Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
066fbb5f by Moritz Muehlenhoff at 2024-02-23T23:38:31+01:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,13 +1,15 @@
+CVE-2024-22371
+ NOT-FOR-US: Apache Camel
CVE-2024-27319 (Versions of the package onnx before and including 1.15.0 are
vulnerabl ...)
- TODO: check
+ NOT-FOR-US: onnx
CVE-2024-27318 (Versions of the package onnx before and including 1.15.0 are
vulnerabl ...)
- TODO: check
+ NOT-FOR-US: onnx
CVE-2024-26150 (`@backstage/backend-common` is a common functionality library
for back ...)
- TODO: check
+ NOT-FOR-US: backstage/backend-common
CVE-2024-25928 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: Sitepact
CVE-2024-25915 (Server-Side Request Forgery (SSRF) vulnerability in Raaj
Trambadia Pex ...)
- TODO: check
+ NOT-FOR-US: Raaj Trambadia Pexels: Free Stock Photos
CVE-2024-25629 (c-ares is a C library for asynchronous DNS requests.
`ares__read_line( ...)
- c-ares <unfixed>
[bookworm] - c-ares <no-dsa> (Minor issue)
@@ -67413,7 +67415,7 @@ CVE-2023-24418 (Auth. (admin+) Stored Cross-Site
Scripting (XSS) vulnerability i
CVE-2023-24417 (Cross-Site Request Forgery (CSRF) vulnerability in
tiggersWelt.Net Wor ...)
NOT-FOR-US: WordPress plugin
CVE-2023-24416 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2023-24415 (Cross-Site Request Forgery (CSRF) vulnerability in
QuantumCloud AI Cha ...)
NOT-FOR-US: WordPress plugin
CVE-2023-24414 (Cross-Site Request Forgery (CSRF) vulnerability in RoboSoft
Photo Gall ...)
@@ -91372,7 +91374,7 @@ CVE-2022-43844 (IBM Robotic Process Automation for
Cloud Pak 20.12 through 21.0.
CVE-2022-43843 (IBM Spectrum Scale 5.1.5.0 through 5.1.5.1 uses weaker than
expected c ...)
NOT-FOR-US: IBM
CVE-2022-43842 (IBM Aspera Console 3.4.0 through 3.4.2 is vulnerable to SQL
injection. ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2022-43841
RESERVED
CVE-2022-43840
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/066fbb5f599d1e87bc4047c5170e8c4d45f7f34e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/066fbb5f599d1e87bc4047c5170e8c4d45f7f34e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
