Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7ae1079f by security tracker role at 2022-08-03T08:10:11+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,7 @@
+CVE-2022-37393
+ RESERVED
+CVE-2022-2634
+ RESERVED
CVE-2022-37392
RESERVED
CVE-2022-37391
@@ -835,8 +839,8 @@ CVE-2022-37037
RESERVED
CVE-2022-37036
RESERVED
-CVE-2022-37035
- RESERVED
+CVE-2022-37035 (An issue was discovered in bgpd in FRRouting (FRR) 8.3. In
bgp_notify_ ...)
+ TODO: check
CVE-2022-37034
RESERVED
CVE-2022-37033
@@ -1080,10 +1084,10 @@ CVE-2022-36970
RESERVED
CVE-2022-36969
RESERVED
-CVE-2022-36968
- RESERVED
-CVE-2022-36967
- RESERVED
+CVE-2022-36968 (In Progress WS_FTP Server prior to version 8.7.3, forms within
the adm ...)
+ TODO: check
+CVE-2022-36967 (In Progress WS_FTP Server prior to version 8.7.3, multiple
reflected c ...)
+ TODO: check
CVE-2022-36966
RESERVED
CVE-2022-36965
@@ -1475,8 +1479,8 @@ CVE-2022-36802
RESERVED
CVE-2022-36801
RESERVED
-CVE-2022-36800
- RESERVED
+CVE-2022-36800 (Affected versions of Atlassian Jira Service Management Server
and Data ...)
+ TODO: check
CVE-2022-36799 (This issue exists to document that a security improvement in
the way t ...)
NOT-FOR-US: Atlassian
CVE-2022-35401
@@ -2312,7 +2316,8 @@ CVE-2022-36410
RESERVED
CVE-2022-36409
RESERVED
-CVE-2022-36408 (PrestaShop 1.6.0.10 through 1.7.x before 1.7.8.7 allows remote
attacke ...)
+CVE-2022-36408
+ REJECTED
NOT-FOR-US: PrestaShop
CVE-2022-36398
RESERVED
@@ -2973,8 +2978,8 @@ CVE-2022-36199
RESERVED
CVE-2022-36198
RESERVED
-CVE-2022-36197
- RESERVED
+CVE-2022-36197 (BigTree CMS 4.4.16 was discovered to contain an arbitrary file
upload ...)
+ TODO: check
CVE-2022-36196
RESERVED
CVE-2022-36195
@@ -3561,12 +3566,12 @@ CVE-2022-35927
RESERVED
CVE-2022-35926
RESERVED
-CVE-2022-35925
- RESERVED
+CVE-2022-35925 (BookWyrm is a social network for tracking reading. Versions
prior to 0 ...)
+ TODO: check
CVE-2022-35924 (NextAuth.js is a complete open source authentication solution
for Next ...)
TODO: check
-CVE-2022-35923
- RESERVED
+CVE-2022-35923 (v8n is a javascript validation library. Versions of v8n prior
to 1.5.1 ...)
+ TODO: check
CVE-2022-35922 (Rust-WebSocket is a WebSocket (RFC6455) library written in
Rust. In ve ...)
NOT-FOR-US: Rust crate websocket
CVE-2022-35921 (fof/byobu is a private discussions extension for Flarum forum.
Affecte ...)
@@ -4050,8 +4055,7 @@ CVE-2022-35739
RESERVED
CVE-2022-35738
RESERVED
-CVE-2022-35737
- RESERVED
+CVE-2022-35737 (SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an
array-b ...)
- sqlite3 3.39.2-1 (unimportant)
NOTE: https://sqlite.org/forum/forumpost/3607259d3c
NOTE: Debian sqlite3 packages not compiled with -DSQLITE_ENABLE_STAT4
@@ -5814,12 +5818,12 @@ CVE-2022-34971 (An arbitrary file upload vulnerability
in the Advertising Manage
NOT-FOR-US: Feehi CMS
CVE-2022-34970
RESERVED
-CVE-2022-34969
- RESERVED
-CVE-2022-34968
- RESERVED
-CVE-2022-34967
- RESERVED
+CVE-2022-34969 (PingCAP TiDB v6.1.0 was discovered to contain a NULL pointer
dereferen ...)
+ TODO: check
+CVE-2022-34968 (An issue in the fetch_step function in Percona Server for
MySQL v8.0.2 ...)
+ TODO: check
+CVE-2022-34967 (The assertion `stmt->Dbc->FirstStmt' failed in MonetDB
Database ...)
+ TODO: check
CVE-2022-34966 (OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was
discovered ...)
NOT-FOR-US: OpenTeknik
CVE-2022-34965 (OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was
discovered ...)
@@ -5866,8 +5870,8 @@ CVE-2022-34945 (Pharmacy Management System v1.0 was
discovered to contain a SQL
NOT-FOR-US: Pharmacy Management System
CVE-2022-34944
RESERVED
-CVE-2022-34943
- RESERVED
+CVE-2022-34943 (Laravel v5.1 was discovered to contain a remote code execution
(RCE) v ...)
+ TODO: check
CVE-2022-34942
RESERVED
CVE-2022-34941
@@ -5878,8 +5882,8 @@ CVE-2022-34939
RESERVED
CVE-2022-34938
RESERVED
-CVE-2022-34937
- RESERVED
+CVE-2022-34937 (Yuba u5cms v8.3.5 was discovered to contain a Cross-Site
Request Forge ...)
+ TODO: check
CVE-2022-34936
RESERVED
CVE-2022-34935
@@ -5896,16 +5900,16 @@ CVE-2022-34930
RESERVED
CVE-2022-34929
RESERVED
-CVE-2022-34928
- RESERVED
-CVE-2022-34927
- RESERVED
+CVE-2022-34928 (JFinal CMS v5.1.0 was discovered to contain a SQL injection
vulnerabil ...)
+ TODO: check
+CVE-2022-34927 (MilkyTracker v1.03.00 was discovered to contain a stack
overflow via t ...)
+ TODO: check
CVE-2022-34926
RESERVED
CVE-2022-34925
RESERVED
-CVE-2022-34924
- RESERVED
+CVE-2022-34924 (Lanling OA Landray Office Automation (OA) internal patch
number #13338 ...)
+ TODO: check
CVE-2022-34923
RESERVED
CVE-2022-34922
@@ -6888,8 +6892,8 @@ CVE-2022-34621
RESERVED
CVE-2022-34620
RESERVED
-CVE-2022-34619
- RESERVED
+CVE-2022-34619 (A stored cross-site scripting (XSS) vulnerability in Mealie
v0.5.5 all ...)
+ TODO: check
CVE-2022-34618 (A stored cross-site scripting (XSS) vulnerability in Mealie
1.0.0beta3 ...)
TODO: check
CVE-2022-34617
@@ -8896,8 +8900,8 @@ CVE-2022-33919
RESERVED
CVE-2022-33918
RESERVED
-CVE-2022-33917
- RESERVED
+CVE-2022-33917 (An issue was discovered in the Arm Mali GPU Kernel Driver
(Valhall r29 ...)
+ TODO: check
CVE-2022-2117 (The GiveWP plugin for WordPress is vulnerable to Sensitive
Information ...)
NOT-FOR-US: WordPress plugin
CVE-2022-2116
@@ -18725,8 +18729,8 @@ CVE-2022-30287 (Horde Groupware Webmail Edition through
5.2.22 allows a reflecti
NOTE: Fixed by:
https://github.com/horde/turba/commit/3bccab322af4ae96d5925f0ce9f9af0978af924b
(v4.2.26)
CVE-2022-30286 (pyscriptjs (aka PyScript Demonstrator) in PyScript through
2022-05-04 ...)
NOT-FOR-US: pyscriptjs
-CVE-2022-30285
- RESERVED
+CVE-2022-30285 (In Quest KACE Systems Management Appliance (SMA) through 12.0,
a hash ...)
+ TODO: check
CVE-2022-30284 (** DISPUTED ** In the python-libnmap package through 0.7.2 for
Python, ...)
NOTE: Bogus python-libnmap issue
CVE-2022-30283
@@ -20230,10 +20234,10 @@ CVE-2022-1470 (The Ultimate WooCommerce CSV Importer
WordPress plugin through 2.
NOT-FOR-US: WordPress plugin
CVE-2022-1469 (The FiboSearch WordPress plugin before 1.17.0 does not sanitise
and es ...)
NOT-FOR-US: WordPress plugin
-CVE-2022-29808
- RESERVED
-CVE-2022-29807
- RESERVED
+CVE-2022-29808 (In Quest KACE Systems Management Appliance (SMA) through 12.0,
predict ...)
+ TODO: check
+CVE-2022-29807 (A SQL injection vulnerability exists within Quest KACE Systems
Managem ...)
+ TODO: check
CVE-2022-29806 (ZoneMinder before 1.36.13 allows remote code execution via an
invalid ...)
- zoneminder 1.36.13+dfsg1-1 (unimportant)
NOTE: https://forums.zoneminder.com/viewtopic.php?t=31638
@@ -26595,18 +26599,18 @@ CVE-2022-27623
RESERVED
CVE-2022-27622
RESERVED
-CVE-2022-27621
- RESERVED
-CVE-2022-27620
- RESERVED
-CVE-2022-27619
- RESERVED
-CVE-2022-27618
- RESERVED
-CVE-2022-27617
- RESERVED
-CVE-2022-27616
- RESERVED
+CVE-2022-27621 (Improper limitation of a pathname to a restricted directory
('Path Tra ...)
+ TODO: check
+CVE-2022-27620 (Improper limitation of a pathname to a restricted directory
('Path Tra ...)
+ TODO: check
+CVE-2022-27619 (Cleartext transmission of sensitive information vulnerability
in authe ...)
+ TODO: check
+CVE-2022-27618 (Improper limitation of a pathname to a restricted directory
('Path Tra ...)
+ TODO: check
+CVE-2022-27617 (Improper limitation of a pathname to a restricted directory
('Path Tra ...)
+ TODO: check
+CVE-2022-27616 (Improper neutralization of special elements used in an OS
command ('OS ...)
+ TODO: check
CVE-2022-27615 (Improper limitation of a pathname to a restricted directory
('Path Tra ...)
NOT-FOR-US: Synology
CVE-2022-27614 (Exposure of sensitive information to an unauthorized actor
vulnerabili ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ae1079f9dcf245e78f748a01584092ad1587aee
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ae1079f9dcf245e78f748a01584092ad1587aee
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
