Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ef3140e7 by security tracker role at 2024-04-13T20:11:58+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,8 +1,28 @@
-CVE-2024-32487 [less(1) with LESSOPEN mishandles \n in paths]
+CVE-2024-3739 (A vulnerability classified as critical was found in cym1102
nginxWebUI ...)
+ TODO: check
+CVE-2024-3738 (A vulnerability classified as critical has been found in
cym1102 nginx ...)
+ TODO: check
+CVE-2024-3737 (A vulnerability was found in cym1102 nginxWebUI up to 3.9.9. It
has be ...)
+ TODO: check
+CVE-2024-3736 (A vulnerability was found in cym1102 nginxWebUI up to 3.9.9. It
has be ...)
+ TODO: check
+CVE-2024-3735 (A vulnerability was found in Smart Office up to 20240405. It
has been ...)
+ TODO: check
+CVE-2024-3721 (A vulnerability was found in TBK DVR-4104 and DVR-4216 up to
20240412 ...)
+ TODO: check
+CVE-2024-3720 (A vulnerability has been found in Tianwell Fire Intelligent
Command Pl ...)
+ TODO: check
+CVE-2024-3719 (A vulnerability, which was classified as critical, was found in
Campco ...)
+ TODO: check
+CVE-2024-3662 (The WPZOOM Social Feed Widget & Block plugin for WordPress is
vulnerab ...)
+ TODO: check
+CVE-2023-6494 (The WPC Smart Quick View for WooCommerce plugin for WordPress
is vulne ...)
+ TODO: check
+CVE-2024-32487 (less through 653 allows OS command execution via a newline
character i ...)
- less <unfixed> (bug #1068938)
NOTE: https://www.openwall.com/lists/oss-security/2024/04/12/5
NOTE: Fixed by:
https://github.com/gwsw/less/commit/007521ac3c95bc76e3d59c6dbfe75d06c8075c33
-CVE-2024-26817 [amdkfd: use calloc instead of kzalloc to avoid integer
overflow]
+CVE-2024-26817 (In the Linux kernel, the following vulnerability has been
resolved: a ...)
- linux <unfixed>
NOTE:
https://git.kernel.org/linus/3b0daecfeac0103aba8b293df07a0cbaf8b43f29
CVE-2024-3027 (The Smart Slider 3 plugin for WordPress is vulnerable to
unauthorized ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ef3140e7f28a017b0f3520ead8fc060756be20b7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ef3140e7f28a017b0f3520ead8fc060756be20b7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
