Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
57788dbe by security tracker role at 2022-09-09T08:10:16+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,149 @@
+CVE-2022-40307 (An issue was discovered in the Linux kernel through 5.19.8.
drivers/fi ...)
+ TODO: check
+CVE-2022-40306
+ RESERVED
+CVE-2022-40305 (A Server-Side Request Forgery issue in Canto Cumulus through
11.1.3 al ...)
+ TODO: check
+CVE-2022-40304
+ RESERVED
+CVE-2022-40303
+ RESERVED
+CVE-2022-40302
+ RESERVED
+CVE-2022-40301
+ RESERVED
+CVE-2022-40300
+ RESERVED
+CVE-2022-40299 (In Singular before 4.3.1, a predictable /tmp pathname is used
(e.g., b ...)
+ TODO: check
+CVE-2022-40298
+ RESERVED
+CVE-2022-40297 (UBports Ubuntu Touch 16.04 allows the screen-unlock passcode
to be use ...)
+ TODO: check
+CVE-2022-40296
+ RESERVED
+CVE-2022-40295
+ RESERVED
+CVE-2022-40294
+ RESERVED
+CVE-2022-40293
+ RESERVED
+CVE-2022-40292
+ RESERVED
+CVE-2022-40291
+ RESERVED
+CVE-2022-40290
+ RESERVED
+CVE-2022-40289
+ RESERVED
+CVE-2022-40288
+ RESERVED
+CVE-2022-40287
+ RESERVED
+CVE-2022-40286
+ RESERVED
+CVE-2022-40285
+ RESERVED
+CVE-2022-40284
+ RESERVED
+CVE-2022-40283
+ RESERVED
+CVE-2022-40282
+ RESERVED
+CVE-2022-40281 (An issue was discovered in Samsung TizenRT through 3.0_GBM
(and 3.1_PR ...)
+ TODO: check
+CVE-2022-40280 (An issue was discovered in Samsung TizenRT through 3.0_GBM
(and 3.1_PR ...)
+ TODO: check
+CVE-2022-40279 (An issue was discovered in Samsung TizenRT through 3.0_GBM
(and 3.1_PR ...)
+ TODO: check
+CVE-2022-40278 (An issue was discovered in Samsung TizenRT through 3.0_GBM
(and 3.1_PR ...)
+ TODO: check
+CVE-2022-40277
+ RESERVED
+CVE-2022-40276
+ RESERVED
+CVE-2022-40275
+ RESERVED
+CVE-2022-40274
+ RESERVED
+CVE-2022-40273
+ RESERVED
+CVE-2022-40272
+ RESERVED
+CVE-2022-40271
+ RESERVED
+CVE-2022-40270
+ RESERVED
+CVE-2022-40269
+ RESERVED
+CVE-2022-40268
+ RESERVED
+CVE-2022-40267
+ RESERVED
+CVE-2022-40266
+ RESERVED
+CVE-2022-40265
+ RESERVED
+CVE-2022-40264
+ RESERVED
+CVE-2022-40263
+ RESERVED
+CVE-2022-40262
+ RESERVED
+CVE-2022-40261
+ RESERVED
+CVE-2022-40260
+ RESERVED
+CVE-2022-40259
+ RESERVED
+CVE-2022-40258
+ RESERVED
+CVE-2022-40257
+ RESERVED
+CVE-2022-40256
+ RESERVED
+CVE-2022-40255
+ RESERVED
+CVE-2022-40254
+ RESERVED
+CVE-2022-40253
+ RESERVED
+CVE-2022-40252
+ RESERVED
+CVE-2022-40251
+ RESERVED
+CVE-2022-40250
+ RESERVED
+CVE-2022-40249
+ RESERVED
+CVE-2022-40248
+ RESERVED
+CVE-2022-40247
+ RESERVED
+CVE-2022-40246
+ RESERVED
+CVE-2022-40245
+ RESERVED
+CVE-2022-40244
+ RESERVED
+CVE-2022-40243
+ RESERVED
+CVE-2022-40242
+ RESERVED
+CVE-2022-40241
+ RESERVED
+CVE-2022-40240
+ RESERVED
+CVE-2022-40239
+ RESERVED
+CVE-2022-40238
+ RESERVED
+CVE-2022-3169
+ RESERVED
+CVE-2022-3168
+ RESERVED
+CVE-2019-25076 (The TSS (Tuple Space Search) algorithm in Open vSwitch 2.x
through 2.1 ...)
+ TODO: check
CVE-2022-40237
RESERVED
CVE-2022-40236
@@ -86,8 +232,8 @@ CVE-2022-36299
RESERVED
CVE-2022-36295
RESERVED
-CVE-2022-3167
- RESERVED
+CVE-2022-3167 (Improper Restriction of Rendered UI Layers or Frames in GitHub
reposit ...)
+ TODO: check
CVE-2022-3166
RESERVED
CVE-2022-3165
@@ -4212,8 +4358,8 @@ CVE-2022-38495
RESERVED
CVE-2022-38078 (Movable Type XMLRPC API provided by Six Apart Ltd. contains a
command ...)
- movabletype-opensource <removed>
-CVE-2022-2925
- RESERVED
+CVE-2022-2925 (Cross-site Scripting (XSS) - Stored in GitHub repository
appwrite/appw ...)
+ TODO: check
CVE-2022-2924
RESERVED
CVE-2022-2923 (NULL Pointer Dereference in GitHub repository vim/vim prior to
9.0.024 ...)
@@ -5053,16 +5199,16 @@ CVE-2022-38271
RESERVED
CVE-2022-38270
RESERVED
-CVE-2022-38269
- RESERVED
-CVE-2022-38268
- RESERVED
-CVE-2022-38267
- RESERVED
+CVE-2022-38269 (School Activity Updates with SMS Notification v1.0 was
discovered to c ...)
+ TODO: check
+CVE-2022-38268 (School Activity Updates with SMS Notification v1.0 was
discovered to c ...)
+ TODO: check
+CVE-2022-38267 (School Activity Updates with SMS Notification v1.0 was
discovered to c ...)
+ TODO: check
CVE-2022-38266
RESERVED
-CVE-2022-38265
- RESERVED
+CVE-2022-38265 (Apartment Visitor Management System v1.0 was discovered to
contain a S ...)
+ TODO: check
CVE-2022-38264
RESERVED
CVE-2022-38263
@@ -8964,7 +9110,7 @@ CVE-2022-36738
RESERVED
CVE-2022-36737
RESERVED
-CVE-2022-36736 (Jitsi-2.10.5550 was discovered to contain a vulnerability in
its web U ...)
+CVE-2022-36736 (** DISPUTED ** Jitsi-2.10.5550 was discovered to contain a
vulnerabili ...)
TODO: check
CVE-2022-36735 (Library Management System v1.0 was discovered to contain a SQL
injecti ...)
NOT-FOR-US: Library Management System
@@ -10638,20 +10784,20 @@ CVE-2022-36102
RESERVED
CVE-2022-36101
RESERVED
-CVE-2022-36100
- RESERVED
-CVE-2022-36099
- RESERVED
-CVE-2022-36098
- RESERVED
-CVE-2022-36097
- RESERVED
-CVE-2022-36096
- RESERVED
-CVE-2022-36095
- RESERVED
-CVE-2022-36094
- RESERVED
+CVE-2022-36100 (XWiki Platform Applications Tag and XWiki Platform Tag UI are
tag appl ...)
+ TODO: check
+CVE-2022-36099 (XWiki Platform Wiki UI Main Wiki is software for managing
subwikis on ...)
+ TODO: check
+CVE-2022-36098 (XWiki Platform Mentions UI is a user interface for mentioning
users in ...)
+ TODO: check
+CVE-2022-36097 (XWiki Platform Attachment UI provides a macro to easily upload
and sel ...)
+ TODO: check
+CVE-2022-36096 (The XWiki Platform Index UI is an Index of all pages,
attachments, orp ...)
+ TODO: check
+CVE-2022-36095 (XWiki Platform is a generic wiki platform. Prior to versions
13.10.5 a ...)
+ TODO: check
+CVE-2022-36094 (XWiki Platform Web Parent POM contains Web resources for the
XWiki pla ...)
+ TODO: check
CVE-2022-36093 (XWiki Platform Web Templates are templates for XWiki Platform,
a gener ...)
NOT-FOR-US: XWiki
CVE-2022-36092 (XWiki Platform Old Core is a core package for XWiki Platform,
a generi ...)
@@ -10670,8 +10816,8 @@ CVE-2022-36086 (linked_list_allocator is an allocator
usable for no_std systems.
TODO: check
CVE-2022-36085 (Open Policy Agent (OPA) is an open source, general-purpose
policy engi ...)
TODO: check
-CVE-2022-36084
- RESERVED
+CVE-2022-36084 (cruddl is software for creating a GraphQL API for a database,
using th ...)
+ TODO: check
CVE-2022-36083 (JOSE is "JSON Web Almost Everything" - JWA, JWS, JWE, JWT,
JWK, JWKS w ...)
TODO: check
CVE-2022-36082 (mangadex-downloader is a command-line tool to download manga
from Mang ...)
@@ -39216,8 +39362,8 @@ CVE-2022-25767 (All versions of package
com.bstek.ureport:ureport2-console are v
NOT-FOR-US: youseries/ureport
CVE-2022-25766 (The package ungit before 1.5.20 are vulnerable to Remote Code
Executio ...)
NOT-FOR-US: NodeJS ungit
-CVE-2022-25765
- RESERVED
+CVE-2022-25765 (The package pdfkit from 0.0.0 are vulnerable to Command
Injection wher ...)
+ TODO: check
CVE-2022-25764
RESERVED
CVE-2022-25761 (The package open62541/open62541 before 1.2.5, from 1.3-rc1 and
before ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/57788dbeb135c9731b9dd887a495cc31a36f65a9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/57788dbeb135c9731b9dd887a495cc31a36f65a9
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
