micro ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-88078 (Improper verification of cryptographic signature in Microsoft Edge (Ch ...)
@@ -99,9 +99,9 @@ CVE-2026-84295 (Improper authentication in Progress Software WS_FTP Server versi
 CVE-2026-84294 (Improper limitation of pathname in the Ad Hoc Transfer component of Pr ...)
 	NOT-FOR-US: Progress Software
 CVE-2026-80069 (MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-80067 (MasterStudy LMS plugin for WordPress before 3.7.50 contains a path tra ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-7190 (A cross-site scripting (XSS) vulnerability in the ICTBroadcast softwar ...)
 	TODO: check
 CVE-2026-79589 (The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an in ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6b5143b532745fd5adc2cbfc9ae499349dc4ea8f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6b5143b532745fd5adc2cbfc9ae499349dc4ea8f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261029/4589fb02/attachment.htm>