Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c9d6bd0f by security tracker role at 2022-06-02T20:10:20+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,31 @@
+CVE-2022-32234
+ RESERVED
+CVE-2022-30943
+ RESERVED
+CVE-2022-30602
+ RESERVED
+CVE-2022-29926
+ RESERVED
+CVE-2022-29512
+ RESERVED
+CVE-2022-1985
+ RESERVED
+CVE-2022-1984
+ RESERVED
+CVE-2022-1983
+ RESERVED
+CVE-2022-1982 (Uncontrolled resource consumption in Mattermost version 6.6.0
and earl ...)
+ TODO: check
+CVE-2022-1981
+ RESERVED
+CVE-2022-1980 (A vulnerability was found in SourceCodester Product Show Room
Site 1.0 ...)
+ TODO: check
+CVE-2022-1979 (A vulnerability was found in SourceCodester Product Show Room
Site 1.0 ...)
+ TODO: check
+CVE-2022-1978
+ RESERVED
+CVE-2022-1977
+ RESERVED
CVE-2022-32230
RESERVED
CVE-2022-32229
@@ -76,8 +104,8 @@ CVE-2022-1970
RESERVED
CVE-2022-1969
RESERVED
-CVE-2022-1968
- RESERVED
+CVE-2022-1968 (Use After Free in GitHub repository vim/vim prior to 8.2. ...)
+ TODO: check
CVE-2022-1967
RESERVED
CVE-2022-1966
@@ -483,94 +511,94 @@ CVE-2022-32030
RESERVED
CVE-2022-32029
RESERVED
-CVE-2022-32028
- RESERVED
-CVE-2022-32027
- RESERVED
-CVE-2022-32026
- RESERVED
-CVE-2022-32025
- RESERVED
-CVE-2022-32024
- RESERVED
+CVE-2022-32028 (Car Rental Management System v1.0 is vulnerable to SQL
Injection via / ...)
+ TODO: check
+CVE-2022-32027 (Car Rental Management System v1.0 is vulnerable to SQL
Injection via / ...)
+ TODO: check
+CVE-2022-32026 (Car Rental Management System v1.0 is vulnerable to SQL
Injection via / ...)
+ TODO: check
+CVE-2022-32025 (Car Rental Management System v1.0 is vulnerable to SQL
Injection via / ...)
+ TODO: check
+CVE-2022-32024 (Car Rental Management System v1.0 is vulnerable to SQL
Injection via c ...)
+ TODO: check
CVE-2022-32023
RESERVED
-CVE-2022-32022
- RESERVED
-CVE-2022-32021
- RESERVED
-CVE-2022-32020
- RESERVED
-CVE-2022-32019
- RESERVED
-CVE-2022-32018
- RESERVED
-CVE-2022-32017
- RESERVED
-CVE-2022-32016
- RESERVED
-CVE-2022-32015
- RESERVED
-CVE-2022-32014
- RESERVED
-CVE-2022-32013
- RESERVED
-CVE-2022-32012
- RESERVED
-CVE-2022-32011
- RESERVED
-CVE-2022-32010
- RESERVED
+CVE-2022-32022 (Car Rental Management System v1.0 is vulnerable to SQL
Injection via / ...)
+ TODO: check
+CVE-2022-32021 (Car Rental Management System v1.0 is vulnerable to SQL
Injection via / ...)
+ TODO: check
+CVE-2022-32020 (Car Rental Management System v1.0 is vulnerable to Arbitrary
code exec ...)
+ TODO: check
+CVE-2022-32019 (Car Rental Management System v1.0 is vulnerable to Arbitrary
code exec ...)
+ TODO: check
+CVE-2022-32018 (Complete Online Job Search System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-32017 (Complete Online Job Search System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-32016 (Complete Online Job Search System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-32015 (Complete Online Job Search System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-32014 (Complete Online Job Search System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-32013 (Complete Online Job Search System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-32012 (Complete Online Job Search System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-32011 (Complete Online Job Search System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-32010 (Complete Online Job Search System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
CVE-2022-32009
RESERVED
-CVE-2022-32008
- RESERVED
-CVE-2022-32007
- RESERVED
-CVE-2022-32006
- RESERVED
-CVE-2022-32005
- RESERVED
-CVE-2022-32004
- RESERVED
-CVE-2022-32003
- RESERVED
-CVE-2022-32002
- RESERVED
-CVE-2022-32001
- RESERVED
-CVE-2022-32000
- RESERVED
+CVE-2022-32008 (Complete Online Job Search System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-32007 (Complete Online Job Search System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-32006 (Badminton Center Management System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-32005 (Badminton Center Management System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-32004 (Badminton Center Management System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-32003 (Badminton Center Management System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-32002 (Badminton Center Management System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-32001 (Badminton Center Management System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-32000 (Badminton Center Management System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
CVE-2022-31999
RESERVED
-CVE-2022-31998
- RESERVED
+CVE-2022-31998 (Badminton Center Management System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
CVE-2022-31997
RESERVED
-CVE-2022-31996
- RESERVED
+CVE-2022-31996 (Badminton Center Management System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
CVE-2022-31995
RESERVED
-CVE-2022-31994
- RESERVED
-CVE-2022-31993
- RESERVED
-CVE-2022-31992
- RESERVED
-CVE-2022-31991
- RESERVED
-CVE-2022-31990
- RESERVED
-CVE-2022-31989
- RESERVED
-CVE-2022-31988
- RESERVED
+CVE-2022-31994 (Badminton Center Management System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-31993 (Badminton Center Management System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-31992 (Badminton Center Management System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-31991 (Badminton Center Management System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-31990 (Badminton Center Management System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-31989 (Badminton Center Management System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-31988 (Badminton Center Management System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
CVE-2022-31987
RESERVED
-CVE-2022-31986
- RESERVED
-CVE-2022-31985
- RESERVED
+CVE-2022-31986 (Badminton Center Management System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
+CVE-2022-31985 (Badminton Center Management System v1.0 is vulnerable to SQL
Injection ...)
+ TODO: check
CVE-2022-31984 (Online Fire Reporting System v1.0 is vulnerable to SQL
Injection via / ...)
NOT-FOR-US: Online Fire Reporting System
CVE-2022-31983 (Online Fire Reporting System v1.0 is vulnerable to SQL
Injection via / ...)
@@ -3153,8 +3181,8 @@ CVE-2022-31025
RESERVED
CVE-2022-31024
RESERVED
-CVE-2022-31023
- RESERVED
+CVE-2022-31023 (Play Framework is a web framework for Java and Scala. Verions
prior to ...)
+ TODO: check
CVE-2022-31022 (Bleve is a text indexing library for go. Bleve includes HTTP
utilities ...)
TODO: check
CVE-2022-31021
@@ -3163,8 +3191,8 @@ CVE-2022-31020
RESERVED
CVE-2022-31019
RESERVED
-CVE-2022-31018
- RESERVED
+CVE-2022-31018 (Play Framework is a web framework for Java and Scala. A denial
of serv ...)
+ TODO: check
CVE-2022-31017
RESERVED
CVE-2022-31016
@@ -4053,8 +4081,8 @@ CVE-2022-30708 (Webmin through 1.991, when the Authentic
theme is used, allows r
- webmin <removed>
CVE-2022-1717
RESERVED
-CVE-2022-1716
- RESERVED
+CVE-2022-1716 (An attacker with physical access to the victim's device can
bypass the ...)
+ TODO: check
CVE-2022-30703
RESERVED
CVE-2022-30702
@@ -4919,8 +4947,8 @@ CVE-2022-30431
RESERVED
CVE-2022-30430
RESERVED
-CVE-2022-30429
- RESERVED
+CVE-2022-30429 (Multiple cross-site scripting (XSS) vulnerabilities in Neos
CMS allow ...)
+ TODO: check
CVE-2022-30428 (In ginadmin through 05-10-2022, the incoming path value is not
filtere ...)
NOT-FOR-US: ginadmin
CVE-2022-30427 (In ginadmin through 05-10-2022 the incoming path value is not
filtered ...)
@@ -6923,8 +6951,8 @@ CVE-2021-46786 (The audio module has a vulnerability in
verifying the parameters
NOT-FOR-US: Huawei
CVE-2021-46785 (The Property module has a vulnerability in permission
control.This vul ...)
NOT-FOR-US: Huawei
-CVE-2022-29788
- RESERVED
+CVE-2022-29788 (libmobi before v0.10 contains a NULL pointer dereference via
the compo ...)
+ TODO: check
CVE-2022-29787
RESERVED
CVE-2022-29786
@@ -7091,8 +7119,8 @@ CVE-2022-29706
RESERVED
CVE-2022-29705
RESERVED
-CVE-2022-29704
- RESERVED
+CVE-2022-29704 (BrowsBox CMS v4.0 was discovered to contain a SQL injection
vulnerabil ...)
+ TODO: check
CVE-2022-29703
RESERVED
CVE-2022-29702
@@ -7351,8 +7379,8 @@ CVE-2022-1442 (The Metform WordPress plugin is vulnerable
to sensitive informati
NOT-FOR-US: WordPress plugin
CVE-2022-29598 (Solutions Atlantic Regulatory Reporting System (RRS) v500 is
vulnerabl ...)
NOT-FOR-US: Solutions Atlantic Regulatory Reporting System (RRS
-CVE-2022-29597
- RESERVED
+CVE-2022-29597 (Solutions Atlantic Regulatory Reporting System (RRS) v500 is
vulnerabl ...)
+ TODO: check
CVE-2022-29596 (MicroStrategy Enterprise Manager 2022 allows authentication
bypass by ...)
NOT-FOR-US: MicroStrategy Enterprise Manager
CVE-2022-29595
@@ -15064,8 +15092,8 @@ CVE-2022-26945 (HashiCorp go-getter before 2.0.2 allows
Command Injection. ...)
NOTE:
https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930
NOTE: https://github.com/hashicorp/go-getter/pull/359
NOTE:
https://github.com/hashicorp/go-getter/commit/a2ebce998f8d4105bd4b78d6c99a12803ad97a45
(v1.6.0)
-CVE-2022-26944
- RESERVED
+CVE-2022-26944 (Percona XtraBackup 2.4.20 unintentionally writes the command
line to a ...)
+ TODO: check
CVE-2022-26943
RESERVED
CVE-2022-26942
@@ -16190,8 +16218,8 @@ CVE-2022-26498 (An issue was discovered in Asterisk
through 19.x. When using STI
[stretch] - asterisk <not-affected> (Vulnerable code not present)
NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-29872
NOTE: https://downloads.asterisk.org/pub/security/AST-2022-001.html
-CVE-2022-26497
- RESERVED
+CVE-2022-26497 (BigBlueButton Greenlight 2.11.1 allows XSS. A threat actor
could have ...)
+ TODO: check
CVE-2022-26496 (In nbd-server in nbd before 3.24, there is a stack-based
buffer overfl ...)
{DSA-5100-1}
- nbd 1:3.24-1 (bug #1006915)
@@ -19985,8 +20013,8 @@ CVE-2022-25165 (An issue was discovered in Amazon AWS
VPN Client 2.0.0. A TOCTOU
NOT-FOR-US: Amazon AWS VPN Client
CVE-2022-25164
RESERVED
-CVE-2022-25163
- RESERVED
+CVE-2022-25163 (Improper Input Validation vulnerability in Mitsubishi Electric
MELSEC- ...)
+ TODO: check
CVE-2022-25162 (Improper Input Validation vulnerability in Mitsubishi Electric
MELSEC ...)
NOT-FOR-US: Mitsubishi
CVE-2022-25161 (Improper Input Validation vulnerability in Mitsubishi Electric
MELSEC ...)
@@ -30382,12 +30410,12 @@ CVE-2022-0081
RESERVED
CVE-2021-45984
RESERVED
-CVE-2021-45983
- RESERVED
-CVE-2021-45982
- RESERVED
-CVE-2021-45981
- RESERVED
+CVE-2021-45983 (NetScout nGeniusONE 6.3.2 allows Java RMI Code Execution. ...)
+ TODO: check
+CVE-2021-45982 (NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a
privileged ...)
+ TODO: check
+CVE-2021-45981 (NetScout nGeniusONE 6.3.2 allows an XML External Entity (XXE)
attack. ...)
+ TODO: check
CVE-2021-45980 (Foxit PDF Reader and PDF Editor before 11.1 on macOS allow
remote atta ...)
NOT-FOR-US: Foxit
CVE-2021-45979 (Foxit PDF Reader and PDF Editor before 11.1 on macOS allow
remote atta ...)
@@ -55536,8 +55564,8 @@ CVE-2021-38223
RESERVED
CVE-2021-38222
RESERVED
-CVE-2021-38221
- RESERVED
+CVE-2021-38221 (bbs-go <= 3.3.0 including Custom Edition is vulnerable to
stored XS ...)
+ TODO: check
CVE-2021-38220
RESERVED
CVE-2021-38219
@@ -66838,8 +66866,8 @@ CVE-2021-33617 (Zoho ManageEngine Password Manager Pro
before 11.2 11200 allows
NOT-FOR-US: Zoho ManageEngine
CVE-2021-33616 (RSA Archer 6.x through 6.9 SP1 P4 (6.9.1.4) allows stored XSS.
...)
NOT-FOR-US: RSA Archer
-CVE-2021-33615
- RESERVED
+CVE-2021-33615 (RSA Archer 6.8.00500.1003 P5 allows Unrestricted Upload of a
File with ...)
+ TODO: check
CVE-2021-33620 (Squid before 4.15 and 5.x before 5.0.6 allows remote servers
to cause ...)
{DSA-4924-1 DLA-2685-1}
- squid 4.13-10
@@ -205720,12 +205748,12 @@ CVE-2019-12353
RESERVED
CVE-2019-12352
RESERVED
-CVE-2019-12351
- RESERVED
-CVE-2019-12350
- RESERVED
-CVE-2019-12349
- RESERVED
+CVE-2019-12351 (An issue was discovered in zzcms 2019. SQL Injection exists in
dl/dl_p ...)
+ TODO: check
+CVE-2019-12350 (An issue was discovered in zzcms 2019. SQL Injection exists in
dl/dl_d ...)
+ TODO: check
+CVE-2019-12349 (An issue was discovered in zzcms 2019. SQL Injection exists in
/admin/ ...)
+ TODO: check
CVE-2019-12348 (An issue was discovered in zzcms 2019. SQL Injection exists in
user/zt ...)
NOT-FOR-US: zzcms
CVE-2019-12347 (In pfSense 2.4.4-p3, a stored XSS vulnerability occurs when
attackers ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c9d6bd0fdfa1e8e82a7958e5af3adc6257a721e4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c9d6bd0fdfa1e8e82a7958e5af3adc6257a721e4
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
