Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c619b2d0 by Moritz Muehlenhoff at 2024-04-02T10:39:37+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,85 +1,85 @@
CVE-2024-3165 (System->Maintenance-> Log Files in dotCMS dashboard is
providing the u ...)
- TODO: check
+ NOT-FOR-US: dotCMS
CVE-2024-3164 (In dotCMS dashboard, the Tools and Log Files tabs under System
\u2192 ...)
- TODO: check
+ NOT-FOR-US: dotCMS
CVE-2024-3160 (** DISPUTED ** A vulnerability, which was classified as
problematic, w ...)
- TODO: check
+ NOT-FOR-US: IntelBras
CVE-2024-3148 (A vulnerability, which was classified as critical, has been
found in D ...)
- TODO: check
+ NOT-FOR-US: DedeCMS
CVE-2024-3147 (A vulnerability classified as problematic was found in DedeCMS
5.7. Th ...)
- TODO: check
+ NOT-FOR-US: DedeCMS
CVE-2024-3146 (A vulnerability classified as problematic has been found in
DedeCMS 5. ...)
- TODO: check
+ NOT-FOR-US: DedeCMS
CVE-2024-3145 (A vulnerability was found in DedeCMS 5.7. It has been rated as
problem ...)
- TODO: check
+ NOT-FOR-US: DedeCMS
CVE-2024-3144 (A vulnerability was found in DedeCMS 5.7. It has been declared
as prob ...)
- TODO: check
+ NOT-FOR-US: DedeCMS
CVE-2024-3143 (A vulnerability was found in DedeCMS 5.7. It has been
classified as pr ...)
- TODO: check
+ NOT-FOR-US: DedeCMS
CVE-2024-3142 (A vulnerability was found in Clavister E10 and E80 up to
20240323 and ...)
- TODO: check
+ NOT-FOR-US: Clavister
CVE-2024-3141 (A vulnerability has been found in Clavister E10 and E80 up to
20240323 ...)
- TODO: check
+ NOT-FOR-US: Clavister
CVE-2024-3140 (A vulnerability, which was classified as problematic, was found
in Sou ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2024-3139 (A vulnerability, which was classified as critical, has been
found in S ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2024-3138 (** DISPUTED ** A vulnerability was found in francoisjacquet
RosarioSIS ...)
- TODO: check
+ NOT-FOR-US: RosarioSISster
CVE-2024-3137 (Improper Privilege Management in uvdesk/community-skeleton)
TODO: check
CVE-2024-31005 (An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker
to execu ...)
- TODO: check
+ NOT-FOR-US: Bento4
CVE-2024-31004 (An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker
to execu ...)
- TODO: check
+ NOT-FOR-US: Bento4
CVE-2024-31003 (Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641
allows a rem ...)
- TODO: check
+ NOT-FOR-US: Bento4
CVE-2024-31002 (Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641
allows a rem ...)
- TODO: check
+ NOT-FOR-US: Bento4
CVE-2024-2925 (The Beaver Builder \u2013 WordPress Page Builder plugin for
WordPress ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-2924 (The Creative Addons for Elementor plugin for WordPress is
vulnerable t ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-2839 (The Colibri Page Builder plugin for WordPress is vulnerable to
Stored ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-2791 (The Metform Elementor Contact Form Builder plugin for WordPress
is vul ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-2369 (The Page Builder Gutenberg Blocks WordPress plugin before
3.1.7 does ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29276 (An issue was discovered in seeyonOA version 8, allows remote
attackers ...)
- TODO: check
+ NOT-FOR-US: seeyonOA
CVE-2024-29086 (in OpenHarmony v3.2.4 and prior versions allow a local
attacker cause ...)
- TODO: check
+ NOT-FOR-US: OpenHarmony
CVE-2024-29074 (in OpenHarmony v3.2.4 and prior versions allow a local
attacker arbitr ...)
- TODO: check
+ NOT-FOR-US: OpenHarmony
CVE-2024-28951 (in OpenHarmony v4.0.0 and prior versions allow a local
attacker arbitr ...)
- TODO: check
+ NOT-FOR-US: OpenHarmony
CVE-2024-28226 (in OpenHarmony v4.0.0 and prior versions allow a remote
attacker cause ...)
- TODO: check
+ NOT-FOR-US: OpenHarmony
CVE-2024-27334 (Kofax Power PDF JPG File Parsing Out-Of-Bounds Read
Information Disclo ...)
- TODO: check
+ NOT-FOR-US: KOfax Power PDF
CVE-2024-27333 (Kofax Power PDF GIF File Parsing Out-Of-Bounds Read
Information Disclo ...)
- TODO: check
+ NOT-FOR-US: KOfax Power PDF
CVE-2024-27332 (PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read
Information Dis ...)
- TODO: check
+ NOT-FOR-US: PDF-XChange Editor
CVE-2024-27331 (PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read
Information Dis ...)
- TODO: check
+ NOT-FOR-US: PDF-XChange Editor
CVE-2024-27330 (PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read
Information Dis ...)
- TODO: check
+ NOT-FOR-US: PDF-XChange Editor
CVE-2024-27329 (PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read
Information Dis ...)
- TODO: check
+ NOT-FOR-US: PDF-XChange Editor
CVE-2024-27328 (PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read
Information Dis ...)
- TODO: check
+ NOT-FOR-US: PDF-XChange Editor
CVE-2024-27327 (PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote
Code Ex ...)
- TODO: check
+ NOT-FOR-US: PDF-XChange Editor
CVE-2024-27326 (PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read
Information Dis ...)
- TODO: check
+ NOT-FOR-US: PDF-XChange Editor
CVE-2024-27325 (PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read
Information Dis ...)
- TODO: check
+ NOT-FOR-US: PDF-XChange Editor
CVE-2024-27324 (PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read
Information Dis ...)
- TODO: check
+ NOT-FOR-US: PDF-XChange Editor
CVE-2024-27323 (PDF-XChange Editor Updater Improper Certificate Validation
Remote Code ...)
- TODO: check
+ NOT-FOR-US: PDF-XChange Editor
CVE-2024-26684 (In the Linux kernel, the following vulnerability has been
resolved: n ...)
TODO: check
CVE-2024-26683 (In the Linux kernel, the following vulnerability has been
resolved: w ...)
@@ -139,9 +139,9 @@ CVE-2024-26657 (In the Linux kernel, the following
vulnerability has been resolv
CVE-2024-26656 (In the Linux kernel, the following vulnerability has been
resolved: d ...)
TODO: check
CVE-2024-25187 (Server Side Request Forgery (SSRF) vulnerability in 71cms
v1.0.0, allo ...)
- TODO: check
+ NOT-FOR-US: 71cms
CVE-2024-24581 (in OpenHarmony v4.0.0 and prior versions allow a local
attacker arbitr ...)
- TODO: check
+ NOT-FOR-US: OpenHarmony
CVE-2024-23119 (Centreon insertGraphTemplate SQL Injection Remote Code
Execution Vulne ...)
TODO: check
CVE-2024-23118 (Centreon updateContactHostCommands SQL Injection Remote Code
Execution ...)
@@ -153,51 +153,51 @@ CVE-2024-23116 (Centreon updateLCARelation SQL Injection
Remote Code Execution V
CVE-2024-23115 (Centreon updateGroups SQL Injection Remote Code Execution
Vulnerabilit ...)
TODO: check
CVE-2024-22180 (in OpenHarmony v4.0.0 and prior versions allow a local
attacker cause ...)
- TODO: check
+ NOT-FOR-US: OpenHarmony
CVE-2024-22177 (in OpenHarmony v3.2.4 and prior versions allow a local
attacker cause ...)
- TODO: check
+ NOT-FOR-US: OpenHarmony
CVE-2024-22098 (in OpenHarmony v3.2.4 and prior versions allow a local
attacker arbitr ...)
- TODO: check
+ NOT-FOR-US: OpenHarmony
CVE-2024-22092 (in OpenHarmony v3.2.4 and prior versions allow a remote
attacker bypas ...)
- TODO: check
+ NOT-FOR-US: OpenHarmony
CVE-2024-21834 (in OpenHarmony v3.2.4 and prior versions allow a local
attacker cause ...)
- TODO: check
+ NOT-FOR-US: OpenHarmony
CVE-2024-20854 (Improper handling of insufficient privileges vulnerability in
Samsung ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2024-20853 (Improper verification of intent by broadcast receiver
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2024-20852 (Improper verification of intent by broadcast receiver
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2024-20851 (Improper access control vulnerability in Samsung Data Store
prior to v ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2024-20850 (Use of Implicit Intent for Sensitive Communication in Samsung
Pay prio ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2024-20849 (Out-of-bound Write vulnerability in chunk parsing
implementation of li ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2024-20848 (Out-of-bound Write vulnerability in text parsing
implementation of lib ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2024-20847 (Improper Access Control vulnerability in StorageManagerService
prior t ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2024-20846 (Out-of-bounds write vulnerability while decoding hcr of
libsavsac.so p ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2024-20845 (Out-of-bounds write vulnerability while releasing memory in
libsavsac. ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2024-20844 (Out-of-bounds write vulnerability while parsing remaining
codewords in ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2024-20843 (Out-of-bound write vulnerability in command parsing
implementation of ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2024-20842 (Improper Input Validation vulnerability in handling apdu of
libsec-ril ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2024-20799 (Adobe Experience Manager versions 6.5.19 and earlier are
affected by a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2024-1863 (Sante PACS Server Token Endpoint SQL Injection Remote Code
Execution V ...)
- TODO: check
+ NOT-FOR-US: Sante PACS Server
CVE-2024-1504 (The SecuPress Free \u2014 WordPress Security plugin for
WordPress is v ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-1274 (The My Calendar WordPress plugin before 3.4.24 does not
sanitise and e ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-1179 (TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer
Overflow ...)
- TODO: check
+ NOT-FOR-US: TP-Link
CVE-2024-0637 (Centreon updateDirectory SQL Injection Remote Code Execution
Vulnerabi ...)
TODO: check
CVE-2023-52636 (In the Linux kernel, the following vulnerability has been
resolved: l ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c619b2d0451cec16f10ac310610da7c062b8286d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c619b2d0451cec16f10ac310610da7c062b8286d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits