[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Sep 30 20:14:59 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
21ed79a2 by security tracker role at 2026-09-30T19:14:51+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,4 +1,880 @@
-CVE-2026-19445
+CVE-2026-97347 (The Post Views Stats Counter plugin for WordPress is vulnerable to Sto ...)
+ TODO: check
+CVE-2026-97302 (Unauthenticated Sensitive Data Exposure in MPG <= 4.2.3 versions.)
+ TODO: check
+CVE-2026-97301 (Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 v ...)
+ TODO: check
+CVE-2026-97299 (Unauthenticated Cross Site Request Forgery (CSRF) in Razorpay Payment ...)
+ TODO: check
+CVE-2026-97298 (Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= ...)
+ TODO: check
+CVE-2026-97293 (Contributor SQL Injection in Media LIbrary Assistant <= 3.41 versions.)
+ TODO: check
+CVE-2026-97292 (Author Cross Site Scripting (XSS) in YITH WooCommerce Tab Manager <= 2 ...)
+ TODO: check
+CVE-2026-97291 (Contributor PHP Object Injection in Schema & Structured Data for WP & ...)
+ TODO: check
+CVE-2026-97290 (Unauthenticated Cross Site Scripting (XSS) in Photonic Gallery & Light ...)
+ TODO: check
+CVE-2026-97289 (Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master < ...)
+ TODO: check
+CVE-2026-97288 (Contributor Cross Site Scripting (XSS) in OAuth Server <= 4.5.1 versio ...)
+ TODO: check
+CVE-2026-97287 (Contributor SQL Injection in Event Tickets <= 5.29.5 versions.)
+ TODO: check
+CVE-2026-97286 (Contributor Cross Site Scripting (XSS) in Strong Testimonials <= 3.3.1 ...)
+ TODO: check
+CVE-2026-97285 (Contributor Broken Access Control in The Events Calendar <= 6.17.5 ver ...)
+ TODO: check
+CVE-2026-97282 (Unauthenticated Insecure Direct Object References (IDOR) in Review Sch ...)
+ TODO: check
+CVE-2026-97279 (Contributor Cross Site Scripting (XSS) in Polylang <= 3.8.9 versions.)
+ TODO: check
+CVE-2026-97274 (Unauthenticated Bypass Vulnerability in OAuth Single Sign On \u2013 SS ...)
+ TODO: check
+CVE-2026-97272 (Unauthenticated Cross Site Scripting (XSS) in Premmerce Permalink Mana ...)
+ TODO: check
+CVE-2026-97271 (Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 vers ...)
+ TODO: check
+CVE-2026-97270 (Subscriber Cross Site Scripting (XSS) in CMB2 <= 2.13.0 versions.)
+ TODO: check
+CVE-2026-97267 (Subscriber Broken Access Control in Prevent files / folders access <= ...)
+ TODO: check
+CVE-2026-97266 (Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolk ...)
+ TODO: check
+CVE-2026-97265 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-97262 (Contributor Cross Site Scripting (XSS) in Visual Composer Website Buil ...)
+ TODO: check
+CVE-2026-97261 (Unauthenticated Sensitive Data Exposure in Notivo <= 1.4.2 versions.)
+ TODO: check
+CVE-2026-97259 (Authorization Bypass Through User-Controlled Key vulnerability in WP H ...)
+ TODO: check
+CVE-2026-97256 (Editor PHP Object Injection in Page Builder by SiteOrigin <= 2.36.0 ve ...)
+ TODO: check
+CVE-2026-97253 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-97250 (Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 v ...)
+ TODO: check
+CVE-2026-97249 (Unauthenticated Bypass Vulnerability in Paid Member Subscriptions <= 3 ...)
+ TODO: check
+CVE-2026-97248 (Unauthenticated PHP Object Injection in Booking Activities <= 1.18.7.1 ...)
+ TODO: check
+CVE-2026-97247 (Unauthenticated Broken Access Control in Blocksy Companion <= 2.1.55 v ...)
+ TODO: check
+CVE-2026-97246 (Subscriber PHP Object Injection in ShortPixel Image Optimizer <= 6.5.5 ...)
+ TODO: check
+CVE-2026-97245 (Shop Worker Privilege Escalation in SureCart <= 4.7.2 versions.)
+ TODO: check
+CVE-2026-97244 (Contributor Path Traversal in Creator LMS <= 1.2.19 versions.)
+ TODO: check
+CVE-2026-97243 (Subscriber Broken Access Control in AllAble Connector <= 0.13.4 versio ...)
+ TODO: check
+CVE-2026-97242 (Author Arbitrary File Deletion in WEBO MCP <= 3.0.18 versions.)
+ TODO: check
+CVE-2026-97241 (Unauthenticated Sensitive Data Exposure in BackupEase <= 2.2.2 version ...)
+ TODO: check
+CVE-2026-97240 (Unauthenticated Sensitive Data Exposure in StifLi Backup Tools <= 2.2. ...)
+ TODO: check
+CVE-2026-97239 (Subscriber Broken Access Control in MCP Content Manager Lite <= 1.1.0 ...)
+ TODO: check
+CVE-2026-97238 (Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 version ...)
+ TODO: check
+CVE-2026-97237 (Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 ve ...)
+ TODO: check
+CVE-2026-97236 (Subscriber Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 vers ...)
+ TODO: check
+CVE-2026-97235 (Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 ...)
+ TODO: check
+CVE-2026-97197 (Unauthenticated Broken Access Control in WordPress Backup & Migration ...)
+ TODO: check
+CVE-2026-97150 (When converting baserCMS4-style addons to baserCMS5-style ones, BcAddo ...)
+ TODO: check
+CVE-2026-97079 (Subscriber Insecure Direct Object References (IDOR) in Webba Booking < ...)
+ TODO: check
+CVE-2026-97078 (Unauthenticated Insecure Direct Object References (IDOR) in Client Inv ...)
+ TODO: check
+CVE-2026-97077 (Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.18 ve ...)
+ TODO: check
+CVE-2026-97074 (Subscriber Insecure Direct Object References (IDOR) in Newsletters, Em ...)
+ TODO: check
+CVE-2026-97067 (Contributor Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7. ...)
+ TODO: check
+CVE-2026-97066 (Unauthenticated Insecure Direct Object References (IDOR) in GiveWP <= ...)
+ TODO: check
+CVE-2026-97065 (Unauthenticated Cross Site Scripting (XSS) in Happyforms <= 1.26.15 ve ...)
+ TODO: check
+CVE-2026-96838 (Unauthenticated Cross Site Request Forgery (CSRF) in Blacklist Manager ...)
+ TODO: check
+CVE-2026-96837 (Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions ...)
+ TODO: check
+CVE-2026-96836 (Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versio ...)
+ TODO: check
+CVE-2026-96835 (Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= ...)
+ TODO: check
+CVE-2026-96834 (Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions.)
+ TODO: check
+CVE-2026-96833 (Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3 ...)
+ TODO: check
+CVE-2026-96832 (Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions.)
+ TODO: check
+CVE-2026-96831 (Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions.)
+ TODO: check
+CVE-2026-96830 (Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 version ...)
+ TODO: check
+CVE-2026-96829 (Contributor Cross Site Scripting (XSS) in The Plus Addons for Elemento ...)
+ TODO: check
+CVE-2026-96828 (Administrator SQL Injection in Category Discount Woocommerce <= 5.18 v ...)
+ TODO: check
+CVE-2026-96827 (Administrator SQL Injection in Admin Notices Manager <= 1.6.0 versions ...)
+ TODO: check
+CVE-2026-96825 (Subscriber Bypass Vulnerability in All In One WP Security & Firewall < ...)
+ TODO: check
+CVE-2026-96824 (Editor Arbitrary File Deletion in Template Kit \u2013 Import <= 1.0.16 ...)
+ TODO: check
+CVE-2026-96823 (Unauthenticated Arbitrary Content Deletion in Customer Reviews for Woo ...)
+ TODO: check
+CVE-2026-96822 (Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions.)
+ TODO: check
+CVE-2026-96821 (Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions.)
+ TODO: check
+CVE-2026-96820 (Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 vers ...)
+ TODO: check
+CVE-2026-96819 (Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions.)
+ TODO: check
+CVE-2026-96818 (Unauthenticated Broken Access Control in WP Express Checkout (Accept P ...)
+ TODO: check
+CVE-2026-96817 (Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4. ...)
+ TODO: check
+CVE-2026-96816 (Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integ ...)
+ TODO: check
+CVE-2026-96815 (Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.)
+ TODO: check
+CVE-2026-96814 (Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Tabl ...)
+ TODO: check
+CVE-2026-96450 (Contributor Cross Site Scripting (XSS) in pixfort Core < 4.3.3 version ...)
+ TODO: check
+CVE-2026-96352 (Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Se ...)
+ TODO: check
+CVE-2026-96351 (Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6. ...)
+ TODO: check
+CVE-2026-96350 (Subscriber Privilege Escalation in Estatik <= 4.3.5 versions.)
+ TODO: check
+CVE-2026-96349 (Unauthenticated Remote Code Execution (RCE) in SiteSkite <= 2.1.8 vers ...)
+ TODO: check
+CVE-2026-96348 (Unauthenticated Broken Access Control in Bookly <= 28.2 versions.)
+ TODO: check
+CVE-2026-96347 (Subscriber Insecure Direct Object References (IDOR) in Bookly <= 28.2 ...)
+ TODO: check
+CVE-2026-96346 (Author SQL Injection in WP ERP <= 1.17.9 versions.)
+ TODO: check
+CVE-2026-96345 (Administrator SQL Injection in Estatik <= 4.3.5 versions.)
+ TODO: check
+CVE-2026-96344 (Custom role PHP Object Injection in eCommerce Product Catalog <= 3.6.0 ...)
+ TODO: check
+CVE-2026-96343 (Custom role PHP Object Injection in WP ERP <= 1.17.9 versions.)
+ TODO: check
+CVE-2026-96342 (Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappnin ...)
+ TODO: check
+CVE-2026-96338 (Subscriber Cross Site Scripting (XSS) in Profile Builder <= 4.0.2 vers ...)
+ TODO: check
+CVE-2026-95616 (An integer overflow in WSS4J's DER bounds check lets an oversized allo ...)
+ TODO: check
+CVE-2026-95587 (Unauthenticated Broken Access Control in Hostinger Migrator <= 1.0 ver ...)
+ TODO: check
+CVE-2026-95531 (Subscriber PHP Object Injection in Conversational Forms for ChatBot <= ...)
+ TODO: check
+CVE-2026-94683 (Contributor PHP Object Injection in DesignSetGo <= 2.8.0 versions.)
+ TODO: check
+CVE-2026-94681 (Unauthenticated Denial of Service Attack in WP Store Locator < 3.0.0 v ...)
+ TODO: check
+CVE-2026-94678 (Contributor PHP Object Injection in Go Live Update Urls <= 7.0.8 versi ...)
+ TODO: check
+CVE-2026-94677 (Shop manager PHP Object Injection in Kadence WooCommerce Email Designe ...)
+ TODO: check
+CVE-2026-94674 (Contributor Cross Site Scripting (XSS) in Pixel Manager for WooCommerc ...)
+ TODO: check
+CVE-2026-94673 (Unauthenticated Insecure Direct Object References (IDOR) in Simply Sch ...)
+ TODO: check
+CVE-2026-94672 (Contributor Insecure Direct Object References (IDOR) in Safe SVG <= 2. ...)
+ TODO: check
+CVE-2026-94545 (Satori is a library to convert HTML and CSS to SVG. Starting in versio ...)
+ TODO: check
+CVE-2026-94499 (Subscriber Broken Access Control in FormGent <= 1.12.2 versions.)
+ TODO: check
+CVE-2026-94389 (Unauthenticated Remote Code Execution (RCE) in AcyMailing SMTP Newslet ...)
+ TODO: check
+CVE-2026-94178 (Subscriber Privilege Escalation in Import and export users and custome ...)
+ TODO: check
+CVE-2026-94177 (Unauthenticated SQL Injection in GamiPress <= 8.0.2 versions.)
+ TODO: check
+CVE-2026-94173 (Contributor Insecure Direct Object References (IDOR) in Business Direc ...)
+ TODO: check
+CVE-2026-94171 (Unauthenticated Cross Site Scripting (XSS) in CURCY <= 2.2.16 versions ...)
+ TODO: check
+CVE-2026-94123 (Unauthenticated Arbitrary File Download in NextGEN Gallery <= 4.5.0 ve ...)
+ TODO: check
+CVE-2026-94122 (Editor PHP Object Injection in Responsive Slider Gallery <= 1.5.5 ver ...)
+ TODO: check
+CVE-2026-94121 (Contributor PHP Object Injection in 10Web Booster \u2013 Website speed ...)
+ TODO: check
+CVE-2026-94120 (Unauthenticated Broken Access Control in GravityExport Lite for Gravit ...)
+ TODO: check
+CVE-2026-94115 (Contributor SQL Injection in Easy Pricing Tables <= 4.1.2 versions.)
+ TODO: check
+CVE-2026-94082 (Author SQL Injection in Quiz Cat <= 3.1.1 versions.)
+ TODO: check
+CVE-2026-94081 (Unauthenticated Cross Site Scripting (XSS) in WordPress Persistent Log ...)
+ TODO: check
+CVE-2026-94078 (Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.3.1 ve ...)
+ TODO: check
+CVE-2026-94077 (Contributor Cross Site Scripting (XSS) in Safe SVG <= 2.5.0 versions.)
+ TODO: check
+CVE-2026-94076 (Contributor PHP Object Injection in SEO Plugin by Squirrly SEO <= 14.2 ...)
+ TODO: check
+CVE-2026-94074 (Unauthenticated Broken Access Control in Simply Schedule Appointments ...)
+ TODO: check
+CVE-2026-93908 (The Real Estate Manager \u2013 Property Listing and Agent Management p ...)
+ TODO: check
+CVE-2026-93903 (LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal r ...)
+ TODO: check
+CVE-2026-93771 (Shop manager PHP Object Injection in Cost of Goods for WooCommerce <= ...)
+ TODO: check
+CVE-2026-93770 (Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.1 ...)
+ TODO: check
+CVE-2026-93651 (Author PHP Object Injection in Minimum and Maximum Quantity for WooCom ...)
+ TODO: check
+CVE-2026-93624 (Shop manager PHP Object Injection in Music Player for WooCommerce <= 1 ...)
+ TODO: check
+CVE-2026-93621 (Unauthenticated SQL Injection in WP Data Access <= 5.5.84 versions.)
+ TODO: check
+CVE-2026-93547 (A missing authorization check in the Vaadin Spreadsheet component allo ...)
+ TODO: check
+CVE-2026-93514 (Unauthenticated Cross Site Scripting (XSS) in Notification for Telegra ...)
+ TODO: check
+CVE-2026-93512 (Unauthenticated Cross Site Scripting (XSS) in JW Player for WordPress ...)
+ TODO: check
+CVE-2026-93464 (Stored Cross-Site Scripting via custom content descriptions vulnerabil ...)
+ TODO: check
+CVE-2026-93463 (Cross-Site Scripting via Script Validation Bypass exists in baserCMS. ...)
+ TODO: check
+CVE-2026-93462 (Missing authentication for critical function vulnerability exists in b ...)
+ TODO: check
+CVE-2026-93460 (Stored Cross-site scripting via appended strings in email form fields ...)
+ TODO: check
+CVE-2026-92899 (Apache WSS4J remembers the Nonce of each UsernameToken it accepts, so ...)
+ TODO: check
+CVE-2026-92873 (Pgpool-II contains an incorrect implementation of an authentication al ...)
+ TODO: check
+CVE-2026-92872 (Pgpool-II inserts sensitive information into log file, which may allow ...)
+ TODO: check
+CVE-2026-92871 (A NULL pointer dereference vulnerability exists in Pgpool-II, which ma ...)
+ TODO: check
+CVE-2026-92870 (A stack-based buffer overflow vulnerability exists in Pgpool-II, which ...)
+ TODO: check
+CVE-2026-92869 (An out-of-bounds write vulnerability exists in Pgpool-II, which may al ...)
+ TODO: check
+CVE-2026-92868 (An improper certificate validation vulnerability exists in Pgpool-II, ...)
+ TODO: check
+CVE-2026-92867 (An out-of-bounds write vulnerability exists in Pgpool-II , which may a ...)
+ TODO: check
+CVE-2026-92712 (The ReactPress \u2013 Create React App for WordPress plugin for WordPr ...)
+ TODO: check
+CVE-2026-92121 (In the WSS4J streaming (StAX) code, a signature reference using the WS ...)
+ TODO: check
+CVE-2026-91860 (A prototype pollution vulnerability exists in the deep merge helpers o ...)
+ TODO: check
+CVE-2026-89238 (WSS4J EncryptedHeader child confusion could promote an attacker-contro ...)
+ TODO: check
+CVE-2026-88920 (An authentication bypass in the DOM security processor in Apache WSS4J ...)
+ TODO: check
+CVE-2026-88037 (The Bold Page Builder plugin for WordPress is vulnerable to Stored Cro ...)
+ TODO: check
+CVE-2026-87830 (In the StAX streaming WS-SecurityPolicy validator, certain relative or ...)
+ TODO: check
+CVE-2026-87004 (Tugtainer is a self-hosted app for automating updates of Docker contai ...)
+ TODO: check
+CVE-2026-86778 (Observable response discrepancy vulnerability in Maksisoft Technology, ...)
+ TODO: check
+CVE-2026-85532 (Apache WSS4J accepted attacker-controlled derived-key lengths and offs ...)
+ TODO: check
+CVE-2026-82307 (Improper neutralization of special elements used in an SQL command ('S ...)
+ TODO: check
+CVE-2026-79625 (Affected products do not properly synchronize access to their monitori ...)
+ TODO: check
+CVE-2026-76992 (The CODESYS Gateway Client allocates memory based on a size field in a ...)
+ TODO: check
+CVE-2026-76570 (Joomla Extension - joomcode.com - Unauthenticated SQL injection in rea ...)
+ TODO: check
+CVE-2026-76504 (A vulnerability in the API session-based authentication management of ...)
+ TODO: check
+CVE-2026-75969 (Missing authentication for critical function vulnerability for all PTZ ...)
+ TODO: check
+CVE-2026-75098 (The Product Designer App plugin for WordPress is vulnerable to Directo ...)
+ TODO: check
+CVE-2026-74865 (sogo_yhn configures SOGo with a parameter "SOGoTrustProxyAuthenticatio ...)
+ TODO: check
+CVE-2026-74864 (sogo_yhn configures SOGo with a parameter that forces the request with ...)
+ TODO: check
+CVE-2026-6806 (The Motors \u2013 Car Dealership & Classified Listings Plugin plugin f ...)
+ TODO: check
+CVE-2026-6173 (The Bold Page Builder plugin for WordPress is vulnerable to Stored Cro ...)
+ TODO: check
+CVE-2026-6172 (The Bold Page Builder plugin for WordPress is vulnerable to Stored Cro ...)
+ TODO: check
+CVE-2026-6171 (The Bold Page Builder plugin for WordPress is vulnerable to Stored Cro ...)
+ TODO: check
+CVE-2026-6170 (The Bold Page Builder plugin for WordPress is vulnerable to Stored Cro ...)
+ TODO: check
+CVE-2026-62308 (Tugtainer is a self-hosted app for automating updates of Docker contai ...)
+ TODO: check
+CVE-2026-62146 (A trust-boundary flaw in CRI-O's sandbox state persistence allows atta ...)
+ TODO: check
+CVE-2026-62097 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-62085 (Administrator SQL Injection in WP Activity Log <= 5.6.6 versions.)
+ TODO: check
+CVE-2026-62084 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-62083 (Subscriber Other Vulnerability Type in Creator LMS <= 1.2.19 versions.)
+ TODO: check
+CVE-2026-62081 (Contributor Insecure Direct Object References (IDOR) in Flexible PDF C ...)
+ TODO: check
+CVE-2026-62080 (Contributor Cross Site Scripting (XSS) in Happy Addons for Elementor < ...)
+ TODO: check
+CVE-2026-62079 (Contributor Cross Site Scripting (XSS) in Qi Addons For Elementor <= 1 ...)
+ TODO: check
+CVE-2026-62078 (Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor ...)
+ TODO: check
+CVE-2026-55494 (Tugtainer is a self-hosted app for automating updates of Docker contai ...)
+ TODO: check
+CVE-2026-55224 (MineAdmin is a ready-to-use backend management system suitable for qui ...)
+ TODO: check
+CVE-2026-55181 (Tugtainer is a self-hosted app for automating updates of Docker contai ...)
+ TODO: check
+CVE-2026-55177 (CloudTAK is a browser-based Common Operating Picture and situational a ...)
+ TODO: check
+CVE-2026-55176 (Soft Machine is a Virtual Machine\u2013based agentic development envir ...)
+ TODO: check
+CVE-2026-55174 (UltrafastSecp256k1 is a high-performance, multi-backend secp256k1 engi ...)
+ TODO: check
+CVE-2026-55107 (Kobako is a Ruby gem that embeds a Wasm-isolated mruby interpreter ins ...)
+ TODO: check
+CVE-2026-55094 (Taskcluster is the task execution framework that supports Mozilla's co ...)
+ TODO: check
+CVE-2026-53605 (Reachy Mini ISO for Wireless contains the necessary files to build a c ...)
+ TODO: check
+CVE-2026-47604 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47603 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47602 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47601 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47600 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47599 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the op ...)
+ TODO: check
+CVE-2026-47598 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the op ...)
+ TODO: check
+CVE-2026-47597 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47596 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47595 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47594 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47593 (NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...)
+ TODO: check
+CVE-2026-47592 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47591 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47590 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47589 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47588 (NVIDIA GPU Display Driver for Linux contains a vulnerability where an ...)
+ TODO: check
+CVE-2026-47587 (NVIDIA GPU Display Driver for Linux contains a vulnerability where an ...)
+ TODO: check
+CVE-2026-47586 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47585 (NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...)
+ TODO: check
+CVE-2026-47584 (NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...)
+ TODO: check
+CVE-2026-47583 (NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...)
+ TODO: check
+CVE-2026-47582 (NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...)
+ TODO: check
+CVE-2026-47581 (NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...)
+ TODO: check
+CVE-2026-47580 (NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...)
+ TODO: check
+CVE-2026-47579 (The NVIDIA GPU Display Driver for Windows contains a vulnerability in ...)
+ TODO: check
+CVE-2026-47578 (NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...)
+ TODO: check
+CVE-2026-47577 (NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...)
+ TODO: check
+CVE-2026-47576 (NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...)
+ TODO: check
+CVE-2026-47575 (NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...)
+ TODO: check
+CVE-2026-47574 (NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability whe ...)
+ TODO: check
+CVE-2026-47573 (NVIDIA NVAPI for Windows contains a vulnerability where an attacker co ...)
+ TODO: check
+CVE-2026-47572 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47571 (NVIDIA GPU Display Driver for Windows contains a vulnerability in kern ...)
+ TODO: check
+CVE-2026-47570 (NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...)
+ TODO: check
+CVE-2026-47569 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47568 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47567 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47566 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47565 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47563 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47562 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47561 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47560 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47559 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47558 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47557 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47556 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47555 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47554 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47553 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47552 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47551 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47550 (NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...)
+ TODO: check
+CVE-2026-47549 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47548 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47547 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47546 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47545 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47544 (NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in ...)
+ TODO: check
+CVE-2026-47543 (VIDIA GPU Display Driver for Windows and Linux contains a vulnerabilit ...)
+ TODO: check
+CVE-2026-47542 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47541 (NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in ...)
+ TODO: check
+CVE-2026-47540 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47539 (NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in ...)
+ TODO: check
+CVE-2026-47538 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47537 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47536 (NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in ...)
+ TODO: check
+CVE-2026-47535 (NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in ...)
+ TODO: check
+CVE-2026-47534 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47533 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47532 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47531 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47530 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47529 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47528 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47527 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47526 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47525 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47524 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47523 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47522 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47521 (NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in ...)
+ TODO: check
+CVE-2026-47520 (NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in ...)
+ TODO: check
+CVE-2026-47519 (NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in ...)
+ TODO: check
+CVE-2026-47518 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47517 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47516 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47515 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47514 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47513 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47512 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47511 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47510 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47509 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47508 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47507 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47506 (NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...)
+ TODO: check
+CVE-2026-47505 (NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...)
+ TODO: check
+CVE-2026-47504 (NVIDIA Linux GPU Display Driver contains a vulnerability in the NGX up ...)
+ TODO: check
+CVE-2026-47503 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the Vi ...)
+ TODO: check
+CVE-2026-47502 (NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulne ...)
+ TODO: check
+CVE-2026-47501 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47500 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47499 (NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulne ...)
+ TODO: check
+CVE-2026-47498 (NVIDIA vGPU Manager contains a vulnerability in the GPU System Process ...)
+ TODO: check
+CVE-2026-47497 (NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System ...)
+ TODO: check
+CVE-2026-47496 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the Vi ...)
+ TODO: check
+CVE-2026-47495 (NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulne ...)
+ TODO: check
+CVE-2026-47494 (NVIDIA GPU Display Driver for Linux contains a vulnerability where a u ...)
+ TODO: check
+CVE-2026-47493 (NVIDIA vGPU software for Windows and Linux contains a vulnerability in ...)
+ TODO: check
+CVE-2026-47492 (NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...)
+ TODO: check
+CVE-2026-47491 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47489 (NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...)
+ TODO: check
+CVE-2026-47097 (AJA HELO Plus firmware before 2.1.7 contains an information disclosure ...)
+ TODO: check
+CVE-2026-46711 (Soft Machine is a Virtual Machine\u2013based agentic development envir ...)
+ TODO: check
+CVE-2026-27371 (Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 vers ...)
+ TODO: check
+CVE-2026-27085 (Shop manager Content Injection in Astra WordPress Theme <= 4.13.12 ver ...)
+ TODO: check
+CVE-2026-19553 (ssl.SSLContext.wrap_bio() didn't require the server_hostname argument ...)
+ TODO: check
+CVE-2026-18783 (Missing authentication for critical function vulnerability in Trex Dig ...)
+ TODO: check
+CVE-2026-18782 (Improper neutralization of special elements used in an SQL command ('S ...)
+ TODO: check
+CVE-2026-16596 (The WP Directory Kit plugin for WordPress is vulnerable to generic SQL ...)
+ TODO: check
+CVE-2026-14876 (The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross- ...)
+ TODO: check
+CVE-2026-13720 (An Editor can set file-provisioning metadata (the grafana.app/managedB ...)
+ TODO: check
+CVE-2026-13719 (An authenticated user can list alert rules stored in folders they are ...)
+ TODO: check
+CVE-2026-11895 (The HT Mega Addons for Elementor \u2013 Elementor Widgets & Template B ...)
+ TODO: check
+CVE-2026-10764 (Information disclosure in BVMS 4.5 up to 12.3 including allows man-in- ...)
+ TODO: check
+CVE-2026-10739 (Cato Networks SDP Client for Windows before 6.12.6 allows a local user ...)
+ TODO: check
+CVE-2026-10726 (Cato Windows SDP Client before version 6.12.6 contains an arbitrary fi ...)
+ TODO: check
+CVE-2026-103500 (An attacker could cause a heap buffer overflow by getting a user to op ...)
+ TODO: check
+CVE-2026-103476 (yii2-starter-kit through 4.2.0 fails to validate article publication s ...)
+ TODO: check
+CVE-2026-103475 (yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules t ...)
+ TODO: check
+CVE-2026-103474 (yii2-starter-kit through 4.2.0 fails to validate file types in the bac ...)
+ TODO: check
+CVE-2026-103473 (Deno versions 2.7.0 through 2.9.7 on Windows contain a command injecti ...)
+ TODO: check
+CVE-2026-103472 (restbed through 5.0.0 accepts WebSocket frames with declared payload l ...)
+ TODO: check
+CVE-2026-103471 (restbed through 5.0.0 buffers HTTP request headers without enforcing a ...)
+ TODO: check
+CVE-2026-103470 (In Internet2 Grouper before 7.5.1 (in some configurations), a user who ...)
+ TODO: check
+CVE-2026-103446 (Authorization bypass through User-Controlled key vulnerability in The ...)
+ TODO: check
+CVE-2026-103445 (Improper neutralization of Script-Related HTML tags in a web page (bas ...)
+ TODO: check
+CVE-2026-103444 (Improper neutralization of Script-Related HTML tags in a web page (bas ...)
+ TODO: check
+CVE-2026-103443 (Improper neutralization of Script-Related HTML tags in a web page (bas ...)
+ TODO: check
+CVE-2026-103442 (External control of system or configuration setting vulnerability in T ...)
+ TODO: check
+CVE-2026-103441 (Deserialization of untrusted data vulnerability in The Wikimedia Found ...)
+ TODO: check
+CVE-2026-103440 (Exposure of sensitive information through data queries vulnerability i ...)
+ TODO: check
+CVE-2026-103439 (Improper neutralization of Script-Related HTML tags in a web page (bas ...)
+ TODO: check
+CVE-2026-103438 (Improper neutralization of Script-Related HTML tags in a web page (bas ...)
+ TODO: check
+CVE-2026-103437 (Improper neutralization of Script-Related HTML tags in a web page (bas ...)
+ TODO: check
+CVE-2026-103436 (apcupsd through 3.14.14 discloses uninitialized stack memory in getups ...)
+ TODO: check
+CVE-2026-103432 (apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in g ...)
+ TODO: check
+CVE-2026-103399 (A flaw was found in SoupServer (libsoup). When an HTTP/1.x client send ...)
+ TODO: check
+CVE-2026-103398 (OpenSave through 2.4.0 fails to properly validate save paths supplied ...)
+ TODO: check
+CVE-2026-103397 (OpenSave before 2.4.0-beta.1 fails to validate sender identity in WAN ...)
+ TODO: check
+CVE-2026-103396 (bbs-go through 4.4.6 contains a permission bypass vulnerability in the ...)
+ TODO: check
+CVE-2026-103395 (LightLLM through 1.2.0 visual_only deployments expose an unauthenticat ...)
+ TODO: check
+CVE-2026-103389 (MISP contains a stored cross-site scripting (XSS) vulnerability in the ...)
+ TODO: check
+CVE-2026-103388 (MISP renders the source field of a Galaxy Cluster as a clickable hyper ...)
+ TODO: check
+CVE-2026-103321 (MISP contains a stored cross-site script (XSS) vulnerability in the ev ...)
+ TODO: check
+CVE-2026-103270 (LightLLM through 1.2.0 mounts reinforcement learning control routes on ...)
+ TODO: check
+CVE-2026-103243 (LightLLM through 1.2.0 fails to validate image_url and audio_url param ...)
+ TODO: check
+CVE-2026-103242 (A heap-based buffer overflow flaw was found in rpm. RPMTAG_FILESIGNATU ...)
+ TODO: check
+CVE-2026-103241 (A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerab ...)
+ TODO: check
+CVE-2026-103239 (MISP contains a privilege escalation vulnerability in the tag collecti ...)
+ TODO: check
+CVE-2026-103237 (MISP contains an improper input validation vulnerability in its ORM sa ...)
+ TODO: check
+CVE-2026-103235 (MISP contains a mass assignment vulnerability in the event delegation ...)
+ TODO: check
+CVE-2026-103233 (A security vulnerability has been detected in AdithyaYelloju Restauran ...)
+ TODO: check
+CVE-2026-103232 (A weakness has been identified in AdithyaYelloju Restaurant-Management ...)
+ TODO: check
+CVE-2026-103231 (A vulnerability was identified in AdithyaYelloju Restaurant-Management ...)
+ TODO: check
+CVE-2026-103230 (A vulnerability was determined in AdithyaYelloju Restaurant-Management ...)
+ TODO: check
+CVE-2026-103229 (A vulnerability was found in AdithyaYelloju Restaurant-Management-Syst ...)
+ TODO: check
+CVE-2026-103227 (A weakness has been identified in GPAC up to 26.07.0. Affected by this ...)
+ TODO: check
+CVE-2026-103226 (A vulnerability was identified in Artifex Ghostscript up to 10.09.0. A ...)
+ TODO: check
+CVE-2026-103222 (A vulnerability was determined in Blosc C-Blosc2 up to 3.3.2. This imp ...)
+ TODO: check
+CVE-2026-103118 (A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected ...)
+ TODO: check
+CVE-2026-103117 (A security vulnerability has been detected in OS4ED openSIS-Classic up ...)
+ TODO: check
+CVE-2026-103116 (A weakness has been identified in OS4ED openSIS-Classic up to 9.3. Thi ...)
+ TODO: check
+CVE-2026-103115 (A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3 ...)
+ TODO: check
+CVE-2026-103114 (A vulnerability was identified in OS4ED openSIS-Classic up to 9.3. The ...)
+ TODO: check
+CVE-2026-103113 (A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The ...)
+ TODO: check
+CVE-2026-103012 (Claude Code selected an API key stored by Claude Code, for example fro ...)
+ TODO: check
+CVE-2026-102984 (Astro is a web framework for content-driven websites. Prior to 11.1.3, ...)
+ TODO: check
+CVE-2026-102983 (Astro is a web framework for content-driven websites. From 5.2.0 until ...)
+ TODO: check
+CVE-2026-102717 (MQTT WebSocket setter ABI mismatch may disclose memory or cause a cras ...)
+ TODO: check
+CVE-2026-102588 (A flaw was found in Moodle. The XML grade import feature lacks proper ...)
+ TODO: check
+CVE-2026-102587 (A flaw was found in Moodle. User list filters do not properly enforce ...)
+ TODO: check
+CVE-2026-102586 (A flaw was found in Moodle. Insufficient sanitization of username inpu ...)
+ TODO: check
+CVE-2026-102585 (A flaw was found in Moodle. When enrolling a user into a course while ...)
+ TODO: check
+CVE-2026-102584 (A flaw was found in Moodle. Due to a missing capability check, a low-p ...)
+ TODO: check
+CVE-2026-102583 (A flaw was found in Moodle. An incorrect capability check in the artif ...)
+ TODO: check
+CVE-2026-102582 (A flaw was found in Moodle. The manual enrolment management page did n ...)
+ TODO: check
+CVE-2026-102581 (A flaw was found in Moodle. Insufficient output escaping in templates ...)
+ TODO: check
+CVE-2026-102580 (A flaw was found in Moodle. An authenticated attacker can supply an im ...)
+ TODO: check
+CVE-2026-102579 (A flaw was found in Moodle. An incorrect capability check in the grade ...)
+ TODO: check
+CVE-2026-102578 (A flaw was found in Moodle. An authenticated attacker with access to t ...)
+ TODO: check
+CVE-2026-102577 (A flaw was found in Moodle. Incorrect handling of IPv4-mapped IPv6 add ...)
+ TODO: check
+CVE-2026-102511 (Improper Verification of Source of a Communication Channel in the ADS ...)
+ TODO: check
+CVE-2026-102510 (Integer Overflow, Improper Validation of Array Index, Uncontrolled Rec ...)
+ TODO: check
+CVE-2026-102509 (Memory Allocation with Excessive Size Value, Allocation of Resources W ...)
+ TODO: check
+CVE-2026-102508 (Improper Verification of Cryptographic Signature and Improper Certific ...)
+ TODO: check
+CVE-2026-102490 (All versions of Zammad including the latest alpha enable the local zam ...)
+ TODO: check
+CVE-2026-102489 (Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnera ...)
+ TODO: check
+CVE-2026-102459 (EasyFlow .NET developed by Digiwin has a Reflected Cross-site Scriptin ...)
+ TODO: check
+CVE-2026-102458 (EasyFlow .NET developed by Digiwin has a Missing Authentication vulner ...)
+ TODO: check
+CVE-2026-102457 (EasyFlow .NET developed by Digiwin has an Arbitrary File Read vulnerab ...)
+ TODO: check
+CVE-2026-102456 (EasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. ...)
+ TODO: check
+CVE-2026-102455 (EasyFlow .NET developed by Digiwin has a Insecure Deserialization vuln ...)
+ TODO: check
+CVE-2026-102454 (EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulner ...)
+ TODO: check
+CVE-2026-102427 (Joomla Extension - ordasoft.com - Unauthenticated Remote Code Executio ...)
+ TODO: check
+CVE-2026-102399 (Unauthenticated Cross Site Request Forgery (CSRF) in Photo Gallery by ...)
+ TODO: check
+CVE-2026-102398 (Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1. ...)
+ TODO: check
+CVE-2026-102397 (Unauthenticated Broken Access Control in Ultimate Maps by Supsystic <= ...)
+ TODO: check
+CVE-2026-102396 (Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsyst ...)
+ TODO: check
+CVE-2026-102395 (Unauthenticated Cross Site Scripting (XSS) in Easy Google Maps <= 1.14 ...)
+ TODO: check
+CVE-2026-102392 (Shop manager PHP Object Injection in Extra Product Options For WooComm ...)
+ TODO: check
+CVE-2026-102391 (Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5. ...)
+ TODO: check
+CVE-2026-102386 (Subscriber Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02 ...)
+ TODO: check
+CVE-2026-102385 (Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 ve ...)
+ TODO: check
+CVE-2026-102384 (Author Cross Site Scripting (XSS) in Supreme Modules Lite <= 2.5.63 ve ...)
+ TODO: check
+CVE-2026-102377 (Contributor PHP Object Injection in Photo Gallery by 10Web <= 1.8.46 v ...)
+ TODO: check
+CVE-2026-102376 (Subscriber Cross Site Scripting (XSS) in Branda <= 3.4.32 versions.)
+ TODO: check
+CVE-2026-102375 (Subscriber Broken Access Control in Optimole <= 4.2.14 versions.)
+ TODO: check
+CVE-2026-101295 (Path traversal / arbitrary file write in oc-mirror's operator catalog ...)
+ TODO: check
+CVE-2026-100513 (Contributor Cross Site Scripting (XSS) in CF7 Views – Complete E ...)
+ TODO: check
+CVE-2026-100512 (Contributor PHP Object Injection in Nested Pages <= 3.3.2 versions.)
+ TODO: check
+CVE-2026-100510 (Unauthenticated Cross Site Scripting (XSS) in Post and Page Builder by ...)
+ TODO: check
+CVE-2026-100508 (Unauthenticated Denial of Service Attack in Two Factor <= 0.16.0 versi ...)
+ TODO: check
+CVE-2026-100507 (Unauthenticated Cross Site Scripting (XSS) in If-So Dynamic Content Pe ...)
+ TODO: check
+CVE-2026-100280 (In JetBrains YouTrack before 2026.2.19197 creating a project from an u ...)
+ TODO: check
+CVE-2026-100279 (In JetBrains YouTrack before 2026.2.19197 changing an integration URL ...)
+ TODO: check
+CVE-2026-100278 (In JetBrains YouTrack before 2026.2.19197 users with restricted permis ...)
+ TODO: check
+CVE-2026-100277 (In JetBrains YouTrack before 2026.2.19197 account takeover was possibl ...)
+ TODO: check
+CVE-2026-100276 (In JetBrains YouTrack before 2026.2.19197 guest users could remove a w ...)
+ TODO: check
+CVE-2026-100275 (In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow e ...)
+ TODO: check
+CVE-2026-100274 (In JetBrains YouTrack before 2026.2.19197 project Admin could trigger ...)
+ TODO: check
+CVE-2026-100273 (In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the ...)
+ TODO: check
+CVE-2026-100272 (In JetBrains YouTrack before 2026.2.19197 missing authorisation in the ...)
+ TODO: check
+CVE-2026-100271 (In JetBrains YouTrack before 2026.2.19197 missing authorisation on sev ...)
+ TODO: check
+CVE-2026-100270 (In JetBrains YouTrack before 2026.2.19197 low-level Admin Read permiss ...)
+ TODO: check
+CVE-2026-100269 (In JetBrains YouTrack before 2026.2.19197 helpdesk project's Authorize ...)
+ TODO: check
+CVE-2026-100268 (In JetBrains YouTrack before 2026.2.19197 project administrators could ...)
+ TODO: check
+CVE-2026-100267 (In JetBrains YouTrack before 2026.2.19197 reDoS attack was possible vi ...)
+ TODO: check
+CVE-2026-100266 (In JetBrains Hub before 2026.2.52366 missing authorisation allowed aut ...)
+ TODO: check
+CVE-2026-100265 (In JetBrains Rider before 2026.2.1 aI Assistant could auto-update thir ...)
+ TODO: check
+CVE-2026-100264 (In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentia ...)
+ TODO: check
+CVE-2026-100263 (In JetBrains YouTrack before 2026.2.18991 stored HTML injection via th ...)
+ TODO: check
+CVE-2026-100262 (In JetBrains YouTrack before 2026.2.18991 missing authorisation allowe ...)
+ TODO: check
+CVE-2026-100261 (In JetBrains YouTrack before 2026.2.18991 changing article visibility ...)
+ TODO: check
+CVE-2026-100260 (In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed ...)
+ TODO: check
+CVE-2026-100259 (In JetBrains YouTrack before 2026.2.18991 improper access control on G ...)
+ TODO: check
+CVE-2026-100258 (In JetBrains YouTrack before 2026.2.18991 missing authorisation allowe ...)
+ TODO: check
+CVE-2026-100257 (In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML inject ...)
+ TODO: check
+CVE-2026-100256 (In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search s ...)
+ TODO: check
+CVE-2026-100255 (In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrat ...)
+ TODO: check
+CVE-2026-100254 (In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticat ...)
+ TODO: check
+CVE-2026-100253 (In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox esc ...)
+ TODO: check
+CVE-2025-14564 (The Viable URL Media Uploader plugin for WordPress is vulnerable to St ...)
+ TODO: check
+CVE-2026-19445 (A remote, unauthenticated TLS client can make a server crash or call t ...)
- python3.15 <unfixed>
- python3.14 <unfixed>
- python3.13 <unfixed>
@@ -10,7 +886,7 @@ CVE-2026-19445
NOTE: https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698 (3.14 branch)
NOTE: https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c (3.13 branch)
NOTE: https://github.com/python/cpython/pull/158523 (3.11)
-CVE-2026-80490
+CVE-2026-80490 (Algorithm::AhoCorasick::XS versions through 0.04 for Perl read the hay ...)
NOT-FOR-US: Algorithm::AhoCorasick::XS Perl module
CVE-2026-74246
NOT-FOR-US: Red Hat Quay
@@ -340,6 +1216,7 @@ CVE-2026-102877 (Fider before 0.38.0 contains a server-side request forgery vuln
CVE-2026-102876 (SurrealDB before 3.3.0 contains an authorization bypass in HTTP sessio ...)
NOT-FOR-US: SurrealDB
CVE-2026-102875 (VLC media player before 3.0.24 contains a path traversal vulnerability ...)
+ {DSA-6515-1}
- vlc 3.0.24-1
NOTE: https://code.videolan.org/videolan/vlc/-/commit/59934edbd03c6c1147d75d6c91e96633b710ec31 (3.0.24-rc1)
NOTE: https://code.videolan.org/videolan/vlc/-/commit/8d43e99c2c01d9aab3ecad00e7a102806262b06b (3.0.24-rc1)
@@ -485,28 +1362,28 @@ CVE-2026-102314 (UI misrepresentation in TabStrip in Google Chrome prior to 154.
- chromium 154.0.8037.92-1
CVE-2026-102305 (UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154 ...)
- chromium 154.0.8037.92-1
-CVE-2026-94053
+CVE-2026-94053 (Authentication bypass via LDAP injection in component sshd-ldap in Apa ...)
- libmina-sshd-java <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/09/29/39
-CVE-2026-94052
+CVE-2026-94052 (A missing check in LdapPasswordAuthenticator in component sshd-ldap in ...)
- libmina-sshd-java <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/09/29/38
-CVE-2026-94029
+CVE-2026-94029 (Server-side memory exhaustion in Apache MINA SSHD 1.0.0 to 2.19.0 and ...)
- libmina-sshd-java <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/09/29/37
-CVE-2026-94002
+CVE-2026-94002 (Possible memory exhaustion in SFTP clients (DefaultSftpClient) in comp ...)
- libmina-sshd-java <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/09/29/36
-CVE-2026-93996
+CVE-2026-93996 (Uncontrolled resource consumption in component ssd-scp in Apache MINA ...)
- libmina-sshd-java <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/09/29/35
-CVE-2026-93995
+CVE-2026-93995 (Improper input validation in sshd-git in Apache MINA SSHD, versions up ...)
- libmina-sshd-java <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/09/29/34
-CVE-2026-93994
+CVE-2026-93994 (Apache MINA SSHD is a Java library for client-side and server-side SSH ...)
- libmina-sshd-java <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/09/29/33
-CVE-2026-77185
+CVE-2026-77185 (Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 ...)
- libmina-sshd-java <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/09/29/32
CVE-2026-98164 (In the Linux kernel, the following vulnerability has been resolved: K ...)
@@ -989,26 +1866,31 @@ CVE-2022-51019 (Akaunting before 2.1.31 contains an OS command injection vulnera
CVE-2015-20122 (Seeyon A6 collaborative office automation platform contains an unauthe ...)
NOT-FOR-US: Seeyon
CVE-2026-100756 (Incorrect boundary conditions in the Audio/Video: Playback component. ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100756
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100756
CVE-2026-100757 (Use-after-free in the Widget component. This vulnerability was fixed i ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100757
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100757
CVE-2026-100758 (Sandbox escape in the DOM: Navigation component. This vulnerability wa ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100758
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100758
CVE-2026-100759 (Uninitialized memory in the Storage: Quota Manager component. This vul ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100759
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100759
CVE-2026-100760 (Sandbox escape in the Security: Process Sandboxing component. This vul ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100760
@@ -1017,6 +1899,7 @@ CVE-2026-100761 (Privilege escalation due to use-after-free in the Graphics: Web
- firefox 157.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100761
CVE-2026-100762 (Sandbox escape due to use-after-free in the DOM: Content Processes com ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100762
@@ -1028,16 +1911,19 @@ CVE-2026-100764 (Privilege escalation due to incorrect boundary conditions in th
- firefox 157.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100764
CVE-2026-100765 (Use-after-free in the JavaScript: WebAssembly component. This vulnerab ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100765
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100765
CVE-2026-100766 (Information disclosure in the Networking: JAR component. This vulnerab ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100766
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100766
CVE-2026-100767 (Use-after-free in the Networking: Cache component. This vulnerability ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100767
@@ -1046,121 +1932,145 @@ CVE-2026-100768 (Use-after-free in the Graphics: WebGPU component. This vulnerab
- firefox 157.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100768
CVE-2026-100769 (Use-after-free in the JavaScript: WebAssembly component. This vulnerab ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100769
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100769
CVE-2026-100770 (Sandbox escape due to use-after-free in the DOM: Content Processes com ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100770
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100770
CVE-2026-100771 (Undefined behavior in the DOM: Streams component. This vulnerability w ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100771
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100771
CVE-2026-100772 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100772
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100772
CVE-2026-100773 (Use-after-free in the Storage: IndexedDB component. This vulnerability ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100773
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100773
CVE-2026-100774 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100774
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100774
CVE-2026-100775 (Sandbox escape in the Graphics component. This vulnerability was fixed ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100775
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100775
CVE-2026-100776 (Use-after-free in the JavaScript: WebAssembly component. This vulnerab ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100776
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100776
CVE-2026-100777 (Use-after-free in the Graphics: Canvas2D component. This vulnerability ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100777
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100777
CVE-2026-100778 (Sandbox escape due to use-after-free in the DOM: Core & HTML component ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100778
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100778
CVE-2026-100779 (Use-after-free in the XSLT component. This vulnerability was fixed in ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100779
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100779
CVE-2026-100780 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100780
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100780
CVE-2026-100781 (Sandbox escape due to incorrect boundary conditions in the Graphics: W ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100781
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100781
CVE-2026-100782 (Privilege escalation due to incorrect boundary conditions in the Graph ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100782
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100782
CVE-2026-100783 (Uninitialized memory in the Audio/Video component. This vulnerability ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100783
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100783
CVE-2026-100784 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100784
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100784
CVE-2026-100785 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100785
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100785
CVE-2026-100786 (Sandbox escape due to use-after-free in the Graphics component. This v ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100786
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100786
CVE-2026-100787 (Sandbox escape in the XUL component. This vulnerability was fixed in F ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100787
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100787
CVE-2026-100788 (Invalid pointer in the JavaScript: WebAssembly component. This vulnera ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100788
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100788
CVE-2026-100789 (Use-after-free in the Graphics: Canvas2D component. This vulnerability ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100789
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100789
CVE-2026-100790 (Use-after-free in the XSLT component. This vulnerability was fixed in ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100790
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100790
CVE-2026-100791 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100791
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100791
CVE-2026-100792 (JIT miscompilation in the JavaScript: WebAssembly component. This vuln ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100792
@@ -1169,11 +2079,13 @@ CVE-2026-100793 (JIT miscompilation in the JavaScript Engine component. This vul
- firefox 157.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100793
CVE-2026-100794 (Sandbox escape due to incorrect boundary conditions in the Internation ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100794
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100794
CVE-2026-96869 (Information disclosure in the Networking component. This vulnerability ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-96869
@@ -1185,11 +2097,13 @@ CVE-2026-100796 (Use-after-free in the JavaScript: WebAssembly component. This v
- firefox 157.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100796
CVE-2026-100797 (Privilege escalation due to use-after-free in the Graphics: WebRender ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100797
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100797
CVE-2026-100798 (Cryptography misuse in Storage: Quota Manager component. This vulnerab ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100798
@@ -1198,11 +2112,13 @@ CVE-2026-100799 (Uninitialized memory in the Graphics: WebGPU component. This vu
- firefox 157.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100799
CVE-2026-100800 (Sandbox escape due to use-after-free in the Disability Access APIs com ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100800
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100800
CVE-2026-100801 (Privilege escalation in the DLL Services component. This vulnerability ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100801
@@ -1211,6 +2127,7 @@ CVE-2026-100802 (Uninitialized memory in the Graphics: WebGPU component. This vu
- firefox 157.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100802
CVE-2026-100803 (Same-origin policy bypass in the WebExtensions component. This vulnera ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100803
@@ -1222,21 +2139,25 @@ CVE-2026-100805 (Race condition, use-after-free in the Audio/Video component. Th
- firefox 157.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100805
CVE-2026-100806 (Uninitialized memory in the Graphics: WebGPU component. This vulnerabi ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100806
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100806
CVE-2026-100807 (Privilege escalation in the DOM: Service Workers component. This vulne ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100807
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100807
CVE-2026-100808 (Mitigation bypass in the DOM: Service Workers component. This vulnerab ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100808
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100808
CVE-2026-100809 (Same-origin policy bypass in the DevTools component. This vulnerabilit ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100809
@@ -1245,11 +2166,13 @@ CVE-2026-100810 (Other issue in the DevTools component. This vulnerability was f
- firefox 157.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100810
CVE-2026-100811 (Sandbox escape due to use-after-free in the DOM: Core & HTML component ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100811
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100811
CVE-2026-100812 (Denial-of-service in the Graphics component. This vulnerability was fi ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100812
@@ -1258,16 +2181,19 @@ CVE-2026-100813 (Invalid pointer in the JavaScript Engine: JIT component. This v
- firefox 157.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100813
CVE-2026-100814 (Incorrect boundary conditions in the JavaScript Engine: JIT component. ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100814
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100814
CVE-2026-100815 (Use-after-free in the CSS Parsing and Computation component. This vuln ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100815
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100815
CVE-2026-100816 (Site isolation issue in the DOM: Networking component. This vulnerabil ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100816
@@ -1276,26 +2202,31 @@ CVE-2026-100817 (Other issue in the JavaScript: WebAssembly component. This vuln
- firefox 157.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100817
CVE-2026-100818 (Sandbox escape due to use-after-free in the Widget: Gtk component. Thi ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100818
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100818
CVE-2026-100819 (Sandbox escape due to incorrect boundary conditions in the XPCOM compo ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100819
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100819
CVE-2026-100820 (Privilege escalation in the Address Bar component. This vulnerability ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100820
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100820
CVE-2026-100821 (Site isolation issue in the Panning and Zooming component. This vulner ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100821
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100821
CVE-2026-100822 (Spoofing issue in the Networking: HTTP component. This vulnerability w ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100822
@@ -1304,41 +2235,49 @@ CVE-2026-100823 (Spoofing issue in the Downloads component in Firefox for Androi
- firefox <not-affected> (Only affects Firefox on Android)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100823
CVE-2026-100824 (Privilege escalation in the Places component. This vulnerability was f ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100824
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100824
CVE-2026-100825 (Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100825
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100825
CVE-2026-100826 (Denial-of-service in the Storage: StorageManager component. This vulne ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100826
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100826
CVE-2026-100828 (Mitigation bypass in the Bookmarks & History component. This vulnerabi ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100828
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100828
CVE-2026-100829 (Mitigation bypass in the DOM: Security component. This vulnerability w ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100829
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100829
CVE-2026-100830 (Mitigation bypass in the DOM: Navigation component. This vulnerability ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100830
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100830
CVE-2026-100831 (Use-after-free in the DOM: UI Events & Focus Handling component. This ...)
+ {DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100831
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100831
CVE-2026-100832 (Use-after-free in the Graphics: Canvas2D component. This vulnerability ...)
+ {DSA-6533-1}
- firefox-esr 153.4.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100832
CVE-2026-84782 (Issue summary: The DTLS retransmission logic does not correctly handle ...)
@@ -1510,7 +2449,7 @@ CVE-2026-102374 (GestSup versions before 3.2.62 contain a stored cross-site scri
NOT-FOR-US: GestSup
CVE-2026-102373 (GestSup versions before 3.2.62 fail to validate ticket ownership when ...)
NOT-FOR-US: GestSup
-CVE-2026-102372 (GestSup versions before 3.2.62 fail to properly sanitize HTML email bo ...)
+CVE-2026-102372 (GestSup versions before 3.2.61 fail to properly sanitize HTML email bo ...)
NOT-FOR-US: GestSup
CVE-2026-102367 (mall4j through 4.0 contains an insufficient session expiration vulnera ...)
NOT-FOR-US: mall4jmall4j
@@ -3482,7 +4421,7 @@ CVE-2026-100391 (MediaFlow Proxy through 2.4.9 contains a server-side request fo
NOT-FOR-US: MediaFlow Proxy
CVE-2026-100390 (Zoraxy versions 3.2.3 through 3.3.4 fail to properly parse IPv6 addres ...)
NOT-FOR-US: Zoraxy
-CVE-2026-100389 (GestSup versions before 3.2.61 contain a remote code execution vulnera ...)
+CVE-2026-100389 (GestSup versions before 3.2.62 contain a remote code execution vulnera ...)
NOT-FOR-US: GestSup
CVE-2026-100388 (RustDesk versions before 1.5.0 fail to properly validate file transfer ...)
NOT-FOR-US: RustDesk
@@ -10307,7 +11246,8 @@ CVE-2026-16778 (The Live Composer \u2013 Free WordPress Website Builder plugin f
NOT-FOR-US: WordPress plugin
CVE-2026-15095 (The Product Feed Manager for WooCommerce \u2013 CTX Feed \u2013 Suppor ...)
NOT-FOR-US: WordPress plugin
-CVE-2026-13087 (A heap out-of-bounds write vulnerability was found in the Linux kernel ...)
+CVE-2026-13087
+ REJECTED
NOTE: Red Hat CNA contacted, confirmed duplicate of CVE-2026-89530 and will be rejected soon
CVE-2026-12995 (The Custom Field Template plugin for WordPress is vulnerable to Insecu ...)
NOT-FOR-US: WordPress plugin
@@ -11658,6 +12598,7 @@ CVE-2026-76790 (The Estatik Real Estate Plugin WordPress plugin before 4.3.5 doe
CVE-2026-76554 (The WP Import Export Lite WordPress plugin before 3.9.35 does not veri ...)
NOT-FOR-US: WordPress plugin
CVE-2026-75895 (In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was foun ...)
+ {DLA-4804-1}
- libsmpp34 1.14.6-1 (bug #1148557)
[trixie] - libsmpp34 <no-dsa> (Minor issue)
NOTE: https://cgit.osmocom.org/libsmpp34/commit/?id=af0e2912057551dab97bbe26e6a41f18a75f3bbb (1.14.6)
@@ -23982,7 +24923,7 @@ CVE-2023-32803 (The ca-certificates package before ca-certificates-2021.2.50-72
CVE-2023-32778 (An issue was discovered in ILIAS 6.23, 7 before 7.22, and 8.1. An atta ...)
NOT-FOR-US: ILIAS
CVE-2026-90783 (MKVToolNix through 101.0 contains a heap buffer overflow in the bundle ...)
- {DSA-6502-1}
+ {DSA-6502-1 DLA-4805-1}
- mkvtoolnix 101.0-2 (bug #1147621)
NOTE: Fixed by: https://codeberg.org/mbunkus/mkvtoolnix/commit/1495126138e086080f0163bee27fafbdf956a1d0
NOTE: Fixed by: https://codeberg.org/mbunkus/mkvtoolnix/commit/13fd81db3ae2b79d41536a9663719df11780797e
@@ -55195,7 +56136,7 @@ CVE-2026-66679 (Unauthenticated Broken Access Control in Appointment Hour Bookin
NOT-FOR-US: WordPress plugin or theme
CVE-2026-66667 (Unauthenticated Cross Site Scripting (XSS) in Templately <= 3.7.1 vers ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-66651 (Unauthenticated Broken Access Control in MultiVendorX <= 5.0.14 versio ...)
+CVE-2026-66651 (Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-wo ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-66646 (Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 vers ...)
NOT-FOR-US: WordPress plugin or theme
@@ -83674,9 +84615,9 @@ CVE-2026-65491 (Subscriber Broken Access Control in Query Wrangler <= 1.5.57 ver
NOT-FOR-US: WordPress plugin or theme
CVE-2026-65490 (Exposure of Sensitive System Information to an Unauthorized Control Sp ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-65489 (Unauthenticated Broken Access Control in LA-Studio Element Kit for Ele ...)
+CVE-2026-65489 (Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-65488 (Unauthenticated Cross Site Request Forgery (CSRF) in LA-Studio Element ...)
+CVE-2026-65488 (Cross-Site Request Forgery (CSRF) vulnerability in LA-Studio LA-Studio ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-65487 (Unauthenticated Broken Access Control in Photography <= 7.7.6 versions ...)
NOT-FOR-US: WordPress plugin or theme
@@ -101849,7 +102790,7 @@ CVE-2026-57761 (Unauthenticated Cross Site Request Forgery (CSRF) in SEOWP <= 3.
NOT-FOR-US: WordPress plugin or theme
CVE-2026-57760 (Missing Authorization vulnerability in Sendcloud Sendcloud Shipping al ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-57759 (Unauthenticated Cross Site Request Forgery (CSRF) in ProfileGrid <= 5 ...)
+CVE-2026-57759 (Cross-Site Request Forgery (CSRF) vulnerability in Metagauss ProfileGr ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-57758 (Unauthenticated Cross Site Request Forgery (CSRF) in Permalink Manager ...)
NOT-FOR-US: WordPress plugin or theme
@@ -103404,43 +104345,43 @@ CVE-2026-55223 (c3p0 is a JDBC Connection pooling library. In versions prior to
NOTE: https://github.com/swaldman/c3p0/commit/7b022c4b6694dabc6204254dc917af9c38f2cb27 (v0.14.0)
TODO: check if that is an issue with the packaged version
CVE-2026-54903 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.3-1
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-475m-ph3x-64gp
NOTE: https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 (v3.17.3)
CVE-2026-54902 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.6-2
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-m578-w5vf-rfcm
NOTE: https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 (v3.17.3)
NOTE: Followup: https://github.com/ohler55/oj/issues/1109
CVE-2026-54901 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.3-1
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-vwm4-62gf-x745
NOTE: https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 (v3.17.3)
CVE-2026-54900 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.3-1
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-9cv6-qcjw-4grx
NOTE: https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 (v3.17.3)
CVE-2026-54899 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.3-1
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-2cw7-v8ff-p88r
NOTE: https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 (v3.17.3)
CVE-2026-54898 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.3-1
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-q2gm-54r6-8fwm
NOTE: https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 (v3.17.3)
CVE-2026-54897 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.3-1
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-9ppp-w3g4-fh4q
NOTE: https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 (v3.17.3)
CVE-2026-54896 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.3-1
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-35w3-pjm6-wj95
NOTE: https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 (v3.17.3)
@@ -103456,17 +104397,17 @@ CVE-2026-54673 (electron-updater allows for automatic updates for Electron apps.
CVE-2026-54672 (electron-updater allows for automatic updates for Electron apps. Prior ...)
NOT-FOR-US: electron-updater
CVE-2026-54592 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.3-1
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-3m6q-jj5j-38c9
NOTE: https://github.com/ohler55/oj/commit/bbde91a679728f94c4492ebc3683f4fa3309049f (v3.17.3)
CVE-2026-54502 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.3-1
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-3v45-f3vh-wg7m
NOTE: https://github.com/ohler55/oj/commit/ec368dbe936ef0104b782e4b0f67b17d6c7276f7 (v3.17.3)
CVE-2026-54500 (Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as ...)
- {DSA-6521-1}
+ {DSA-6521-1 DLA-4803-1}
- ruby-oj 3.17.3-1
NOTE: https://github.com/ohler55/oj/security/advisories/GHSA-fm7p-mprw-wjm9
NOTE: https://github.com/ohler55/oj/commit/bbde91a679728f94c4492ebc3683f4fa3309049f (v3.17.3)
@@ -150575,11 +151516,11 @@ CVE-2026-40966 (In Spring AI, an attacker can bypass conversation isolation and
NOT-FOR-US: VMware
CVE-2026-40556
REJECTED
-CVE-2026-40552 (mpGabinet is vulnerable to Remote Command Execution. An authorized use ...)
+CVE-2026-40552 (Multiple BinSoft products arevulnerable to Remote Command Execution. A ...)
NOT-FOR-US: mpGabinet
-CVE-2026-40551 (mpGabinet performs client-side authentication. An attacker with access ...)
+CVE-2026-40551 (Multiple BinSoft products perform client-side authentication. An attac ...)
NOT-FOR-US: mpGabinet
-CVE-2026-40550 (mpGabinet is vulnerable to Privilege Escalation due to excessive datab ...)
+CVE-2026-40550 (Multiple BinSoft products are vulnerable to Privilege Escalation due t ...)
NOT-FOR-US: mpGabinet
CVE-2026-3323 (An unsecured configuration interface on affected devices allows unauth ...)
NOT-FOR-US: VEGA Grieshaber KG
@@ -456920,7 +457861,7 @@ CVE-2023-39418 (A vulnerability was found in PostgreSQL with the use of the MERG
NOTE: https://www.postgresql.org/about/news/postgresql-154-149-1312-1216-1121-and-postgresql-16-beta-3-released-2689/
NOTE: https://git.postgresql.org/gitweb/?p=postgresql.git;a=commitdiff;h=cb2ae5741f2458a474ed3c31458d242e678ff229 (REL_15_4)
CVE-2023-39417 (IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in Po ...)
- {DSA-6385-1 DSA-5554-1 DSA-5553-1 DLA-3600-1}
+ {DSA-6385-1 DSA-5554-1 DSA-5553-1 DLA-4806-1 DLA-3600-1}
- postgresql-15 15.4-1
- postgresql-13 <removed>
- postgresql-11 <removed>
@@ -545054,7 +545995,8 @@ CVE-2022-2026 (Cross-site Scripting (XSS) - Stored in GitHub repository kromitgm
NOT-FOR-US: kromitgmbh/titra
CVE-2022-2025 (an attacker with knowledge of user/pass of Grandstream GSD3710 in its ...)
NOT-FOR-US: Grandstream
-CVE-2017-20051 (A vulnerability was detected in InnoSetup Installer 5.5.9. This affect ...)
+CVE-2017-20051
+ REJECTED
NOT-FOR-US: InnoSetup
CVE-2022-32548 (An issue was discovered on certain DrayTek Vigor routers before July 2 ...)
NOT-FOR-US: DrayTek Vigor router
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/21ed79a2fa5e3ac5068b7de8527fe899ae02febc
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/21ed79a2fa5e3ac5068b7de8527fe899ae02febc
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260930/19746ab1/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list