[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Oct 31 09:14:35 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
5845165d by Salvatore Bonaccorso at 2026-10-31T10:09:53+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -200,9 +200,9 @@ CVE-2026-119977 (WordPress Core is vulnerable to Remote Code Execution in versio
CVE-2026-119730 (Maxthon Browser for Android before 7.5.8.103 contains an address bar s ...)
TODO: check
CVE-2026-119343 (Stirling-PDF is a locally hosted web application that facilitates vari ...)
- TODO: check
+ NOT-FOR-US: Stirling-PDF
CVE-2026-119342 (Stirling-PDF is a locally hosted web application that facilitates vari ...)
- TODO: check
+ NOT-FOR-US: Stirling-PDF
CVE-2026-119341 (Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedCla ...)
TODO: check
CVE-2026-119340 (Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARR ...)
@@ -212,25 +212,25 @@ CVE-2026-119339 (Tesseract is an open source OCR engine. Prior to 5.5.4, WeightM
CVE-2026-119338 (Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, Append ...)
TODO: check
CVE-2026-119337 (RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. ...)
- TODO: check
+ NOT-FOR-US: RAGFlow
CVE-2026-119336 (Pi-hole is a DNS sinkhole that protects devices from unwanted content ...)
- TODO: check
+ NOT-FOR-US: Pi-hole
CVE-2026-119335 (Pi-hole is a DNS sinkhole that protects devices from unwanted content ...)
- TODO: check
+ NOT-FOR-US: Pi-hole
CVE-2026-119334 (Pi-hole is a DNS sinkhole that protects devices from unwanted content ...)
- TODO: check
+ NOT-FOR-US: Pi-hole
CVE-2026-119333 (draw.io Desktop is the official Electron build of draw.io. Prior to 31 ...)
- TODO: check
+ NOT-FOR-US: draw.io
CVE-2026-119332 (Ladybird is a truly independent web browser. Prior to 209579c96473c75b ...)
TODO: check
CVE-2026-119331 (Ladybird is a truly independent web browser. Prior to the c0d68bddf3e3 ...)
TODO: check
CVE-2026-119330 (Immich is a high-performance self-hosted photo and video management so ...)
- TODO: check
+ NOT-FOR-US: Immich
CVE-2026-119329 (Immich is a high-performance self-hosted photo and video management so ...)
- TODO: check
+ NOT-FOR-US: Immich
CVE-2026-119328 (Immich is a high-performance self-hosted photo and video management so ...)
- TODO: check
+ NOT-FOR-US: Immich
CVE-2026-119166 (The Welcart e-Commerce plugin for WordPress is vulnerable to Insecure ...)
NOT-FOR-US: WordPress plugin
CVE-2026-119163 (The FunnelKit Automations \u2013 Email Marketing Automation and CRM fo ...)
@@ -930,15 +930,15 @@ CVE-2026-119299 (gopacket provides packet processing capabilities for Go. Prior
CVE-2026-119298 (croc is a tool that allows any two computers to simply and securely tr ...)
TODO: check
CVE-2026-119291 (Zuke is a code-first, strongly typed build automation system for Deno. ...)
- TODO: check
+ NOT-FOR-US: Zuke
CVE-2026-119290 (Zuke is a code-first, strongly typed build automation system for Deno. ...)
- TODO: check
+ NOT-FOR-US: Zuke
CVE-2026-119289 (Zuke is a code-first, strongly typed build automation system for Deno. ...)
- TODO: check
+ NOT-FOR-US: Zuke
CVE-2026-119288 (Zuke is a code-first, strongly typed build automation system for Deno. ...)
- TODO: check
+ NOT-FOR-US: Zuke
CVE-2026-119287 (Zuke is a code-first, strongly typed build automation system for Deno. ...)
- TODO: check
+ NOT-FOR-US: Zuke
CVE-2026-119176 (The CP Multi View Events Calendar plugin for WordPress is vulnerable t ...)
NOT-FOR-US: WordPress plugin
CVE-2026-119148 (Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0. ...)
@@ -958,11 +958,11 @@ CVE-2026-119113 (The GeoDirectory \u2013 WP Business Directory Plugin and Classi
CVE-2026-119086 (Missing queue-set type validation in the queue-set selection system ca ...)
NOT-FOR-US: Amazon
CVE-2026-119038 (Business::GoCardless versions before 1.01 for Perl complete redirect f ...)
- TODO: check
+ NOT-FOR-US: Business::GoCardless Perl module
CVE-2026-119037 (Business::GoCardless versions before 1.01 for Perl accept forged webho ...)
- TODO: check
+ NOT-FOR-US: Business::GoCardless Perl module
CVE-2026-119036 (Business::GoCardless versions before 1.01 for Perl allow memory exhaus ...)
- TODO: check
+ NOT-FOR-US: Business::GoCardless Perl module
CVE-2026-118996 (CallBackery versions before 0.62.0 for Perl send users their own passw ...)
NOT-FOR-US: CallBackery
CVE-2026-118995 (CallBackery versions before 0.62.0 for Perl accept unintended values i ...)
@@ -1190,15 +1190,15 @@ CVE-2026-100355 (Campfire is a web-based chat application. In version 1.4.4 and
CVE-2025-8574 (The Database Cleaner plugin for WordPress is vulnerable to arbitrary t ...)
NOT-FOR-US: WordPress plugin
CVE-2025-68395 (ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor ...)
- TODO: check
+ NOT-FOR-US: ARKETEAM Protectel
CVE-2025-68394 (ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL ...)
- TODO: check
+ NOT-FOR-US: ARKETEAM Protectel
CVE-2025-68393 (ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL ...)
- TODO: check
+ NOT-FOR-US: ARKETEAM Protectel
CVE-2025-68392 (ARKETEAM Protectel modules PROTECTELMAJ and BDF allow low privileged u ...)
- TODO: check
+ NOT-FOR-US: ARKETEAM Protectel
CVE-2025-68391 (ARKETEAM Protectel modulesPROTECTELMAJ andBDF are vulnerable to arbitr ...)
- TODO: check
+ NOT-FOR-US: ARKETEAM Protectel
CVE-2025-49602 (An issue was discovered in Keyfactor EJBCA 9. When an administrator is ...)
TODO: check
CVE-2025-31704 (A vulnerability has been found in the Dahua Intelligent Connection Cen ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5845165d7d2a05dab136da05087290c2174db755
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5845165d7d2a05dab136da05087290c2174db755
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261031/8cc685dd/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list