Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
980e574b by security tracker role at 2023-12-01T08:11:40+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,87 @@
+CVE-2023-6442 (A vulnerability was found in PHPGurukul Nipah Virus Testing
Management ...)
+ TODO: check
+CVE-2023-6440 (A vulnerability was found in SourceCodester Book Borrower
System 1.0 a ...)
+ TODO: check
+CVE-2023-6033 (Improper neutralization of input in Jira integration
configuration in ...)
+ TODO: check
+CVE-2023-5995 (An issue has been discovered in GitLab EE affecting all
versions start ...)
+ TODO: check
+CVE-2023-5915 (A vulnerability of Uncontrolled Resource Consumption has been
identifi ...)
+ TODO: check
+CVE-2023-5909 (KEPServerEX does not properly validate certificates from
clients which ...)
+ TODO: check
+CVE-2023-5908 (KEPServerEX is vulnerable to a buffer overflow which may allow
an atta ...)
+ TODO: check
+CVE-2023-5226 (An issue has been discovered in GitLab affecting all versions
before 1 ...)
+ TODO: check
+CVE-2023-4912 (An issue has been discovered in GitLab EE affecting all
versions start ...)
+ TODO: check
+CVE-2023-4658 (An issue has been discovered in GitLab EE affecting all
versions start ...)
+ TODO: check
+CVE-2023-4317 (An issue has been discovered in GitLab affecting all versions
starting ...)
+ TODO: check
+CVE-2023-49735 (** UNSUPPORTED WHEN ASSIGNED ** The value set as the
DefaultLocaleRes ...)
+ TODO: check
+CVE-2023-48894 (Incorrect Access Control vulnerability in jshERP V3.3 allows
attackers ...)
+ TODO: check
+CVE-2023-48016 (Restaurant Table Booking System V1.0 is vulnerable to SQL
Injection in ...)
+ TODO: check
+CVE-2023-47454 (An Untrusted search path vulnerability in NetEase CloudMusic
2.10.4 fo ...)
+ TODO: check
+CVE-2023-47453 (An Untrusted search path vulnerability in Sohu Video Player
7.0.15.0 a ...)
+ TODO: check
+CVE-2023-47452 (An Untrusted search path vulnerability in notepad++ 6.5 allows
local u ...)
+ TODO: check
+CVE-2023-47307 (Buffer Overflow vulnerability in /apply.cgi in Shenzhen
Libituo Techno ...)
+ TODO: check
+CVE-2023-47279 (In Delta Electronics InfraSuite Device Master v.1.0.7, A
vulnerability ...)
+ TODO: check
+CVE-2023-47207 (In Delta Electronics InfraSuite Device Master v.1.0.7, a
vulnerability ...)
+ TODO: check
+CVE-2023-46956 (SQL injection vulnerability in Packers and Movers Management
System v. ...)
+ TODO: check
+CVE-2023-46690 (In Delta Electronics InfraSuite Device Master v.1.0.7, a
vulnerability ...)
+ TODO: check
+CVE-2023-46389 (LOYTEC electronics GmbH LINX-212 firmware 6.2.4 and LINX-151
Firmware ...)
+ TODO: check
+CVE-2023-46388 (LOYTEC electronics GmbH LINX-212 6.2.4 and LINX-151 7.2.4 are
vulnerab ...)
+ TODO: check
+CVE-2023-46387 (LOYTEC electronics GmbH LINX-212 firmware 6.2.4 and LINX-151
firmware ...)
+ TODO: check
+CVE-2023-46386 (LOYTEC electronics GmbH LINX-212 firmware 6.2.4 and LINX-151
firmware ...)
+ TODO: check
+CVE-2023-46385 (LOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable
to Inse ...)
+ TODO: check
+CVE-2023-46384 (LOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable
to Inse ...)
+ TODO: check
+CVE-2023-46383 (LOYTEC electronics GmbH LINX Configurator 7.4.10 uses HTTP
Basic Authe ...)
+ TODO: check
+CVE-2023-46326 (ZStack Cloud version 3.10.38 and before allows unauthenticated
API acc ...)
+ TODO: check
+CVE-2023-45253 (An issue was discovered in Huddly HuddlyCameraService before
version 8 ...)
+ TODO: check
+CVE-2023-45252 (DLL Hijacking vulnerability in Huddly HuddlyCameraService
before versi ...)
+ TODO: check
+CVE-2023-43455 (An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and
V9.4.0cu.852_B2 ...)
+ TODO: check
+CVE-2023-43454 (An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and
V9.4.0cu.852_B2 ...)
+ TODO: check
+CVE-2023-43453 (An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and
V9.4.0cu.852_B2 ...)
+ TODO: check
+CVE-2023-43089 (Dell Rugged Control Center, version prior to 4.7, contains
insufficien ...)
+ TODO: check
+CVE-2023-42917 (A memory corruption vulnerability was addressed with improved
locking. ...)
+ TODO: check
+CVE-2023-42916 (An out-of-bounds read was addressed with improved input
validation. Th ...)
+ TODO: check
+CVE-2023-3964 (An issue has been discovered in GitLab affecting all versions
starting ...)
+ TODO: check
+CVE-2023-3949 (An issue has been discovered in GitLab affecting all versions
starting ...)
+ TODO: check
+CVE-2023-3443 (An issue has been discovered in GitLab affecting all versions
starting ...)
+ TODO: check
+CVE-2023-39226 (In Delta Electronics InfraSuite Device Master v.1.0.7, a
vulnerability ...)
+ TODO: check
CVE-2023-6439 (A vulnerability classified as problematic was found in ZenTao
PMS 18.8 ...)
NOT-FOR-US: ZenTao PMS
CVE-2023-6438 (A vulnerability classified as problematic has been found in
IceCMS 2.0 ...)
@@ -1161,9 +1245,9 @@ CVE-2023-47316 (Headwind MDM Web panel 5.22.1 is
vulnerable to Incorrect Access
NOT-FOR-US: Headwind MDM Web panel
CVE-2023-47315 (Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect
Access Contro ...)
NOT-FOR-US: Headwind MDM Web panel
-CVE-2023-47314 (Headwind MDM Web panel 5.22.1 is vulnerable to Cross Site
Scripting (X ...)
+CVE-2023-47314 (Headwind MDM Web panel 5.22.1 is vulnerable to cross-site
scripting (X ...)
NOT-FOR-US: Headwind MDM Web panel
-CVE-2023-47313 (Headwind MDM Web panel 5.22.1 is vulnerable to Directory
Traversal.)
+CVE-2023-47313 (Headwind MDM Web panel 5.22.1 is vulnerable to Directory
Traversal. Th ...)
NOT-FOR-US: Headwind MDM Web panel
CVE-2023-47312 (Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect
Access Contro ...)
NOT-FOR-US: Headwind MDM Web panel
@@ -4333,12 +4417,12 @@ CVE-2023-42802 (GLPI is a free asset and IT management
software package. Startin
- glpi <removed>
NOTE:
https://github.com/glpi-project/glpi/security/advisories/GHSA-rrh2-x4ch-pq3m
CVE-2023-47360 (Videolan VLC prior to version 3.0.20 contains an Integer
underflow tha ...)
- {DSA-5545-1}
+ {DSA-5545-1 DLA-3679-1}
- vlc 3.0.20-1
NOTE: https://0xariana.github.io/blog/real_bugs/vlc/mms
NOTE:
https://code.videolan.org/videolan/vlc/-/commit/27840cb5b20bc4651ba6af01d0a7ae6da17297ef
CVE-2023-47359 (Videolan VLC prior to version 3.0.20 contains an incorrect
offset read ...)
- {DSA-5545-1}
+ {DSA-5545-1 DLA-3679-1}
- vlc 3.0.20-1
NOTE: https://0xariana.github.io/blog/real_bugs/vlc/mms
NOTE:
https://code.videolan.org/videolan/vlc/-/commit/27840cb5b20bc4651ba6af01d0a7ae6da17297ef
@@ -66302,6 +66386,7 @@ CVE-2022-45584
CVE-2022-45583
RESERVED
CVE-2022-45582 (Open Redirect vulnerability in Horizon Web Dashboard 19.4.0
thru 20.1. ...)
+ {DLA-3678-1}
- horizon 3:23.1.0-3
[bookworm] - horizon 3:23.0.0-5+deb12u1
[bullseye] - horizon 3:18.6.2-5+deb11u2
@@ -169419,8 +169504,8 @@ CVE-2021-35977 (An issue was discovered in Digi
RealPort for Windows through 4.8
NOT-FOR-US: Digi RealPort
CVE-2021-35976 (The feature to preview a website in Plesk Obsidian 18.0.0
through 18.0 ...)
NOT-FOR-US: Plesk Obsidian
-CVE-2021-35975
- RESERVED
+CVE-2021-35975 (Absolute path traversal vulnerability in the Systematica SMTP
Adapter ...)
+ TODO: check
CVE-2021-35974
RESERVED
CVE-2021-35973 (NETGEAR WAC104 devices before 1.0.4.15 are affected by an
authenticati ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/980e574be32aace231ea565cadcb6e3b6a182cd7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/980e574be32aace231ea565cadcb6e3b6a182cd7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
