Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d7ac97d9 by security tracker role at 2024-03-01T20:11:56+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,135 @@
+CVE-2024-2078 (A Cross-Site Scripting (XSS) vulnerability has been found in
HelpDeskZ ...)
+ TODO: check
+CVE-2024-2077 (A vulnerability classified as critical has been found in
SourceCodeste ...)
+ TODO: check
+CVE-2024-2076 (A vulnerability was found in CodeAstro House Rental Management
System ...)
+ TODO: check
+CVE-2024-2075 (A vulnerability was found in SourceCodester Daily Habit Tracker
1.0. I ...)
+ TODO: check
+CVE-2024-2074 (A vulnerability was found in Mini-Tmall up to 20231017 and
classified ...)
+ TODO: check
+CVE-2024-2073 (A vulnerability has been found in SourceCodester Block Inserter
for Dy ...)
+ TODO: check
+CVE-2024-2072 (A vulnerability, which was classified as problematic, was found
in Sou ...)
+ TODO: check
+CVE-2024-2071 (A vulnerability, which was classified as problematic, has been
found i ...)
+ TODO: check
+CVE-2024-2070 (A vulnerability classified as problematic was found in
SourceCodester ...)
+ TODO: check
+CVE-2024-2069 (A vulnerability classified as critical has been found in
SourceCodeste ...)
+ TODO: check
+CVE-2024-2068 (A vulnerability was found in SourceCodester Computer Inventory
System ...)
+ TODO: check
+CVE-2024-2067 (A vulnerability was found in SourceCodester Computer Inventory
System ...)
+ TODO: check
+CVE-2024-2066 (A vulnerability was found in SourceCodester Computer Inventory
System ...)
+ TODO: check
+CVE-2024-2065 (A vulnerability was found in SourceCodester Barangay Population
Monito ...)
+ TODO: check
+CVE-2024-2064 (A vulnerability has been found in rahman SelectCours 1.0 and
classifie ...)
+ TODO: check
+CVE-2024-2063 (A vulnerability, which was classified as problematic, was found
in Sou ...)
+ TODO: check
+CVE-2024-2062 (A vulnerability, which was classified as critical, has been
found in S ...)
+ TODO: check
+CVE-2024-2061 (A vulnerability classified as critical was found in
SourceCodester Pet ...)
+ TODO: check
+CVE-2024-2060 (A vulnerability classified as critical has been found in
SourceCodeste ...)
+ TODO: check
+CVE-2024-2059 (A vulnerability was found in SourceCodester Petrol Pump
Management Sof ...)
+ TODO: check
+CVE-2024-2058 (A vulnerability was found in SourceCodester Petrol Pump
Management Sof ...)
+ TODO: check
+CVE-2024-2057 (A vulnerability was found in Harrison Chase LangChain 0.1.9. It
has be ...)
+ TODO: check
+CVE-2024-27734 (A Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows
an atta ...)
+ TODO: check
+CVE-2024-27692
+ REJECTED
+CVE-2024-27689 (Stupid Simple CMS v1.2.4 was discovered to contain a
Cross-Site Reques ...)
+ TODO: check
+CVE-2024-27572 (LBT T300-T390 v2.2.1.8 were discovered to contain a stack
overflow via ...)
+ TODO: check
+CVE-2024-27571 (LBT T300-T390 v2.2.1.8 were discovered to contain a stack
overflow via ...)
+ TODO: check
+CVE-2024-27570 (LBT T300-T390 v2.2.1.8 were discovered to contain a stack
overflow via ...)
+ TODO: check
+CVE-2024-27569 (LBT T300-T390 v2.2.1.8 were discovered to contain a stack
overflow via ...)
+ TODO: check
+CVE-2024-27568 (LBT T300-T390 v2.2.1.8 were discovered to contain a stack
overflow via ...)
+ TODO: check
+CVE-2024-27567 (LBT T300- T390 v2.2.1.8 were discovered to contain a stack
overflow vi ...)
+ TODO: check
+CVE-2024-27559 (Stupid Simple CMS v1.2.4 was discovered to contain a
Cross-Site Reques ...)
+ TODO: check
+CVE-2024-27558 (Stupid Simple CMS 1.2.4 is vulnerable to Cross Site Scripting
(XSS) wi ...)
+ TODO: check
+CVE-2024-27499 (Bagisto v1.5.1 is vulnerable for Cross site scripting(XSS) via
png fil ...)
+ TODO: check
+CVE-2024-27497 (Linksys E2000 Ver.1.0.06 build 1 is vulnerable to
authentication bypas ...)
+ TODO: check
+CVE-2024-27298 (parse-server is a Parse Server for Node.js / Express. This
vulnerabili ...)
+ TODO: check
+CVE-2024-27296 (Directus is a real-time API and App dashboard for managing SQL
databas ...)
+ TODO: check
+CVE-2024-27295 (Directus is a real-time API and App dashboard for managing SQL
databas ...)
+ TODO: check
+CVE-2024-27140 (** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of
Input Duri ...)
+ TODO: check
+CVE-2024-27139 (** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization
vulnerability ...)
+ TODO: check
+CVE-2024-27138 (** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization
vulnerability ...)
+ TODO: check
+CVE-2024-26280 (Apache Airflow, versions before 2.8.2, has a vulnerability
that allows ...)
+ TODO: check
+CVE-2024-25972 (Initialization of a resource with an insecure default
vulnerability in ...)
+ TODO: check
+CVE-2024-25091 (Protection mechanism failure issue exists in RevoWorks SCVX
prior to s ...)
+ TODO: check
+CVE-2024-24907 (Dell Secure Connect Gateway (SCG) Policy Manager, all
versions, contai ...)
+ TODO: check
+CVE-2024-24906 (Dell Secure Connect Gateway (SCG) Policy Manager, all
versions, contai ...)
+ TODO: check
+CVE-2024-24905 (Dell Secure Connect Gateway (SCG) Policy Manager, all
versions, contai ...)
+ TODO: check
+CVE-2024-24904 (Dell Secure Connect Gateway (SCG) Policy Manager, all
versions, contai ...)
+ TODO: check
+CVE-2024-24903 (Dell Secure Connect Gateway (SCG) Policy Manager, version
5.10+, conta ...)
+ TODO: check
+CVE-2024-24900 (Dell Secure Connect Gateway (SCG) Policy Manager, all
versions, contai ...)
+ TODO: check
+CVE-2024-22458 (Dell Secure Connect Gateway, 5.18, contains an Inadequate
Encryption S ...)
+ TODO: check
+CVE-2024-22457 (Dell Secure Connect Gateway 5.20 contains an improper
authentication v ...)
+ TODO: check
+CVE-2024-1624 (An OS Command Injection vulnerability affecting documentation
server o ...)
+ TODO: check
+CVE-2024-1453 (In Sante DICOM Viewer Pro versions 14.0.3 and prior, a user
must open ...)
+ TODO: check
+CVE-2024-1174 (Previous versions of HP ThinPro (prior to HP ThinPro 8.0 SP 8)
could p ...)
+ TODO: check
+CVE-2024-1120 (The NextMove Lite \u2013 Thank You Page for WooCommerce and
Finale Lit ...)
+ TODO: check
+CVE-2024-0967 (A potential vulnerability has been identified in OpenText /
Micro Focu ...)
+ TODO: check
+CVE-2024-0692 (The SolarWinds Security Event Manager was susceptible to Remote
Code E ...)
+ TODO: check
+CVE-2023-52558 (In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata
019, an ...)
+ TODO: check
+CVE-2023-52557 (In OpenBSD 7.3 before errata 016, npppd(8) could crash by a
l2tp messa ...)
+ TODO: check
+CVE-2023-52556 (In OpenBSD 7.4 before errata 009, a race condition between
pf(4)'s pro ...)
+ TODO: check
+CVE-2023-50378 (Lack of proper input validation and constraint enforcement in
Apache A ...)
+ TODO: check
+CVE-2023-48674 (Dell Platform BIOS contains an Improper Null Termination
vulnerability ...)
+ TODO: check
+CVE-2023-46951 (Cross Site Scripting vulnerability in Contribsys Sidekiq
v.6.5.8 allow ...)
+ TODO: check
+CVE-2023-46950 (Cross Site Scripting vulnerability in Contribsys Sidekiq
v.6.5.8 allow ...)
+ TODO: check
+CVE-2023-39254 (Dell Update Package (DUP), Versions prior to 4.9.10 contain an
Uncontr ...)
+ TODO: check
CVE-2024-2045 (Session version 1.17.5 allows obtaining internal application
files and ...)
TODO: check
CVE-2024-2022 (A vulnerability was found in Netentsec NS-ASG Application
Security Gat ...)
@@ -2514,7 +2646,7 @@ CVE-2024-23122 (A maliciously crafted 3DM file when
parsed in opennurbs.dll thro
NOT-FOR-US: Autodesk
CVE-2024-23121 (A maliciously crafted MODEL file when parsed in libodxdll.dll
through ...)
NOT-FOR-US: Autodesk
-CVE-2024-23120 (A maliciously crafted STP file when parsed in
ASMIMPORT228A.dll throug ...)
+CVE-2024-23120 (A maliciously crafted STP file in ASMIMPORT228A.dll when
parsed throug ...)
NOT-FOR-US: Autodesk
CVE-2024-1053 (The Event Tickets and Registration plugin for WordPress is
vulnerable ...)
NOT-FOR-US: WordPress plugin
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d7ac97d9c8a18b12ec2b8a4558120c7eac989a85
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d7ac97d9c8a18b12ec2b8a4558120c7eac989a85
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
