Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
41eb181e by security tracker role at 2022-06-14T20:10:23+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,255 @@
+CVE-2022-33329
+ RESERVED
+CVE-2022-33328
+ RESERVED
+CVE-2022-33327
+ RESERVED
+CVE-2022-33326
+ RESERVED
+CVE-2022-33325
+ RESERVED
+CVE-2022-33324
+ RESERVED
+CVE-2022-33323
+ RESERVED
+CVE-2022-33322
+ RESERVED
+CVE-2022-33321
+ RESERVED
+CVE-2022-33320
+ RESERVED
+CVE-2022-33319
+ RESERVED
+CVE-2022-33318
+ RESERVED
+CVE-2022-33317
+ RESERVED
+CVE-2022-33316
+ RESERVED
+CVE-2022-33315
+ RESERVED
+CVE-2022-33314
+ RESERVED
+CVE-2022-33313
+ RESERVED
+CVE-2022-33312
+ RESERVED
+CVE-2022-33309
+ RESERVED
+CVE-2022-33308
+ RESERVED
+CVE-2022-33307
+ RESERVED
+CVE-2022-33306
+ RESERVED
+CVE-2022-33305
+ RESERVED
+CVE-2022-33304
+ RESERVED
+CVE-2022-33303
+ RESERVED
+CVE-2022-33302
+ RESERVED
+CVE-2022-33301
+ RESERVED
+CVE-2022-33300
+ RESERVED
+CVE-2022-33299
+ RESERVED
+CVE-2022-33298
+ RESERVED
+CVE-2022-33297
+ RESERVED
+CVE-2022-33296
+ RESERVED
+CVE-2022-33295
+ RESERVED
+CVE-2022-33294
+ RESERVED
+CVE-2022-33293
+ RESERVED
+CVE-2022-33292
+ RESERVED
+CVE-2022-33291
+ RESERVED
+CVE-2022-33290
+ RESERVED
+CVE-2022-33289
+ RESERVED
+CVE-2022-33288
+ RESERVED
+CVE-2022-33287
+ RESERVED
+CVE-2022-33286
+ RESERVED
+CVE-2022-33285
+ RESERVED
+CVE-2022-33284
+ RESERVED
+CVE-2022-33283
+ RESERVED
+CVE-2022-33282
+ RESERVED
+CVE-2022-33281
+ RESERVED
+CVE-2022-33280
+ RESERVED
+CVE-2022-33279
+ RESERVED
+CVE-2022-33278
+ RESERVED
+CVE-2022-33277
+ RESERVED
+CVE-2022-33276
+ RESERVED
+CVE-2022-33275
+ RESERVED
+CVE-2022-33274
+ RESERVED
+CVE-2022-33273
+ RESERVED
+CVE-2022-33272
+ RESERVED
+CVE-2022-33271
+ RESERVED
+CVE-2022-33270
+ RESERVED
+CVE-2022-33269
+ RESERVED
+CVE-2022-33268
+ RESERVED
+CVE-2022-33267
+ RESERVED
+CVE-2022-33266
+ RESERVED
+CVE-2022-33265
+ RESERVED
+CVE-2022-33264
+ RESERVED
+CVE-2022-33263
+ RESERVED
+CVE-2022-33262
+ RESERVED
+CVE-2022-33261
+ RESERVED
+CVE-2022-33260
+ RESERVED
+CVE-2022-33259
+ RESERVED
+CVE-2022-33258
+ RESERVED
+CVE-2022-33257
+ RESERVED
+CVE-2022-33256
+ RESERVED
+CVE-2022-33255
+ RESERVED
+CVE-2022-33254
+ RESERVED
+CVE-2022-33253
+ RESERVED
+CVE-2022-33252
+ RESERVED
+CVE-2022-33251
+ RESERVED
+CVE-2022-33250
+ RESERVED
+CVE-2022-33249
+ RESERVED
+CVE-2022-33248
+ RESERVED
+CVE-2022-33247
+ RESERVED
+CVE-2022-33246
+ RESERVED
+CVE-2022-33245
+ RESERVED
+CVE-2022-33244
+ RESERVED
+CVE-2022-33243
+ RESERVED
+CVE-2022-33242
+ RESERVED
+CVE-2022-33241
+ RESERVED
+CVE-2022-33240
+ RESERVED
+CVE-2022-33239
+ RESERVED
+CVE-2022-33238
+ RESERVED
+CVE-2022-33237
+ RESERVED
+CVE-2022-33236
+ RESERVED
+CVE-2022-33235
+ RESERVED
+CVE-2022-33234
+ RESERVED
+CVE-2022-33233
+ RESERVED
+CVE-2022-33232
+ RESERVED
+CVE-2022-33231
+ RESERVED
+CVE-2022-33230
+ RESERVED
+CVE-2022-33229
+ RESERVED
+CVE-2022-33228
+ RESERVED
+CVE-2022-33227
+ RESERVED
+CVE-2022-33226
+ RESERVED
+CVE-2022-33225
+ RESERVED
+CVE-2022-33224
+ RESERVED
+CVE-2022-33223
+ RESERVED
+CVE-2022-33222
+ RESERVED
+CVE-2022-33221
+ RESERVED
+CVE-2022-33220
+ RESERVED
+CVE-2022-33219
+ RESERVED
+CVE-2022-33218
+ RESERVED
+CVE-2022-33217
+ RESERVED
+CVE-2022-33216
+ RESERVED
+CVE-2022-33215
+ RESERVED
+CVE-2022-33214
+ RESERVED
+CVE-2022-33213
+ RESERVED
+CVE-2022-33212
+ RESERVED
+CVE-2022-33211
+ RESERVED
+CVE-2022-33210
+ RESERVED
+CVE-2022-33146
+ RESERVED
+CVE-2022-32585
+ RESERVED
+CVE-2022-28127
+ RESERVED
+CVE-2022-2082
+ RESERVED
+CVE-2022-2081
+ RESERVED
+CVE-2022-2080
+ RESERVED
+CVE-2022-2079 (Cross-site Scripting (XSS) - Stored in GitHub repository
nocodb/nocodb ...)
+ TODO: check
+CVE-2022-2078
+ RESERVED
CVE-2022-33207
RESERVED
CVE-2022-33206
@@ -38,10 +290,10 @@ CVE-2022-29472
RESERVED
CVE-2022-27804
RESERVED
-CVE-2022-2077
- RESERVED
-CVE-2022-2076
- RESERVED
+CVE-2022-2077 (** DISPUTED ** A vulnerability was found in Microsoft O365 and
classif ...)
+ TODO: check
+CVE-2022-2076 (** DISPUTED ** A vulnerability has been found in Microsoft O365
and cl ...)
+ TODO: check
CVE-2022-2075
RESERVED
CVE-2022-2074
@@ -1380,16 +1632,16 @@ CVE-2022-32563 (An issue was discovered in Couchbase
Sync Gateway 3.x before 3.0
NOT-FOR-US: Couchbase Sync Gateway
CVE-2022-32562 (An issue was discovered in Couchbase Server before 7.0.4.
Operations m ...)
NOT-FOR-US: Couchbase Server
-CVE-2022-32561
- RESERVED
+CVE-2022-32561 (An issue was discovered in Couchbase Server before 6.6.5 and
7.x befor ...)
+ TODO: check
CVE-2022-32560 (An issue was discovered in Couchbase Server before 7.0.4. XDCR
lacks r ...)
NOT-FOR-US: Couchbase Server
-CVE-2022-32559
- RESERVED
+CVE-2022-32559 (An issue was discovered in Couchbase Server before 7.0.4.
Random HTTP ...)
+ TODO: check
CVE-2022-32558 (An issue was discovered in Couchbase Server before 7.0.4.
Sample bucke ...)
NOT-FOR-US: Couchbase Server
-CVE-2022-32557
- RESERVED
+CVE-2022-32557 (An issue was discovered in Couchbase Server before 7.0.4. The
Index Se ...)
+ TODO: check
CVE-2022-32556
RESERVED
CVE-2022-32555
@@ -1942,14 +2194,14 @@ CVE-2022-32369
RESERVED
CVE-2022-32368
RESERVED
-CVE-2022-32367
- RESERVED
-CVE-2022-32366
- RESERVED
-CVE-2022-32365
- RESERVED
-CVE-2022-32364
- RESERVED
+CVE-2022-32367 (Product Show Room Site v1.0 is vulnerable to SQL Injection via
/psrs/a ...)
+ TODO: check
+CVE-2022-32366 (Product Show Room Site v1.0 is vulnerable to SQL Injection via
/psrs/a ...)
+ TODO: check
+CVE-2022-32365 (Product Show Room Site v1.0 is vulnerable to SQL Injection via
/psrs/a ...)
+ TODO: check
+CVE-2022-32364 (Product Show Room Site v1.0 is vulnerable to SQL Injection via
/psrs/a ...)
+ TODO: check
CVE-2022-32363
RESERVED
CVE-2022-32362
@@ -1972,56 +2224,56 @@ CVE-2022-32354
RESERVED
CVE-2022-32353
RESERVED
-CVE-2022-32352
- RESERVED
-CVE-2022-32351
- RESERVED
-CVE-2022-32350
- RESERVED
-CVE-2022-32349
- RESERVED
-CVE-2022-32348
- RESERVED
-CVE-2022-32347
- RESERVED
-CVE-2022-32346
- RESERVED
-CVE-2022-32345
- RESERVED
-CVE-2022-32344
- RESERVED
-CVE-2022-32343
- RESERVED
-CVE-2022-32342
- RESERVED
-CVE-2022-32341
- RESERVED
-CVE-2022-32340
- RESERVED
-CVE-2022-32339
- RESERVED
-CVE-2022-32338
- RESERVED
-CVE-2022-32337
- RESERVED
-CVE-2022-32336
- RESERVED
-CVE-2022-32335
- RESERVED
-CVE-2022-32334
- RESERVED
-CVE-2022-32333
- RESERVED
-CVE-2022-32332
- RESERVED
-CVE-2022-32331
- RESERVED
-CVE-2022-32330
- RESERVED
+CVE-2022-32352 (Hospital's Patient Records Management System v1.0 is
vulnerable to SQL ...)
+ TODO: check
+CVE-2022-32351 (Hospital's Patient Records Management System v1.0 is
vulnerable to SQL ...)
+ TODO: check
+CVE-2022-32350 (Hospital's Patient Records Management System v1.0 is
vulnerable to SQL ...)
+ TODO: check
+CVE-2022-32349 (Hospital's Patient Records Management System v1.0 is
vulnerable to SQL ...)
+ TODO: check
+CVE-2022-32348 (Hospital's Patient Records Management System v1.0 is
vulnerable to SQL ...)
+ TODO: check
+CVE-2022-32347 (Hospital's Patient Records Management System v1.0 is
vulnerable to SQL ...)
+ TODO: check
+CVE-2022-32346 (Hospital's Patient Records Management System v1.0 is
vulnerable to SQL ...)
+ TODO: check
+CVE-2022-32345 (Hospital's Patient Records Management System v1.0 is
vulnerable to SQL ...)
+ TODO: check
+CVE-2022-32344 (Hospital's Patient Records Management System v1.0 is
vulnerable to SQL ...)
+ TODO: check
+CVE-2022-32343 (Hospital's Patient Records Management System v1.0 is
vulnerable to SQL ...)
+ TODO: check
+CVE-2022-32342 (Hospital's Patient Records Management System v1.0 is
vulnerable to SQL ...)
+ TODO: check
+CVE-2022-32341 (Hospital's Patient Records Management System v1.0 is
vulnerable to SQL ...)
+ TODO: check
+CVE-2022-32340 (Hospital's Patient Records Management System v1.0 is
vulnerable to SQL ...)
+ TODO: check
+CVE-2022-32339 (Hospital's Patient Records Management System v1.0 is
vulnerable to SQL ...)
+ TODO: check
+CVE-2022-32338 (Hospital's Patient Records Management System v1.0 is
vulnerable to SQL ...)
+ TODO: check
+CVE-2022-32337 (Hospital's Patient Records Management System v1.0 is
vulnerable to SQL ...)
+ TODO: check
+CVE-2022-32336 (Fast Food Ordering System v1.0 is vulnerable to SQL Injection
via /ffo ...)
+ TODO: check
+CVE-2022-32335 (Fast Food Ordering System v1.0 is vulnerable to SQL Injection
via /ffo ...)
+ TODO: check
+CVE-2022-32334 (Fast Food Ordering System v1.0 is vulnerable to SQL Injection
via /ffo ...)
+ TODO: check
+CVE-2022-32333 (Fast Food Ordering System v1.0 is vulnerable to SQL Injection
via /ffo ...)
+ TODO: check
+CVE-2022-32332 (Fast Food Ordering System v1.0 is vulnerable to SQL Injection
via /ffo ...)
+ TODO: check
+CVE-2022-32331 (Fast Food Ordering System v1.0 is vulnerable to SQL Injection
via /ffo ...)
+ TODO: check
+CVE-2022-32330 (Fast Food Ordering System v1.0 is vulnerable to SQL Injection
via /ffo ...)
+ TODO: check
CVE-2022-32329
RESERVED
-CVE-2022-32328
- RESERVED
+CVE-2022-32328 (Fast Food Ordering System v1.0 is vulnerable to Delete any
file. via / ...)
+ TODO: check
CVE-2022-32327
RESERVED
CVE-2022-32326
@@ -2228,10 +2480,10 @@ CVE-2022-32296 (The Linux kernel before 5.17.9 allows
TCP servers to identify cl
NOTE:
https://git.kernel.org/linus/4c2c8f03a5ab7cb04ec64724d7d176d00bcc91e5 (5.18-rc6)
CVE-2022-32287
RESERVED
-CVE-2022-32286
- RESERVED
-CVE-2022-32285
- RESERVED
+CVE-2022-32286 (A vulnerability has been identified in Mendix SAML Module
(Mendix 7 co ...)
+ TODO: check
+CVE-2022-32285 (A vulnerability has been identified in Mendix SAML Module
(Mendix 7 co ...)
+ TODO: check
CVE-2022-32279
RESERVED
CVE-2022-32278 (XFCE 4.16 allows attackers to execute arbitrary code because
xdg-open ...)
@@ -2287,30 +2539,30 @@ CVE-2022-32264
RESERVED
CVE-2022-32263
RESERVED
-CVE-2022-32262
- RESERVED
-CVE-2022-32261
- RESERVED
-CVE-2022-32260
- RESERVED
-CVE-2022-32259
- RESERVED
-CVE-2022-32258
- RESERVED
+CVE-2022-32262 (A vulnerability has been identified in SINEMA Remote Connect
Server (A ...)
+ TODO: check
+CVE-2022-32261 (A vulnerability has been identified in SINEMA Remote Connect
Server (A ...)
+ TODO: check
+CVE-2022-32260 (A vulnerability has been identified in SINEMA Remote Connect
Server (A ...)
+ TODO: check
+CVE-2022-32259 (A vulnerability has been identified in SINEMA Remote Connect
Server (A ...)
+ TODO: check
+CVE-2022-32258 (A vulnerability has been identified in SINEMA Remote Connect
Server (A ...)
+ TODO: check
CVE-2022-32257
RESERVED
-CVE-2022-32256
- RESERVED
-CVE-2022-32255
- RESERVED
-CVE-2022-32254
- RESERVED
-CVE-2022-32253
- RESERVED
-CVE-2022-32252
- RESERVED
-CVE-2022-32251
- RESERVED
+CVE-2022-32256 (A vulnerability has been identified in SINEMA Remote Connect
Server (A ...)
+ TODO: check
+CVE-2022-32255 (A vulnerability has been identified in SINEMA Remote Connect
Server (A ...)
+ TODO: check
+CVE-2022-32254 (A vulnerability has been identified in SINEMA Remote Connect
Server (A ...)
+ TODO: check
+CVE-2022-32253 (A vulnerability has been identified in SINEMA Remote Connect
Server (A ...)
+ TODO: check
+CVE-2022-32252 (A vulnerability has been identified in SINEMA Remote Connect
Server (A ...)
+ TODO: check
+CVE-2022-32251 (A vulnerability has been identified in SINEMA Remote Connect
Server (A ...)
+ TODO: check
CVE-2022-32250 (net/netfilter/nf_tables_api.c in the Linux kernel through
5.18.1 allow ...)
TODO: check with MITRE, duplicate of now as well assigned CVE-2022-1966
CVE-2022-32249
@@ -2619,8 +2871,8 @@ CVE-2022-32147
RESERVED
CVE-2022-32146
RESERVED
-CVE-2022-32145
- RESERVED
+CVE-2022-32145 (A vulnerability has been identified in Teamcenter Active
Workspace V5. ...)
+ TODO: check
CVE-2022-32144
RESERVED
CVE-2022-32143
@@ -3249,12 +3501,12 @@ CVE-2022-31849
RESERVED
CVE-2022-31848
RESERVED
-CVE-2022-31847
- RESERVED
-CVE-2022-31846
- RESERVED
-CVE-2022-31845
- RESERVED
+CVE-2022-31847 (A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK
WN579 X3 M ...)
+ TODO: check
+CVE-2022-31846 (A vulnerability in live_mfg.shtml of WAVLINK WN535 G3
M35G3R.V5030.180 ...)
+ TODO: check
+CVE-2022-31845 (A vulnerability in live_check.shtml of WAVLINK WN535 G3
M35G3R.V5030.1 ...)
+ TODO: check
CVE-2022-31844
RESERVED
CVE-2022-31843
@@ -4054,8 +4306,8 @@ CVE-2022-1888
CVE-2021-4231 (A vulnerability was found in Angular up to
11.0.4/11.1.0-next.2. It ha ...)
NOT-FOR-US: angular/angular - replacement for deprecated angularjs
NOTE: AngularJS upstream support has officially ended as of January 2022
-CVE-2022-31619
- RESERVED
+CVE-2022-31619 (A vulnerability has been identified in Teamcenter V12.4 (All
versions ...)
+ TODO: check
CVE-2022-1887
RESERVED
CVE-2022-1886 (Heap-based Buffer Overflow in GitHub repository vim/vim prior
to 8.2. ...)
@@ -4580,8 +4832,8 @@ CVE-2022-31467 (A DLL hijacking vulnerability in the
installed for Quick Heal To
NOT-FOR-US: Quick Heal Total Security
CVE-2022-31466 (Time of Check - Time of Use (TOCTOU) vulnerability in Quick
Heal Total ...)
NOT-FOR-US: Quick Heal Total Security
-CVE-2022-31465
- RESERVED
+CVE-2022-31465 (A vulnerability has been identified in Xpedition Designer (All
version ...)
+ TODO: check
CVE-2022-31464
RESERVED
CVE-2022-31463 (Owl Labs Meeting Owl 5.2.0.15 does not require a password for
Bluetoot ...)
@@ -4704,8 +4956,8 @@ CVE-2022-31405
RESERVED
CVE-2022-31404
RESERVED
-CVE-2022-31403
- RESERVED
+CVE-2022-31403 (ITOP v3.0.1 was discovered to contain a cross-site scripting
(XSS) vul ...)
+ TODO: check
CVE-2022-31402 (ITOP v3.0.1 was discovered to contain a cross-site scripting
(XSS) vul ...)
NOT-FOR-US: ITOP
CVE-2022-31401
@@ -4888,14 +5140,14 @@ CVE-2022-31313 (api-res-py package in PyPI 0.1 is
vulnerable to a code execution
TODO: check
CVE-2022-31312
RESERVED
-CVE-2022-31311
- RESERVED
+CVE-2022-31311 (An issue in adm.cgi of WAVLINK AERIAL X 1200M
M79X3.V5030.180719 allow ...)
+ TODO: check
CVE-2022-31310
RESERVED
-CVE-2022-31309
- RESERVED
-CVE-2022-31308
- RESERVED
+CVE-2022-31309 (A vulnerability in live_check.shtml of WAVLINK AERIAL X 1200M
M79X3.V5 ...)
+ TODO: check
+CVE-2022-31308 (A vulnerability in live_mfg.shtml of WAVLINK AERIAL X 1200M
M79X3.V503 ...)
+ TODO: check
CVE-2022-31307
RESERVED
CVE-2022-31306
@@ -4932,8 +5184,8 @@ CVE-2022-31291
RESERVED
CVE-2022-31290
RESERVED
-CVE-2022-31289
- RESERVED
+CVE-2022-31289 (https://ossindex.sonatype.org/ Sonatype Nexus Repository
Manager OSS 3 ...)
+ TODO: check
CVE-2022-31288
RESERVED
CVE-2022-31287 (An issue was discovered in Bento4 v1.2. There is an allocation
size re ...)
@@ -4964,8 +5216,8 @@ CVE-2022-31275
RESERVED
CVE-2022-31274
RESERVED
-CVE-2022-31273
- RESERVED
+CVE-2022-31273 (An issue in TopIDP3000 Topsec Operating System
tos_3.3.005.665b.15_smp ...)
+ TODO: check
CVE-2022-31272
RESERVED
CVE-2022-31271
@@ -5936,8 +6188,8 @@ CVE-2022-30939
RESERVED
CVE-2022-30938
RESERVED
-CVE-2022-30937
- RESERVED
+CVE-2022-30937 (A vulnerability has been identified in EN100 Ethernet module
DNP3 IP v ...)
+ TODO: check
CVE-2022-30792
RESERVED
CVE-2022-30791
@@ -6126,10 +6378,10 @@ CVE-2022-30933
RESERVED
CVE-2022-30932
RESERVED
-CVE-2022-30931
- RESERVED
-CVE-2022-30930
- RESERVED
+CVE-2022-30931 (Employee Leaves Management System (ELMS) V 2.1 is vulnerable
to Cross ...)
+ TODO: check
+CVE-2022-30930 (Tourism Management System Version: V 3.2 is affected by: Cross
Site Re ...)
+ TODO: check
CVE-2022-30929
RESERVED
CVE-2022-30928
@@ -6182,8 +6434,8 @@ CVE-2022-30905
RESERVED
CVE-2022-30904
RESERVED
-CVE-2022-30903
- RESERVED
+CVE-2022-30903 (Nokia "G-2425G-A" Bharti Airtel Routers Hardware version
"3FE48299DEAA ...)
+ TODO: check
CVE-2022-30902
RESERVED
CVE-2022-30901
@@ -7994,14 +8246,14 @@ CVE-2022-30233 (A CWE-20: Improper Input Validation
vulnerability exists that co
NOT-FOR-US: Schneider Electric
CVE-2022-30232 (A CWE-20: Improper Input Validation vulnerability exists that
could ca ...)
NOT-FOR-US: Schneider Electric
-CVE-2022-30231
- RESERVED
-CVE-2022-30230
- RESERVED
-CVE-2022-30229
- RESERVED
-CVE-2022-30228
- RESERVED
+CVE-2022-30231 (A vulnerability has been identified in SICAM GridEdge
Essential ARM (A ...)
+ TODO: check
+CVE-2022-30230 (A vulnerability has been identified in SICAM GridEdge
Essential ARM (A ...)
+ TODO: check
+CVE-2022-30229 (A vulnerability has been identified in SICAM GridEdge
Essential ARM (A ...)
+ TODO: check
+CVE-2022-30228 (A vulnerability has been identified in SICAM GridEdge
Essential ARM (A ...)
+ TODO: check
CVE-2022-1584 (Reflected XSS in GitHub repository microweber/microweber prior
to 1.2. ...)
NOT-FOR-US: microweber
CVE-2022-1583 (The External Links in New Window / New Tab WordPress plugin
before 1.4 ...)
@@ -9822,8 +10074,8 @@ CVE-2022-29614
RESERVED
CVE-2022-29613 (Due to insufficient input validation, SAP Employee Self
Service allows ...)
NOT-FOR-US: SAP
-CVE-2022-29612
- RESERVED
+CVE-2022-29612 (SAP NetWeaver, ABAP Platform and SAP Host Agent - versions
KERNEL 7.22 ...)
+ TODO: check
CVE-2022-29611 (SAP NetWeaver Application Server for ABAP and ABAP Platform do
not per ...)
NOT-FOR-US: SAP
CVE-2022-29610 (SAP NetWeaver Application Server ABAP allows an authenticated
attacker ...)
@@ -10948,8 +11200,8 @@ CVE-2022-29240
RESERVED
CVE-2022-29239
RESERVED
-CVE-2022-29238
- RESERVED
+CVE-2022-29238 (Jupyter Notebook is a web-based notebook environment for
interactive c ...)
+ TODO: check
CVE-2022-29237 (Opencast is a free and open source solution for automated
video captur ...)
NOT-FOR-US: Opencast
CVE-2022-29236 (BigBlueButton is an open source web conferencing system.
Starting in v ...)
@@ -11494,8 +11746,8 @@ CVE-2022-29036 (Jenkins Credentials Plugin
1111.v35a_307992395 and earlier, exce
NOT-FOR-US: Jenkins plugin
CVE-2022-29035 (In JetBrains Ktor Native before version 2.0.0 random values
used for n ...)
NOT-FOR-US: JetBrains Ktor
-CVE-2022-29034
- RESERVED
+CVE-2022-29034 (A vulnerability has been identified in SINEMA Remote Connect
Server (A ...)
+ TODO: check
CVE-2022-29033 (A vulnerability has been identified in JT2Go (All versions
< V13.3. ...)
NOT-FOR-US: JT2Go / Siemens
CVE-2022-29032 (A vulnerability has been identified in JT2Go (All versions
< V13.3. ...)
@@ -14918,8 +15170,8 @@ CVE-2022-27891
RESERVED
CVE-2022-27890
RESERVED
-CVE-2022-27889
- RESERVED
+CVE-2022-27889 (The Multipass service was found to have code paths that could
be abuse ...)
+ TODO: check
CVE-2022-27888 (Foundry Issues service versions 2.244.0 to 2.249.0 was found
to be log ...)
NOT-FOR-US: Foundry Issues service
CVE-2022-1102
@@ -15527,8 +15779,8 @@ CVE-2022-27670 (SAP SQL Anywhere - version 17.0, allows
an authenticated attacke
NOT-FOR-US: SAP
CVE-2022-27669 (An unauthenticated user can use functions of XML Data
Archiving Servic ...)
NOT-FOR-US: SAP
-CVE-2022-27668
- RESERVED
+CVE-2022-27668 (Depending on the configuration of the route permission table
in file ' ...)
+ TODO: check
CVE-2022-27667 (Under certain conditions, SAP BusinessObjects Business
Intelligence pl ...)
NOT-FOR-US: SAP
CVE-2022-1059
@@ -16120,7 +16372,7 @@ CVE-2022-27440
RESERVED
CVE-2022-27439
RESERVED
-CVE-2022-27438 (Caphyon Ltd Advanced Installer 19.2 was discovered to contain
a remote ...)
+CVE-2022-27438 (Caphyon Ltd Advanced Installer 19.3 and earlier and many
products that ...)
NOT-FOR-US: Caphyon Ltd Advanced Installer
CVE-2022-27437
RESERVED
@@ -16812,12 +17064,12 @@ CVE-2022-0990 (Server-Side Request Forgery (SSRF) in
GitHub repository janeczku/
NOT-FOR-US: calibre-web
CVE-2020-36519 (Mimecast Email Security before 2020-01-10 allows any admin to
spoof an ...)
NOT-FOR-US: Mimecast Email Security
-CVE-2022-27221
- RESERVED
-CVE-2022-27220
- RESERVED
-CVE-2022-27219
- RESERVED
+CVE-2022-27221 (A vulnerability has been identified in SINEMA Remote Connect
Server (A ...)
+ TODO: check
+CVE-2022-27220 (A vulnerability has been identified in SINEMA Remote Connect
Server (A ...)
+ TODO: check
+CVE-2022-27219 (A vulnerability has been identified in SINEMA Remote Connect
Server (A ...)
+ TODO: check
CVE-2022-27194 (A vulnerability has been identified in SIMATIC PCS neo
(Administration ...)
NOT-FOR-US: Siemens
CVE-2022-0989 (An unprivileged user could use the functionality of the NS
WooCommerce ...)
@@ -18856,8 +19108,8 @@ CVE-2022-0865 (Reachable Assertion in tiffcp in libtiff
4.3.0 allows attackers t
NOTE: https://gitlab.com/libtiff/libtiff/-/issues/385
NOTE: https://gitlab.com/libtiff/libtiff/-/merge_requests/306
NOTE:
https://gitlab.com/libtiff/libtiff/-/commit/a1c933dabd0e1c54a412f3f84ae0aa58115c6067
-CVE-2022-26476
- RESERVED
+CVE-2022-26476 (A vulnerability has been identified in Spectrum Power 4 (All
versions ...)
+ TODO: check
CVE-2022-26475
RESERVED
CVE-2022-26474
@@ -21089,8 +21341,8 @@ CVE-2022-25653
RESERVED
CVE-2022-25652
RESERVED
-CVE-2022-25651
- RESERVED
+CVE-2022-25651 (Memory corruption in bluetooth host due to integer overflow
while proc ...)
+ TODO: check
CVE-2022-25650 (A vulnerability has been identified in Mendix Applications
using Mendi ...)
NOT-FOR-US: Siemens
CVE-2022-25172 (An information disclosure vulnerability exists in the web
interface se ...)
@@ -22467,8 +22719,7 @@ CVE-2022-25169 (The BPG parser in versions of Apache
Tika before 1.28.2 and 2.4.
NOTE: https://www.openwall.com/lists/oss-security/2022/05/16/4
CVE-2022-25168
RESERVED
-CVE-2022-25167 [Apache Flume JMSSource does not protect from malicious JNDI
urls]
- RESERVED
+CVE-2022-25167 (Apache Flume versions 1.4.0 through 1.9.0 are vulnerable to a
remote c ...)
NOT-FOR-US: Apache Flume
CVE-2022-24435 (Cross-site scripting vulnerability in phpUploader v1.2 and
earlier all ...)
NOT-FOR-US: phpUploader
@@ -34993,8 +35244,8 @@ CVE-2022-22105
RESERVED
CVE-2022-22104
RESERVED
-CVE-2022-22103
- RESERVED
+CVE-2022-22103 (Memory corruption in multimedia driver due to double free
while proces ...)
+ TODO: check
CVE-2022-22102
RESERVED
CVE-2022-22101
@@ -35019,24 +35270,24 @@ CVE-2022-22092
RESERVED
CVE-2022-22091
RESERVED
-CVE-2022-22090
- RESERVED
+CVE-2022-22090 (Memory corruption in audio due to use after free while
managing buffer ...)
+ TODO: check
CVE-2022-22089
RESERVED
CVE-2022-22088
RESERVED
-CVE-2022-22087
- RESERVED
-CVE-2022-22086
- RESERVED
-CVE-2022-22085
- RESERVED
-CVE-2022-22084
- RESERVED
-CVE-2022-22083
- RESERVED
-CVE-2022-22082
- RESERVED
+CVE-2022-22087 (memory corruption in video due to buffer overflow while
parsing mkv cl ...)
+ TODO: check
+CVE-2022-22086 (Memory corruption in video due to double free while parsing
3gp clip w ...)
+ TODO: check
+CVE-2022-22085 (Memory corruption in video due to buffer overflow while
reading the dt ...)
+ TODO: check
+CVE-2022-22084 (Memory corruption when extracting qcp audio file due to lack
of check ...)
+ TODO: check
+CVE-2022-22083 (Denial of service due to memory corruption while extracting
ape header ...)
+ TODO: check
+CVE-2022-22082 (Memory corruption due to possible buffer overflow while
parsing DSF he ...)
+ TODO: check
CVE-2022-22081
RESERVED
CVE-2022-22080
@@ -35055,24 +35306,24 @@ CVE-2022-22074
RESERVED
CVE-2022-22073
RESERVED
-CVE-2022-22072
- RESERVED
-CVE-2022-22071
- RESERVED
+CVE-2022-22072 (Buffer overflow can occur due to improper validation of NDP
applicatio ...)
+ TODO: check
+CVE-2022-22071 (Possible use after free when process shell memory is freed
using IOCTL ...)
+ TODO: check
CVE-2022-22070
RESERVED
CVE-2022-22069
RESERVED
-CVE-2022-22068
- RESERVED
+CVE-2022-22068 (kernel event may contain unexpected content which is not
generated by ...)
+ TODO: check
CVE-2022-22067
RESERVED
CVE-2022-22066
RESERVED
-CVE-2022-22065
- RESERVED
-CVE-2022-22064
- RESERVED
+CVE-2022-22065 (Out of bound read in WLAN HOST due to improper length check
can lead t ...)
+ TODO: check
+CVE-2022-22064 (Possible buffer over read due to lack of size validation while
unpacki ...)
+ TODO: check
CVE-2022-22063
RESERVED
CVE-2022-22062
@@ -35085,8 +35336,8 @@ CVE-2022-22059
RESERVED
CVE-2022-22058
RESERVED
-CVE-2022-22057
- RESERVED
+CVE-2022-22057 (Use after free in graphics fence due to a race condition while
closing ...)
+ TODO: check
CVE-2022-22056 (The Le-yan dental management system contains a hard-coded
credentials ...)
NOT-FOR-US: Le-yan dental management system
CVE-2022-22055 (The Le-yan dental management system contains an SQL-injection
vulnerab ...)
@@ -41239,8 +41490,8 @@ CVE-2022-21506
RESERVED
CVE-2022-21505
RESERVED
-CVE-2022-21504
- RESERVED
+CVE-2022-21504 (The code in UEK6 U3 was missing an appropiate file descriptor
count to ...)
+ TODO: check
CVE-2022-21503
RESERVED
CVE-2022-21502
@@ -45808,8 +46059,8 @@ CVE-2021-42677
RESERVED
CVE-2021-42676
RESERVED
-CVE-2021-42675
- RESERVED
+CVE-2021-42675 (Kreado Kreasfero 1.5 does not properly sanitize uploaded files
to the ...)
+ TODO: check
CVE-2021-42674
RESERVED
CVE-2021-42673
@@ -52116,8 +52367,8 @@ CVE-2021-40680 (There is a Directory Traversal
vulnerability in Artica Proxy (4.
NOT-FOR-US: ArticaTech
CVE-2021-40679
RESERVED
-CVE-2021-40678
- RESERVED
+CVE-2021-40678 (In Piwigo 11.5.0, there exists a persistent cross-site
scripting in th ...)
+ TODO: check
CVE-2021-40677
RESERVED
CVE-2021-40676
@@ -52152,12 +52403,12 @@ CVE-2021-40662 (A Cross-Site Request Forgery (CSRF)
in Chamilo LMS 1.11.14 allow
NOT-FOR-US: Chamilo LMS
CVE-2021-40661
RESERVED
-CVE-2021-40660
- RESERVED
+CVE-2021-40660 (An issue was discovered in Delight Nashorn Sandbox 0.2.0.
There is an ...)
+ TODO: check
CVE-2021-40659
RESERVED
-CVE-2021-40658
- RESERVED
+CVE-2021-40658 (Textpattern 4.8.7 is affected by a HTML injection
vulnerability throug ...)
+ TODO: check
CVE-2021-40657
RESERVED
CVE-2021-40656 (libsixel before 1.10 is vulnerable to Buffer Overflow in
libsixel/src/ ...)
@@ -52178,10 +52429,10 @@ CVE-2021-40652
RESERVED
CVE-2021-40651 (OS4Ed OpenSIS Community 8.0 is vulnerable to a local file
inclusion vu ...)
NOT-FOR-US: OS4Ed OpenSIS Community
-CVE-2021-40650
- RESERVED
-CVE-2021-40649
- RESERVED
+CVE-2021-40650 (In Connx Version 6.2.0.1269 (20210623), a cookie can be issued
by the ...)
+ TODO: check
+CVE-2021-40649 (In Connx Version 6.2.0.1269 (20210623), a cookie can be issued
by the ...)
+ TODO: check
CVE-2021-40648
RESERVED
CVE-2021-40647
@@ -52212,8 +52463,8 @@ CVE-2021-40635 (OS4ED openSIS 8.0 is affected by SQL
injection in ChooseCpSearch
NOT-FOR-US: openSIS
CVE-2021-40634
RESERVED
-CVE-2021-40633
- RESERVED
+CVE-2021-40633 (A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in
giflib 5 ...)
+ TODO: check
CVE-2021-40632
RESERVED
CVE-2021-40631
@@ -52246,8 +52497,8 @@ CVE-2021-40618 (An SQL Injection vulnerability exists
in openSIS Classic 8.0 via
NOT-FOR-US: openSIS
CVE-2021-40617 (An SQL Injection vulnerability exists in openSIS Community
Edition ver ...)
NOT-FOR-US: openSIS
-CVE-2021-40616
- RESERVED
+CVE-2021-40616 (thinkcmf v5.1.7 has an unauthorized vulnerability. The
attacker can mo ...)
+ TODO: check
CVE-2021-40615
RESERVED
CVE-2021-40614
@@ -60981,8 +61232,8 @@ CVE-2021-37184 (A vulnerability has been identified in
Industrial Edge Managemen
NOT-FOR-US: Siemens
CVE-2021-37183 (A vulnerability has been identified in SINEMA Remote Connect
Server (A ...)
NOT-FOR-US: Siemens
-CVE-2021-37182
- RESERVED
+CVE-2021-37182 (A vulnerability has been identified in SCALANCE XM408-4C (All
versions ...)
+ TODO: check
CVE-2021-37181 (A vulnerability has been identified in Cerberus DMS V4.0 (All
versions ...)
NOT-FOR-US: Siemens
CVE-2021-37180 (A vulnerability has been identified in Solid Edge SE2021 (All
Versions ...)
@@ -65952,46 +66203,46 @@ CVE-2021-35132
RESERVED
CVE-2021-35131
RESERVED
-CVE-2021-35130
- RESERVED
-CVE-2021-35129
- RESERVED
+CVE-2021-35130 (Memory corruption in graphics support layer due to use after
free cond ...)
+ TODO: check
+CVE-2021-35129 (Memory corruption in BT controller due to improper length
check while ...)
+ TODO: check
CVE-2021-35128
RESERVED
CVE-2021-35127
RESERVED
-CVE-2021-35126
- RESERVED
+CVE-2021-35126 (Memory corruption in DSP service due to improper validation of
input p ...)
+ TODO: check
CVE-2021-35125
RESERVED
CVE-2021-35124
RESERVED
-CVE-2021-35123
- RESERVED
+CVE-2021-35123 (Buffer copy in GATT multi notification due to improper length
check fo ...)
+ TODO: check
CVE-2021-35122
RESERVED
-CVE-2021-35121
- RESERVED
-CVE-2021-35120
- RESERVED
-CVE-2021-35119
- RESERVED
-CVE-2021-35118
- RESERVED
+CVE-2021-35121 (An array index is improperly used to lock and unlock a mutex
which can ...)
+ TODO: check
+CVE-2021-35120 (Improper handling between export and release functions on the
same han ...)
+ TODO: check
+CVE-2021-35119 (Potential out of Bounds read in FIPS event processing due to
improper ...)
+ TODO: check
+CVE-2021-35118 (An out-of-bounds write can occur due to an incorrect input
check in th ...)
+ TODO: check
CVE-2021-35117 (An Out of Bounds read may potentially occur while processing
an IBSS b ...)
NOT-FOR-US: Qualcomm components for Android
-CVE-2021-35116
- RESERVED
+CVE-2021-35116 (APK can load a crafted model into the CDSP which can lead to a
comprom ...)
+ TODO: check
CVE-2021-35115 (Improper handling of multiple session supported by PVM backend
can lea ...)
NOT-FOR-US: Qualcomm
-CVE-2021-35114
- RESERVED
+CVE-2021-35114 (Improper buffer initialization on the backend driver can lead
to buffe ...)
+ TODO: check
CVE-2021-35113
RESERVED
-CVE-2021-35112
- RESERVED
-CVE-2021-35111
- RESERVED
+CVE-2021-35112 (A user with user level permission can access graphics
protected region ...)
+ TODO: check
+CVE-2021-35111 (Improper validation of tag id while RRC sending tag id to MAC
can lead ...)
+ TODO: check
CVE-2021-35110 (Possible buffer overflow to improper validation of hash
segment of fil ...)
NOT-FOR-US: Qualcomm
CVE-2021-35109
@@ -66004,76 +66255,76 @@ CVE-2021-35106 (Possible out of bound read due to
improper length calculation of
NOT-FOR-US: Qualcomm components for Android
CVE-2021-35105 (Possible out of bounds access due to improper input validation
during ...)
NOT-FOR-US: Qualcomm components for Android
-CVE-2021-35104
- RESERVED
+CVE-2021-35104 (Possible buffer overflow due to improper parsing of headers
while play ...)
+ TODO: check
CVE-2021-35103 (Possible out of bound write due to improper validation of
number of ti ...)
NOT-FOR-US: Qualcomm QCA-WiFi for Android
-CVE-2021-35102
- RESERVED
-CVE-2021-35101
- RESERVED
-CVE-2021-35100
- RESERVED
+CVE-2021-35102 (Possible buffer overflow due to lack of validation for the
length of N ...)
+ TODO: check
+CVE-2021-35101 (Improper handling of writes to virtual GICR control can lead
to assert ...)
+ TODO: check
+CVE-2021-35100 (Possible buffer over read due to improper calculation of
string length ...)
+ TODO: check
CVE-2021-35099
RESERVED
-CVE-2021-35098
- RESERVED
+CVE-2021-35098 (Improper validation of session id in PCM routing process can
lead to m ...)
+ TODO: check
CVE-2021-35097
RESERVED
-CVE-2021-35096
- RESERVED
-CVE-2021-35095
- RESERVED
-CVE-2021-35094
- RESERVED
+CVE-2021-35096 (Improper memory allocation during counter check DLM handling
can lead ...)
+ TODO: check
+CVE-2021-35095 (Improper serialization of message queue client registration
can lead t ...)
+ TODO: check
+CVE-2021-35094 (Improper verification of timeout-based authentication in
identity cred ...)
+ TODO: check
CVE-2021-35093 (Possible memory corruption in BT controller when it receives
an oversi ...)
NOT-FOR-US: Qualcomm
-CVE-2021-35092
- RESERVED
-CVE-2021-35091
- RESERVED
-CVE-2021-35090
- RESERVED
+CVE-2021-35092 (Processing DCB/AVB algorithm with an invalid queue index from
IOCTL re ...)
+ TODO: check
+CVE-2021-35091 (Possible out of bounds read due to improper typecasting while
handling ...)
+ TODO: check
+CVE-2021-35090 (Possible hypervisor memory corruption due to TOC TOU race
condition wh ...)
+ TODO: check
CVE-2021-35089 (Possible buffer overflow due to lack of input IB amount
validation whi ...)
NOT-FOR-US: Qualcomm
CVE-2021-35088 (Possible out of bound read due to improper validation of IE
length dur ...)
NOT-FOR-US: Qualcomm QCA-WiFi for Android
-CVE-2021-35087
- RESERVED
-CVE-2021-35086
- RESERVED
-CVE-2021-35085
- RESERVED
-CVE-2021-35084
- RESERVED
-CVE-2021-35083
- RESERVED
-CVE-2021-35082
- RESERVED
-CVE-2021-35081
- RESERVED
-CVE-2021-35080
- RESERVED
-CVE-2021-35079
- RESERVED
-CVE-2021-35078
- RESERVED
+CVE-2021-35087 (Possible null pointer access due to improper validation of
system info ...)
+ TODO: check
+CVE-2021-35086 (Possible buffer over read due to improper validation of SIB
type when ...)
+ TODO: check
+CVE-2021-35085 (Possible buffer overflow due to lack of buffer length check
during man ...)
+ TODO: check
+CVE-2021-35084 (Possible out of bound read due to lack of length check of data
length ...)
+ TODO: check
+CVE-2021-35083 (Possible out of bound read due to improper validation of
certificate c ...)
+ TODO: check
+CVE-2021-35082 (Improper integrity check can lead to race condition between
tasks PDCP ...)
+ TODO: check
+CVE-2021-35081 (Possible buffer overflow due to improper validation of SSID
length rec ...)
+ TODO: check
+CVE-2021-35080 (Disabled SMMU from secure side while RPM is assigned a secure
stream c ...)
+ TODO: check
+CVE-2021-35079 (Improper validation of permissions for third party application
accessi ...)
+ TODO: check
+CVE-2021-35078 (Possible memory leak due to improper validation of certificate
chain l ...)
+ TODO: check
CVE-2021-35077 (Possible use after free scenario in compute offloads to DSP
while mult ...)
NOT-FOR-US: Qualcomm
-CVE-2021-35076
- RESERVED
+CVE-2021-35076 (Possible null pointer dereference due to improper validation
of RRC co ...)
+ TODO: check
CVE-2021-35075 (Possible null pointer dereference due to lack of WDOG
structure valida ...)
NOT-FOR-US: Qualcomm
CVE-2021-35074 (Possible integer overflow due to improper fragment datatype
while calc ...)
NOT-FOR-US: Qualcomm
-CVE-2021-35073
- RESERVED
-CVE-2021-35072
- RESERVED
-CVE-2021-35071
- RESERVED
-CVE-2021-35070
- RESERVED
+CVE-2021-35073 (Possible assertion due to improper validation of rank
restriction fiel ...)
+ TODO: check
+CVE-2021-35072 (Possible buffer overflow due to improper validation of array
index whi ...)
+ TODO: check
+CVE-2021-35071 (Possible buffer over read due to lack of size validation while
copying ...)
+ TODO: check
+CVE-2021-35070 (RPM secure Stream can access any secure resource due to
improper SMMU ...)
+ TODO: check
CVE-2021-35069 (Improper validation of data length received from DMA buffer
can lead t ...)
NOT-FOR-US: Qualcomm
CVE-2021-35068 (Lack of null check while freeing the device information buffer
in the ...)
@@ -78347,40 +78598,40 @@ CVE-2021-30352
RESERVED
CVE-2021-30351 (An out of bound memory access can occur due to improper
validation of ...)
NOT-FOR-US: Qualcomm components for Android
-CVE-2021-30350
- RESERVED
-CVE-2021-30349
- RESERVED
+CVE-2021-30350 (Lack of MBN header size verification against input buffer can
lead to ...)
+ TODO: check
+CVE-2021-30349 (Improper access control sequence for AC database after memory
allocati ...)
+ TODO: check
CVE-2021-30348 (Improper validation of LLM utility timers availability can
lead to den ...)
NOT-FOR-US: Qualcomm
-CVE-2021-30347
- RESERVED
-CVE-2021-30346
- RESERVED
-CVE-2021-30345
- RESERVED
-CVE-2021-30344
- RESERVED
-CVE-2021-30343
- RESERVED
-CVE-2021-30342
- RESERVED
-CVE-2021-30341
- RESERVED
-CVE-2021-30340
- RESERVED
-CVE-2021-30339
- RESERVED
-CVE-2021-30338
- RESERVED
+CVE-2021-30347 (Improper integrity check can lead to race condition between
tasks PDCP ...)
+ TODO: check
+CVE-2021-30346 (RPM secure Stream can access any secure resource due to
improper SMMU ...)
+ TODO: check
+CVE-2021-30345 (RPM secure Stream can access any secure resource due to
improper SMMU ...)
+ TODO: check
+CVE-2021-30344 (Improper authorization of a replayed LTE security mode command
can lea ...)
+ TODO: check
+CVE-2021-30343 (Improper integrity check can lead to race condition between
tasks PDCP ...)
+ TODO: check
+CVE-2021-30342 (Improper integrity check can lead to race condition between
tasks PDCP ...)
+ TODO: check
+CVE-2021-30341 (Improper buffer size validation of DSM packet received can
lead to mem ...)
+ TODO: check
+CVE-2021-30340 (Reachable assertion due to improper validation of coreset in
PDCCH con ...)
+ TODO: check
+CVE-2021-30339 (Reading PRNG output may lead to improper key generation due to
lack of ...)
+ TODO: check
+CVE-2021-30338 (Improper input validation in TrustZone memory transfer
interface can l ...)
+ TODO: check
CVE-2021-30337 (Possible use after free when process shell memory is freed
using IOCTL ...)
NOT-FOR-US: Qualcomm components for Android
CVE-2021-30336 (Possible out of bound read due to lack of domain input
validation whil ...)
NOT-FOR-US: Qualcomm components for Android
CVE-2021-30335 (Possible assertion in QOS request due to improper validation
when mult ...)
NOT-FOR-US: Qualcomm components for Android
-CVE-2021-30334
- RESERVED
+CVE-2021-30334 (Possible use after free due to lack of null check of DRM file
status a ...)
+ TODO: check
CVE-2021-30333 (Improper validation of buffer size input to the EFS file can
lead to m ...)
NOT-FOR-US: Qualcomm
CVE-2021-30332 (Possible assertion due to improper validation of OTA
configuration in ...)
@@ -78393,8 +78644,8 @@ CVE-2021-30329 (Possible assertion due to improper
validation of TCI configurati
NOT-FOR-US: Qualcomm
CVE-2021-30328 (Possible assertion due to improper validation of invalid NR
CSI-IM res ...)
NOT-FOR-US: Qualcomm
-CVE-2021-30327
- RESERVED
+CVE-2021-30327 (Buffer overflow in sahara protocol while processing commands
leads to ...)
+ TODO: check
CVE-2021-30326 (Possible assertion due to improper size validation while
processing th ...)
NOT-FOR-US: Qualcomm
CVE-2021-30325 (Possible out of bound access of DCI resources due to lack of
validatio ...)
@@ -78485,8 +78736,8 @@ CVE-2021-30283 (Possible denial of service due to
improper handling of debug reg
NOT-FOR-US: Qualcomm components for Android
CVE-2021-30282 (Possible out of bound write in RAM partition table due to
improper val ...)
NOT-FOR-US: Qualcomm components for Android
-CVE-2021-30281
- RESERVED
+CVE-2021-30281 (XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX in Snapdragon Auto,
Snapdragon Co ...)
+ TODO: check
CVE-2021-30280
RESERVED
CVE-2021-30279 (Possible access control violation while setting current
permission for ...)
@@ -284339,7 +284590,7 @@ CVE-2018-4845 (A vulnerability has been identified in
RAPIDLab 1200 systems / RA
NOT-FOR-US: RAPIDLab
CVE-2018-4844 (A vulnerability has been identified in SIMATIC WinCC OA UI for
Android ...)
NOT-FOR-US: SIMATIC
-CVE-2018-4843 (A vulnerability has been identified in SIMATIC CP 343-1
Advanced (All ...)
+CVE-2018-4843 (A vulnerability has been identified in SIMATIC CP 343-1 (incl.
SIPLUS ...)
NOT-FOR-US: SIMATIC
CVE-2018-4842 (A vulnerability has been identified in SCALANCE X-200IRT switch
family ...)
NOT-FOR-US: Siemens SCALANCE X switches
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/41eb181ea20ad276cafead709ea5632f55064a35
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/41eb181ea20ad276cafead709ea5632f55064a35
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits