Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d588e16e by Salvatore Bonaccorso at 2024-03-27T09:29:11+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,67 +1,67 @@
CVE-2024-30201 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-30199 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-30198 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-30197 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-30196 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-30195 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-30194 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-30193 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-30192 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-2971 (Out-of-bounds array write in Xpdf 4.05 and earlier, triggered
by negat ...)
TODO: check
CVE-2024-2956 (The Simple Ajax Chat \u2013 Add a Fast, Secure Chat Box plugin
for Wor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-2954 (The Action Network plugin for WordPress is vulnerable to SQL
Injection ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-2945 (A vulnerability was found in Campcodes Online Examination
System 1.0. ...)
- TODO: check
+ NOT-FOR-US: Campcodes Online Examination System
CVE-2024-2944 (A vulnerability was found in Campcodes Online Examination
System 1.0 a ...)
- TODO: check
+ NOT-FOR-US: Campcodes Online Examination System
CVE-2024-2943 (A vulnerability has been found in Campcodes Online Examination
System ...)
- TODO: check
+ NOT-FOR-US: Campcodes Online Examination System
CVE-2024-2942 (A vulnerability, which was classified as critical, was found in
Campco ...)
- TODO: check
+ NOT-FOR-US: Campcodes Online Examination System
CVE-2024-2941 (A vulnerability, which was classified as critical, has been
found in C ...)
- TODO: check
+ NOT-FOR-US: Campcodes Online Examination System
CVE-2024-2940 (A vulnerability classified as problematic was found in
Campcodes Onlin ...)
- TODO: check
+ NOT-FOR-US: Campcodes Online Examination System
CVE-2024-2939 (A vulnerability classified as problematic has been found in
Campcodes ...)
- TODO: check
+ NOT-FOR-US: Campcodes Online Examination System
CVE-2024-2938 (A vulnerability was found in Campcodes Online Examination
System 1.0. ...)
- TODO: check
+ NOT-FOR-US: Campcodes Online Examination System
CVE-2024-2935 (A vulnerability, which was classified as problematic, has been
found i ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Todo List in Kanban Board
CVE-2024-2934 (A vulnerability classified as critical was found in
SourceCodester Tod ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Todo List in Kanban Board
CVE-2024-2932 (A vulnerability classified as critical has been found in
SourceCodeste ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Online Chatting System
CVE-2024-2930 (A vulnerability was found in SourceCodester Music Gallery Site
1.0. It ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Music Gallery Site
CVE-2024-2927 (A vulnerability was found in code-projects Mobile Shop 1.0. It
has bee ...)
- TODO: check
+ NOT-FOR-US: code-projects Mobile Shop
CVE-2024-2917 (A vulnerability was found in Campcodes House Rental Management
System ...)
- TODO: check
+ NOT-FOR-US: Campcodes House Rental Management System
CVE-2024-2916 (A vulnerability was found in Campcodes House Rental Management
System ...)
- TODO: check
+ NOT-FOR-US: Campcodes House Rental Management System
CVE-2024-2911 (A vulnerability, which was classified as problematic, was found
in Tia ...)
- TODO: check
+ NOT-FOR-US: Tianjin PubliCMS
CVE-2024-2910 (A vulnerability, which was classified as critical, has been
found in R ...)
- TODO: check
+ NOT-FOR-US: Ruijie
CVE-2024-2909 (A vulnerability classified as critical was found in Ruijie
RG-EG350 up ...)
- TODO: check
+ NOT-FOR-US: Ruijie
CVE-2024-2903 (A vulnerability was found in Tenda AC7 15.03.06.44. It has been
classi ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2024-2781 (The Elementor Website Builder Pro plugin for WordPress is
vulnerable t ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-2466 (libcurl did not check the server certificate of TLS connections
done t ...)
TODO: check
CVE-2024-2398 (When an application tells libcurl it wants to allow HTTP/2
server push ...)
@@ -89,93 +89,93 @@ CVE-2024-2097 (Authenticated List control client can
execute the LINQ query in S
CVE-2024-2004 (When a protocol selection parameter option disables all
protocols with ...)
TODO: check
CVE-2024-29928 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29927 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29926 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29925 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29924 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29923 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29922 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29921 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29920 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29919 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29918 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29917 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29915 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29914 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29913 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29912 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29911 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29910 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29909 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29908 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29907 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29906 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29820 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-28815 (A vulnerability in the BluStar component of Mitel InAttend 2.6
SP4 thr ...)
- TODO: check
+ NOT-FOR-US: Mitel
CVE-2024-28551 (Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in
the ssid ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2024-28545 (Tenda AC18 V15.03.05.05 contains a command injection
vulnerablility in ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2024-28335 (Lektor before 3.3.11 does not sanitize DB path traversal.
Thus, shell ...)
TODO: check
CVE-2024-27521 (TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to
contain an u ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2024-27188 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-26577 (VSeeFace through 1.13.38.c2 allows attackers to cause a denial
of serv ...)
- TODO: check
+ NOT-FOR-US: VSeeFace
CVE-2024-26303 (Authenticated Denial of Service Vulnerability in
ArubaOS-Switch SSH Da ...)
- TODO: check
+ NOT-FOR-US: Aruba
CVE-2024-25926 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-25920 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-25736 (An issue was discovered on WyreStorm Apollo VX20 devices
before 1.3.58 ...)
- TODO: check
+ NOT-FOR-US: WyreStorm Apollo VX20 devices
CVE-2024-25735 (An issue was discovered on WyreStorm Apollo VX20 devices
before 1.3.58 ...)
- TODO: check
+ NOT-FOR-US: WyreStorm Apollo VX20 devices
CVE-2024-25734 (An issue was discovered on WyreStorm Apollo VX20 devices
before 1.3.58 ...)
- TODO: check
+ NOT-FOR-US: WyreStorm Apollo VX20 devices
CVE-2024-25421 (An issue in Ignite Realtime Openfire v.4.9.0 and before allows
a remot ...)
TODO: check
CVE-2024-25420 (An issue in Ignite Realtime Openfire v.4.9.0 and before allows
a remot ...)
TODO: check
CVE-2024-25138 (In AutomationDirect C-MORE EA9 HMI, credentials used by the
platform ...)
- TODO: check
+ NOT-FOR-US: AutomationDirect C-MORE EA9 HMI
CVE-2024-25137 (In AutomationDirect C-MORE EA9 HMI there is a program that
copies a bu ...)
- TODO: check
+ NOT-FOR-US: AutomationDirect C-MORE EA9 HMI
CVE-2024-25136 (There is a function in AutomationDirect C-MORE EA9 HMI that
allows an ...)
- TODO: check
+ NOT-FOR-US: AutomationDirect C-MORE EA9 HMI
CVE-2024-24842 (Deserialization of Untrusted Data vulnerability in Echo
Plugins Knowle ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-24800 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-24700 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-22311 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
TODO: check
CVE-2024-22300 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
@@ -355,7 +355,7 @@ CVE-2024-29808 (The image_id parameter of the AJAX call to
the editimage_bwg act
CVE-2024-29684 (DedeCMS v5.7 was discovered to contain a Cross-Site Request
Forgery (C ...)
NOT-FOR-US: DedeCMS
CVE-2024-29644 (Cross Site Scripting vulnerability in dcat-admin v.2.1.3 and
before al ...)
- TODO: check
+ NOT-FOR-US: dcat-admin
CVE-2024-29401 (xzs-mysql 3.8 is vulnerable to Insufficient Session
Expiration, which ...)
TODO: check
CVE-2024-29203 (TinyMCE is an open source rich text editor. Across-site
scripting (XSS ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d588e16ed3e15b3aa00978bcc5deb3e27207208b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d588e16ed3e15b3aa00978bcc5deb3e27207208b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
