Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
d40cecfd by security tracker role at 2022-06-20T08:10:15+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,299 @@
+CVE-2022-34146
+       RESERVED
+CVE-2022-34145
+       RESERVED
+CVE-2022-34144
+       RESERVED
+CVE-2022-34143
+       RESERVED
+CVE-2022-34142
+       RESERVED
+CVE-2022-34141
+       RESERVED
+CVE-2022-34140
+       RESERVED
+CVE-2022-34139
+       RESERVED
+CVE-2022-34138
+       RESERVED
+CVE-2022-34137
+       RESERVED
+CVE-2022-34136
+       RESERVED
+CVE-2022-34135
+       RESERVED
+CVE-2022-34134
+       RESERVED
+CVE-2022-34133
+       RESERVED
+CVE-2022-34132
+       RESERVED
+CVE-2022-34131
+       RESERVED
+CVE-2022-34130
+       RESERVED
+CVE-2022-34129
+       RESERVED
+CVE-2022-34128
+       RESERVED
+CVE-2022-34127
+       RESERVED
+CVE-2022-34126
+       RESERVED
+CVE-2022-34125
+       RESERVED
+CVE-2022-34124
+       RESERVED
+CVE-2022-34123
+       RESERVED
+CVE-2022-34122
+       RESERVED
+CVE-2022-34121
+       RESERVED
+CVE-2022-34120
+       RESERVED
+CVE-2022-34119
+       RESERVED
+CVE-2022-34118
+       RESERVED
+CVE-2022-34117
+       RESERVED
+CVE-2022-34116
+       RESERVED
+CVE-2022-34115
+       RESERVED
+CVE-2022-34114
+       RESERVED
+CVE-2022-34113
+       RESERVED
+CVE-2022-34112
+       RESERVED
+CVE-2022-34111
+       RESERVED
+CVE-2022-34110
+       RESERVED
+CVE-2022-34109
+       RESERVED
+CVE-2022-34108
+       RESERVED
+CVE-2022-34107
+       RESERVED
+CVE-2022-34106
+       RESERVED
+CVE-2022-34105
+       RESERVED
+CVE-2022-34104
+       RESERVED
+CVE-2022-34103
+       RESERVED
+CVE-2022-34102
+       RESERVED
+CVE-2022-34101
+       RESERVED
+CVE-2022-34100
+       RESERVED
+CVE-2022-34099
+       RESERVED
+CVE-2022-34098
+       RESERVED
+CVE-2022-34097
+       RESERVED
+CVE-2022-34096
+       RESERVED
+CVE-2022-34095
+       RESERVED
+CVE-2022-34094
+       RESERVED
+CVE-2022-34093
+       RESERVED
+CVE-2022-34092
+       RESERVED
+CVE-2022-34091
+       RESERVED
+CVE-2022-34090
+       RESERVED
+CVE-2022-34089
+       RESERVED
+CVE-2022-34088
+       RESERVED
+CVE-2022-34087
+       RESERVED
+CVE-2022-34086
+       RESERVED
+CVE-2022-34085
+       RESERVED
+CVE-2022-34084
+       RESERVED
+CVE-2022-34083
+       RESERVED
+CVE-2022-34082
+       RESERVED
+CVE-2022-34081
+       RESERVED
+CVE-2022-34080
+       RESERVED
+CVE-2022-34079
+       RESERVED
+CVE-2022-34078
+       RESERVED
+CVE-2022-34077
+       RESERVED
+CVE-2022-34076
+       RESERVED
+CVE-2022-34075
+       RESERVED
+CVE-2022-34074
+       RESERVED
+CVE-2022-34073
+       RESERVED
+CVE-2022-34072
+       RESERVED
+CVE-2022-34071
+       RESERVED
+CVE-2022-34070
+       RESERVED
+CVE-2022-34069
+       RESERVED
+CVE-2022-34068
+       RESERVED
+CVE-2022-34067
+       RESERVED
+CVE-2022-34066
+       RESERVED
+CVE-2022-34065
+       RESERVED
+CVE-2022-34064
+       RESERVED
+CVE-2022-34063
+       RESERVED
+CVE-2022-34062
+       RESERVED
+CVE-2022-34061
+       RESERVED
+CVE-2022-34060
+       RESERVED
+CVE-2022-34059
+       RESERVED
+CVE-2022-34058
+       RESERVED
+CVE-2022-34057
+       RESERVED
+CVE-2022-34056
+       RESERVED
+CVE-2022-34055
+       RESERVED
+CVE-2022-34054
+       RESERVED
+CVE-2022-34053
+       RESERVED
+CVE-2022-34052
+       RESERVED
+CVE-2022-34051
+       RESERVED
+CVE-2022-34050
+       RESERVED
+CVE-2022-34049
+       RESERVED
+CVE-2022-34048
+       RESERVED
+CVE-2022-34047
+       RESERVED
+CVE-2022-34046
+       RESERVED
+CVE-2022-34045
+       RESERVED
+CVE-2022-34044
+       RESERVED
+CVE-2022-34043
+       RESERVED
+CVE-2022-34042
+       RESERVED
+CVE-2022-34041
+       RESERVED
+CVE-2022-34040
+       RESERVED
+CVE-2022-34039
+       RESERVED
+CVE-2022-34038
+       RESERVED
+CVE-2022-34037
+       RESERVED
+CVE-2022-34036
+       RESERVED
+CVE-2022-34035
+       RESERVED
+CVE-2022-34034
+       RESERVED
+CVE-2022-34033
+       RESERVED
+CVE-2022-34032
+       RESERVED
+CVE-2022-34031
+       RESERVED
+CVE-2022-34030
+       RESERVED
+CVE-2022-34029
+       RESERVED
+CVE-2022-34028
+       RESERVED
+CVE-2022-34027
+       RESERVED
+CVE-2022-34026
+       RESERVED
+CVE-2022-34025
+       RESERVED
+CVE-2022-34024
+       RESERVED
+CVE-2022-34023
+       RESERVED
+CVE-2022-34022
+       RESERVED
+CVE-2022-34021
+       RESERVED
+CVE-2022-34020
+       RESERVED
+CVE-2022-34019
+       RESERVED
+CVE-2022-34018
+       RESERVED
+CVE-2022-34017
+       RESERVED
+CVE-2022-34016
+       RESERVED
+CVE-2022-34015
+       RESERVED
+CVE-2022-34014
+       RESERVED
+CVE-2022-34013
+       RESERVED
+CVE-2022-34012
+       RESERVED
+CVE-2022-34011
+       RESERVED
+CVE-2022-34010
+       RESERVED
+CVE-2022-34009
+       RESERVED
+CVE-2022-34008
+       RESERVED
+CVE-2022-34007
+       RESERVED
+CVE-2022-34006 (An issue was discovered in TitanFTP (aka Titan FTP) NextGen 
before 1.2 ...)
+       TODO: check
+CVE-2022-34005 (An issue was discovered in TitanFTP (aka Titan FTP) NextGen 
before 1.2 ...)
+       TODO: check
+CVE-2022-34004
+       RESERVED
+CVE-2022-34003
+       RESERVED
+CVE-2022-34002
+       RESERVED
+CVE-2022-34001
+       RESERVED
+CVE-2022-34000 (libjxl 0.6.1 has an assertion failure in 
LowMemoryRenderPipeline::Init ...)
+       TODO: check
+CVE-2022-33948
+       RESERVED
 CVE-2022-33999
        RESERVED
 CVE-2022-33998
@@ -141,22 +437,22 @@ CVE-2017-20066
        RESERVED
 CVE-2017-20065
        RESERVED
-CVE-2017-20064
-       RESERVED
-CVE-2017-20063
-       RESERVED
-CVE-2017-20062
-       RESERVED
-CVE-2017-20061
-       RESERVED
-CVE-2017-20060
-       RESERVED
-CVE-2017-20059
-       RESERVED
-CVE-2017-20058
-       RESERVED
-CVE-2017-20057
-       RESERVED
+CVE-2017-20064 (A vulnerability was found in Elefant CMS 1.3.12-RC. It has 
been declar ...)
+       TODO: check
+CVE-2017-20063 (A vulnerability was found in Elefant CMS 1.3.12-RC. It has 
been classi ...)
+       TODO: check
+CVE-2017-20062 (A vulnerability was found in Elefant CMS 1.3.12-RC and 
classified as p ...)
+       TODO: check
+CVE-2017-20061 (A vulnerability has been found in Elefant CMS 1.3.12-RC and 
classified ...)
+       TODO: check
+CVE-2017-20060 (A vulnerability, which was classified as problematic, was 
found in Ele ...)
+       TODO: check
+CVE-2017-20059 (A vulnerability, which was classified as problematic, has been 
found i ...)
+       TODO: check
+CVE-2017-20058 (A vulnerability classified as problematic was found in Elefant 
CMS 1.3 ...)
+       TODO: check
+CVE-2017-20057 (A vulnerability classified as problematic has been found in 
Elefant CM ...)
+       TODO: check
 CVE-2022-33959
        RESERVED
 CVE-2022-33958
@@ -3398,8 +3694,8 @@ CVE-2022-32537
        RESERVED
 CVE-2022-2024
        RESERVED
-CVE-2022-2023
-       RESERVED
+CVE-2022-2023 (Incorrect Use of Privileged APIs in GitHub repository 
polonel/trudesk  ...)
+       TODO: check
 CVE-2017-20050 (A vulnerability has been found in AXIS P1204, P3225, P3367, 
M3045, M30 ...)
        NOT-FOR-US: AXIS
 CVE-2017-20049 (A vulnerability, which was classified as critical, was found 
in AXIS P ...)
@@ -6895,7 +7191,7 @@ CVE-2022-28690 (The affected product is vulnerable to an 
out-of-bounds write via
 CVE-2022-27184 (The affected product is vulnerable to an out-of-bounds write, 
which ma ...)
        NOT-FOR-US: Horner Automation
 CVE-2022-1836
-       RESERVED
+       REJECTED
 CVE-2022-1835
        RESERVED
 CVE-2022-1834
@@ -20312,10 +20608,10 @@ CVE-2022-26671 (Taiwan Secom Dr.ID Access Control 
system’s login page has
        NOT-FOR-US: Taiwan Secom Dr.ID Access Control system
 CVE-2022-26670 (D-Link DIR-878 has inadequate filtering for special characters 
in the  ...)
        NOT-FOR-US: D-Link
-CVE-2022-26669
-       RESERVED
-CVE-2022-26668
-       RESERVED
+CVE-2022-26669 (ASUS Control Center is vulnerable to SQL injection. An 
authenticated r ...)
+       TODO: check
+CVE-2022-26668 (ASUS Control Center API has a broken access control 
vulnerability. An  ...)
+       TODO: check
 CVE-2022-26665 (An Insecure Direct Object Reference issue exists in the Tyler 
Odyssey  ...)
        NOT-FOR-US: Tyler Odyssey platform
 CVE-2022-26664
@@ -35403,8 +35699,8 @@ CVE-2022-0012 (An improper link resolution before file 
access vulnerability exis
        NOT-FOR-US: Palo Alto Networks
 CVE-2022-0011 (PAN-OS software provides options to exclude specific websites 
from URL ...)
        NOT-FOR-US: Palo Alto Networks
-CVE-2021-45918
-       RESERVED
+CVE-2021-45918 (NHI’s health insurance web service component has 
insufficient va ...)
+       TODO: check
 CVE-2021-45917 (The server-request receiver function of Shockwall system has 
an improp ...)
        NOT-FOR-US: Shockwall system
 CVE-2021-45916 (The programming function of Shockwall system has an improper 
input val ...)
@@ -41865,8 +42161,8 @@ CVE-2021-3984 (vim is vulnerable to Heap-based Buffer 
Overflow ...)
        NOTE: 
https://github.com/vim/vim/commit/2de9b7c7c8791da8853a9a7ca9c467867465b655 
(v8.2.3625)
 CVE-2021-3983 (kimai2 is vulnerable to Improper Neutralization of Input During 
Web Pa ...)
        NOT-FOR-US: kimai2
-CVE-2022-21742
-       RESERVED
+CVE-2022-21742 (Realtek USB driver has a buffer overflow vulnerability due to 
insuffic ...)
+       TODO: check
 CVE-2021-44040 (Improper Input Validation vulnerability in request line 
parsing of Apa ...)
        {DSA-5153-1}
        - trafficserver 9.1.2+ds-1
@@ -71559,6 +71855,7 @@ CVE-2021-33584
 CVE-2021-33583 (REINER timeCard 6.05.07 installs a Microsoft SQL Server with 
an sa pas ...)
        NOT-FOR-US: REINER
 CVE-2021-33582 (Cyrus IMAP before 3.4.2 allows remote attackers to cause a 
denial of s ...)
+       {DLA-3052-1}
        - cyrus-imapd 3.4.2-1 (bug #993433)
        [bullseye] - cyrus-imapd 3.2.6-2+deb11u1
        [buster] - cyrus-imapd 3.0.8-6+deb10u6
@@ -186578,6 +186875,7 @@ CVE-2019-18930 (Western Digital My Cloud EX2 Ultra 
firmware 2.31.183 allows web
 CVE-2019-18929 (Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows 
web users  ...)
        NOT-FOR-US: Western Digital My Cloud EX2 Ultra firmware
 CVE-2019-18928 (Cyrus IMAP 2.5.x before 2.5.14 and 3.x before 3.0.12 allows 
privilege  ...)
+       {DLA-3052-1}
        - cyrus-imapd 3.0.12-1
        [buster] - cyrus-imapd 3.0.8-6+deb10u3
        NOTE: 
https://github.com/cyrusimap/cyrus-imapd/commit/e675bf7b0e9c6e160516d274bffaec6f9dccaef7
 (cyrus-imapd-3.0.12)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d40cecfdd9b0d0edea91c1a32e5d6b9fbd036c4c

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d40cecfdd9b0d0edea91c1a32e5d6b9fbd036c4c
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to