Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: eef40b59 by security tracker role at 2024-06-26T08:11:55+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,121 @@ +CVE-2024-6060 (An information disclosure vulnerability in Phloc Webscopes 7.0.0 allow ...) + TODO: check +CVE-2024-5573 (The Easy Table of Contents WordPress plugin before 2.0.66 does not san ...) + TODO: check +CVE-2024-5473 (The Simple Photoswipe WordPress plugin through 0.1 does not sanitise a ...) + TODO: check +CVE-2024-5460 (A vulnerability in the default configuration of the Simple Network Ma ...) + TODO: check +CVE-2024-5332 (The Exclusive Addons for Elementor plugin for WordPress is vulnerable ...) + TODO: check +CVE-2024-5215 (The HT Mega \u2013 Absolute Addons For Elementor plugin for WordPress ...) + TODO: check +CVE-2024-5199 (The Spotify Play Button WordPress plugin through 1.0 does not validate ...) + TODO: check +CVE-2024-5181 (A command injection vulnerability exists in the mudler/localai version ...) + TODO: check +CVE-2024-5173 (The HT Mega \u2013 Absolute Addons For Elementor plugin for WordPress ...) + TODO: check +CVE-2024-5169 (The Video Widget WordPress plugin through 1.2.3 does not sanitise and ...) + TODO: check +CVE-2024-5071 (The Bookster WordPress plugin through 1.1.0 allows adding sensitive p ...) + TODO: check +CVE-2024-5019 (In WhatsUp Gold versions released before 2023.1.3, an unauthenticated ...) + TODO: check +CVE-2024-5018 (In WhatsUp Gold versions released before 2023.1.3, an unauthenticated ...) + TODO: check +CVE-2024-5017 (In WhatsUp Gold versions released before 2023.1.3, a path traversal vu ...) + TODO: check +CVE-2024-5016 (In WhatsUp Gold versions released before 2023.1.3, Distributed Edition ...) + TODO: check +CVE-2024-5015 (In WhatsUp Gold versions released before 2023.1.3,an authenticated SSR ...) + TODO: check +CVE-2024-5014 (In WhatsUp Gold versions released before 2023.1.3, a Server Side Reque ...) + TODO: check +CVE-2024-5013 (In WhatsUp Gold versions released before 2023.1.3,an unauthenticated D ...) + TODO: check +CVE-2024-5012 (In WhatsUp Gold versions released before 2023.1.3, there is amissing a ...) + TODO: check +CVE-2024-4959 (The Frontend Checklist WordPress plugin through 2.3.2 does not sanitis ...) + TODO: check +CVE-2024-4957 (The Frontend Checklist WordPress plugin through 2.3.2 does not sanitis ...) + TODO: check +CVE-2024-4869 (The WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) plugin for WordPre ...) + TODO: check +CVE-2024-4758 (The Muslim Prayer Time BD WordPress plugin through 2.4 does not have C ...) + TODO: check +CVE-2024-4106 (A vulnerability has been found in FAST/TOOLS and CI Server. The affect ...) + TODO: check +CVE-2024-4105 (A vulnerability has been found in FAST/TOOLS and CI Server. The affect ...) + TODO: check +CVE-2024-3633 (The WebP & SVG Support WordPress plugin through 1.4.0 does not sanitis ...) + TODO: check +CVE-2024-38526 (pdoc provides API Documentation for Python Projects. Documentation gen ...) + TODO: check +CVE-2024-38516 (ai-client-html is an Aimeos e-commerce HTML client component. Debug in ...) + TODO: check +CVE-2024-38364 (DSpace is an open source software is a turnkey repository application ...) + TODO: check +CVE-2024-37855 (An issue in Nepstech Wifi Router xpon (terminal) NTPL-Xpon1GFEVN, hard ...) + TODO: check +CVE-2024-37843 (Craft CMS up to v3.7.31 was discovered to contain a SQL injection vuln ...) + TODO: check +CVE-2024-37742 (An issue in Safe Exam Browser for Windows before 3.6 allows an attacke ...) + TODO: check +CVE-2024-37141 (Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1. ...) + TODO: check +CVE-2024-37140 (Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1. ...) + TODO: check +CVE-2024-37139 (Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1. ...) + TODO: check +CVE-2024-37138 (Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1. ...) + TODO: check +CVE-2024-36802 + REJECTED +CVE-2024-35527 (An arbitrary file upload vulnerability in /fileupload/upload.cfm in Da ...) + TODO: check +CVE-2024-35526 (An issue in Daemon PTY Limited FarCry Core framework before 7.2.14 all ...) + TODO: check +CVE-2024-34581 (The W3C XML Signature Syntax and Processing (XMLDsig) specification, s ...) + TODO: check +CVE-2024-34580 (Apache XML Security for C++ through 2.0.4 implements the XML Signature ...) + TODO: check +CVE-2024-34400 (An issue was discovered in VirtoSoftware Virto Kanban Board Web Part b ...) + TODO: check +CVE-2024-30931 (Stored Cross Site Scripting vulnerability in Emby Media Server Emby Me ...) + TODO: check +CVE-2024-30112 (HCL Connections is vulnerable to a cross-site scripting attack where a ...) + TODO: check +CVE-2024-29954 (A vulnerability in a password management API in Brocade Fabric OS vers ...) + TODO: check +CVE-2024-29953 (A vulnerability in the web interface in Brocade Fabric OS before v9.2. ...) + TODO: check +CVE-2024-29177 (Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1. ...) + TODO: check +CVE-2024-29176 (Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1. ...) + TODO: check +CVE-2024-29175 (Dell PowerProtect Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.4 ...) + TODO: check +CVE-2024-29174 (Dell Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.30, LTS 7.10.1 ...) + TODO: check +CVE-2024-29173 (Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1. ...) + TODO: check +CVE-2024-28973 (Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1. ...) + TODO: check +CVE-2024-28830 (Insertion of Sensitive Information into Log File in Checkmk GmbH's Che ...) + TODO: check +CVE-2024-27867 (An authentication issue was addressed with improved state management. ...) + TODO: check +CVE-2024-24764 (October is a self-hosted CMS platform based on the Laravel PHP Framewo ...) + TODO: check +CVE-2024-21741 (GigaDevice GD32E103C8T6 devices have Incorrect Access Control.) + TODO: check +CVE-2024-21740 (Artery AT32F415CBT7 and AT32F421C8T7 devices have Incorrect Access Con ...) + TODO: check +CVE-2024-21739 (Geehy APM32F103CCT6, APM32F103RCT6, APM32F103RCT7, and APM32F103VCT6 d ...) + TODO: check +CVE-2024-21520 (Versions of the package djangorestframework before 3.15.2 are vulnerab ...) + TODO: check CVE-2024-6308 (A vulnerability was found in itsourcecode Simple Online Hotel Reservat ...) NOT-FOR-US: itsourcecode Simple Online Hotel Reservation System CVE-2024-6307 (WordPress Core is vulnerable to Stored Cross-Site Scripting via the HT ...) @@ -354,18 +472,22 @@ CVE-2023-45196 (Adminer and AdminerEvo allow an unauthenticated remote attacker CVE-2023-45195 (Adminer and AdminerEvo are vulnerable to SSRF via database connection ...) TODO: check CVE-2024-6293 (Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowe ...) + {DSA-5720-1} - chromium 126.0.6478.126-1 [bullseye] - chromium <end-of-life> (see #1061268) [buster] - chromium <end-of-life> (see DSA 5046) CVE-2024-6292 (Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowe ...) + {DSA-5720-1} - chromium 126.0.6478.126-1 [bullseye] - chromium <end-of-life> (see #1061268) [buster] - chromium <end-of-life> (see DSA 5046) CVE-2024-6291 (Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 ...) + {DSA-5720-1} - chromium 126.0.6478.126-1 [bullseye] - chromium <end-of-life> (see #1061268) [buster] - chromium <end-of-life> (see DSA 5046) CVE-2024-6290 (Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowe ...) + {DSA-5720-1} - chromium 126.0.6478.126-1 [bullseye] - chromium <end-of-life> (see #1061268) [buster] - chromium <end-of-life> (see DSA 5046) @@ -6072,9 +6194,9 @@ CVE-2023-6734 REJECTED CVE-2023-50804 (An issue was discovered in Samsung Mobile Processor, and Modem Exynos ...) NOT-FOR-US: Samsung -CVE-2023-50803 (An issue was discovered in Samsung Mobile Processor, Automotive Proces ...) +CVE-2023-50803 (An issue was discovered in Samsung Mobile Processor, and Modem Exynos ...) NOT-FOR-US: Samsung -CVE-2023-49928 (An issue was discovered in Samsung Mobile Processor, Automotive Proces ...) +CVE-2023-49928 (An issue was discovered in Samsung Mobile Processor, Wearable Processo ...) NOT-FOR-US: Samsung CVE-2023-49927 (An issue was discovered in Samsung Mobile Processor, Wearable Processo ...) NOT-FOR-US: Samsung View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eef40b590a6855780e4cf54972c3b5b7527d41e8 -- This project does not include diff previews in email notifications. View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eef40b590a6855780e4cf54972c3b5b7527d41e8 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits