Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3ea7f2a5 by security tracker role at 2026-09-04T07:13:30+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,13 +1,13 @@
CVE-2026-9745 (IBM Netezza Software 11.3.0.3 through Interim Fix 002 has
operations t ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-9744 (IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not
validat ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-9736 (IBM Netezza Software 11.3.0.3 through Interim Fix 002 could
allow an u ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-9036 (IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not
validat ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-8862 (IBM Netezza Software 11.3.0.3 through Interim Fix 002 has
credentials ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-85509 (FreeIPMI before 1.6.19 has a stack-based buffer overflow in
_read_fru_ ...)
TODO: check
CVE-2026-85508 (ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer
overflow i ...)
@@ -99,19 +99,19 @@ CVE-2026-85406 (A vulnerability has been found in Eleveo
Quality Management 9.7.
CVE-2026-85405 (A flaw has been found in Eleveo Call Recording Software 9.7.0.
This af ...)
TODO: check
CVE-2026-85403 (A flaw has been found in code-projects Doctor Appointment
System 1.0. ...)
- TODO: check
+ NOT-FOR-US: code-projects
CVE-2026-85402 (A vulnerability was detected in code-projects Doctor
Appointment Syste ...)
- TODO: check
+ NOT-FOR-US: code-projects
CVE-2026-85401 (A weakness has been identified in Dolibarr up to
21.0.4/22.0.5/23.0.3. ...)
- TODO: check
+ NOT-FOR-US: Dolibarr
CVE-2026-85399 (A security flaw has been discovered in code-projects Hospital
Informat ...)
- TODO: check
+ NOT-FOR-US: code-projects
CVE-2026-85398 (A vulnerability was identified in code-projects Hospital
Information S ...)
- TODO: check
+ NOT-FOR-US: code-projects
CVE-2026-85397 (A vulnerability was determined in code-projects Hospital
Information S ...)
- TODO: check
+ NOT-FOR-US: code-projects
CVE-2026-85383 (A flaw has been found in itsourcecode Sales and Inventory
System 1.0. ...)
- TODO: check
+ NOT-FOR-US: itsourcecode System
CVE-2026-85382 (A vulnerability was detected in light0011 cms
c774dce31c6df0055568a8d5 ...)
TODO: check
CVE-2026-85381 (A security vulnerability has been detected in light0011 cms
c774dce31c ...)
@@ -125,17 +125,17 @@ CVE-2026-85378 (A vulnerability was identified in
light0011 cms c774dce31c6df005
CVE-2026-85241 (A weakness has been identified in SpecterOps BloodHound up to
9.5.1. T ...)
TODO: check
CVE-2026-85225 (A vulnerability was identified in code-projects Doctor
Appointment Sys ...)
- TODO: check
+ NOT-FOR-US: code-projects
CVE-2026-85224 (A vulnerability was determined in D-Link DNS-320 ShareCenter
2.06B01. ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2026-85223 (A vulnerability was found in D-Link DNS-340L 1.01B04. Affected
by this ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2026-85222 (A vulnerability has been found in D-Link DNS-340L 1.01B04.
Affected by ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2026-85208 (A security flaw has been discovered in itsourcecode Online
Medicine De ...)
- TODO: check
+ NOT-FOR-US: itsourcecode System
CVE-2026-85207 (A vulnerability was identified in itsourcecode Online Medicine
Deliver ...)
- TODO: check
+ NOT-FOR-US: itsourcecode System
CVE-2026-85149 (SmartIT Desktop Manager developed by Lightstar has a Use of
Hard-coded ...)
TODO: check
CVE-2026-85148 (SmartIT Desktop Manager developed by Lightstar has a Use of
Hard-coded ...)
@@ -181,11 +181,11 @@ CVE-2026-85042 (Use after free in DevTools in Google
Chrome prior to 152.0.7977.
CVE-2026-84185 (A flaw was found in the jwcrypto library, which is used for
implementi ...)
TODO: check
CVE-2026-84146 (The Xpro Addons \u2014 140+ Widgets for Elementor WordPress
plugin bef ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-84066 (The Directorist: AI-Powered Business Directory, Listings &
Classified ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-83711 (Authorization bypass through user-controlled key in Microsoft
Azure Ac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-82527 (R2R through 3.6.6 contains a SQL injection vulnerability that
allows u ...)
TODO: check
CVE-2026-82521 (parsedmarc 9.0.6 before 11.0.1 writes forensic report sample
files usi ...)
@@ -193,47 +193,47 @@ CVE-2026-82521 (parsedmarc 9.0.6 before 11.0.1 writes
forensic report sample fil
CVE-2026-82520 (parsedmarc before 11.0.1 decompresses gzip and ZIP attachments
in a si ...)
TODO: check
CVE-2026-82194 (The WPvivid \u2014 Backup, Migration & Staging WordPress
plugin before ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-82193 (The WPvivid \u2014 Backup, Migration & Staging WordPress
plugin before ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-82186 (The WPLP Cookie Consent WordPress plugin before 4.4.2 does
not proper ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-81347 (The Frontend Admin by DynamiApps WordPress plugin before
3.29.13 does ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-81270 (Apache Allura: exposure of non-public information via search.
This ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-80438 (The Ninja Forms WordPress plugin before 3.15.2 does not
restrict its ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-80181 (Apache Allura'swebhooksare vulnerable to Server-Side Request
Forgery ( ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-80180 (Stored XSS via markdown HTML processingin Apache Allura.
This issue ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-80098 (Improper verification of cryptographic signature in Copilot
Studio all ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-79632 (The WPFunnels WordPress plugin before 3.13.0 does not perform
any aut ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-79631 (The WPFunnels WordPress plugin before 3.13.0 does not
restrict access ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-79630 (The WPFunnels WordPress plugin before 3.13.0 does not verify
that the ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-77465 (toml-node is a TOML parser for Node.js and the browser. Prior
to 4.2.0 ...)
TODO: check
CVE-2026-75754 (Missing Authentication for Critical Function, Server-Side
Request Forg ...)
- TODO: check
+ NOT-FOR-US: ASUS
CVE-2026-74853 (The Pods WordPress plugin before 3.3.9.2 does not restrict
which func ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-71429 (stream-json is a micro-library of stream components for
processing JSO ...)
TODO: check
CVE-2026-71216 (PagerDuty alarm hook transmits the integration routing key
over cleart ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-70403 (XING CPTrans-ME-X contains a Use of Hard-coded Password
(CWE-259). Any ...)
TODO: check
CVE-2026-70352 (Missing authentication for critical function in Azure AI
Language allo ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70178 (Missing authorization in Microsoft Fabric allows an authorized
attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-69857 (Authorization bypass through user-controlled key in Azure
Cosmos DB al ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-69657 (XING CPTrans-ME-X contains a Use of Default Password
(CWE-1393). Anyon ...)
TODO: check
CVE-2026-67402 (An insecure Apache configuration in ConfigServer Security &
Firewall m ...)
@@ -245,55 +245,55 @@ CVE-2026-67397 (Path traversal in Plesk 18.0.79.9 and
earlier and 18.0.80 throug
CVE-2026-66840 (XING CPTrans-ME-X contains an Exposure of Sensitive System
Information ...)
TODO: check
CVE-2026-65818 (Server-side request forgery (ssrf) in Power Automate allows an
authori ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64200 (There is an out-of-bounds read vulnerability in DASYLab due to
imprope ...)
- TODO: check
+ NOT-FOR-US: National Instruments
CVE-2026-64199 (There is an out-of-bounds read vulnerability in DASYLab due to
imprope ...)
- TODO: check
+ NOT-FOR-US: National Instruments
CVE-2026-64198 (There is an out-of-bounds read vulnerability in DASYLab due to
imprope ...)
- TODO: check
+ NOT-FOR-US: National Instruments
CVE-2026-64197 (There is an out-of-bounds write vulnerability in DASYLabdue to
imprope ...)
- TODO: check
+ NOT-FOR-US: National Instruments
CVE-2026-64196 (There is an out-of-bounds write vulnerability in DASYLabdue to
imprope ...)
- TODO: check
+ NOT-FOR-US: National Instruments
CVE-2026-64195 (There is an out-of-bounds write vulnerability in DASYLab due
to lack o ...)
- TODO: check
+ NOT-FOR-US: National Instruments
CVE-2026-63376 (toml-node is a TOML parser for Node.js and the browser. Prior
to 4.1.2 ...)
TODO: check
CVE-2026-62928 (XING CPTrans-ME-X contains an OS Command Injection (CWE-78).
Unauthent ...)
TODO: check
CVE-2026-62916 (Authentication bypass using an alternate path or channel in
Microsoft ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62906 (Improper neutralization of special elements in data query
logic in Mic ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-53728 (Medplum is a developer platform that enables development of
healthcare ...)
TODO: check
CVE-2026-49509 (Out-of-bounds read vulnerability in Samsung Opensource
Escargot allows ...)
TODO: check
CVE-2026-45200 (Software installed and run as a non-privileged user may
conduct improp ...)
- TODO: check
+ NOT-FOR-US: Imagination Technologies
CVE-2026-45197 (Kernel software installed and running inside a Guest VM may
post impro ...)
- TODO: check
+ NOT-FOR-US: Imagination Technologies
CVE-2026-44506 (Medplum is a developer platform that enables development of
healthcare ...)
TODO: check
CVE-2026-19795 (IBM Qiskit SDK 2.1.0 through 2.5.1 could allow a local
attacker to cau ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-19224 (The Hummingbird Performance WordPress plugin before 3.21.2
does not r ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-18330 (A hard-coded cryptographic key vulnerability exists in theweb
module o ...)
- TODO: check
+ NOT-FOR-US: TPLink
CVE-2026-18167 (A stack-based buffer overflow vulnerability exists in the
EasyMesh mod ...)
- TODO: check
+ NOT-FOR-US: TPLink
CVE-2026-17517 (The Content Views WordPress plugin before 4.5.1.2 does not
check whet ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-16281 (The Classified Listing WordPress plugin before 6.1.1 does not
verify ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-15354 (The ACPT (Premium) plugin for WordPress is vulnerable to
Privilege Esc ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-11613 (The Divi Ajax Filter plugin for WordPress is vulnerable to
Local File ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2025-15691 (The WPFunnels WordPress plugin before 3.13.0 does not check
whether u ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-XXXX [RUSTSEC-2026-0269]
- rust-wasmtime <unfixed>
NOTE:
https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-vqjp-4c8c-hfgg
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3ea7f2a5629f8cf08e05b9e28e66df398bd0b735
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3ea7f2a5629f8cf08e05b9e28e66df398bd0b735
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
