Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d4ed4806 by security tracker role at 2022-06-25T08:10:17+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,17 @@
+CVE-2022-34150
+ RESERVED
+CVE-2022-33944
+ RESERVED
+CVE-2022-2203
+ RESERVED
+CVE-2022-2202
+ RESERVED
+CVE-2022-2201
+ RESERVED
+CVE-2022-2200
+ RESERVED
+CVE-2022-2199
+ RESERVED
CVE-2022-34485
RESERVED
CVE-2022-34484
@@ -52,8 +66,8 @@ CVE-2022-2195
RESERVED
CVE-2022-2194
RESERVED
-CVE-2019-25071
- RESERVED
+CVE-2019-25071 (** DISPUTED ** A vulnerability was found in Apple iPhone up to
12.4.1. ...)
+ TODO: check
CVE-2022-34463
RESERVED
CVE-2022-34462
@@ -1037,34 +1051,34 @@ CVE-2022-34068
RESERVED
CVE-2022-34067
RESERVED
-CVE-2022-34066
- RESERVED
-CVE-2022-34065
- RESERVED
-CVE-2022-34064
- RESERVED
+CVE-2022-34066 (The Texercise package in PyPI v0.0.1 to v0.0.12 was discovered
to cont ...)
+ TODO: check
+CVE-2022-34065 (The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered
to contai ...)
+ TODO: check
+CVE-2022-34064 (The Zibal package in PyPI v1.0.0 was discovered to contain a
code exec ...)
+ TODO: check
CVE-2022-34063
RESERVED
CVE-2022-34062
RESERVED
-CVE-2022-34061
- RESERVED
-CVE-2022-34060
- RESERVED
-CVE-2022-34059
- RESERVED
+CVE-2022-34061 (The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was
discovered to ...)
+ TODO: check
+CVE-2022-34060 (The Togglee package in PyPI version v0.0.8 was discovered to
contain a ...)
+ TODO: check
+CVE-2022-34059 (The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to
contain a c ...)
+ TODO: check
CVE-2022-34058
RESERVED
-CVE-2022-34057
- RESERVED
-CVE-2022-34056
- RESERVED
-CVE-2022-34055
- RESERVED
-CVE-2022-34054
- RESERVED
-CVE-2022-34053
- RESERVED
+CVE-2022-34057 (The Scoptrial package in PyPI version v0.0.5 was discovered to
contain ...)
+ TODO: check
+CVE-2022-34056 (The Watertools package in PyPI v0.0.0 was discovered to
contain a code ...)
+ TODO: check
+CVE-2022-34055 (The drxhello package in PyPI v0.0.1 was discovered to contain
a code e ...)
+ TODO: check
+CVE-2022-34054 (The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to
contain ...)
+ TODO: check
+CVE-2022-34053 (The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to
contain a ...)
+ TODO: check
CVE-2022-34052
RESERVED
CVE-2022-34051
@@ -3224,8 +3238,8 @@ CVE-2022-33130
RESERVED
CVE-2022-33129
RESERVED
-CVE-2022-33128
- RESERVED
+CVE-2022-33128 (RG-EG series gateway EG350 EG_RGOS 11.1(6) was discovered to
contain a ...)
+ TODO: check
CVE-2022-33127 (The function that calls the diff tool in Diffy 3.4.1 does not
properly ...)
TODO: check
CVE-2022-33126
@@ -3236,10 +3250,10 @@ CVE-2022-33124 (aiohttp v3.8.1 was discovered to
contain an invalid IPv6 URL whi
TODO: check
CVE-2022-33123
RESERVED
-CVE-2022-33122
- RESERVED
-CVE-2022-33121
- RESERVED
+CVE-2022-33122 (A stored cross-site scripting (XSS) vulnerability in eyoucms
v1.5.6 al ...)
+ TODO: check
+CVE-2022-33121 (A Cross-Site Request Forgery (CSRF) in MiniCMS v1.11 allows
attackers ...)
+ TODO: check
CVE-2022-33120
RESERVED
CVE-2022-33119 (NUUO Network Video Recorder NVRsolo v03.06.02 was discovered
to contai ...)
@@ -3484,24 +3498,24 @@ CVE-2022-33006
RESERVED
CVE-2022-33005
RESERVED
-CVE-2022-33004
- RESERVED
-CVE-2022-33003
- RESERVED
-CVE-2022-33002
- RESERVED
-CVE-2022-33001
- RESERVED
-CVE-2022-33000
- RESERVED
-CVE-2022-32999
- RESERVED
-CVE-2022-32998
- RESERVED
-CVE-2022-32997
- RESERVED
-CVE-2022-32996
- RESERVED
+CVE-2022-33004 (The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered
to contai ...)
+ TODO: check
+CVE-2022-33003 (The watools package in PyPI v0.0.1 to v0.0.8 was discovered to
contain ...)
+ TODO: check
+CVE-2022-33002 (The KGExplore package in PyPI v0.1.1 to v0.1.2 was discovered
to conta ...)
+ TODO: check
+CVE-2022-33001 (The AAmiles package in PyPI v0.1.0 was discovered to contain a
code ex ...)
+ TODO: check
+CVE-2022-33000 (The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered
to cont ...)
+ TODO: check
+CVE-2022-32999 (The cloudlabeling package in PyPI v0.0.1 was discovered to
contain a c ...)
+ TODO: check
+CVE-2022-32998 (The cryptoasset-data-downloader package in PyPI v1.0.0 to
v1.0.1 was d ...)
+ TODO: check
+CVE-2022-32997 (The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was
discovered ...)
+ TODO: check
+CVE-2022-32996 (The django-navbar-client package of v0.9.50 to v1.0.1 was
discovered t ...)
+ TODO: check
CVE-2022-32995
RESERVED
CVE-2022-32994
@@ -9378,8 +9392,8 @@ CVE-2022-30887 (Pharmacy Management System v1.0 was
discovered to contain a remo
NOT-FOR-US: Pharmacy Management System
CVE-2022-30886 (School Dormitory Management System v1.0 was discovered to
contain a SQ ...)
NOT-FOR-US: School Dormitory Management System
-CVE-2022-30885
- RESERVED
+CVE-2022-30885 (** Reserved ** The pyesasky for python, as distributed on
PyPI, includ ...)
+ TODO: check
CVE-2022-30884
RESERVED
CVE-2022-30883
@@ -14310,8 +14324,8 @@ CVE-2022-29170 (Grafana is an open-source platform for
monitoring and observabil
- grafana <not-affected> (Specific to Grafana Enterprise)
CVE-2022-29169 (BigBlueButton is an open source web conferencing system.
Versions star ...)
NOT-FOR-US: BigBlueButton
-CVE-2022-29168
- RESERVED
+CVE-2022-29168 (Wire is a secure messaging application. Wire is vulnerable to
arbitrar ...)
+ TODO: check
CVE-2022-29167 (Hawk is an HTTP authentication scheme providing mechanisms for
making ...)
NOT-FOR-US: Hawk (mozilla/hawk, different from itp'ed hawk, #634344)
CVE-2022-29166 (matrix-appservice-irc is a Node.js IRC bridge for Matrix. The
vulnerab ...)
@@ -23813,8 +23827,8 @@ CVE-2022-21235 (The package github.com/masterminds/vcs
before 1.13.3 are vulnera
NOT-FOR-US: github.com/masterminds/vcs
CVE-2022-21232
RESERVED
-CVE-2022-21231
- RESERVED
+CVE-2022-21231 (All versions of package deep-get-set are vulnerable to
Prototype Pollu ...)
+ TODO: check
CVE-2022-21230 (This affects all versions of package org.nanohttpd:nanohttpd.
Whenever ...)
NOT-FOR-US: NanoHTTPD Java
CVE-2022-21227 (The package sqlite3 before 5.0.3 are vulnerable to Denial of
Service ( ...)
@@ -26608,8 +26622,8 @@ CVE-2022-24895
RESERVED
CVE-2022-24894
RESERVED
-CVE-2022-24893
- RESERVED
+CVE-2022-24893 (ESP-IDF is the official development framework for Espressif
SoCs. In E ...)
+ TODO: check
CVE-2022-24892 (Shopware is an open source e-commerce software platform.
Starting with ...)
NOT-FOR-US: Shopware
CVE-2022-24891 (ESAPI (The OWASP Enterprise Security API) is a free, open
source, web ...)
@@ -54854,8 +54868,8 @@ CVE-2021-40896
RESERVED
CVE-2021-40895
RESERVED
-CVE-2021-40894
- RESERVED
+CVE-2021-40894 (A Regular Expression Denial of Service (ReDOS) vulnerability
was disco ...)
+ TODO: check
CVE-2021-40893 (A Regular Expression Denial of Service (ReDOS) vulnerability
was disco ...)
TODO: check
CVE-2021-40892 (A Regular Expression Denial of Service (ReDOS) vulnerability
was disco ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d4ed480656ad90e02d327eb1071fe7224cf5a538
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d4ed480656ad90e02d327eb1071fe7224cf5a538
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
