Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3d65ecce by Moritz Muehlenhoff at 2026-09-03T16:17:58+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1621,9 +1621,9 @@ CVE-2026-59696 (Improper Validation of Specified Quantity
in Input vulnerability
NOTE: Fixed by:
https://github.com/erlang/otp/commit/e3be1cfe9f6cedd0cd20d9905e05601dfb31c8aa
(OTP-29.0.6, OTP-28.5.0.6)
NOTE: Fixed by:
https://github.com/erlang/otp/commit/aba0fe8c2d700bf4ac94607cf7f00e53bbe4042d
(OTP-27.3.4.17)
CVE-2026-59681 (A OS command injection vulnerability in yast2-auth-client
allows an at ...)
- TODO: check
+ NOT-FOR-US: SuSE
CVE-2026-59680 (An OS command injection vulnerability was found in
yast2-users. When d ...)
- TODO: check
+ NOT-FOR-US: SuSE
CVE-2026-58575 (Dell PowerStore contains an Authentication Bypass by Spoofing
vulnerab ...)
NOT-FOR-US: Dell / EMC
CVE-2026-58572 (Dell PowerStore contains a Code Injection vulnerability. An
authentica ...)
@@ -1668,13 +1668,13 @@ CVE-2026-52023 (An issue in kamailio v.6.1.1 and before
allows a remote attacker
CVE-2026-52022 (An issue in kamailio v.6.1.1 and before allows a remote
attacker to ca ...)
TODO: check
CVE-2026-51974 (An eval() injection vulnerability in the get_list function in
modules/ ...)
- TODO: check
+ NOT-FOR-US: Fooocus
CVE-2026-51956 (A Broken Object Level Authorization vulnerability exists in
Grashjs At ...)
TODO: check
CVE-2026-51934 (Buffer Overflow vulnerability in Shenzhen Jixiang Tengda
Technology Co ...)
NOT-FOR-US: Tenda
CVE-2026-51788 (An issue in cleverange_auth v.0.1.10 allows a remote attacker
to cause ...)
- TODO: check
+ NOT-FOR-US: cleverange_auth
CVE-2026-51770 (Incorrect access control in the sendToMasterQosConfig function
of TOTO ...)
NOT-FOR-US: TOTOLINK
CVE-2026-51769 (Incorrect access control in the remoteCloudUpdateCheck
function of TOT ...)
@@ -1724,11 +1724,11 @@ CVE-2026-51742 (Incorrect access control in the
discoverWan function of TOTOLINK
CVE-2026-51741 (Incorrect access control in the clearDiagnosisLog function of
TOTOLINK ...)
NOT-FOR-US: TOTOLINK
CVE-2026-4813 (A vulnerability in the Lutece Core XSL export management module
up to ...)
- TODO: check
+ NOT-FOR-US: Lutece Core
CVE-2026-49329 (A flaw was found in openshift/oauth-server. The OAuth login
and error ...)
NOT-FOR-US: Red Hat OpenShift Container Platform
CVE-2026-25706 (Improper neutralization of special elements used in an OS
command in y ...)
- TODO: check
+ NOT-FOR-US: SuSE
CVE-2026-19914 (The Welcart e-Commerce plugin for WordPress is vulnerable to
Stored Cr ...)
NOT-FOR-US: WordPress plugin
CVE-2026-19593 (OpenAI Codex Desktop for Windows and macOS automatically
inspected Git ...)
@@ -1746,21 +1746,21 @@ CVE-2026-19472 (A denial-of-service security issue
exists within ArmorStart\xae
CVE-2026-19471 (Multiple stored cross-site scripting security issues exist
within Armo ...)
NOT-FOR-US: Rockwell Automation
CVE-2026-18931 (Use of Hard-coded Credentials vulnerability in TMT Machine
Industry an ...)
- TODO: check
+ NOT-FOR-US: TMT Machine Industry and Trade
CVE-2026-18808 (Improper Control of Generation of Code ('Code Injection')
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Klemsan Electrical Electronics
CVE-2026-18780 (Cross-Site request forgery (CSRF) vulnerability in TMT Machine
Industr ...)
- TODO: check
+ NOT-FOR-US: TMT Machine Industry and Trade
CVE-2026-18771 (Missing authentication for critical function vulnerability in
TMT Mach ...)
- TODO: check
+ NOT-FOR-US: TMT Machine Industry and Trade
CVE-2026-18765 (Improper neutralization of special elements used in an SQL
command ('S ...)
- TODO: check
+ NOT-FOR-US: Teracity Software Technologies
CVE-2026-18630 (Improper neutralization of special elements used in an SQL
command ('S ...)
- TODO: check
+ NOT-FOR-US: TMT Machine Industry and Trade
CVE-2026-18550 (The Nokri - Job Board WordPress Theme for WordPress is
vulnerable to P ...)
NOT-FOR-US: WordPress plugin
CVE-2026-18210 (Improper neutralization of special elements used in an SQL
command ('S ...)
- TODO: check
+ NOT-FOR-US: Klemsan Electrical Electronics
CVE-2026-16788 (The Live Composer \u2013 Free WordPress Website Builder plugin
for Wor ...)
NOT-FOR-US: WordPress plugin
CVE-2026-16786 (The Live Composer \u2013 Free WordPress Website Builder plugin
for Wor ...)
@@ -1788,7 +1788,7 @@ CVE-2026-10420 (Untrusted pointer dereference
vulnerability in Samsung Open Sour
CVE-2026-10195 (The FS-Poster plugin for WordPress is vulnerable to Remote
Code Execut ...)
NOT-FOR-US: WordPress plugin
CVE-2025-15613 (Kyverno before v1.13.4 is vulnerable to server-side request
forgery (S ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2025-12768 (A security issue exists within FactoryTalk\xae Historian
Machine Editi ...)
NOT-FOR-US: Rockwell Automation
CVE-2024-7953 (A vulnerability exists in the affected products that allows a
threat a ...)
@@ -1796,11 +1796,11 @@ CVE-2024-7953 (A vulnerability exists in the affected
products that allows a thr
CVE-2024-7952 (A data exposure vulnerability exists in the affected product.
There ar ...)
NOT-FOR-US: Rockwell Automation
CVE-2024-14047 (A local vulnerability in the Winlogbeat Windows installer
caused runti ...)
- TODO: check
+ NOT-FOR-US: Elastic Security
CVE-2024-10085 (CWE-770: Allocation of Resources Without Limits or
Throttlingvulnerabi ...)
NOT-FOR-US: Schneider Electric
CVE-2023-54356 (Kyverno versions 1.9.4 and earlier support insecure 3DES
cipher suites ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2026-84145 (Internally found bugs present in Thunderbird 154, Thunderbird
ESR 153. ...)
- firefox 155.0-1
- firefox-esr 140.15.0esr-1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3d65eccef1989f1894edf170ada507e6d6f613df
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3d65eccef1989f1894edf170ada507e6d6f613df
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
