Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4a64963b by Salvatore Bonaccorso at 2026-07-14T09:17:42+02:00
Process some new NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,15 +1,15 @@
CVE-2026-7640 (The WP Customer Area plugin for WordPress is vulnerable to
Stored Cros ...)
NOT-FOR-US: WordPress plugin
CVE-2026-62328 (9Router through version 0.4.41 contain an unauthenticated
information ...)
- TODO: check
+ NOT-FOR-US: 9Router
CVE-2026-62327 (9Router through version 0.4.41 contain an unauthenticated
information ...)
- NOT-FOR-US: Next.js
+ NOT-FOR-US: 9Router
CVE-2026-62242 (Spring Boot Admin Server before 4.1.2 contains a server-side
request f ...)
TODO: check
CVE-2026-62240 (CrewAI before 1.15.1 contains a server-side request forgery
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: CrewAI
CVE-2026-62239 (FlashAttention through 2.8.3.post1, fixed in commit 0816ef1,
contains ...)
- TODO: check
+ NOT-FOR-US: FlashAttention
CVE-2026-62200 (OpenClaw versions before 2026.6.1 contain a flaw in host exec
environm ...)
NOT-FOR-US: OpenClaw
CVE-2026-62199 (OpenClaw versions before 2026.6.6 contain a flaw in host exec
environm ...)
@@ -43,21 +43,21 @@ CVE-2026-62186 (OpenClaw versions before 2026.6.8 contain
an authorization bypas
CVE-2026-62185 (Argo CD Helm Chart before 10.0.0 fails to install network
policies by ...)
NOT-FOR-US: Argo CD
CVE-2026-62184 (luci-app-banip contains a log parsing vulnerability where the
awk-base ...)
- TODO: check
+ NOT-FOR-US: luci-app-banip
CVE-2026-61458 (PasswordPusher before 2.9.2 contains a brute-force
vulnerability in th ...)
- TODO: check
+ NOT-FOR-US: PasswordPusher
CVE-2026-59801 (9Router through version 0.4.41 contains an unauthenticated
access vuln ...)
- NOT-FOR-US: Next.js
+ NOT-FOR-US: 9Router
CVE-2026-58500 (MCP Appium is an MCP server that provides AI assistants with
tools to ...)
- TODO: check
+ NOT-FOR-US: MCP Appium
CVE-2026-58489 (HedgeDoc is an open source, real-time collaborative markdown
notes app ...)
- TODO: check
+ NOT-FOR-US: HedgeDoc
CVE-2026-58488 (HedgeDoc is an open source, real-time, collaborative, markdown
notes a ...)
- TODO: check
+ NOT-FOR-US: HedgeDoc
CVE-2026-58487 (HedgeDoc is an open source, real-time, collaborative, markdown
notes a ...)
- TODO: check
+ NOT-FOR-US: HedgeDoc
CVE-2026-58486 (HedgeDoc is an open source, real-time, collaborative, markdown
notes a ...)
- TODO: check
+ NOT-FOR-US: HedgeDoc
CVE-2026-58411 (ChurchCRM is an open-source church management system. Prior to
version ...)
NOT-FOR-US: ChurchCRM
CVE-2026-58410 (ChurchCRM is an open-source church management system. Prior to
version ...)
@@ -71,31 +71,31 @@ CVE-2026-58407
CVE-2026-58233 (SAP Change and Transport System Attach Tool (ctsattach) allows
an auth ...)
NOT-FOR-US: SAP
CVE-2026-57856 (Cockpit CMS contains a path traversal vulnerability in the
Bucket file ...)
- TODO: check
+ NOT-FOR-US: Cockpit CMS
CVE-2026-57855 (Cockpit CMS contains a missing authorization vulnerability in
the Buck ...)
- TODO: check
+ NOT-FOR-US: Cockpit CMS
CVE-2026-56877 (The SCORM lab launch endpoint in Skillable
(scorm.skillable.com) throu ...)
TODO: check
CVE-2026-55773 (CedarJava is an open source Java implementation of the Cedar
policy la ...)
- TODO: check
+ NOT-FOR-US: CedarJava
CVE-2026-55771 (CedarJava is an open source Java implementation of the Cedar
policy la ...)
- TODO: check
+ NOT-FOR-US: CedarJava
CVE-2026-52533 (An issue in D-Link DIR-1253 v.1.0.1.250923.142435 allows an
attacker t ...)
NOT-FOR-US: D-Link
CVE-2026-51821 (SQL Injection vulnerability in Shenzhou Shihan Video
Conference System ...)
- TODO: check
+ NOT-FOR-US: Shenzhou Shihan Video Conference System
CVE-2026-51541 (OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue
in CIP m ...)
- TODO: check
+ NOT-FOR-US: OpENer
CVE-2026-51540 (OpENer 2.3.0 (master branch up to commit 76b95cf) is
vulnerable to a s ...)
- TODO: check
+ NOT-FOR-US: OpENer
CVE-2026-51539 (A Denial of Service (DoS) vulnerability exists in the receive
loop of ...)
- TODO: check
+ NOT-FOR-US: OpENer
CVE-2026-51538 (EIPStackGroup OpENer 2.3.0 (commit 76b95cf) suffers from an
Incorrect ...)
- TODO: check
+ NOT-FOR-US: OpENer
CVE-2026-51537 (EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an
out-of-bounds read ...)
- TODO: check
+ NOT-FOR-US: OpENer
CVE-2026-51536 (In OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP
(Common Ind ...)
- TODO: check
+ NOT-FOR-US: OpENer
CVE-2026-48364 (ColdFusion versions 2025.9, 2023.20 and earlier are affected
by an Unc ...)
NOT-FOR-US: Adobe
CVE-2026-48363 (ColdFusion versions 2025.9, 2023.20 and earlier are affected
by an Unc ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4a64963b12c91c53eb44f2c3ca34c92ec392d85b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4a64963b12c91c53eb44f2c3ca34c92ec392d85b
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
