Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3cae84a6 by security tracker role at 2023-06-03T08:12:09+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,33 @@
+CVE-2023-3083 (Cross-site Scripting (XSS) - Stored in GitHub repository
nilsteampassn ...)
+ TODO: check
+CVE-2023-3055 (The Page Builder by AZEXO plugin for WordPress is vulnerable to
Cross- ...)
+ TODO: check
+CVE-2023-3053 (The Page Builder by AZEXO plugin for WordPress is vulnerable to
unauth ...)
+ TODO: check
+CVE-2023-3052 (The Page Builder by AZEXO plugin for WordPress is vulnerable to
Cross- ...)
+ TODO: check
+CVE-2023-3051 (The Page Builder by AZEXO plugin for WordPress is vulnerable to
Stored ...)
+ TODO: check
+CVE-2023-3044 (An excessively large PDF page size (found in fuzz testing,
unlikely in ...)
+ TODO: check
+CVE-2023-33143 (Microsoft Edge (Chromium-based) Elevation of Privilege
Vulnerability)
+ TODO: check
+CVE-2023-2816 (Consul and Consul Enterprise allowed any user with
service:write permi ...)
+ TODO: check
+CVE-2023-2781 (The User Email Verification for WooCommerce plugin for
WordPress is vu ...)
+ TODO: check
+CVE-2023-2416 (The Online Booking & Scheduling Calendar for WordPress by vcita
plugin ...)
+ TODO: check
+CVE-2023-2415 (The Online Booking & Scheduling Calendar for WordPress by vcita
plugin ...)
+ TODO: check
+CVE-2023-2407 (The Event Registration Calendar By vcita plugin, versions up to
and in ...)
+ TODO: check
+CVE-2023-2406 (The Event Registration Calendar By vcita plugin, versions up to
and in ...)
+ TODO: check
+CVE-2023-2405 (The CRM and Lead Management by vcita plugin for WordPress is
vulnerabl ...)
+ TODO: check
+CVE-2023-2404 (The CRM and Lead Management by vcita plugin for WordPress is
vulnerabl ...)
+ TODO: check
CVE-2023-3075 (Cross-Site Request Forgery (CSRF) in GitHub repository
tsolucio/corebo ...)
NOT-FOR-US: Corebos
CVE-2023-3074 (Cross-site Scripting (XSS) - Stored in GitHub repository
tsolucio/core ...)
@@ -2875,18 +2905,18 @@ CVE-2023-2305
RESERVED
CVE-2023-2304 (The Favorites plugin for WordPress is vulnerable to Stored
Cross-Site ...)
NOT-FOR-US: Favorites plugin for WordPress
-CVE-2023-2303
- RESERVED
-CVE-2023-2302
- RESERVED
-CVE-2023-2301
- RESERVED
-CVE-2023-2300
- RESERVED
-CVE-2023-2299
- RESERVED
-CVE-2023-2298
- RESERVED
+CVE-2023-2303 (The Contact Form and Calls To Action by vcita plugin for
WordPress is ...)
+ TODO: check
+CVE-2023-2302 (The Contact Form and Calls To Action by vcita plugin for
WordPress is ...)
+ TODO: check
+CVE-2023-2301 (The Contact Form Builder by vcita plugin for WordPress is
vulnerable t ...)
+ TODO: check
+CVE-2023-2300 (The Contact Form Builder by vcita plugin for WordPress is
vulnerable t ...)
+ TODO: check
+CVE-2023-2299 (The Online Booking & Scheduling Calendar for WordPress by vcita
plugin ...)
+ TODO: check
+CVE-2023-2298 (The Online Booking & Scheduling Calendar for WordPress by vcita
plugin ...)
+ TODO: check
CVE-2023-2297 (The Profile Builder \u2013 User Profile & User Registration
Forms plug ...)
NOT-FOR-US: WordPress plugin
CVE-2023-2296 (The Loginizer WordPress plugin before 1.7.9 does not escape a
paramete ...)
@@ -12906,8 +12936,8 @@ CVE-2023-27988 (The post-authentication command
injection vulnerability in the Z
NOT-FOR-US: Zyxel
CVE-2023-27987 (In Apache Linkis <=1.3.1,due to the default token generated by
Linkis ...)
NOT-FOR-US: Apache Linkis
-CVE-2023-1297
- RESERVED
+CVE-2023-1297 (Consul and Consul Enterprise's cluster peering implementation
containe ...)
+ TODO: check
CVE-2023-1296 (HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.5.0 did not
correct ...)
- nomad <not-affected> (Vulnerable code not present)
NOTE:
https://discuss.hashicorp.com/t/hcsec-2023-09-nomad-acls-can-not-deny-access-to-workloads-own-variables/51390
@@ -22044,10 +22074,10 @@ CVE-2023-24805 (cups-filters contains backends,
filters, and other software requ
NOTE: Fixed by:
https://github.com/OpenPrinting/cups-filters/commit/93e60d3df358c0ae6f3dba79e1c9684657683d89
(1.x)
CVE-2023-24804 (The ownCloud Android app allows ownCloud users to access,
share, and e ...)
NOT-FOR-US: ownCloud Android app
-CVE-2023-0584
- RESERVED
-CVE-2023-0583
- RESERVED
+CVE-2023-0584 (The VK Blocks plugin for WordPress is vulnerable to improper
authoriza ...)
+ TODO: check
+CVE-2023-0583 (The VK Blocks plugin for WordPress is vulnerable to improper
authoriza ...)
+ TODO: check
CVE-2023-0582
RESERVED
CVE-2023-0581 (The PrivateContent plugin for WordPress is vulnerable to
protection me ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3cae84a687e6bc6ef121cf71e7a171c0d0c65874
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3cae84a687e6bc6ef121cf71e7a171c0d0c65874
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
