Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
57b12664 by security tracker role at 2025-02-20T08:11:56+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,89 @@
+CVE-2025-27218 (Sitecore Experience Manager (XM) and Experience Platform (XP)
10.4 bef ...)
+ TODO: check
+CVE-2025-27092 (GHOSTS is an open source user simulation framework for cyber
experimen ...)
+ TODO: check
+CVE-2025-27090 (Sliver is an open source cross-platform adversary
emulation/red team f ...)
+ TODO: check
+CVE-2025-26856 (Improper neutralization of special elements used in an OS
command ('OS ...)
+ TODO: check
+CVE-2025-25947 (An issue in Bento4 v1.6.0-641 allows an attacker to trigger a
segmenta ...)
+ TODO: check
+CVE-2025-25946 (An issue in Bento4 v1.6.0-641 allows an attacker to cause a
memory lea ...)
+ TODO: check
+CVE-2025-25945 (An issue in Bento4 v1.6.0-641 allows an attacker to obtain
sensitive i ...)
+ TODO: check
+CVE-2025-25944 (Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a
local att ...)
+ TODO: check
+CVE-2025-25943 (Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a
local att ...)
+ TODO: check
+CVE-2025-25942 (An issue in Bento4 v1.6.0-641 allows an attacker to obtain
sensitive i ...)
+ TODO: check
+CVE-2025-25196 (OpenFGA is a high-performance and flexible
authorization/permission en ...)
+ TODO: check
+CVE-2025-24989 (An improper access control vulnerability in Power Pages allows
an unau ...)
+ TODO: check
+CVE-2025-24947 (A hash collision vulnerability (in the hash table used to
manage conne ...)
+ TODO: check
+CVE-2025-24946 (The hash table used to manage connections in picoquic before
b80fd3f u ...)
+ TODO: check
+CVE-2025-23020 (An issue was discovered in Kwik before 0.10.1. A hash
collision vulner ...)
+ TODO: check
+CVE-2025-21355 (Missing Authentication for Critical Function in Microsoft Bing
allows ...)
+ TODO: check
+CVE-2025-1492 (Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0
to 4.4.3 ...)
+ TODO: check
+CVE-2025-1293 (Hermes versions up to 0.4.0 improperly validated the JWT
provided when ...)
+ TODO: check
+CVE-2025-1223 (An attacker can gain application privileges in order to perform
limite ...)
+ TODO: check
+CVE-2025-1222 (An attacker can gain application privileges in order to perform
limite ...)
+ TODO: check
+CVE-2025-0112 (A problem with a detection mechanism in the Palo Alto Networks
Cortex ...)
+ TODO: check
+CVE-2024-6697 (The product does not handle or incorrectly handles when it has
insuffi ...)
+ TODO: check
+CVE-2024-6696 (The product implements access controls via a policy or other
feature w ...)
+ TODO: check
+CVE-2024-5706 (The product receives input from an upstream component, but it
does not ...)
+ TODO: check
+CVE-2024-5705 (The product performs an authorization check when an actor
attempts to ...)
+ TODO: check
+CVE-2024-49782 (IBM OpenPages with Watson 8.3 and 9.0 could allow a remote
attacker ...)
+ TODO: check
+CVE-2024-49780 (IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages could
allow a rem ...)
+ TODO: check
+CVE-2024-49355 (IBM OpenPages with Watson 8.3 and 9.0may write improperly
neutralized ...)
+ TODO: check
+CVE-2024-43196 (IBM OpenPages with Watson 8.3 and 9.0 application could allow
an auth ...)
+ TODO: check
+CVE-2024-37363 (The product does not perform an authorization check when an
actor atte ...)
+ TODO: check
+CVE-2024-37362 (The product transmits or stores authentication credentials,
but it use ...)
+ TODO: check
+CVE-2024-37361 (The application deserializes untrusted data without
sufficiently verif ...)
+ TODO: check
+CVE-2024-37360 (Hitachi Vantara Pentaho Business Analytics Server - Improper
Neutraliz ...)
+ TODO: check
+CVE-2024-37359 (The web server receives a URL or similar request from an
upstream comp ...)
+ TODO: check
+CVE-2024-13445 (The Elementor Website Builder \u2013 More Than Just a Page
Builder plu ...)
+ TODO: check
+CVE-2024-13155 (The Unlimited Elements For Elementor plugin for WordPress is
vulnerabl ...)
+ TODO: check
+CVE-2024-12284 (Authenticated privilege escalation inNetScaler Console and
NetScaler A ...)
+ TODO: check
+CVE-2024-10339
+ REJECTED
+CVE-2023-51305 (PHPJabbers Car Park Booking System v3.0 is vulnerable to
Multiple Stor ...)
+ TODO: check
+CVE-2023-51303 (PHPJabbers Event Ticketing System v1.0 is vulnerable to
Multiple HTML ...)
+ TODO: check
+CVE-2023-51302 (PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV
Injection vu ...)
+ TODO: check
+CVE-2023-51301 (A lack of rate limiting in the "Login Section, Forgot Email"
feature o ...)
+ TODO: check
+CVE-2023-51300 (PHPJabbers Hotel Booking System v4.0 is vulnerable to
Cross-Site Scrip ...)
+ TODO: check
CVE-2025-27089 (Directus is a real-time API and App dashboard for managing SQL
databas ...)
NOT-FOR-US: Directus
CVE-2025-24965 (crun is an open source OCI Container Runtime fully written in
C. In af ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/57b12664cd10f3d3d3279b8c43b3e4275b61983d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/57b12664cd10f3d3d3279b8c43b3e4275b61983d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
