Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d8b7f0e3 by Salvatore Bonaccorso at 2024-04-05T22:33:24+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,21 +1,21 @@
CVE-2024-3354 (A vulnerability was found in SourceCodester Aplaya Beach Resort
Online ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Aplaya Beach Resort Online Reservation System
CVE-2024-3353 (A vulnerability was found in SourceCodester Aplaya Beach Resort
Online ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Aplaya Beach Resort Online Reservation System
CVE-2024-3352 (A vulnerability has been found in SourceCodester Aplaya Beach
Resort O ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Aplaya Beach Resort Online Reservation System
CVE-2024-3351 (A vulnerability, which was classified as critical, was found in
Source ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Aplaya Beach Resort Online Reservation System
CVE-2024-3350 (A vulnerability, which was classified as critical, has been
found in S ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Aplaya Beach Resort Online Reservation System
CVE-2024-3349 (A vulnerability classified as critical was found in
SourceCodester Apl ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Aplaya Beach Resort Online Reservation System
CVE-2024-3348 (A vulnerability classified as critical has been found in
SourceCodeste ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Aplaya Beach Resort Online Reservation System
CVE-2024-3347 (A vulnerability was found in SourceCodester Airline Ticket
Reservation ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Airline Ticket Reservation System
CVE-2024-3346 (A vulnerability was found in Byzro Smart S80 up to 20240328. It
has be ...)
- TODO: check
+ NOT-FOR-US: Byzro Smart S80
CVE-2024-31852 (LLVM before 18.1.3 generates code in which the LR register can
be over ...)
TODO: check
CVE-2024-31851 (A path traversal vulnerability exists in the Java version of
CData Syn ...)
@@ -27,13 +27,13 @@ CVE-2024-31849 (A path traversal vulnerability exists in
the Java version of CDa
CVE-2024-31848 (A path traversal vulnerability exists in the Java version of
CData API ...)
TODO: check
CVE-2024-31220 (Sunshine is a self-hosted game stream host for Moonlight.
Starting in ...)
- TODO: check
+ NOT-FOR-US: Sunshine
CVE-2024-31218 (Webhood is a self-hosted URL scanner used analyzing phishing
and malic ...)
- TODO: check
+ NOT-FOR-US: Webhood
CVE-2024-31213 (InstantCMS is a free and open source content management
system. An ope ...)
- TODO: check
+ NOT-FOR-US: InstantCMS
CVE-2024-2499 (The Squelch Tabs and Accordions Shortcodes plugin for WordPress
is vul ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-2447 (Mattermost versions 8.1.x before 8.1.11, 9.3.x before 9.3.3,
9.4.x bef ...)
TODO: check
CVE-2024-2380 (Stored XSS in graph rendering in Checkmk <2.3.0b4.)
@@ -45,59 +45,59 @@ CVE-2024-2312 (GRUB2 does not call the module fini
functions on exit, leading to
[buster] - grub2 <not-affected> (Vulnerable code not present)
NOTE:
https://bugs.launchpad.net/ubuntu/+source/grub2-unsigned/+bug/2054127
CVE-2024-29783 (In tmu_get_tr_thresholds, there is a possible out of bounds
read due t ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29782 (In tmu_get_tr_num_thresholds of tmu.c, there is a possible out
of boun ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29757 (there is a possible permission bypass due to Debug certs being
allowli ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29756 (In afe_callback of q6afe.c, there is a possible out of bounds
write du ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29755 (In tmu_get_pi of tmu.c, there is a possible out of bounds read
due to ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29754 (In TMU_IPC_GET_TABLE, there is a possible out of bounds read
due to a ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29753 (In tmu_set_control_temp_step of tmu.c, there is a possible out
of boun ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29752 (In tmu_set_tr_num_thresholds of tmu.c, there is a possible out
of boun ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29751 (In asn1_ec_pkey_parse_p384 of asn1_common.c, there is a
possible OOB R ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29750 (In km_exp_did_inner of kmv.c, there is a possible out of
bounds read d ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29749 (In tmu_set_tr_thresholds of tmu.c, there is a possible out of
bounds w ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29748 (there is a possible way to bypass due to a logic error in the
code. T ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29747 (In _dvfs_get_lv of dvfs.c, there is a possible out of bounds
read due ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29746 (In lpm_req_handler of lpm.c, there is a possible out of bounds
write d ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29745 (there is a possible Information Disclosure due to
uninitialized data. ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29744 (In tmu_get_gov_time_windows, there is a possible out of bounds
read du ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29743 (In tmu_set_temp_lut of tmu.c, there is a possible out of
bounds write ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29742 (In apply_minlock_constraint of dvfs.c, there is a possible out
of boun ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29741 (In pblS2mpuResume of s2mpu.c, there is a possible mitigation
bypass du ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29740 (In tmu_set_table of tmu.c, there is a possible out of bounds
write due ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29739 (In tmu_get_temp_lut of tmu.c, there is a possible out of
bounds read d ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29738 (In gov_init, there is a possible out of bounds read due to a
missing b ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-29221 (Improper Access Control in Mattermost Server versions 9.5.x
before 9.5 ...)
TODO: check
CVE-2024-28949 (Mattermost Server versions 9.5.x before 9.5.2, 9.4.x before
9.4.4, 9.3 ...)
TODO: check
CVE-2024-28065 (In Unify CP IP Phone firmware 1.10.4.3, files are not
encrypted and co ...)
- TODO: check
+ NOT-FOR-US: Unify CP IP Phone firmware
CVE-2024-27232 (In asn1_ec_pkey_parse of asn1_common.c, there is a possible
OOB read d ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-27231 (In tmu_get_tr_stats of tmu.c, there is a possible out of
bounds read d ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2024-22004 (Due to length check, an attacker with privilege access on a
Linux Nons ...)
TODO: check
CVE-2024-21848 (Improper Access Control in Mattermost Server versions 8.1.x
before 8.1 ...)
@@ -111,13 +111,13 @@ CVE-2024-0076 (NVIDIA CUDA toolkit for all platforms
contains a vulnerability in
CVE-2024-0072 (NVIDIA CUDA toolkit for all platforms contains a vulnerability
in cuob ...)
TODO: check
CVE-2023-6523 (Authorization Bypass Through User-Controlled Key vulnerability
in Extr ...)
- TODO: check
+ NOT-FOR-US: ExtremePacs Extreme XDS
CVE-2023-6522 (Improper Privilege Management vulnerability in ExtremePacs
Extreme XDS ...)
- TODO: check
+ NOT-FOR-US: ExtremePacs Extreme XDS
CVE-2023-5692 (WordPress Core is vulnerable to Sensitive Information Exposure
in vers ...)
TODO: check
CVE-2023-49965 (SpaceX Starlink Wi-Fi router Gen 2 before 2023.48.0 allows XSS
via the ...)
- TODO: check
+ NOT-FOR-US: SpaceX Starlink Wi-Fi router
CVE-2023-48426 (u-boot bug that allows for u-boot shell and interrupt over
UART)
TODO: check
CVE-2024-27437 (In the Linux kernel, the following vulnerability has been
resolved: v ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d8b7f0e382c41d898322d445a3899cf1f8aea0ef
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d8b7f0e382c41d898322d445a3899cf1f8aea0ef
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
