Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
986831fa by security tracker role at 2022-06-14T08:10:15+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,55 @@
+CVE-2022-33207
+ RESERVED
+CVE-2022-33206
+ RESERVED
+CVE-2022-33205
+ RESERVED
+CVE-2022-33204
+ RESERVED
+CVE-2022-33195
+ RESERVED
+CVE-2022-33194
+ RESERVED
+CVE-2022-33193
+ RESERVED
+CVE-2022-33192
+ RESERVED
+CVE-2022-33189
+ RESERVED
+CVE-2022-32775
+ RESERVED
+CVE-2022-32773
+ RESERVED
+CVE-2022-32586
+ RESERVED
+CVE-2022-32574
+ RESERVED
+CVE-2022-32454
+ RESERVED
+CVE-2022-30603
+ RESERVED
+CVE-2022-30541
+ RESERVED
+CVE-2022-29889
+ RESERVED
+CVE-2022-29520
+ RESERVED
+CVE-2022-29472
+ RESERVED
+CVE-2022-27804
+ RESERVED
+CVE-2022-2077
+ RESERVED
+CVE-2022-2076
+ RESERVED
+CVE-2022-2075
+ RESERVED
+CVE-2022-2074
+ RESERVED
+CVE-2022-2073
+ RESERVED
+CVE-2021-46821
+ RESERVED
CVE-2022-33187
RESERVED
CVE-2022-33186
@@ -1314,22 +1366,22 @@ CVE-2022-32567
RESERVED
CVE-2022-32566
RESERVED
-CVE-2022-32565
- RESERVED
-CVE-2022-32564
- RESERVED
+CVE-2022-32565 (An issue was discovered in Couchbase Server before 7.0.4. The
Backup S ...)
+ TODO: check
+CVE-2022-32564 (An issue was discovered in Couchbase Server before 7.0.4. In
couchbase ...)
+ TODO: check
CVE-2022-32563 (An issue was discovered in Couchbase Sync Gateway 3.x before
3.0.2. Ad ...)
NOT-FOR-US: Couchbase Sync Gateway
-CVE-2022-32562
- RESERVED
+CVE-2022-32562 (An issue was discovered in Couchbase Server before 7.0.4.
Operations m ...)
+ TODO: check
CVE-2022-32561
RESERVED
-CVE-2022-32560
- RESERVED
+CVE-2022-32560 (An issue was discovered in Couchbase Server before 7.0.4. XDCR
lacks r ...)
+ TODO: check
CVE-2022-32559
RESERVED
-CVE-2022-32558
- RESERVED
+CVE-2022-32558 (An issue was discovered in Couchbase Server before 7.0.4.
Sample bucke ...)
+ TODO: check
CVE-2022-32557
RESERVED
CVE-2022-32556
@@ -2176,8 +2228,8 @@ CVE-2022-32285
RESERVED
CVE-2022-32279
RESERVED
-CVE-2022-32278
- RESERVED
+CVE-2022-32278 (XFCE 4.16 allows attackers to execute arbitrary code because
xdg-open ...)
+ TODO: check
CVE-2022-32277
RESERVED
CVE-2022-32276
@@ -2460,10 +2512,10 @@ CVE-2022-32195 (Open edX platform before 2022-06-06
allows XSS via the "next" pa
NOT-FOR-US: Open edX
CVE-2022-32194
RESERVED
-CVE-2022-32193
- RESERVED
-CVE-2022-32192
- RESERVED
+CVE-2022-32193 (Couchbase Server 6.6.x through 7.x before 7.0.4 exposes
Sensitive Info ...)
+ TODO: check
+CVE-2022-32192 (Couchbase Server 5.x through 7.x before 7.0.4 exposes
Sensitive Inform ...)
+ TODO: check
CVE-2022-32191
RESERVED
CVE-2022-32190
@@ -4016,8 +4068,8 @@ CVE-2022-1882 (A use-after-free flaw was found in the
Linux kernel’s pipes
[stretch] - linux <not-affected> (Vulnerable code not present)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2089701
NOTE:
https://lore.kernel.org/lkml/[email protected]/T/
-CVE-2022-27176
- RESERVED
+CVE-2022-27176 (Incomplete filtering of special elements vulnerability exists
in RevoW ...)
+ TODO: check
CVE-2022-1881
RESERVED
CVE-2022-1880
@@ -4557,10 +4609,10 @@ CVE-2022-31449
RESERVED
CVE-2022-31448
RESERVED
-CVE-2022-31447
- RESERVED
-CVE-2022-31446
- RESERVED
+CVE-2022-31447 (An XML external entity (XXE) injection vulnerability in
Magicpin v3.4 ...)
+ TODO: check
+CVE-2022-31446 (Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered
to cont ...)
+ TODO: check
CVE-2022-31445
RESERVED
CVE-2022-31444
@@ -4621,8 +4673,8 @@ CVE-2022-31417
RESERVED
CVE-2022-31416
RESERVED
-CVE-2022-31415
- RESERVED
+CVE-2022-31415 (Online Fire Reporting System v1.0 was discovered to contain a
SQL inje ...)
+ TODO: check
CVE-2022-31414
RESERVED
CVE-2022-31413
@@ -4978,10 +5030,10 @@ CVE-2022-1814 (The WP Admin Style WordPress plugin
through 0.1.2 does not saniti
NOT-FOR-US: WordPress plugin
CVE-2022-30549
RESERVED
-CVE-2022-29524
- RESERVED
-CVE-2022-29506
- RESERVED
+CVE-2022-29524 (Out-of-bounds write vulnerability exists in V-Server v4.0.11.0
and ear ...)
+ TODO: check
+CVE-2022-29506 (Out-of-bounds read vulnerability exist in the simulator module
contain ...)
+ TODO: check
CVE-2022-1813 (OS Command Injection in GitHub repository yogeshojha/rengine
prior to ...)
NOT-FOR-US: yogeshojha/rengine
CVE-2022-1812
@@ -5460,10 +5512,10 @@ CVE-2022-31056
RESERVED
CVE-2022-31055 (kCTF is a Kubernetes-based infrastructure for capture the flag
(CTF) c ...)
TODO: check
-CVE-2022-31054
- RESERVED
-CVE-2022-31053
- RESERVED
+CVE-2022-31054 (Argo Events is an event-driven workflow automation framework
for Kuber ...)
+ TODO: check
+CVE-2022-31053 (Biscuit is an authentication and authorization token for
microservices ...)
+ TODO: check
CVE-2022-31052
RESERVED
CVE-2022-31051 (semantic-release is an open source npm package for automated
version m ...)
@@ -6501,8 +6553,8 @@ CVE-2022-30694
RESERVED
CVE-2022-30543
RESERVED
-CVE-2022-29485
- RESERVED
+CVE-2022-29485 (Cross-site scripting vulnerability in SHIRASAGI v1.0.0 to
v1.14.2, and ...)
+ TODO: check
CVE-2022-29481
RESERVED
CVE-2022-28689
@@ -6760,16 +6812,16 @@ CVE-2022-30546
RESERVED
CVE-2022-30538
RESERVED
-CVE-2022-29925
- RESERVED
-CVE-2022-29522
- RESERVED
-CVE-2022-29482
- RESERVED
+CVE-2022-29925 (Access of uninitialized pointer vulnerability exists in the
simulator ...)
+ TODO: check
+CVE-2022-29522 (Use after free vulnerability exists in the simulator module
contained ...)
+ TODO: check
+CVE-2022-29482 ('Mobaoku-Auction&Flea Market' App for iOS versions prior
to 5.5.16 ...)
+ TODO: check
CVE-2022-27231 (Cross-site scripting vulnerability exists in WP Statistics
versions pr ...)
NOT-FOR-US: WordPress plugin
-CVE-2022-26302
- RESERVED
+CVE-2022-26302 (Heap-based buffer overflow exists in the simulator module
contained in ...)
+ TODO: check
CVE-2022-1699 (Uncontrolled Resource Consumption in GitHub repository
causefx/organiz ...)
NOT-FOR-US: organizr
CVE-2022-1698 (Allowing long password leads to denial of service in GitHub
repository ...)
@@ -7715,8 +7767,8 @@ CVE-2022-30299
RESERVED
CVE-2022-30298
RESERVED
-CVE-2022-29509
- RESERVED
+CVE-2022-29509 (Directory traversal vulnerability in T&D Data Server
(Japanese Edi ...)
+ TODO: check
CVE-2022-29483 (Incorrect Default Permissions vulnerability in ABB e-Design
allows att ...)
NOT-FOR-US: ABB e-Design
CVE-2022-28702 (Incorrect Default Permissions vulnerability in ABB e-Design
allows att ...)
@@ -9352,10 +9404,10 @@ CVE-2022-29799
NOTE:
https://gitlab.com/craftyguy/networkd-dispatcher/-/commit/074ff68f08d64a963a13e3cfc4fb3e3fb9006dfe
NOTE:
https://gitlab.com/craftyguy/networkd-dispatcher/-/commit/2e226ee027bdc8022f0e10470318f89f25dc6133
NOTE: No security impact in Debian, see #1010303
-CVE-2022-29798
- RESERVED
-CVE-2022-29797
- RESERVED
+CVE-2022-29798 (There is a denial of service vulnerability in CV81-WDM FW
versions 01. ...)
+ TODO: check
+CVE-2022-29797 (There is a buffer overflow vulnerability in CV81-WDM FW
01.70.49.29.46 ...)
+ TODO: check
CVE-2022-29796 (The HiAIserver has a vulnerability in verifying the validity
of the we ...)
NOT-FOR-US: Huawei
CVE-2022-29795 (The frame scheduling module has a null pointer dereference
vulnerabili ...)
@@ -9396,7 +9448,7 @@ CVE-2022-1457 (Store XSS in title parameter executing at
EditUser Page & Edi
NOT-FOR-US: facturascripts
CVE-2022-1456 (The Poll Maker WordPress plugin before 4.0.2 does not sanitise
and esc ...)
NOT-FOR-US: WordPress plugin
-CVE-2021-46789 (Configuration defects in the secure OS module.Successful
exploitation ...)
+CVE-2021-46789 (Configuration defects in the secure OS module. Successful
exploitation ...)
NOT-FOR-US: Huawei
CVE-2021-46788 (Third-party pop-up window coverage vulnerability in the
iConnect modul ...)
NOT-FOR-US: Huawei
@@ -10842,8 +10894,8 @@ CVE-2022-29259
RESERVED
CVE-2022-29258 (XWiki Platform Filter UI provides a generic user interface to
convert ...)
NOT-FOR-US: XWiki
-CVE-2022-29257
- RESERVED
+CVE-2022-29257 (Electron is a framework for writing cross-platform desktop
application ...)
+ TODO: check
CVE-2022-29256 (sharp is an application for Node.js image processing. Prior to
version ...)
NOT-FOR-US: lovell/sharp
CVE-2022-29255 (Vyper is a Pythonic Smart Contract Language for the ethereum
virtual m ...)
@@ -10865,8 +10917,8 @@ CVE-2022-29249 (JavaEZ is a library that adds new
functions to make Java easier.
CVE-2022-29248 (Guzzle is a PHP HTTP client. Guzzle prior to versions 6.5.6
and 7.4.3 ...)
- guzzle <unfixed> (bug #1011636)
NOTE:
https://github.com/guzzle/guzzle/security/advisories/GHSA-cwmx-hcrq-mhc3
-CVE-2022-29247
- RESERVED
+CVE-2022-29247 (Electron is a framework for writing cross-platform desktop
application ...)
+ TODO: check
CVE-2022-29246 (Azure RTOS USBX is a USB host, device, and on-the-go (OTG)
embedded st ...)
NOT-FOR-US: Microsoft
CVE-2022-29245 (SSH.NET is a Secure Shell (SSH) library for .NET. In versions
2020.0.0 ...)
@@ -34626,8 +34678,8 @@ CVE-2022-22261 (The HiAIserver has a vulnerability in
verifying the validity of
NOT-FOR-US: HarmonyOS
CVE-2022-22260 (The kernel module has a UAF vulnerability.Successful
exploitation of t ...)
NOT-FOR-US: HarmonyOS
-CVE-2022-22259
- RESERVED
+CVE-2022-22259 (There is an improper authentication vulnerability in FLMG-10
10.0.1.0( ...)
+ TODO: check
CVE-2022-22258 (The Wi-Fi module has an event notification
vulnerability.Successful ex ...)
NOT-FOR-US: Harmony OS
CVE-2022-22257 (The customization framework has a vulnerability of improper
permission ...)
@@ -49598,10 +49650,10 @@ CVE-2021-41664
RESERVED
CVE-2021-41663 (A cross-site scripting (XSS) vulnerability exists in Mini CMS
V1.11. T ...)
TODO: check
-CVE-2021-41662
- RESERVED
-CVE-2021-41661
- RESERVED
+CVE-2021-41662 (The South Gate Inn Online Reservation System v1.0 contains an
SQL inje ...)
+ TODO: check
+CVE-2021-41661 (Church Management System version 1.0 is affected by a SQL
anjection vu ...)
+ TODO: check
CVE-2021-41660 (SQL injection vulnerability in Sourcecodester Patient
Appointment Sche ...)
NOT-FOR-US: Sourcecodester
CVE-2021-41659 (SQL injection vulnerability in Sourcecodester Banking System
v1 by ore ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/986831fa1681b076b95a2c1df5a4030c5d195ff2
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/986831fa1681b076b95a2c1df5a4030c5d195ff2
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
