[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Sep 4 08:26:31 BST 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a4efb404 by Salvatore Bonaccorso at 2026-09-04T09:26:06+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -29,81 +29,81 @@ CVE-2026-85504 (FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipm
 CVE-2026-85458 (Divide-by-zero in Xpdf 4.06 (and earlier), when a glyph in a Type 3 fo ...)
 	TODO: check
 CVE-2026-85456 (MOOS-IvP through 24.8.1 fails to properly validate variable names extr ...)
-	TODO: check
+	NOT-FOR-US: MOOS-IvP
 CVE-2026-85455 (MOOS core-moos through 10.4.0 contains a buffer over-read vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: MOOS core-moos
 CVE-2026-85454 (MOOS core-moos through 10.4.0 contains a buffer overflow vulnerability ...)
-	TODO: check
+	NOT-FOR-US: MOOS core-moos
 CVE-2026-85453 (MOOS core-moos through 10.4.0 fails to escape database contents when r ...)
-	TODO: check
+	NOT-FOR-US: MOOS core-moos
 CVE-2026-85452 (MOOS ui-moos through 50b9c6c contains a buffer overflow vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85451 (MOOS core-moos through 10.4.0 contains a remote process termination vu ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85450 (MOOS core-moos through 10.4.0 contains a denial of service vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85449 (MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tra ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85448 (MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of c ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85447 (MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCAST_REQ ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85446 (MOOS-IvP versions through 24.8.1 contain a quadratic processing vulner ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85445 (MOOS-IvP through 24.8.1 contains a denial of service vulnerability in  ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85444 (MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in i ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85443 (MOOS core-moos through 10.4.0 contains a denial of service vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85442 (MOOS core-moos through 10.4.0 fails to validate packet length declarat ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85441 (MOOS core-moos through 10.4.0 fails to validate that serialized string ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85440 (MOOS core-moos through 10.4.0 contains a pre-authentication heap overf ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85439 (MOOS-IvP through 24.8.1 contains a remote code execution vulnerability ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85438 (MOOS-IvP through 24.8.1 contains a buffer overflow vulnerability in St ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85437 (MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85436 (MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerab ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85435 (MOOS-IvP uFldNodeBroker through 24.8.1 fails to validate the source of ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85434 (MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping auth ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85433 (MOOS essential-moos pShare through 10.0.1 fails to properly authorize  ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85432 (MOOS core-moos through 10.4.0 fails to validate client identity in MOO ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85431 (MOOS essential-moos through version 10.0.1 contains an unauthenticated ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85430 (MOOS essential-moos through 10.0.1 contains an authentication bypass v ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85429 (MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity  ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85428 (MOOS core-moos through 10.4.0 contains an authentication bypass vulner ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85427 (MOOS essential-moos pAntler through 10.0.1 contains a remote code exec ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85426 (MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attac ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85425 (MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerab ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85424 (MOOS core-moos through 10.4.0 lacks authentication in the wire protoco ...)
-	TODO: check
+	NOT-FOR-US: MOOS
 CVE-2026-85409 (A vulnerability was identified in Eleveo Quality Management 9.7.0. The ...)
-	TODO: check
+	NOT-FOR-US: Eleveo Quality Management
 CVE-2026-85408 (A vulnerability was determined in Eleveo Quality Management 9.7.0. Imp ...)
-	TODO: check
+	NOT-FOR-US: Eleveo Quality Management
 CVE-2026-85407 (A vulnerability was found in Eleveo Quality Management 9.7.0. This iss ...)
-	TODO: check
+	NOT-FOR-US: Eleveo Quality Management
 CVE-2026-85406 (A vulnerability has been found in Eleveo Quality Management 9.7.0. Thi ...)
-	TODO: check
+	NOT-FOR-US: Eleveo Quality Management
 CVE-2026-85405 (A flaw has been found in Eleveo Call Recording Software 9.7.0. This af ...)
-	TODO: check
+	NOT-FOR-US: Eleveo Call Recording Software
 CVE-2026-85403 (A flaw has been found in code-projects Doctor Appointment System 1.0.  ...)
 	NOT-FOR-US: code-projects
 CVE-2026-85402 (A vulnerability was detected in code-projects Doctor Appointment Syste ...)
@@ -119,17 +119,17 @@ CVE-2026-85397 (A vulnerability was determined in code-projects Hospital Informa
 CVE-2026-85383 (A flaw has been found in itsourcecode Sales and Inventory System 1.0.  ...)
 	NOT-FOR-US: itsourcecode System
 CVE-2026-85382 (A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5 ...)
-	TODO: check
+	NOT-FOR-US: light0011 cms
 CVE-2026-85381 (A security vulnerability has been detected in light0011 cms c774dce31c ...)
-	TODO: check
+	NOT-FOR-US: light0011 cms
 CVE-2026-85380 (A weakness has been identified in light0011 cms c774dce31c6df0055568a8 ...)
-	TODO: check
+	NOT-FOR-US: light0011 cms
 CVE-2026-85379 (A security flaw has been discovered in light0011 cms c774dce31c6df0055 ...)
-	TODO: check
+	NOT-FOR-US: light0011 cms
 CVE-2026-85378 (A vulnerability was identified in light0011 cms c774dce31c6df0055568a8 ...)
-	TODO: check
+	NOT-FOR-US: light0011 cms
 CVE-2026-85241 (A weakness has been identified in SpecterOps BloodHound up to 9.5.1. T ...)
-	TODO: check
+	NOT-FOR-US: SpecterOps BloodHound
 CVE-2026-85225 (A vulnerability was identified in code-projects Doctor Appointment Sys ...)
 	NOT-FOR-US: code-projects
 CVE-2026-85224 (A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01.  ...)
@@ -143,17 +143,17 @@ CVE-2026-85208 (A security flaw has been discovered in itsourcecode Online Medic
 CVE-2026-85207 (A vulnerability was identified in itsourcecode Online Medicine Deliver ...)
 	NOT-FOR-US: itsourcecode System
 CVE-2026-85149 (SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded ...)
-	TODO: check
+	NOT-FOR-US: Lightstar
 CVE-2026-85148 (SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded ...)
-	TODO: check
+	NOT-FOR-US: Lightstar
 CVE-2026-85147 (SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded ...)
-	TODO: check
+	NOT-FOR-US: Lightstar
 CVE-2026-85146 (SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded ...)
-	TODO: check
+	NOT-FOR-US: Lightstar
 CVE-2026-85094 (The Canva Android App  before 2.376.0 did not restrict the headers ret ...)
-	TODO: check
+	NOT-FOR-US: Canva Android App
 CVE-2026-85085 (The Canva Android App before 2.376.0 allowed an external origin to be  ...)
-	TODO: check
+	NOT-FOR-US: Canva Android App
 CVE-2026-85063 (node-csv is a full-featured CSV parser with a simple API that is teste ...)
 	TODO: check
 CVE-2026-85062 (Colord is a tiny yet powerful tool for high-performance color manipula ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a4efb4046f2c9903cb6ec890988bdf22f8c610c8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a4efb4046f2c9903cb6ec890988bdf22f8c610c8
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260904/f38f71e0/attachment.htm>

More information about the debian-security-tracker-commits mailing list