Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
85bacd5f by security tracker role at 2022-12-15T08:10:18+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,107 @@
+CVE-2022-47449
+ RESERVED
+CVE-2022-47448
+ RESERVED
+CVE-2022-47447
+ RESERVED
+CVE-2022-47446
+ RESERVED
+CVE-2022-47445
+ RESERVED
+CVE-2022-47444
+ RESERVED
+CVE-2022-47443
+ RESERVED
+CVE-2022-47442
+ RESERVED
+CVE-2022-47441
+ RESERVED
+CVE-2022-47440
+ RESERVED
+CVE-2022-47439
+ RESERVED
+CVE-2022-47438
+ RESERVED
+CVE-2022-47437
+ RESERVED
+CVE-2022-47436
+ RESERVED
+CVE-2022-47435
+ RESERVED
+CVE-2022-47434
+ RESERVED
+CVE-2022-47433
+ RESERVED
+CVE-2022-47432
+ RESERVED
+CVE-2022-47431
+ RESERVED
+CVE-2022-47430
+ RESERVED
+CVE-2022-47429
+ RESERVED
+CVE-2022-47428
+ RESERVED
+CVE-2022-47427
+ RESERVED
+CVE-2022-47426
+ RESERVED
+CVE-2022-47425
+ RESERVED
+CVE-2022-47424
+ RESERVED
+CVE-2022-47423
+ RESERVED
+CVE-2022-47422
+ RESERVED
+CVE-2022-47421
+ RESERVED
+CVE-2022-47420
+ RESERVED
+CVE-2022-47419
+ RESERVED
+CVE-2022-47418
+ RESERVED
+CVE-2022-47417
+ RESERVED
+CVE-2022-47416
+ RESERVED
+CVE-2022-47415
+ RESERVED
+CVE-2022-47414
+ RESERVED
+CVE-2022-47413
+ RESERVED
+CVE-2022-47412
+ RESERVED
+CVE-2022-47411 (An issue was discovered in the fp_newsletter (aka Newsletter
subscribe ...)
+ TODO: check
+CVE-2022-47410 (An issue was discovered in the fp_newsletter (aka Newsletter
subscribe ...)
+ TODO: check
+CVE-2022-47409 (An issue was discovered in the fp_newsletter (aka Newsletter
subscribe ...)
+ TODO: check
+CVE-2022-47408 (An issue was discovered in the fp_newsletter (aka Newsletter
subscribe ...)
+ TODO: check
+CVE-2022-47407 (An issue was discovered in the fp_masterquiz (aka Master-Quiz)
extensi ...)
+ TODO: check
+CVE-2022-47406 (An issue was discovered in the fe_change_pwd (aka Change
password for ...)
+ TODO: check
+CVE-2022-4508
+ RESERVED
+CVE-2022-4507
+ RESERVED
+CVE-2022-4506 (Unrestricted Upload of File with Dangerous Type in GitHub
repository o ...)
+ TODO: check
+CVE-2022-4505 (Improper Access Control in GitHub repository openemr/openemr
prior to ...)
+ TODO: check
+CVE-2022-4504 (Improper Input Validation in GitHub repository openemr/openemr
prior t ...)
+ TODO: check
+CVE-2022-4503 (Cross-site Scripting (XSS) - Generic in GitHub repository
openemr/open ...)
+ TODO: check
+CVE-2022-4502 (Cross-site Scripting (XSS) - Reflected in GitHub repository
openemr/op ...)
+ TODO: check
+CVE-2022-4501 (The Mega Addons plugin for WordPress is vulnerable to
authorization by ...)
+ TODO: check
CVE-2022-47405
RESERVED
CVE-2022-47404
@@ -1402,8 +1506,8 @@ CVE-2022-4412
RESERVED
CVE-2022-4411
RESERVED
-CVE-2022-4410
- RESERVED
+CVE-2022-4410 (The Permalink Manager Lite plugin for WordPress is vulnerable
to Store ...)
+ TODO: check
CVE-2022-4409 (Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in
GitHub ...)
NOT-FOR-US: phpMyFAQ
CVE-2022-4408 (Cross-site Scripting (XSS) - Stored in GitHub repository
thorsten/phpm ...)
@@ -1888,8 +1992,8 @@ CVE-2022-4342
RESERVED
CVE-2022-4341 (A vulnerability has been found in csliuwy coder-chain_gdut and
classif ...)
NOT-FOR-US: csliuwy coder-chain_gdut
-CVE-2022-46768
- RESERVED
+CVE-2022-46768 (Arbitrary file read vulnerability exists in Zabbix Web Service
Report ...)
+ TODO: check
CVE-2022-46767
RESERVED
CVE-2022-46766
@@ -2811,8 +2915,7 @@ CVE-2022-4285
NOTE: binutils not covered by security support
CVE-2022-4284
RESERVED
-CVE-2022-4283 [xkb: reset the radio_groups pointer to NULL after freeing it]
- RESERVED
+CVE-2022-4283 (A vulnerability was found in X.Org. This security flaw occurs
because ...)
- xorg-server 2:21.1.5-1 (bug #1026071)
- xwayland 2:22.1.6-1
NOTE:
https://lists.x.org/archives/xorg-announce/2022-December/003302.html
@@ -3301,32 +3404,27 @@ CVE-2022-4225
RESERVED
CVE-2021-4242 (A vulnerability was found in Sapido BR270n, BRC76n, GR297 and
RB1732 a ...)
NOT-FOR-US: Sapido
-CVE-2022-46344 [Xi: avoid integer truncation in length check of
ProcXIChangeProperty]
- RESERVED
+CVE-2022-46344 (A vulnerability was found in X.Org. This security flaw occurs
because ...)
- xorg-server 2:21.1.5-1 (bug #1026071)
- xwayland 2:22.1.6-1
NOTE:
https://lists.x.org/archives/xorg-announce/2022-December/003302.html
NOTE:
https://gitlab.freedesktop.org/xorg/xserver/commit/8f454b793e1f13c99872c15f0eed1d7f3b823fe8
-CVE-2022-46343 [Xext: free the screen saver resource when replacing it]
- RESERVED
+CVE-2022-46343 (A vulnerability was found in X.Org. This security flaw occurs
because ...)
- xorg-server 2:21.1.5-1 (bug #1026071)
- xwayland 2:22.1.6-1
NOTE:
https://lists.x.org/archives/xorg-announce/2022-December/003302.html
NOTE:
https://gitlab.freedesktop.org/xorg/xserver/commit/842ca3ccef100ce010d1d8f5f6d6cc1915055900
-CVE-2022-46342 [Xext: free the XvRTVideoNotify when turning off from the same
client]
- RESERVED
+CVE-2022-46342 (A vulnerability was found in X.Org. This security flaw occurs
because ...)
- xorg-server 2:21.1.5-1 (bug #1026071)
- xwayland 2:22.1.6-1
NOTE:
https://lists.x.org/archives/xorg-announce/2022-December/003302.html
NOTE:
https://gitlab.freedesktop.org/xorg/xserver/commit/b79f32b57cc0c1186b2899bce7cf89f7b325161b
-CVE-2022-46341 [Xi: disallow passive grabs with a detail > 255]
- RESERVED
+CVE-2022-46341 (A vulnerability was found in X.Org. This security flaw occurs
because ...)
- xorg-server 2:21.1.5-1 (bug #1026071)
- xwayland 2:22.1.6-1
NOTE:
https://lists.x.org/archives/xorg-announce/2022-December/003302.html
NOTE:
https://gitlab.freedesktop.org/xorg/xserver/commit/51eb63b0ee1509c6c6b8922b0e4aa037faa6f78b
-CVE-2022-46340 [Xtest: disallow GenericEvents in XTestSwapFakeInput]
- RESERVED
+CVE-2022-46340 (A vulnerability was found in X.Org. This security flaw occurs
becuase ...)
- xorg-server 2:21.1.5-1 (bug #1026071)
- xwayland 2:22.1.6-1
NOTE:
https://lists.x.org/archives/xorg-announce/2022-December/003302.html
@@ -7023,8 +7121,8 @@ CVE-2022-3919 (The Jetpack CRM WordPress plugin before
5.4.3 does not sanitise a
NOT-FOR-US: WordPress plugin
CVE-2022-3918
RESERVED
-CVE-2022-3917
- RESERVED
+CVE-2022-3917 (Improper access control of bootloader function was discovered
in Motor ...)
+ TODO: check
CVE-2022-3916
RESERVED
NOT-FOR-US: Keycloak
@@ -7230,8 +7328,8 @@ CVE-2022-45035
RESERVED
CVE-2022-45034
RESERVED
-CVE-2022-45033
- RESERVED
+CVE-2022-45033 (A cross-site scripting (XSS) vulnerability in Expense Tracker
1.0 allo ...)
+ TODO: check
CVE-2022-45032
RESERVED
CVE-2022-45031
@@ -10256,10 +10354,10 @@ CVE-2022-44238
RESERVED
CVE-2022-44237
RESERVED
-CVE-2022-44236
- RESERVED
-CVE-2022-44235
- RESERVED
+CVE-2022-44236 (Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG
8.5.0.17807 (20 ...)
+ TODO: check
+CVE-2022-44235 (Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG
8.5.0.17807 (20 ...)
+ TODO: check
CVE-2022-44234
RESERVED
CVE-2022-44233
@@ -16724,8 +16822,8 @@ CVE-2022-3429
RESERVED
CVE-2022-3428
RESERVED
-CVE-2022-3427
- RESERVED
+CVE-2022-3427 (The Corner Ad plugin for WordPress is vulnerable to Cross-Site
Request ...)
+ TODO: check
CVE-2022-3426 (The Advanced WP Columns WordPress plugin through 2.0.6 does not
saniti ...)
NOT-FOR-US: WordPress plugin
CVE-2022-3425
@@ -23460,30 +23558,30 @@ CVE-2022-3117
RESERVED
CVE-2022-3116
RESERVED
-CVE-2022-3115
- RESERVED
-CVE-2022-3114
- RESERVED
-CVE-2022-3113
- RESERVED
-CVE-2022-3112
- RESERVED
-CVE-2022-3111
- RESERVED
-CVE-2022-3110
- RESERVED
+CVE-2022-3115 (An issue was discovered in the Linux kernel through 5.16-rc6.
malidp_c ...)
+ TODO: check
+CVE-2022-3114 (An issue was discovered in the Linux kernel through 5.16-rc6.
imx_regi ...)
+ TODO: check
+CVE-2022-3113 (An issue was discovered in the Linux kernel through 5.16-rc6.
mtk_vcod ...)
+ TODO: check
+CVE-2022-3112 (An issue was discovered in the Linux kernel through 5.16-rc6.
amvdec_s ...)
+ TODO: check
+CVE-2022-3111 (An issue was discovered in the Linux kernel through 5.16-rc6.
free_cha ...)
+ TODO: check
+CVE-2022-3110 (An issue was discovered in the Linux kernel through 5.16-rc6.
_rtw_ini ...)
+ TODO: check
CVE-2022-3109
RESERVED
-CVE-2022-3108
- RESERVED
-CVE-2022-3107
- RESERVED
-CVE-2022-3106
- RESERVED
-CVE-2022-3105
- RESERVED
-CVE-2022-3104
- RESERVED
+CVE-2022-3108 (An issue was discovered in the Linux kernel through 5.16-rc6.
kfd_pars ...)
+ TODO: check
+CVE-2022-3107 (An issue was discovered in the Linux kernel through 5.16-rc6.
netvsc_g ...)
+ TODO: check
+CVE-2022-3106 (An issue was discovered in the Linux kernel through 5.16-rc6.
ef100_up ...)
+ TODO: check
+CVE-2022-3105 (An issue was discovered in the Linux kernel through 5.16-rc6.
uapi_fin ...)
+ TODO: check
+CVE-2022-3104 (An issue was discovered in the Linux kernel through 5.16-rc6.
lkdtm_AR ...)
+ TODO: check
CVE-2022-3103 (off-by-one in io_uring module. ...)
- linux <not-affected> (Vulnerable code not present, introduced and
fixed in 6.0 cycle)
NOTE:
https://git.kernel.org/linus/47abea041f897d64dbd5777f0cf7745148f85d75 (6.0-rc3)
@@ -26990,8 +27088,8 @@ CVE-2022-38490
RESERVED
CVE-2022-38489
RESERVED
-CVE-2022-38488
- RESERVED
+CVE-2022-38488 (logrocket-oauth2-example through 2020-05-27 allows SQL
injection via t ...)
+ TODO: check
CVE-2022-38487
RESERVED
CVE-2022-38486
@@ -30461,8 +30559,7 @@ CVE-2022-37301 (A CWE-191: Integer Underflow (Wrap or
Wraparound) vulnerability
NOT-FOR-US: Modicon
CVE-2022-37300 (A CWE-640: Weak Password Recovery Mechanism for Forgotten
Password vul ...)
NOT-FOR-US: EcoStruxure Control Expert, EcoStruxure Process Expert, and
Modicon Controllers M580 and M340
-CVE-2022-2601
- RESERVED
+CVE-2022-2601 (A buffer overflow was found in grub_font_construct_glyph(). A
maliciou ...)
{DSA-5280-1 DLA-3190-2 DLA-3190-1}
- grub2 2.06-5
NOTE:
https://lists.gnu.org/archive/html/grub-devel/2022-11/msg00059.html
@@ -32465,8 +32562,8 @@ CVE-2022-36440
RESERVED
CVE-2022-2537 (The WooCommerce PDF Invoices & Packing Slips WordPress
plugin befo ...)
NOT-FOR-US: WordPress plugin
-CVE-2022-2536
- RESERVED
+CVE-2022-2536 (The Transposh WordPress Translation plugin for WordPress is
vulnerable ...)
+ TODO: check
CVE-2022-2535 (The SearchWP Live Ajax Search WordPress plugin before 1.6.2
does not e ...)
NOT-FOR-US: WordPress plugin
CVE-2022-2534 (An issue has been discovered in GitLab CE/EE affecting all
versions st ...)
@@ -70605,12 +70702,12 @@ CVE-2022-23527 (mod_auth_openidc is an OpenID
Certified™ authentication an
[bullseye] - libapache2-mod-auth-openidc <no-dsa> (Minor issue)
NOTE:
https://github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-q6f2-285m-gr53
NOTE:
https://github.com/zmartzone/mod_auth_openidc/commit/87119f44b9a88312dbc1f752d720bcd2371b94a8
(v2.4.12.2)
-CVE-2022-23526
- RESERVED
-CVE-2022-23525
- RESERVED
-CVE-2022-23524
- RESERVED
+CVE-2022-23526 (Helm is a tool for managing Charts, pre-configured Kubernetes
resource ...)
+ TODO: check
+CVE-2022-23525 (Helm is a tool for managing Charts, pre-configured Kubernetes
resource ...)
+ TODO: check
+CVE-2022-23524 (Helm is a tool for managing Charts, pre-configured Kubernetes
resource ...)
+ TODO: check
CVE-2022-23523 (In versions prior to 0.8.1, the linux-loader crate uses the
offsets an ...)
TODO: check
CVE-2022-23522
@@ -70652,8 +70749,8 @@ CVE-2022-23509
RESERVED
CVE-2022-23508
RESERVED
-CVE-2022-23507
- RESERVED
+CVE-2022-23507 (Tendermint is a high-performance blockchain consensus engine
for Byzan ...)
+ TODO: check
CVE-2022-23506
RESERVED
CVE-2022-23505 (Passport-wsfed-saml2 is a ws-federation protocol and SAML2
tokens auth ...)
@@ -70727,8 +70824,8 @@ CVE-2022-23476 (Nokogiri is an open source XML and HTML
library for the Ruby pro
TODO: check
CVE-2022-23475 (daloRADIUS is an open source RADIUS web management
application. daloRa ...)
TODO: check
-CVE-2022-23474
- RESERVED
+CVE-2022-23474 (Editor.js is a block-style editor with clean JSON output.
Versions pri ...)
+ TODO: check
CVE-2022-23473 (Tuleap is an Open Source Suite to improve management of
software devel ...)
TODO: check
CVE-2022-23472 (Passeo is an open source python password generator. Versions
prior to ...)
@@ -217896,8 +217993,8 @@ CVE-2020-4499 (IBM Security Access Manager 9.0.7 and
IBM Security Verify Access
NOT-FOR-US: IBM
CVE-2020-4498 (IBM MQ Appliance 9.1 LTS and 9.1 CD could allow a local
privileged use ...)
NOT-FOR-US: IBM
-CVE-2020-4497
- RESERVED
+CVE-2020-4497 (IBM Spectrum Protect Plus 10.1.0 through 10.1.12 discloses
sensitive i ...)
+ TODO: check
CVE-2020-4496 (The IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server
connect ...)
NOT-FOR-US: IBM
CVE-2020-4495 (IBM Jazz Foundation and IBM Engineering products could allow a
remote ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/85bacd5f2a9cfd3f240d9f0c6311094bdfae618f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/85bacd5f2a9cfd3f240d9f0c6311094bdfae618f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
