Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0f473afa by Moritz Muehlenhoff at 2026-10-14T14:45:15+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4225,7 +4225,7 @@ CVE-2026-110105 (B3log Symphony through 3.6.4 contains a
missing authorization v
CVE-2026-110104 (Xxyopen novel through 3.5.0 contains a weak password hashing
vulnerabi ...)
NOT-FOR-US: Xxyopen novel
CVE-2026-110103 (bbs-go through 4.4.6 contains a stored cross-site scripting
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: bbs-go
CVE-2026-110102 (Powerlevel10k through 1.20.0 contains an insecure download
vulnerabili ...)
NOT-FOR-US: Powerlevel10k
CVE-2026-110101 (Koillection through 1.8.4 contains a stored cross-site
scripting vulne ...)
@@ -4239,7 +4239,7 @@ CVE-2026-110098 (Jorani before 1.0.4 contains an insecure
direct object referenc
CVE-2026-110097 (Ikaros 1.2.0 through 1.2.5 contains an authentication bypass
vulnerabi ...)
NOT-FOR-US: Ikaros
CVE-2026-110036 (A flaw was found in device-mapper-persistent-data. A local
attacker ca ...)
- TODO: check
+ NOT-FOR-US: Red Hat device-mapper-persistent-data
CVE-2026-110025 (A flaw has been found in slackero phpwcms up to
1.9.49/1.12.3. This is ...)
NOT-FOR-US: phpwcms
CVE-2026-10759 (A flaw in Portal for ArcGIS could allow LDAP injection through
adminis ...)
@@ -4468,13 +4468,13 @@ CVE-2026-109149 (A weakness has been identified in
beautifier js-beautify up to
CVE-2026-109144 (A vulnerability was identified in wbond certvalidator up to
0.11.1. Th ...)
TODO: check
CVE-2026-109143 (A vulnerability was determined in calcom cal.com and cal.diy
up to 6.2 ...)
- TODO: check
+ NOT-FOR-US: calcom cal.com and cal.diy
CVE-2026-109116 (A vulnerability was determined in AdithyaYelloju
Restaurant-Management ...)
- TODO: check
+ NOT-FOR-US: Restaurant-Management-System
CVE-2026-109115 (A vulnerability was found in AdithyaYelloju
Restaurant-Management-Syst ...)
- TODO: check
+ NOT-FOR-US: Restaurant-Management-System
CVE-2026-109114 (A vulnerability has been found in AdithyaYelloju
Restaurant-Management ...)
- TODO: check
+ NOT-FOR-US: Restaurant-Management-System
CVE-2026-109110 (A flaw has been found in Wavlink WL-WN592AX6 250422. This
issue affect ...)
NOT-FOR-US: Wavlink
CVE-2026-109109 (A vulnerability was detected in Wavlink WL-WN530BE1-A 251117.
This vul ...)
@@ -4581,7 +4581,7 @@ CVE-2026-105460 (A flaw was found in BlueZ. An
out-of-bounds read vulnerability
CVE-2026-105445 (An Incorrect Privilege Assignment vulnerability in Docker
Hub's accoun ...)
TODO: check
CVE-2026-104937 (Shopware version 6.7 allows the upload of
attacker\u2011controlled HTM ...)
- TODO: check
+ NOT-FOR-US: Shopware
CVE-2026-104935 (Authentication bypass by spoofing in ICS before version
25.1.3.0 allow ...)
NOT-FOR-US: Ivanti
CVE-2026-104817 (Misskey is an open source, federated social media platform.
From 12.11 ...)
@@ -4599,9 +4599,9 @@ CVE-2026-104341 (Adobe Framemaker is affected by an
out-of-bounds write vulnerab
CVE-2026-104340 (Adobe Framemaker is affected by a Heap-based Buffer Overflow
vulnerabi ...)
NOT-FOR-US: Adobe
CVE-2026-104250 (The unstructured library provides open-source components for
ingesting ...)
- TODO: check
+ NOT-FOR-US: unstructured
CVE-2026-104192 (Dragonfly is an in-memory data store built for modern
application work ...)
- TODO: check
+ NOT-FOR-US: Dragonfly
CVE-2026-104126 (JumpServer is an open source bastion host and an operation
and mainten ...)
TODO: check
CVE-2026-104085 (odt2spip plugin for SPIP before 4.4.0 contains an OS command
injection ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f473afa5d96e3e1cb2c53f564874aae26c0f75d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f473afa5d96e3e1cb2c53f564874aae26c0f75d
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
