Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a906a806 by security tracker role at 2026-08-22T19:14:08+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,45 +1,45 @@
CVE-2026-78003 (The Mailgun for WordPress plugin for WordPress is vulnerable
to Server ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-77992 (Joomla Extension - fabrikar.com - heredoc terminator breakout
in the c ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-77988 (A weakness has been identified in TRENDnet TEW-823DRU
1.1.02b01. This ...)
- TODO: check
+ NOT-FOR-US: TRENDnet
CVE-2026-77946 (A vulnerability was determined in TRENDnet TEW-821DAP
2.2.01b05. Affec ...)
- TODO: check
+ NOT-FOR-US: TRENDnet
CVE-2026-77945 (A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05.
Affected i ...)
- TODO: check
+ NOT-FOR-US: TRENDnet
CVE-2026-77027 (Joomla Extension - fabrikar.com - Unauthenticated stored XSS
in Fabrik ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76609 (Joomla Extension - fabrikar.com - Unauthenticated modification
of any ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76608 (Joomla Extension - fabrikar.com - Unauthenticated disclosure
of any co ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76607 (Joomla Extension - fabrikar.com - Missing ACL check in
download elemen ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76606 (Joomla Extension - fabrikar.com - Path Traversal via image
element in ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76605 (Joomla Extension - fabrikar.com - Remote code execution via
image elem ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76604 (Joomla Extension - fabrikar.com - Unauthenticated remote code
executio ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76603 (Joomla Extension - fabrikar.com - Unauthenticated row
disclosure via f ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76602 (Joomla Extension - fabrikar.com - Unauthenticated SQL
injection in ORD ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76601 (Joomla Extension - fabrikar.com - Unauthenticated row
reordering in Fa ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76600 (Joomla Extension - fabrikar.com - Unauthenticated deletion of
any comm ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76599 (Joomla Extension - fabrikar.com - Unauthenticated database
table list ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76598 (Joomla Extension - fabrikar.com - Unauthenticated arbitrary
directory ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76597 (Joomla Extension - fabrikar.com - Unauthenticated arbitrary
file uploa ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76596 (Joomla Extension - fabrikar.com - Unauthenticated table
truncation via ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-76571 (Joomla Extension - fabrikar.com - Unauthenticated SQL
injection in lis ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-75870 (Punk versions before 0.18 for Perl allow session cookie
forgery via an ...)
TODO: check
CVE-2026-75866 (Punk::OAuth2::Server versions through 0.03 for Perl issue
access token ...)
@@ -61,9 +61,9 @@ CVE-2026-68767 (hashcat's fgetl() function in
src/filehandling.c writes a null t
CVE-2026-68766 (hashcat fails to restrict command-line options when parsing
restore fi ...)
TODO: check
CVE-2026-66917 (Joomla Extension - joomgalleryfriends.net - Stored XSS in
JoomGallery ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-66916 (Joomla Extension - joomgalleryfriends.net - Password-Protected
Categor ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-66393 (NLTK versions before 3.9.4 contain an unbounded recursion
vulnerabilit ...)
TODO: check
CVE-2026-65915 (NLTK versions before 3.10.0 contain a logic bug in
FileSystemPathPoint ...)
@@ -91,15 +91,15 @@ CVE-2026-62380 (Netty (io.netty:netty-codec-socks) versions
4.2.0.Final through
CVE-2026-62243 (Netty (io.netty:netty-handler) versions from 4.2.0.Final
through 4.2.1 ...)
TODO: check
CVE-2026-62204 (SiYuan versions before v3.7.4 fail to validate that
packageName matche ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-60084 (SiYuan versions before v3.7.4 contain an arbitrary file
deletion vulne ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-60083 (SiYuan versions before v3.8.0 contain an incomplete path
blocklist in ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-5093 (The GreenShift \u2013 Animation and Page Builder Blocks plugin
for Wor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-59809 (SiYuan before v3.8.0 interpolates secret placeholders into the
destina ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-59808 (AVideo through commit 9c39d8c8 contains an authentication
bypass vulne ...)
TODO: check
CVE-2026-59256 (WWBN AVideo through commit 9c39d8c8 contains an authorization
bypass v ...)
@@ -117,19 +117,19 @@ CVE-2026-57944 (AVideo through commit 9c39d8c8 contains a
cross-site request for
CVE-2026-56380 (AVideo through commit 9c39d8c8 contains an information
exposure vulner ...)
TODO: check
CVE-2026-4703 (The WS Form LITE \u2013 Drag & Drop Contact Form Builder plugin
for Wo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-4561 (The MC4WP: Mailchimp for WordPress plugin for WordPress is
vulnerable ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-4559 (The Image Photo Gallery Final Tiles Grid plugin for WordPress
is vulne ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-4245 (The Post Duplicator plugin for WordPress is vulnerable to
authorizatio ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-4244 (The Post Duplicator plugin for WordPress is vulnerable to
unauthorized ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-3424 (The The kk Star Ratings \u2013 Rate Post & Collect User
Feedbacks plug ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-2996 (The Advanced Product Fields (Product Addons) for WooCommerce
plugin fo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-12710 (A Missing Authorization vulnerability in the QueryEngineTask
of Google ...)
TODO: check
CVE-2026-11948
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a906a8064b96dae3f5a6280f20153918f901cb14
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a906a8064b96dae3f5a6280f20153918f901cb14
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
