Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
088a99dd by security tracker role at 2024-04-09T20:12:02+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,741 @@
+CVE-2024-3545 (Improper permission handling in the vault offline cache feature
in Dev ...)
+ TODO: check
+CVE-2024-3514 (The Responsive Tabs plugin for WordPress is vulnerable to
Stored Cross ...)
+ TODO: check
+CVE-2024-3512 (The WP Shortcodes Plugin \u2014 Shortcodes Ultimate plugin for
WordPre ...)
+ TODO: check
+CVE-2024-3446 (A double free vulnerability was found in QEMU virtio devices
(virtio-g ...)
+ TODO: check
+CVE-2024-3281 (A vulnerability was discovered in the firmware builds after
8.0.2.3267 ...)
+ TODO: check
+CVE-2024-3267 (The Bold Page Builder plugin for WordPress is vulnerable to
Stored Cro ...)
+ TODO: check
+CVE-2024-3266 (The Bold Page Builder plugin for WordPress is vulnerable to
Stored Cro ...)
+ TODO: check
+CVE-2024-3244 (The EmbedPress \u2013 Embed PDF, Google Docs, Vimeo, Wistia,
Embed You ...)
+ TODO: check
+CVE-2024-3214 (The Relevanssi \u2013 A Better Search plugin for WordPress is
vulnerab ...)
+ TODO: check
+CVE-2024-3213 (The Relevanssi \u2013 A Better Search plugin for WordPress is
vulnerab ...)
+ TODO: check
+CVE-2024-3208 (The Sydney Toolbox plugin for WordPress is vulnerable to Stored
Cross- ...)
+ TODO: check
+CVE-2024-3167 (The Ocean Extra plugin for WordPress is vulnerable to Stored
Cross-Sit ...)
+ TODO: check
+CVE-2024-3136 (The MasterStudy LMS plugin for WordPress is vulnerable to Local
File I ...)
+ TODO: check
+CVE-2024-3097 (The WordPress Gallery Plugin \u2013 NextGEN Gallery plugin for
WordPre ...)
+ TODO: check
+CVE-2024-3093 (The Font Farsi plugin for WordPress is vulnerable to Stored
Cross-Site ...)
+ TODO: check
+CVE-2024-3064 (The Elementor Addons, Widgets and Enhancements \u2013 Stax
plugin for ...)
+ TODO: check
+CVE-2024-3053 (The Forminator \u2013 Contact Form, Payment Form & Custom Form
Builder ...)
+ TODO: check
+CVE-2024-3046 (In Eclipse Kura LogServlet component included in versions 5.0.0
to 5.4 ...)
+ TODO: check
+CVE-2024-31978 (A vulnerability has been identified in SINEC NMS (All versions
< V2.0 ...)
+ TODO: check
+CVE-2024-31868 (Improper Encoding or Escaping of Output vulnerability in
Apache Zeppel ...)
+ TODO: check
+CVE-2024-31867 (Improper Input Validation vulnerability in Apache Zeppelin.
The attac ...)
+ TODO: check
+CVE-2024-31866 (Improper Encoding or Escaping of Output vulnerability in
Apache Zeppel ...)
+ TODO: check
+CVE-2024-31865 (Improper Input Validation vulnerability in Apache Zeppelin.
The attac ...)
+ TODO: check
+CVE-2024-31864 (Improper Control of Generation of Code ('Code Injection')
vulnerabilit ...)
+ TODO: check
+CVE-2024-31863 (Authentication Bypass by Spoofing vulnerability by replacing
to exsiti ...)
+ TODO: check
+CVE-2024-31862 (Improper Input Validation vulnerability in Apache Zeppelin
when creati ...)
+ TODO: check
+CVE-2024-31860 (Improper Input Validation vulnerability in Apache Zeppelin.
By adding ...)
+ TODO: check
+CVE-2024-31544 (A stored cross-site scripting (XSS) vulnerability in Computer
Laborato ...)
+ TODO: check
+CVE-2024-31507 (Sourcecodester Online Graduate Tracer System v1.0 is
vulnerable to SQL ...)
+ TODO: check
+CVE-2024-31506 (Sourcecodester Online Graduate Tracer System v1.0 is
vulnerable to SQL ...)
+ TODO: check
+CVE-2024-31487 (A improper limitation of a pathname to a restricted directory
('path t ...)
+ TODO: check
+CVE-2024-31457 (gin-vue-admin is a backstage management system based on vue
and gin, w ...)
+ TODO: check
+CVE-2024-31455 (Minder by Stacklok is an open source software supply chain
security pl ...)
+ TODO: check
+CVE-2024-31454 (PsiTransfer is an open source, self-hosted file sharing
solution. Prio ...)
+ TODO: check
+CVE-2024-31453 (PsiTransfer is an open source, self-hosted file sharing
solution. Prio ...)
+ TODO: check
+CVE-2024-31370 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2024-31369 (Cross-Site Request Forgery (CSRF) vulnerability in PenciDesign
Soledad ...)
+ TODO: check
+CVE-2024-31368 (Missing Authorization vulnerability in PenciDesign
Soledad.This issue ...)
+ TODO: check
+CVE-2024-31367 (Missing Authorization vulnerability in PenciDesign
Soledad.This issue ...)
+ TODO: check
+CVE-2024-30706 (An issue was discovered in ROS2 Dashing Diademata versions
ROS_VERSION ...)
+ TODO: check
+CVE-2024-30704 (An insecure deserialization vulnerability has been identified
in ROS2 ...)
+ TODO: check
+CVE-2024-30703 (An arbitrary file upload vulnerability has been discovered in
ROS2 (Ro ...)
+ TODO: check
+CVE-2024-30702 (An issue was discovered in ROS2 Galactic Geochelone in
ROS_VERSION 2 a ...)
+ TODO: check
+CVE-2024-30262 (Contao is an open source content management system. Prior to
version 4 ...)
+ TODO: check
+CVE-2024-30191 (A vulnerability has been identified in SCALANCE W1748-1 M12
(6GK5748-1 ...)
+ TODO: check
+CVE-2024-30190 (A vulnerability has been identified in SCALANCE W1748-1 M12
(6GK5748-1 ...)
+ TODO: check
+CVE-2024-30189 (A vulnerability has been identified in SCALANCE W721-1 RJ45
(6GK5721-1 ...)
+ TODO: check
+CVE-2024-2974 (The Essential Addons for Elementor \u2013 Best Elementor
Templates, Wi ...)
+ TODO: check
+CVE-2024-2957 (The Simple Ajax Chat \u2013 Add a Fast, Secure Chat Box plugin
for Wor ...)
+ TODO: check
+CVE-2024-2946 (The ShopLentor \u2013 WooCommerce Builder for Elementor &
Gutenberg +1 ...)
+ TODO: check
+CVE-2024-2918 (Improper input validation in PAM JIT elevation feature in
Devolutions ...)
+ TODO: check
+CVE-2024-2871 (The Media Library Assistant plugin for WordPress is vulnerable
to SQL ...)
+ TODO: check
+CVE-2024-2866 (The Gutenberg Blocks by Kadence Blocks \u2013 Page Builder
Features pl ...)
+ TODO: check
+CVE-2024-2847 (The WordPress File Upload plugin for WordPress is vulnerable to
Stored ...)
+ TODO: check
+CVE-2024-2845 (The BetterDocs \u2013 Best Documentation, FAQ & Knowledge Base
Plugin ...)
+ TODO: check
+CVE-2024-2804 (The Network Summary plugin for WordPress is vulnerable to SQL
Injectio ...)
+ TODO: check
+CVE-2024-2792 (The Elementor Addon Elements plugin for WordPress is vulnerable
to Sto ...)
+ TODO: check
+CVE-2024-2789 (The Happy Addons for Elementor plugin for WordPress is
vulnerable to S ...)
+ TODO: check
+CVE-2024-2788 (The Happy Addons for Elementor plugin for WordPress is
vulnerable to S ...)
+ TODO: check
+CVE-2024-2787 (The Happy Addons for Elementor plugin for WordPress is
vulnerable to S ...)
+ TODO: check
+CVE-2024-2786 (The Happy Addons for Elementor plugin for WordPress is
vulnerable to S ...)
+ TODO: check
+CVE-2024-2783 (The GamiPress \u2013 The #1 gamification plugin to reward
points, achi ...)
+ TODO: check
+CVE-2024-2738 (The Permalink Manager Lite and Pro plugins for WordPress are
vulnerabl ...)
+ TODO: check
+CVE-2024-2693 (The Link Whisper Free plugin for WordPress is vulnerable to PHP
Object ...)
+ TODO: check
+CVE-2024-2654 (The File Manager plugin for WordPress is vulnerable to
Directory Trave ...)
+ TODO: check
+CVE-2024-2650 (The Essential Addons for Elementor \u2013 Best Elementor
Templates, Wi ...)
+ TODO: check
+CVE-2024-2623 (The Essential Addons for Elementor \u2013 Best Elementor
Templates, Wi ...)
+ TODO: check
+CVE-2024-2543 (The Permalink Manager Lite plugin for WordPress is vulnerable
to unaut ...)
+ TODO: check
+CVE-2024-2536 (The Rank Math SEO with AI SEO Tools plugin for WordPress is
vulnerable ...)
+ TODO: check
+CVE-2024-2513 (The WP Chat App plugin for WordPress is vulnerable to Stored
Cross-Sit ...)
+ TODO: check
+CVE-2024-2507 (The JetWidgets For Elementor plugin for WordPress is vulnerable
to Sto ...)
+ TODO: check
+CVE-2024-2504 (The Page Builder: Pagelayer \u2013 Drag and Drop website
builder plugi ...)
+ TODO: check
+CVE-2024-2501 (The Hubbub Lite \u2013 Fast, Reliable Social Sharing Buttons
plugin fo ...)
+ TODO: check
+CVE-2024-2492 (The PowerPack Addons for Elementor plugin for WordPress is
vulnerable ...)
+ TODO: check
+CVE-2024-2457 (The Modal Window \u2013 create popup modal window plugin for
WordPress ...)
+ TODO: check
+CVE-2024-2456 (The Ecwid Ecommerce Shopping Cart plugin for WordPress is
vulnerable t ...)
+ TODO: check
+CVE-2024-2436 (The Lightweight Accordion plugin for WordPress is vulnerable to
Stored ...)
+ TODO: check
+CVE-2024-2423 (The UsersWP \u2013 Front-end login form, User Registration,
User Profi ...)
+ TODO: check
+CVE-2024-2348 (The Gum Elementor Addon plugin for WordPress is vulnerable to
Stored C ...)
+ TODO: check
+CVE-2024-2347 (The Astra theme for WordPress is vulnerable to Stored
Cross-Site Scrip ...)
+ TODO: check
+CVE-2024-2344 (The Avada theme for WordPress is vulnerable to SQL Injection
via the ' ...)
+ TODO: check
+CVE-2024-2343 (The Avada | Website Builder For WordPress & WooCommerce theme
for Word ...)
+ TODO: check
+CVE-2024-2342 (The Appointment Booking Calendar \u2014 Simply Schedule
Appointments B ...)
+ TODO: check
+CVE-2024-2341 (The Appointment Booking Calendar \u2014 Simply Schedule
Appointments B ...)
+ TODO: check
+CVE-2024-2340 (The Avada theme for WordPress is vulnerable to Sensitive
Information E ...)
+ TODO: check
+CVE-2024-2336 (The Popup Maker \u2013 Popup for opt-ins, lead gen, & more
plugin for ...)
+ TODO: check
+CVE-2024-2335 (The Elements Plus! plugin for WordPress is vulnerable to Stored
Cross- ...)
+ TODO: check
+CVE-2024-2334 (The Template Kit \u2013 Import plugin for WordPress is
vulnerable to S ...)
+ TODO: check
+CVE-2024-2327 (The Global Elementor Buttons plugin for WordPress is vulnerable
to Sto ...)
+ TODO: check
+CVE-2024-2325 (The Link Library plugin for WordPress is vulnerable to
Reflected Cross ...)
+ TODO: check
+CVE-2024-2311 (The Avada theme for WordPress is vulnerable to Stored
Cross-Site Scrip ...)
+ TODO: check
+CVE-2024-2306 (The Revslider plugin for WordPress is vulnerable to Stored
Cross-Site ...)
+ TODO: check
+CVE-2024-2305 (The Cards for Beaver Builder plugin for WordPress is vulnerable
to Sto ...)
+ TODO: check
+CVE-2024-2302 (The Easy Digital Downloads \u2013 Sell Digital Files &
Subscriptions ( ...)
+ TODO: check
+CVE-2024-2289 (The PowerPack Lite for Beaver Builder plugin for WordPress is
vulnerab ...)
+ TODO: check
+CVE-2024-2287 (The Knight Lab Timeline plugin for WordPress is vulnerable to
Stored C ...)
+ TODO: check
+CVE-2024-2261 (The Event Tickets and Registration plugin for WordPress is
vulnerable ...)
+ TODO: check
+CVE-2024-2226 (The Otter Blocks \u2013 Gutenberg Blocks, Page Builder for
Gutenberg E ...)
+ TODO: check
+CVE-2024-2224 (Improper Limitation of a Pathname to a Restricted Directory
(\u2018Pat ...)
+ TODO: check
+CVE-2024-2223 (An Incorrect Regular Expression vulnerability in Bitdefender
GravityZo ...)
+ TODO: check
+CVE-2024-2222 (The Advanced Classifieds & Directory Pro plugin for WordPress
is vulne ...)
+ TODO: check
+CVE-2024-2200 (The Contact Form by BestWebSoft plugin for WordPress is
vulnerable to ...)
+ TODO: check
+CVE-2024-2198 (The Contact Form by BestWebSoft plugin for WordPress is
vulnerable to ...)
+ TODO: check
+CVE-2024-2187 (The Beaver Builder Addons by WPZOOM plugin for WordPress is
vulnerable ...)
+ TODO: check
+CVE-2024-2186 (The Beaver Builder Addons by WPZOOM plugin for WordPress is
vulnerable ...)
+ TODO: check
+CVE-2024-2185 (The Beaver Builder Addons by WPZOOM plugin for WordPress is
vulnerable ...)
+ TODO: check
+CVE-2024-2183 (The Beaver Builder Addons by WPZOOM plugin for WordPress is
vulnerable ...)
+ TODO: check
+CVE-2024-2181 (The Beaver Builder Addons by WPZOOM plugin for WordPress is
vulnerable ...)
+ TODO: check
+CVE-2024-2165 (The SEOPress \u2013 On-site SEO plugin for WordPress is
vulnerable to ...)
+ TODO: check
+CVE-2024-2138 (The JetWidgets For Elementor plugin for WordPress is vulnerable
to Sto ...)
+ TODO: check
+CVE-2024-2125 (The Env\xedaloSimple: Email Marketing y Newsletters plugin for
WordPre ...)
+ TODO: check
+CVE-2024-2117 (The Elementor Website Builder \u2013 More than Just a Page
Builder plu ...)
+ TODO: check
+CVE-2024-2112 (The Form Maker by 10Web \u2013 Mobile-Friendly Drag & Drop
Contact For ...)
+ TODO: check
+CVE-2024-2093 (The VK All in One Expansion Unit plugin for WordPress is
vulnerable to ...)
+ TODO: check
+CVE-2024-2081 (The Best WordPress Gallery Plugin \u2013 FooGallery plugin for
WordPre ...)
+ TODO: check
+CVE-2024-2039 (The Stackable \u2013 Page Builder Gutenberg Blocks plugin for
WordPres ...)
+ TODO: check
+CVE-2024-2033 (The Video Conferencing with Zoom plugin for WordPress is
vulnerable to ...)
+ TODO: check
+CVE-2024-2027 (The Real Media Library: Media Library Folder & File Manager
plugin for ...)
+ TODO: check
+CVE-2024-2026 (The Passster plugin for WordPress is vulnerable to Stored
Cross-Site S ...)
+ TODO: check
+CVE-2024-2018 (The WP Activity Log Premium plugin for WordPress is vulnerable
to SQL ...)
+ TODO: check
+CVE-2024-29993 (Azure CycleCloud Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-29992 (Azure Identity Library for .NET Information Disclosure
Vulnerability)
+ TODO: check
+CVE-2024-29990 (Microsoft Azure Kubernetes Service Confidential Container
Elevation of ...)
+ TODO: check
+CVE-2024-29989 (Azure Monitor Agent Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-29988 (SmartScreen Prompt Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-29985 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-29984 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-29983 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-29982 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-29905 (DIRAC is an interware, meaning a software framework for
distributed co ...)
+ TODO: check
+CVE-2024-29066 (Windows Distributed File System (DFS) Remote Code Execution
Vulnerabil ...)
+ TODO: check
+CVE-2024-29064 (Windows Hyper-V Denial of Service Vulnerability)
+ TODO: check
+CVE-2024-29063 (Azure AI Search Information Disclosure Vulnerability)
+ TODO: check
+CVE-2024-29062 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-29061 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-29056 (Windows Authentication Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-29055 (Microsoft Defender for IoT Elevation of Privilege
Vulnerability)
+ TODO: check
+CVE-2024-29054 (Microsoft Defender for IoT Elevation of Privilege
Vulnerability)
+ TODO: check
+CVE-2024-29053 (Microsoft Defender for IoT Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-29052 (Windows Storage Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-29050 (Windows Cryptographic Services Remote Code Execution
Vulnerability)
+ TODO: check
+CVE-2024-29048 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-29047 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-29046 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-29045 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-29044 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-29043 (Microsoft ODBC Driver for SQL Server Remote Code Execution
Vulnerabili ...)
+ TODO: check
+CVE-2024-28945 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-28944 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-28943 (Microsoft ODBC Driver for SQL Server Remote Code Execution
Vulnerabili ...)
+ TODO: check
+CVE-2024-28942 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-28941 (Microsoft ODBC Driver for SQL Server Remote Code Execution
Vulnerabili ...)
+ TODO: check
+CVE-2024-28940 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-28939 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-28938 (Microsoft ODBC Driver for SQL Server Remote Code Execution
Vulnerabili ...)
+ TODO: check
+CVE-2024-28937 (Microsoft ODBC Driver for SQL Server Remote Code Execution
Vulnerabili ...)
+ TODO: check
+CVE-2024-28936 (Microsoft ODBC Driver for SQL Server Remote Code Execution
Vulnerabili ...)
+ TODO: check
+CVE-2024-28935 (Microsoft ODBC Driver for SQL Server Remote Code Execution
Vulnerabili ...)
+ TODO: check
+CVE-2024-28934 (Microsoft ODBC Driver for SQL Server Remote Code Execution
Vulnerabili ...)
+ TODO: check
+CVE-2024-28933 (Microsoft ODBC Driver for SQL Server Remote Code Execution
Vulnerabili ...)
+ TODO: check
+CVE-2024-28932 (Microsoft ODBC Driver for SQL Server Remote Code Execution
Vulnerabili ...)
+ TODO: check
+CVE-2024-28931 (Microsoft ODBC Driver for SQL Server Remote Code Execution
Vulnerabili ...)
+ TODO: check
+CVE-2024-28930 (Microsoft ODBC Driver for SQL Server Remote Code Execution
Vulnerabili ...)
+ TODO: check
+CVE-2024-28929 (Microsoft ODBC Driver for SQL Server Remote Code Execution
Vulnerabili ...)
+ TODO: check
+CVE-2024-28927 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-28926 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-28925 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28924 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28923 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28922 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28921 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28920 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28919 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28917 (Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation
of Priv ...)
+ TODO: check
+CVE-2024-28915 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-28914 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-28913 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-28912 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-28911 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-28910 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-28909 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-28908 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-28907 (Microsoft Brokering File System Elevation of Privilege
Vulnerability)
+ TODO: check
+CVE-2024-28906 (Microsoft OLE DB Driver for SQL Server Remote Code Execution
Vulnerabi ...)
+ TODO: check
+CVE-2024-28905 (Microsoft Brokering File System Elevation of Privilege
Vulnerability)
+ TODO: check
+CVE-2024-28904 (Microsoft Brokering File System Elevation of Privilege
Vulnerability)
+ TODO: check
+CVE-2024-28903 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28902 (Windows Remote Access Connection Manager Information
Disclosure Vulner ...)
+ TODO: check
+CVE-2024-28901 (Windows Remote Access Connection Manager Information
Disclosure Vulner ...)
+ TODO: check
+CVE-2024-28900 (Windows Remote Access Connection Manager Information
Disclosure Vulner ...)
+ TODO: check
+CVE-2024-28898 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28897 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28896 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28235 (Contao is an open source content management system. Starting
in versio ...)
+ TODO: check
+CVE-2024-28234 (Contao is an open source content management system. Starting
in versio ...)
+ TODO: check
+CVE-2024-28191 (Contao is an open source content management system. Starting
in versio ...)
+ TODO: check
+CVE-2024-28190 (Contao is an open source content management system. Starting
in versio ...)
+ TODO: check
+CVE-2024-27665 (Unifiedtransform v2.X is vulnerable to Stored Cross-Site
Scripting (XS ...)
+ TODO: check
+CVE-2024-27247 (Improper privilege management in the installer for Zoom
Desktop Client ...)
+ TODO: check
+CVE-2024-27242 (Cross site scripting in Zoom Desktop Client for Linux before
version 5 ...)
+ TODO: check
+CVE-2024-26277 (A vulnerability has been identified in Parasolid V35.1 (All
versions < ...)
+ TODO: check
+CVE-2024-26276 (A vulnerability has been identified in Parasolid V35.1 (All
versions < ...)
+ TODO: check
+CVE-2024-26275 (A vulnerability has been identified in Parasolid V35.1 (All
versions < ...)
+ TODO: check
+CVE-2024-26257 (Microsoft Excel Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26256 (libarchive Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26255 (Windows Remote Access Connection Manager Information
Disclosure Vulner ...)
+ TODO: check
+CVE-2024-26254 (Microsoft Virtual Machine Bus (VMBus) Denial of Service
Vulnerability)
+ TODO: check
+CVE-2024-26253 (Windows rndismp6.sys Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26252 (Windows rndismp6.sys Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26251 (Microsoft SharePoint Server Spoofing Vulnerability)
+ TODO: check
+CVE-2024-26250 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-26248 (Windows Kerberos Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26245 (Windows SMB Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26244 (Microsoft WDAC OLE DB Provider for SQL Server Remote Code
Execution Vu ...)
+ TODO: check
+CVE-2024-26243 (Windows USB Print Driver Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26242 (Windows Telephony Server Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26241 (Win32k Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26240 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-26239 (Windows Telephony Server Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26237 (Windows Defender Credential Guard Elevation of Privilege
Vulnerability)
+ TODO: check
+CVE-2024-26236 (Windows Update Stack Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26235 (Windows Update Stack Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26234 (Proxy Driver Spoofing Vulnerability)
+ TODO: check
+CVE-2024-26233 (Windows DNS Server Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26232 (Microsoft Message Queuing (MSMQ) Remote Code Execution
Vulnerability)
+ TODO: check
+CVE-2024-26231 (Windows DNS Server Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26230 (Windows Telephony Server Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26229 (Windows CSC Service Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26228 (Windows Cryptographic Services Security Feature Bypass
Vulnerability)
+ TODO: check
+CVE-2024-26227 (Windows DNS Server Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26226 (Windows Distributed File System (DFS) Information Disclosure
Vulnerabi ...)
+ TODO: check
+CVE-2024-26224 (Windows DNS Server Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26223 (Windows DNS Server Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26222 (Windows DNS Server Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26221 (Windows DNS Server Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26220 (Windows Mobile Hotspot Information Disclosure Vulnerability)
+ TODO: check
+CVE-2024-26219 (HTTP.sys Denial of Service Vulnerability)
+ TODO: check
+CVE-2024-26218 (Windows Kernel Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26217 (Windows Remote Access Connection Manager Information
Disclosure Vulner ...)
+ TODO: check
+CVE-2024-26216 (Windows File Server Resource Management Service Elevation of
Privilege ...)
+ TODO: check
+CVE-2024-26215 (DHCP Server Service Denial of Service Vulnerability)
+ TODO: check
+CVE-2024-26214 (Microsoft WDAC SQL Server ODBC Driver Remote Code Execution
Vulnerabil ...)
+ TODO: check
+CVE-2024-26213 (Microsoft Brokering File System Elevation of Privilege
Vulnerability)
+ TODO: check
+CVE-2024-26212 (DHCP Server Service Denial of Service Vulnerability)
+ TODO: check
+CVE-2024-26211 (Windows Remote Access Connection Manager Elevation of
Privilege Vulner ...)
+ TODO: check
+CVE-2024-26210 (Microsoft WDAC OLE DB Provider for SQL Server Remote Code
Execution Vu ...)
+ TODO: check
+CVE-2024-26209 (Microsoft Local Security Authority Subsystem Service
Information Discl ...)
+ TODO: check
+CVE-2024-26208 (Microsoft Message Queuing (MSMQ) Remote Code Execution
Vulnerability)
+ TODO: check
+CVE-2024-26207 (Windows Remote Access Connection Manager Information
Disclosure Vulner ...)
+ TODO: check
+CVE-2024-26205 (Windows Routing and Remote Access Service (RRAS) Remote Code
Execution ...)
+ TODO: check
+CVE-2024-26202 (DHCP Server Service Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26200 (Windows Routing and Remote Access Service (RRAS) Remote Code
Execution ...)
+ TODO: check
+CVE-2024-26195 (DHCP Server Service Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26194 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-26193 (Azure Migrate Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26189 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-26183 (Windows Kerberos Denial of Service Vulnerability)
+ TODO: check
+CVE-2024-26180 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-26179 (Windows Routing and Remote Access Service (RRAS) Remote Code
Execution ...)
+ TODO: check
+CVE-2024-26175 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-26172 (Windows DWM Core Library Information Disclosure Vulnerability)
+ TODO: check
+CVE-2024-26171 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-26168 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-26158 (Microsoft Install Service Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-25116 (RedisBloom adds a set of probabilistic data structures to
Redis. Start ...)
+ TODO: check
+CVE-2024-25115 (RedisBloom adds a set of probabilistic data structures to
Redis. Start ...)
+ TODO: check
+CVE-2024-24694 (Improper privilege management in the installer for Zoom
Desktop Client ...)
+ TODO: check
+CVE-2024-24576 (Rust is a programming language. The Rust Security Response WG
was noti ...)
+ TODO: check
+CVE-2024-24245 (An issue in Canimaan Software LTD ClamXAV v3.1.2 through
v3.6.1 and fi ...)
+ TODO: check
+CVE-2024-23671 (A improper limitation of a pathname to a restricted directory
('path t ...)
+ TODO: check
+CVE-2024-23662 (An exposure of sensitive information to an unauthorized actor
in Forti ...)
+ TODO: check
+CVE-2024-22423 (yt-dlp is a youtube-dl fork with additional features and
fixes. The pa ...)
+ TODO: check
+CVE-2024-21756 (A improper neutralization of special elements used in an os
command (' ...)
+ TODO: check
+CVE-2024-21755 (A improper neutralization of special elements used in an os
command (' ...)
+ TODO: check
+CVE-2024-21447 (Windows Authentication Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-21424 (Azure Compute Gallery Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-21409 (.NET, .NET Framework, and Visual Studio Remote Code Execution
Vulnerab ...)
+ TODO: check
+CVE-2024-21324 (Microsoft Defender for IoT Elevation of Privilege
Vulnerability)
+ TODO: check
+CVE-2024-21323 (Microsoft Defender for IoT Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-21322 (Microsoft Defender for IoT Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-20693 (Windows Kernel Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-20689 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-20688 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-20685 (Azure Private 5G Core Denial of Service Vulnerability)
+ TODO: check
+CVE-2024-20678 (Remote Procedure Call Runtime Remote Code Execution
Vulnerability)
+ TODO: check
+CVE-2024-20670 (Outlook for Windows Spoofing Vulnerability)
+ TODO: check
+CVE-2024-20669 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-20665 (BitLocker Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-1999 (The Gutenberg Blocks by Kadence Blocks \u2013 Page Builder
Features pl ...)
+ TODO: check
+CVE-2024-1991 (The RegistrationMagic \u2013 Custom Registration Forms, User
Registrat ...)
+ TODO: check
+CVE-2024-1990 (The RegistrationMagic \u2013 Custom Registration Forms, User
Registrat ...)
+ TODO: check
+CVE-2024-1984 (The Graphene theme for WordPress is vulnerable to unauthorized
access ...)
+ TODO: check
+CVE-2024-1974 (The HT Mega \u2013 Absolute Addons For Elementor plugin for
WordPress ...)
+ TODO: check
+CVE-2024-1960 (The ShopLentor \u2013 WooCommerce Builder for Elementor &
Gutenberg +1 ...)
+ TODO: check
+CVE-2024-1948 (The Getwid \u2013 Gutenberg Blocks plugin for WordPress is
vulnerable ...)
+ TODO: check
+CVE-2024-1934 (The WP Compress \u2013 Image Optimizer plugin for WordPress is
vulnera ...)
+ TODO: check
+CVE-2024-1904 (The MasterStudy LMS plugin for WordPress is vulnerable to
unauthorized ...)
+ TODO: check
+CVE-2024-1893 (The Easy Property Listings plugin for WordPress is vulnerable
to time- ...)
+ TODO: check
+CVE-2024-1852 (The WP-Members Membership Plugin plugin for WordPress is
vulnerable to ...)
+ TODO: check
+CVE-2024-1850 (The AI Post Generator | AutoWriter plugin for WordPress is
vulnerable ...)
+ TODO: check
+CVE-2024-1813 (The Simple Job Board plugin for WordPress is vulnerable to PHP
Object ...)
+ TODO: check
+CVE-2024-1812 (The Everest Forms plugin for WordPress is vulnerable to
Server-Side Re ...)
+ TODO: check
+CVE-2024-1794 (The Forminator plugin for WordPress is vulnerable to Stored
Cross-Site ...)
+ TODO: check
+CVE-2024-1792 (The CMB2 plugin for WordPress is vulnerable to PHP Object
Injection in ...)
+ TODO: check
+CVE-2024-1790 (The WordPress Infinite Scroll \u2013 Ajax Load More plugin for
WordPre ...)
+ TODO: check
+CVE-2024-1774 (The Customily Product Personalizer plugin for WordPress is
vulnerable ...)
+ TODO: check
+CVE-2024-1641 (The Accordion plugin for WordPress is vulnerable to
unauthorized acces ...)
+ TODO: check
+CVE-2024-1637 (The 360 Javascript Viewer plugin for WordPress is vulnerable to
unauth ...)
+ TODO: check
+CVE-2024-1587 (The Newsmatic theme for WordPress is vulnerable to Sensitive
Informati ...)
+ TODO: check
+CVE-2024-1571 (The WP Recipe Maker plugin for WordPress is vulnerable to
Stored Cross ...)
+ TODO: check
+CVE-2024-1498 (The Happy Addons for Elementor plugin for WordPress is
vulnerable to S ...)
+ TODO: check
+CVE-2024-1466 (The Elementor Addons by Livemesh plugin for WordPress is
vulnerable to ...)
+ TODO: check
+CVE-2024-1465 (The Elementor Addons by Livemesh plugin for WordPress is
vulnerable to ...)
+ TODO: check
+CVE-2024-1464 (The Elementor Addons by Livemesh plugin for WordPress is
vulnerable to ...)
+ TODO: check
+CVE-2024-1463 (The LearnPress \u2013 WordPress LMS Plugin plugin for WordPress
is vul ...)
+ TODO: check
+CVE-2024-1461 (The Elementor Addons by Livemesh plugin for WordPress is
vulnerable to ...)
+ TODO: check
+CVE-2024-1458 (The Elementor Addons by Livemesh plugin for WordPress is
vulnerable to ...)
+ TODO: check
+CVE-2024-1424 (The GiveWP \u2013 Donation Plugin and Fundraising Platform
plugin for ...)
+ TODO: check
+CVE-2024-1412 (The Memberpress plugin for WordPress is vulnerable to Reflected
Cross- ...)
+ TODO: check
+CVE-2024-1387 (The Happy Addons for Elementor plugin for WordPress is
vulnerable to u ...)
+ TODO: check
+CVE-2024-1352 (The Classified Listing \u2013 Classified ads & Business
Directory Plug ...)
+ TODO: check
+CVE-2024-1315 (The Classified Listing \u2013 Classified ads & Business
Directory Plug ...)
+ TODO: check
+CVE-2024-1308 (The WooCommerce Cloak Affiliate Links plugin for WordPress is
vulnerab ...)
+ TODO: check
+CVE-2024-1289 (The LearnPress \u2013 WordPress LMS Plugin plugin for WordPress
is vul ...)
+ TODO: check
+CVE-2024-0952 (The WP ERP | Complete HR solution with recruitment & job
listings | Wo ...)
+ TODO: check
+CVE-2024-0899 (The s2Member \u2013 Best Membership Plugin for All Kinds of
Membership ...)
+ TODO: check
+CVE-2024-0873 (The Watu Quiz plugin for WordPress is vulnerable to Stored
Cross-Site ...)
+ TODO: check
+CVE-2024-0872 (The Watu Quiz plugin for WordPress is vulnerable to Sensitive
Informat ...)
+ TODO: check
+CVE-2024-0826 (The Qi Addons For Elementor plugin for WordPress is vulnerable
to Stor ...)
+ TODO: check
+CVE-2024-0662 (The FancyBox for WordPress plugin for WordPress is vulnerable
to Store ...)
+ TODO: check
+CVE-2024-0626 (The WooCommerce Clover Payment Gateway plugin for WordPress is
vulnera ...)
+ TODO: check
+CVE-2024-0598 (The Gutenberg Blocks by Kadence Blocks \u2013 Page Builder
Features pl ...)
+ TODO: check
+CVE-2024-0588 (The Paid Memberships Pro \u2013 Content Restriction, User
Registration ...)
+ TODO: check
+CVE-2024-0376 (The Premium Addons for Elementor plugin for WordPress is
vulnerable to ...)
+ TODO: check
+CVE-2023-7046 (The WP Encryption \u2013 One Click Free SSL Certificate & SSL /
HTTPS ...)
+ TODO: check
+CVE-2023-6999 (The Pods \u2013 Custom Content Types and Fields plugin for
WordPress i ...)
+ TODO: check
+CVE-2023-6993 (The Custom post types, Custom Fields & more plugin for
WordPress is vu ...)
+ TODO: check
+CVE-2023-6967 (The Pods \u2013 Custom Content Types and Fields plugin for
WordPress i ...)
+ TODO: check
+CVE-2023-6965 (The Pods \u2013 Custom Content Types and Fields plugin for
WordPress i ...)
+ TODO: check
+CVE-2023-6964 (The Gutenberg Blocks by Kadence Blocks \u2013 Page Builder
Features pl ...)
+ TODO: check
+CVE-2023-6799 (The WP Reset \u2013 Most Advanced WordPress Reset Tool plugin
for Word ...)
+ TODO: check
+CVE-2023-6777 (The WP Go Maps (formerly WP Google Maps) plugin for WordPress
is vulne ...)
+ TODO: check
+CVE-2023-6695 (The Beaver Themer plugin for WordPress is vulnerable to
Sensitive Info ...)
+ TODO: check
+CVE-2023-6694 (The Beaver Themer plugin for WordPress is vulnerable to Stored
Cross-S ...)
+ TODO: check
+CVE-2023-6486 (The Spectra \u2013 WordPress Gutenberg Blocks plugin for
WordPress is ...)
+ TODO: check
+CVE-2023-6320 (A command injection vulnerability exists in the
com.webos.service.conn ...)
+ TODO: check
+CVE-2023-6319 (A command injection vulnerability exists in the
getAudioMetadatamethod ...)
+ TODO: check
+CVE-2023-6318 (A command injection vulnerability exists in the
processAnalyticsReport ...)
+ TODO: check
+CVE-2023-6317 (A prompt bypass exists in the secondscreen.gateway service
running on ...)
+ TODO: check
+CVE-2023-50821 (A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All
version ...)
+ TODO: check
+CVE-2023-49913 (A stack-based buffer overflow vulnerability exists in the web
interfac ...)
+ TODO: check
+CVE-2023-49912 (A stack-based buffer overflow vulnerability exists in the web
interfac ...)
+ TODO: check
+CVE-2023-49911 (A stack-based buffer overflow vulnerability exists in the web
interfac ...)
+ TODO: check
+CVE-2023-49910 (A stack-based buffer overflow vulnerability exists in the web
interfac ...)
+ TODO: check
+CVE-2023-49909 (A stack-based buffer overflow vulnerability exists in the web
interfac ...)
+ TODO: check
+CVE-2023-49908 (A stack-based buffer overflow vulnerability exists in the web
interfac ...)
+ TODO: check
+CVE-2023-49907 (A stack-based buffer overflow vulnerability exists in the web
interfac ...)
+ TODO: check
+CVE-2023-49906 (A stack-based buffer overflow vulnerability exists in the web
interfac ...)
+ TODO: check
+CVE-2023-49134 (A command execution vulnerability exists in the tddpd
enable_test_mode ...)
+ TODO: check
+CVE-2023-49133 (A command execution vulnerability exists in the tddpd
enable_test_mode ...)
+ TODO: check
+CVE-2023-49074 (A denial of service vulnerability exists in the TDDP
functionality of ...)
+ TODO: check
+CVE-2023-48784 (Ause of externally-controlled format string vulnerability
[CWE-134] in ...)
+ TODO: check
+CVE-2023-48724 (A memory corruption vulnerability exists in the web interface
function ...)
+ TODO: check
+CVE-2023-47542 (A improper neutralization of special elements used in a
template engin ...)
+ TODO: check
+CVE-2023-47541 (An improper limitation of a pathname to a restricted directory
('path ...)
+ TODO: check
+CVE-2023-47540 (An improper neutralization of special elements used in an os
command ( ...)
+ TODO: check
+CVE-2023-45590 (An improper control of generation of code ('code injection')
in Fortin ...)
+ TODO: check
+CVE-2023-41677 (A insufficiently protected credentials in Fortinet FortiProxy
7.4.0, 7 ...)
+ TODO: check
+CVE-2022-4965 (The Invitation Code Content Restriction Plugin from
CreativeMinds plug ...)
+ TODO: check
CVE-2024-2201 [Native Branch History Injection]
- linux <unfixed>
- xen <unfixed>
@@ -601,7 +1339,7 @@ CVE-2024-3348 (A vulnerability classified as critical has
been found in SourceCo
NOT-FOR-US: SourceCodester Aplaya Beach Resort Online Reservation System
CVE-2024-3347 (A vulnerability was found in SourceCodester Airline Ticket
Reservation ...)
NOT-FOR-US: SourceCodester Airline Ticket Reservation System
-CVE-2024-3346 (A vulnerability was found in Byzro Smart S80 up to 20240328. It
has be ...)
+CVE-2024-3346 (A vulnerability was found in Byzoro Smart S80 up to 20240328.
It has b ...)
NOT-FOR-US: Byzro Smart S80
CVE-2024-31852 (LLVM before 18.1.3 generates code in which the LR register can
be over ...)
- llvm-toolchain-14 <unfixed>
@@ -11878,7 +12616,7 @@ CVE-2024-1920 (A vulnerability, which was classified as
critical, has been found
NOT-FOR-US: osuuu LightPicture
CVE-2024-1919 (A vulnerability classified as problematic was found in
SourceCodester ...)
NOT-FOR-US: SourceCodester Online Job Portal
-CVE-2024-1918 (A vulnerability has been found in Beijing Baichuo Smart S42
Management ...)
+CVE-2024-1918 (A vulnerability has been found in Byzoro Smart S42 Management
Platform ...)
NOT-FOR-US: Beijing Baichuo Smart S42 Management Platform
CVE-2024-1912 (The Categorify plugin for WordPress is vulnerable to Cross-Site
Reques ...)
NOT-FOR-US: WordPress plugin
@@ -16369,7 +17107,7 @@ CVE-2024-1256 (A vulnerability was found in Jspxcms
10.2.0 and classified as pro
NOT-FOR-US: Jspxcms
CVE-2024-1255 (A vulnerability has been found in sepidz SepidzDigitalMenu up
to 7.1.0 ...)
NOT-FOR-US: SepidzDigitalMenu
-CVE-2024-1254 (A vulnerability, which was classified as critical, was found in
Beijin ...)
+CVE-2024-1254 (A vulnerability, which was classified as critical, was found in
Byzoro ...)
NOT-FOR-US: Beijing Baichuo Smart S20 Management Platform
CVE-2024-1253 (A vulnerability, which was classified as critical, has been
found in B ...)
NOT-FOR-US: Beijing Baichuo Smart S40 Management Platform
@@ -18445,7 +19183,7 @@ CVE-2024-0942 (A vulnerability was found in Totolink
N200RE V5 9.3.5u.6255_B2021
NOT-FOR-US: Totolink
CVE-2024-0941 (A vulnerability was found in Novel-Plus 4.3.0-RC1 and
classified as cr ...)
NOT-FOR-US: Novel-Plus
-CVE-2024-0939 (A vulnerability has been found in Beijing Baichuo Smart S210
Managemen ...)
+CVE-2024-0939 (A vulnerability has been found in Byzoro Smart S210 Management
Platfor ...)
NOT-FOR-US: Beijing Baichuo Smart S210 Management Platform
CVE-2024-0938 (A vulnerability, which was classified as critical, was found in
Tongda ...)
NOT-FOR-US: Tongda OA
@@ -19735,13 +20473,13 @@ CVE-2024-0718 (A vulnerability, which was classified
as problematic, has been fo
NOT-FOR-US: liuwy-dlsdys zhglxt
CVE-2024-0717 (A vulnerability classified as critical was found in D-Link
DAP-1360, D ...)
NOT-FOR-US: D-Link
-CVE-2024-0716 (A vulnerability classified as problematic has been found in
Beijing Ba ...)
+CVE-2024-0716 (A vulnerability classified as problematic has been found in
Byzoro Sma ...)
NOT-FOR-US: Beijing Baichuo Smart S150 Management Platform
CVE-2024-0714 (A vulnerability was found in MiczFlor RPi-Jukebox-RFID up to
2.5.0. It ...)
NOT-FOR-US: MiczFlor RPi-Jukebox-RFID
CVE-2024-0713 (A vulnerability was found in Monitorr 1.7.6m. It has been
declared as ...)
NOT-FOR-US: Monitorr
-CVE-2024-0712 (A vulnerability was found in Beijing Baichuo Smart S150
Management Pla ...)
+CVE-2024-0712 (A vulnerability was found in Byzoro Smart S150 Management
Platform V31 ...)
NOT-FOR-US: Beijing Baichuo Smart S150 Management Platform
CVE-2024-0705 (The Stripe Payment Plugin for WooCommerce plugin for WordPress
is vuln ...)
NOT-FOR-US: WordPress plugin
@@ -22811,7 +23549,7 @@ CVE-2024-0302 (A vulnerability, which was classified as
critical, has been found
NOT-FOR-US: fhs-opensource
CVE-2024-0301 (A vulnerability classified as critical was found in
fhs-opensource ipa ...)
NOT-FOR-US: fhs-opensource
-CVE-2024-0300 (A vulnerability was found in Beijing Baichuo Smart S150
Management Pla ...)
+CVE-2024-0300 (A vulnerability was found in Byzoro Smart S150 Management
Platform up ...)
NOT-FOR-US: Beijing Baichuo Smart S150 Management Platform
CVE-2024-0299 (A vulnerability was found in Totolink N200RE
9.3.5u.6139_B20201216. It ...)
NOT-FOR-US: Totolink
@@ -25024,7 +25762,7 @@ CVE-2023-7041 (A vulnerability, which was classified as
critical, has been found
NOT-FOR-US: codelyfe Stupid Simple CMS
CVE-2023-7040 (A vulnerability classified as problematic was found in codelyfe
Stupid ...)
NOT-FOR-US: codelyfe Stupid Simple CMS
-CVE-2023-7039 (A vulnerability classified as critical has been found in
Beijing Baich ...)
+CVE-2023-7039 (A vulnerability classified as critical has been found in Byzoro
S210 u ...)
NOT-FOR-US: Beijing Baichuo S210
CVE-2023-7038 (A vulnerability was found in automad up to 1.10.9. It has been
rated a ...)
NOT-FOR-US: automad
@@ -28186,9 +28924,9 @@ CVE-2023-6579 (A vulnerability, which was classified as
critical, has been found
NOT-FOR-US: osCommerce
CVE-2023-6578 (A vulnerability classified as critical has been found in
Software AG W ...)
NOT-FOR-US: Software AG WebMethods
-CVE-2023-6577 (A vulnerability was found in Beijing Baichuo PatrolFlow 2530Pro
up to ...)
+CVE-2023-6577 (A vulnerability was found in Byzoro PatrolFlow 2530Pro up to
20231126. ...)
NOT-FOR-US: Beijing Baichuo PatrolFlow 2530Pro
-CVE-2023-6576 (A vulnerability was found in Beijing Baichuo S210 up to
20231123. It h ...)
+CVE-2023-6576 (A vulnerability was found in Byzoro S210 up to 20231123. It has
been d ...)
NOT-FOR-US: Beijing Baichuo S210
CVE-2023-6061 (Multiple components of Iconics SCADA Suite are prone to a
Phantom DLL ...)
NOT-FOR-US: Iconics SCADA Suite
@@ -28231,9 +28969,9 @@ CVE-2023-45866 (Bluetooth HID Hosts in BlueZ may permit
an unauthenticated Perip
NOTE: configuration options but defaulted to false.
CVE-2023-6588 (Offline mode is always enabled, even if permission disallows
it, in D ...)
NOT-FOR-US: Devolutions Server
-CVE-2023-6575 (A vulnerability was found in Beijing Baichuo S210 up to
20231121. It h ...)
+CVE-2023-6575 (A vulnerability was found in Byzoro S210 up to 20231121. It has
been c ...)
NOT-FOR-US: Beijing Baichuo S210
-CVE-2023-6574 (A vulnerability was found in Beijing Baichuo Smart S20 up to
20231120 ...)
+CVE-2023-6574 (A vulnerability was found in Byzoro Smart S20 up to 20231120
and class ...)
NOT-FOR-US: Beijing Baichuo Smart S20
CVE-2023-6333 (The affected ControlByWeb Relay products are vulnerable to a
stored cr ...)
NOT-FOR-US: ControlByWeb Relay
@@ -30507,7 +31245,7 @@ CVE-2023-6276 (A vulnerability classified as critical
has been found in Tongda O
NOT-FOR-US: Tongda OA
CVE-2023-6275 (A vulnerability was found in TOTVS Fluig Platform
1.6.x/1.7.x/1.8.0/1. ...)
NOT-FOR-US: TOTVS Fluig Platform
-CVE-2023-6274 (A vulnerability was found in Beijing Baichuo Smart S80 up to
20231108. ...)
+CVE-2023-6274 (A vulnerability was found in Byzoro Smart S80 up to 20231108.
It has b ...)
NOT-FOR-US: Beijing Baichuo Smart S80
CVE-2023-6251 (Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, <
2.1.0p37, < ...)
- check-mk <removed>
@@ -32720,7 +33458,7 @@ CVE-2023-6084 (A vulnerability was found in Tongda OA
2017 up to 11.9 and classi
NOT-FOR-US: Tongda OA
CVE-2023-47037 (We failed to applyCVE-2023-40611 in 2.7.1 and this
vulnerability was m ...)
- airflow <itp> (bug #819700)
-CVE-2023-5959 (A vulnerability, which was classified as problematic, was found
in Bei ...)
+CVE-2023-5959 (A vulnerability, which was classified as problematic, was found
in Byz ...)
NOT-FOR-US: Beijing Baichuo Smart S85F Management Platform V31R02B10-01
CVE-2023-47390 (Headscale through 0.22.3 writes bearer tokens to info-level
logs.)
NOT-FOR-US: Headscale
@@ -36189,9 +36927,9 @@ CVE-2023-5349 (A memory leak flaw was found in
ruby-magick, an interface between
[bullseye] - ruby-rmagick <no-dsa> (Minor issue)
NOTE: https://github.com/rmagick/rmagick/pull/1406
NOTE:
https://github.com/rmagick/rmagick/commit/fec7a7e639ae565386f7615155dbcf49b957b64a
(RMagick_5-3-0)
-CVE-2023-5684 (A vulnerability was found in Beijing Baichuo Smart S85F
Management Pla ...)
+CVE-2023-5684 (A vulnerability was found in Byzoro Smart S85F Management
Platform up ...)
NOT-FOR-US: Beijing Baichuo Smart S85F Management Platform
-CVE-2023-5683 (A vulnerability was found in Beijing Baichuo Smart S85F
Management Pla ...)
+CVE-2023-5683 (A vulnerability was found in Byzoro Smart S85F Management
Platform up ...)
NOT-FOR-US: Beijing Baichuo Smart S85F Management Platform
CVE-2023-5682 (A vulnerability has been found in Tongda OA 2017 and classified
as cri ...)
NOT-FOR-US: Tongda OA
@@ -38161,19 +38899,19 @@ CVE-2023-5496 (A vulnerability was found in
Translator PoqDev Add-On 1.0.11 on F
NOT-FOR-US: Translator PoqDev
CVE-2023-5495 (A vulnerability was found in QDocs Smart School 6.4.1. It has
been cla ...)
NOT-FOR-US: QDocs Smart School
-CVE-2023-5494 (A vulnerability was found in Beijing Baichuo Smart S45F
Multi-Service ...)
+CVE-2023-5494 (A vulnerability was found in Byzoro Smart S45F Multi-Service
Secure Ga ...)
NOT-FOR-US: Beijing Baichuo Smart
-CVE-2023-5493 (A vulnerability has been found in Beijing Baichuo Smart S45F
Multi-Ser ...)
+CVE-2023-5493 (A vulnerability has been found in Byzoro Smart S45F
Multi-Service Secu ...)
NOT-FOR-US: Beijing Baichuo Smart
-CVE-2023-5492 (A vulnerability, which was classified as critical, was found in
Beijin ...)
+CVE-2023-5492 (A vulnerability, which was classified as critical, was found in
Byzoro ...)
NOT-FOR-US: Beijing Baichuo Smart
CVE-2023-5491 (A vulnerability, which was classified as critical, has been
found in B ...)
NOT-FOR-US: Beijing Baichuo Smart
-CVE-2023-5490 (A vulnerability classified as critical was found in Beijing
Baichuo Sm ...)
+CVE-2023-5490 (A vulnerability classified as critical was found in Byzoro
Smart S45F ...)
NOT-FOR-US: Beijing Baichuo Smart
-CVE-2023-5489 (A vulnerability classified as critical has been found in
Beijing Baich ...)
+CVE-2023-5489 (A vulnerability classified as critical has been found in Byzoro
Smart ...)
NOT-FOR-US: Beijing Baichuo Smart
-CVE-2023-5488 (A vulnerability was found in Beijing Baichuo Smart S45F
Multi-Service ...)
+CVE-2023-5488 (A vulnerability was found in Byzoro Smart S45F Multi-Service
Secure Ga ...)
NOT-FOR-US: Beijing Baichuo Smart
CVE-2023-5450 (An insufficient verification of data vulnerability exists in
BIG-IP Ed ...)
NOT-FOR-US: F5
@@ -43118,7 +43856,7 @@ CVE-2023-4877 (Exposure of Sensitive Information to an
Unauthorized Actor in Git
NOT-FOR-US: hamza417/inure
CVE-2023-4876 (Exposure of Sensitive Information to an Unauthorized Actor in
GitHub r ...)
NOT-FOR-US: hamza417/inure
-CVE-2023-4873 (A vulnerability, which was classified as critical, was found in
Beijin ...)
+CVE-2023-4873 (A vulnerability, which was classified as critical, was found in
Byzoro ...)
NOT-FOR-US: eijing Baichuo Smart S45F Multi-Service Secure Gateway
Intelligent Management Platform
CVE-2023-4872 (A vulnerability, which was classified as critical, has been
found in S ...)
NOT-FOR-US: SourceCodester Contact Manager App
@@ -44008,7 +44746,7 @@ CVE-2023-4747 (A vulnerability classified as critical
was found in DedeCMS 5.7.1
NOT-FOR-US: DedeCMS
CVE-2023-4746 (A vulnerability classified as critical has been found in
TOTOLINK N200 ...)
NOT-FOR-US: TOTOLINK
-CVE-2023-4745 (A vulnerability was found in Beijing Baichuo Smart S45F
Multi-Service ...)
+CVE-2023-4745 (A vulnerability was found in Byzoro Smart S45F Multi-Service
Secure Ga ...)
NOT-FOR-US: Beijing Baichuo Smart S45F Multi-Service ecure Gateway
Intelligent Management Platform
CVE-2023-4744 (A vulnerability was found in Tenda AC8 16.03.34.06_cn_TDC01. It
has be ...)
NOT-FOR-US: Tenda
@@ -45313,11 +46051,11 @@ CVE-2023-4548 (A vulnerability classified as critical
has been found in SPA-Cart
NOT-FOR-US: SPA-Cart eCommerce CMS
CVE-2023-4547 (A vulnerability was found in SPA-Cart eCommerce CMS 1.9.0.3. It
has be ...)
NOT-FOR-US: SPA-Cart eCommerce CMS
-CVE-2023-4546 (A vulnerability was found in Beijing Baichuo Smart S85F
Management Pla ...)
+CVE-2023-4546 (A vulnerability was found in Byzoro Smart S85F Management
Platform up ...)
NOT-FOR-US: Beijing Baichuo Smart S85F Management Plattform
CVE-2023-4545 (A vulnerability was found in IBOS OA 4.5.5. It has been
classified as ...)
NOT-FOR-US: IBOS OA
-CVE-2023-4544 (A vulnerability was found in Beijing Baichuo Smart S85F
Management Pla ...)
+CVE-2023-4544 (A vulnerability was found in Byzoro Smart S85F Management
Platform up ...)
NOT-FOR-US: Beijing Baichuo Smart S85F Management Platform
CVE-2023-4543 (A vulnerability was found in IBOS OA 4.5.5. It has been
declared as cr ...)
NOT-FOR-US: IBOS OA
@@ -46209,7 +46947,7 @@ CVE-2023-4422 (Cross-site Scripting (XSS) - Stored in
GitHub repository cockpit-
NOT-FOR-US: Cockpit Content Platform (different from src:cockpit)
CVE-2023-4415 (A vulnerability was found in Ruijie RG-EW1200G 07161417 r483.
It has b ...)
NOT-FOR-US: Ruijie
-CVE-2023-4414 (A vulnerability was found in Beijing Baichuo Smart S85F
Management Pla ...)
+CVE-2023-4414 (A vulnerability was found in Byzoro Smart S85F Management
Platform up ...)
NOT-FOR-US: Beijing Baichuo Smart S85F Management Platform
CVE-2023-4413
REJECTED
@@ -48453,9 +49191,9 @@ CVE-2023-4125 (Weak Password Requirements in GitHub
repository answerdev/answer
NOT-FOR-US: answerdev/answer
CVE-2023-4124 (Missing Authorization in GitHub repository answerdev/answer
prior to v ...)
NOT-FOR-US: answerdev/answer
-CVE-2023-4121 (A vulnerability was found in Beijing Baichuo Smart S85F
Management Pla ...)
+CVE-2023-4121 (A vulnerability was found in Byzoro Smart S85F Management
Platform up ...)
NOT-FOR-US: Beijing Baichuo Smart S85F Management Platform
-CVE-2023-4120 (A vulnerability was found in Beijing Baichuo Smart S85F
Management Pla ...)
+CVE-2023-4120 (A vulnerability was found in Byzoro Smart S85F Management
Platform up ...)
NOT-FOR-US: Beijing Baichuo Smart S85F Management Platform
CVE-2023-4119 (A vulnerability has been found in Academy LMS 6.0 and
classified as pr ...)
NOT-FOR-US: Academy LMS
@@ -71735,10 +72473,10 @@ CVE-2023-1085
RESERVED
CVE-2023-1084 (An issue has been discovered in GitLab CE/EE affecting all
versions be ...)
- gitlab 15.10.8+ds1-2
-CVE-2023-1083
- RESERVED
-CVE-2023-1082
- RESERVED
+CVE-2023-1083 (An unauthenticated remote attacker who is aware of aMQTT topic
name c ...)
+ TODO: check
+CVE-2023-1082 (An remote attacker with low privileges can perform a command
injection ...)
+ TODO: check
CVE-2023-27296 (Deserialization of Untrusted Data vulnerability in Apache
Software Fou ...)
NOT-FOR-US: Apache InLong
CVE-2023-27295 (Cross-site request forgery is facilitated by OpenCATS failure
to requi ...)
@@ -88192,8 +88930,8 @@ CVE-2022-47896 (In JetBrains IntelliJ IDEA before
2022.3.1 code Templates were v
- intellij-idea <itp> (bug #747616)
CVE-2022-47895 (In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP
File" act ...)
- intellij-idea <itp> (bug #747616)
-CVE-2022-47894
- RESERVED
+CVE-2022-47894 (Improper Input Validation vulnerability in Apache Zeppelin
SAP.This is ...)
+ TODO: check
CVE-2022-47893 (There is a remote code execution vulnerability that affects
all versio ...)
NOT-FOR-US: NetMan 204
CVE-2022-47892 (All versions of NetMan 204 could allow an unauthenticated
remote attac ...)
@@ -218625,8 +219363,8 @@ CVE-2021-28657 (A carefully crafted or corrupt file
may trigger an infinite loop
[bullseye] - tika <no-dsa> (Minor issue)
[buster] - tika <no-dsa> (Minor issue)
NOTE: https://www.openwall.com/lists/oss-security/2021/03/30/3
-CVE-2021-28656
- RESERVED
+CVE-2021-28656 (Cross-Site Request Forgery (CSRF) vulnerability in Credential
page of ...)
+ TODO: check
CVE-2021-28655 (The improper Input Validation vulnerability in "\u201dMove
folder to T ...)
NOT-FOR-US: Apache Zeppelin
CVE-2021-28654
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/088a99ddbb26b4e070300e19841cb94a21f2d1ed
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/088a99ddbb26b4e070300e19841cb94a21f2d1ed
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
