Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fad5eaea by Salvatore Bonaccorso at 2024-05-03T22:59:05+02:00
Process several NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -595,67 +595,67 @@ CVE-2023-6214 (The HT Mega \u2013 Absolute Addons For
Elementor plugin for WordP
CVE-2023-51633 (Centreon sysName Cross-Site Scripting Remote Code Execution
Vulnerabil ...)
TODO: check
CVE-2023-51629 (D-Link DCS-8300LHV2 ONVIF Hardcoded PIN Authentication Bypass
Vulnerab ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-51628 (D-Link DCS-8300LHV2 ONVIF SetHostName Stack-Based Buffer
Overflow Remo ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-51627 (D-Link DCS-8300LHV2 ONVIF Duration Stack-Based Buffer Overflow
Remote ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-51626 (D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Username
Stack-Ba ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-51625 (D-Link DCS-8300LHV2 ONVIF SetSystemDateAndTime Command
Injection Remot ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-51624 (D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Nonce
Stack-Based ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-51623 (D-Link DIR-X3260 prog.cgi SetAPClientSettings Stack-based
Buffer Overf ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-51622 (D-Link DIR-X3260 prog.cgi SetTriggerPPPoEValidate Stack-based
Buffer O ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-51621 (D-Link DIR-X3260 prog.cgi SetDeviceSettings Stack-based Buffer
Overflo ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-51620 (D-Link DIR-X3260 prog.cgi SetIPv6PppoeSettings Stack-based
Buffer Over ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-51619 (D-Link DIR-X3260 prog.cgi SetMyDLinkRegistration Stack-based
Buffer Ov ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-51618 (D-Link DIR-X3260 prog.cgi SetWLanRadioSecurity Stack-Based
Buffer Over ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-51617 (D-Link DIR-X3260 prog.cgi SetWanSettings Stack-Based Buffer
Overflow R ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-51616 (D-Link DIR-X3260 prog.cgi SetSysEmailSettings Stack-Based
Buffer Overf ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-51615 (D-Link DIR-X3260 prog.cgi SetQuickVPNSettings PSK Stack-Based
Buffer O ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-51614 (D-Link DIR-X3260 prog.cgi SetQuickVPNSettings Password
Stack-Based Buf ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-51613 (D-Link DIR-X3260 prog.cgi SetDynamicDNSSettings Stack-Based
Buffer Ove ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-51612 (Kofax Power PDF JP2 File Parsing Use-After-Free Information
Disclosure ...)
- TODO: check
+ NOT-FOR-US: Kofax Power PDF
CVE-2023-51611 (Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read
Information Disclo ...)
- TODO: check
+ NOT-FOR-US: Kofax Power PDF
CVE-2023-51610 (Kofax Power PDF JP2 File Parsing Use-After-Free Information
Disclosure ...)
- TODO: check
+ NOT-FOR-US: Kofax Power PDF
CVE-2023-51609 (Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read
Information Disclo ...)
- TODO: check
+ NOT-FOR-US: Kofax Power PDF
CVE-2023-51608 (Kofax Power PDF J2K File Parsing Memory Corruption Remote Code
Executi ...)
- TODO: check
+ NOT-FOR-US: Kofax Power PDF
CVE-2023-51607 (Kofax Power PDF PNG File Parsing Out-Of-Bounds Read
Information Disclo ...)
- TODO: check
+ NOT-FOR-US: Kofax Power PDF
CVE-2023-51606 (Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Remote
Code Execut ...)
- TODO: check
+ NOT-FOR-US: Kofax Power PDF
CVE-2023-51605 (Honeywell Saia PG5 Controls Suite XML External Entity
Processing Infor ...)
- TODO: check
+ NOT-FOR-US: Honeywell
CVE-2023-51604 (Honeywell Saia PG5 Controls Suite XML External Entity
Processing Infor ...)
- TODO: check
+ NOT-FOR-US: Honeywell
CVE-2023-51603 (Honeywell Saia PG5 Controls Suite CAB File Parsing Directory
Traversal ...)
- TODO: check
+ NOT-FOR-US: Honeywell
CVE-2023-51602 (Honeywell Saia PG5 Controls Suite XML External Entity
Processing Infor ...)
- TODO: check
+ NOT-FOR-US: Honeywell
CVE-2023-51601 (Honeywell Saia PG5 Controls Suite XML External Entity
Processing Infor ...)
- TODO: check
+ NOT-FOR-US: Honeywell
CVE-2023-51600 (Honeywell Saia PG5 Controls Suite XML External Entity
Processing Infor ...)
- TODO: check
+ NOT-FOR-US: Honeywell
CVE-2023-51599 (Honeywell Saia PG5 Controls Suite Directory Traversal Remote
Code Exec ...)
- TODO: check
+ NOT-FOR-US: Honeywell
CVE-2023-51598 (Hancom Office Word DOC File Parsing Use-After-Free Remote Code
Executi ...)
TODO: check
CVE-2023-51597 (Kofax Power PDF U3D File Parsing Out-Of-Bounds Write Remote
Code Execu ...)
@@ -707,47 +707,47 @@ CVE-2023-51575 (Voltronic Power ViewPower MonitorConsole
Exposed Dangerous Metho
CVE-2023-51574 (Voltronic Power ViewPower updateManagerPassword Exposed
Dangerous Meth ...)
TODO: check
CVE-2023-51569 (Kofax Power PDF BMP File Parsing Out-Of-Bounds Write Remote
Code Execu ...)
- TODO: check
+ NOT-FOR-US: Kofax Power PDF
CVE-2023-51568 (Kofax Power PDF OXPS File Parsing Use-After-Free Information
Disclosur ...)
- TODO: check
+ NOT-FOR-US: Kofax Power PDF
CVE-2023-51567 (Kofax Power PDF OXPS File Parsing Out-Of-Bounds Read
Information Discl ...)
- TODO: check
+ NOT-FOR-US: Kofax Power PDF
CVE-2023-51566 (Kofax Power PDF OXPS File Parsing Stack-based Buffer Overflow
Remote C ...)
- TODO: check
+ NOT-FOR-US: Kofax Power PDF
CVE-2023-51565 (Kofax Power PDF XPS File Parsing Use-After-Free Remote Code
Execution ...)
- TODO: check
+ NOT-FOR-US: Kofax Power PDF
CVE-2023-51564 (Kofax Power PDF PDF File Parsing Out-Of-Bounds Read
Information Disclo ...)
- TODO: check
+ NOT-FOR-US: Kofax Power PDF
CVE-2023-51563 (Kofax Power PDF XPS File Parsing Use-After-Free Remote Code
Execution ...)
- TODO: check
+ NOT-FOR-US: Kofax Power PDF
CVE-2023-51562 (Foxit PDF Reader AcroForm Out-Of-Bounds Read Information
Disclosure Vu ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-51561 (Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read
Information Discl ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-51560 (Foxit PDF Reader Annotation Type Confusion Remote Code
Execution Vulne ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-51559 (Foxit PDF Reader Doc Out-Of-Bounds Read Remote Code Execution
Vulnerab ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-51558 (Foxit PDF Reader AcroForm Doc Out-Of-Bounds Read Information
Disclosur ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-51557 (Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code
Execution Vul ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-51556 (Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code
Execution Vul ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-51555 (Foxit PDF Reader Doc Out-Of-Bounds Read Information Disclosure
Vulnera ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-51554 (Foxit PDF Reader Signature Use-After-Free Information
Disclosure Vulne ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-51553 (Foxit PDF Reader Bookmark Out-Of-Bounds Read Information
Disclosure Vu ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-51552 (Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code
Executi ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-51551 (Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code
Executi ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-51550 (Foxit PDF Reader combobox Out-Of-Bounds Read Information
Disclosure Vu ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-51549 (Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote
Code Execut ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-50685 (An issue in Hipcam Cameras RealServer v.1.0 allows a remote
attacker t ...)
TODO: check
CVE-2023-50235 (Hancom Office Show PPT File Parsing Stack-based Buffer
Overflow Remote ...)
@@ -787,45 +787,45 @@ CVE-2023-50219 (Inductive Automation Ignition RunQuery
Deserialization of Untrus
CVE-2023-50218 (Inductive Automation Ignition ModuleInvoke Deserialization of
Untruste ...)
TODO: check
CVE-2023-50217 (D-Link G416 awsfile rm Command Injection Remote Code Execution
Vulnera ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-50216 (D-Link G416 awsfile tar File Handling Command Injection Remote
Code Ex ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-50215 (D-Link G416 nodered gz File Handling Command Injection Remote
Code Exe ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-50214 (D-Link G416 nodered tar File Handling Command Injection Remote
Code Ex ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-50213 (D-Link G416 nodered File Handling Command Injection Remote
Code Execut ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-50212 (D-Link G416 httpd Improper Handling of Exceptional Conditions
Informat ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-50211 (D-Link G416 httpd API-AUTH Timestamp Processing Stack-based
Buffer Ove ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-50210 (D-Link G416 httpd API-AUTH Digest Processing Stack-based
Buffer Overfl ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-50209 (D-Link G416 cfgsave Stack-Based Buffer Overflow Remote Code
Execution ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-50208 (D-Link G416 ovpncfg Stack-based Buffer Overflow Remote Code
Execution ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-50207 (D-Link G416 flupl filename Command Injection Remote Code
Execution Vul ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-50206 (D-Link G416 flupl query_type edit Command Injection Remote
Code Execut ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-50205 (D-Link G416 awsfile chmod Command Injection Remote Code
Execution Vuln ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-50204 (D-Link G416 flupl pythonapp Command Injection Remote Code
Execution Vu ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-50203 (D-Link G416 nodered chmod Command Injection Remote Code
Execution Vuln ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-50202 (D-Link G416 flupl pythonmodules Command Injection Remote Code
Executio ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-50201 (D-Link G416 cfgsave upusb Command Injection Remote Code
Execution Vuln ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-50200 (D-Link G416 cfgsave backusb Command Injection Remote Code
Execution Vu ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-50199 (D-Link G416 httpd Missing Authentication for Critical Function
Remote ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-50198 (D-Link G416 cfgsave Command Injection Remote Code Execution
Vulnerabil ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-50197 (Intel Driver & Support Assistant Link Following Local
Privilege Escala ...)
TODO: check
CVE-2023-50196 (Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote
Code Ex ...)
@@ -893,55 +893,55 @@ CVE-2023-44430 (Bentley View SKP File Parsing
Use-After-Free Remote Code Executi
CVE-2023-44428 (MuseScore CAP File Parsing Heap-based Buffer Overflow Remote
Code Exec ...)
TODO: check
CVE-2023-44427 (D-Link DIR-X3260 SetSysEmailSettings SMTPServerAddress Command
Injecti ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44426 (D-Link DIR-X3260 SetSysEmailSettings AccountPassword Command
Injection ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44425 (D-Link DIR-X3260 SetSysEmailSettings AccountName Command
Injection Rem ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44424 (D-Link DIR-X3260 SetSysEmailSettings EmailTo Command Injection
Remote ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44423 (D-Link DIR-X3260 SetTriggerPPPoEValidate Password Command
Injection Re ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44422 (D-Link DIR-X3260 SetSysEmailSettings EmailFrom Command
Injection Remot ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44421 (D-Link DIR-X3260 SetTriggerPPPoEValidate Username Command
Injection Re ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44420 (D-Link DIR-X3260 prog.cgi Incorrect Implementation of
Authentication A ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44419 (D-Link DIR-X3260 Prog.cgi Stack-based Buffer Overflow Remote
Code Exec ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44418 (D-Link DIR-X3260 Prog.cgi Heap-based Buffer Overflow Remote
Code Execu ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44417 (D-Link DAP-2622 DDP Set IPv4 Address Auth Password Stack-based
Buffer ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44416 (D-Link DAP-2622 Telnet CLI Command Injection Remote Code
Execution Vul ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44415 (D-Link Multiple Routers cli Command Injection Remote Code
Execution Vu ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44414 (D-Link D-View coreservice_action_script Exposed Dangerous
Function Rem ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44413 (D-Link D-View shutdown_coreserver Missing Authentication
Denial-of-Ser ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44412 (D-Link D-View addDv7Probe XML External Entity Processing
Information D ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44411 (D-Link D-View InstallApplication Use of Hard-coded Credentials
Authent ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44410 (D-Link D-View showUsers Improper Authorization Privilege
Escalation Vu ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44409 (D-Link DAP-1325 SetSetupWizardStatus Enabled Stack-based
Buffer Overfl ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44408 (D-Link DAP-1325 SetAPLanSettings IPAddr Stack-based Buffer
Overflow Re ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44407 (D-Link DAP-1325 SetAPLanSettings Gateway Stack-based Buffer
Overflow R ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44406 (D-Link DAP-1325 SetAPLanSettings DeviceName Stack-based Buffer
Overflo ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44405 (D-Link DAP-1325 get_value_of_key Stack-based Buffer Overflow
Remote Co ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44404 (D-Link DAP-1325 get_value_from_app Stack-based Buffer Overflow
Remote ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-44403 (D-Link DAP-1325 HNAP SetWLanRadioSettings Channel Command
Injection Re ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-42131 (Ansys SpaceClaim X_B File Parsing Out-Of-Bounds Write Remote
Code Exec ...)
TODO: check
CVE-2023-42130 (A10 Thunder ADC FileMgmtExport Directory Traversal Arbitrary
File Read ...)
@@ -997,25 +997,25 @@ CVE-2023-42100 (Kofax Power PDF PDF File Parsing
Out-Of-Bounds Read Information
CVE-2023-42099 (Intel Driver & Support Assistant Link Following Local
Privilege Escala ...)
TODO: check
CVE-2023-42098 (Foxit PDF Reader Annotation Use-After-Free Information
Disclosure Vuln ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-42097 (Foxit PDF Reader Annotation Use-After-Free Remote Code
Execution Vulne ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-42096 (Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code
Execution ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-42095 (Foxit PDF Reader AcroForm Out-Of-Bounds Read Information
Disclosure Vu ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-42094 (Foxit PDF Reader Annotation Use-After-Free Remote Code
Execution Vulne ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-42093 (Foxit PDF Reader Annotation Use-After-Free Information
Disclosure Vuln ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-42092 (Foxit PDF Reader Doc Object Use-After-Free Remote Code
Execution Vulne ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-42091 (Foxit PDF Reader XFA Doc Object Use-After-Free Remote Code
Execution V ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-42090 (Foxit PDF Reader XFA Doc Object Out-Of-Bounds Read Information
Disclos ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-42089 (Foxit PDF Reader templates Use-After-Free Information
Disclosure Vulne ...)
- TODO: check
+ NOT-FOR-US: Foxit PDF Reader
CVE-2023-42088 (PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Remote
Code Exe ...)
TODO: check
CVE-2023-42087 (PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read
Information Dis ...)
@@ -1161,95 +1161,95 @@ CVE-2023-41817 (An improper export vulnerability was
reported in the Motorola Ph
CVE-2023-41816 (An improper export vulnerability was reported in the Motorola
Services ...)
TODO: check
CVE-2023-41230 (D-Link DIR-3040 HTTP Request Processing Referer Stack-Based
Buffer Ove ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41229 (D-Link DIR-3040 HTTP Request Processing Referer Heap-Based
Buffer Over ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41228 (D-Link DIR-3040 prog.cgi SetUsersSettings Stack-Based Buffer
Overflow ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41227 (D-Link DIR-3040 prog.cgi SetTriggerPPPoEValidate Stack-Based
Buffer Ov ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41226 (D-Link DIR-3040 prog.cgi SetMyDLinkRegistration Stack-Based
Buffer Ove ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41225 (D-Link DIR-3040 prog.cgi SetIPv6PppoeSettings Stack-Based
Buffer Overf ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41224 (D-Link DIR-3040 prog.cgi SetDeviceSettings Stack-Based Buffer
Overflow ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41223 (D-Link DIR-3040 prog.cgi SetQuickVPNSettings PSK Stack-Based
Buffer Ov ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41222 (D-Link DIR-3040 prog.cgi SetWan2Settings Stack-Based Buffer
Overflow R ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41221 (D-Link DIR-3040 prog.cgi SetWLanRadioSecurity Stack-Based
Buffer Overf ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41220 (D-Link DIR-3040 prog.cgi SetSysEmailSettings Stack-Based
Buffer Overfl ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41219 (D-Link DIR-3040 prog.cgi SetWanSettings Stack-Based Buffer
Overflow Re ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41218 (D-Link DIR-3040 prog.cgi SetWan3Settings Stack-Based Buffer
Overflow R ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41217 (D-Link DIR-3040 prog.cgi SetQuickVPNSettings Password
Stack-Based Buff ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41216 (D-Link DIR-3040 prog.cgi SetDynamicDNSSettings Stack-Based
Buffer Over ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41215 (D-Link DAP-2622 DDP Set Date-Time Stack-based Buffer Overflow
Remote C ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41214 (D-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr
Stack-based Buffer ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41213 (D-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr
Stack-based Buffer ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41212 (D-Link DAP-1325 SetTriggerAPValidate Key Stack-based Buffer
Overflow R ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41211 (D-Link DAP-1325 SetHostIPv6StaticSettings StaticPrefixLength
Stack-bas ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41210 (D-Link DAP-1325 SetHostIPv6StaticSettings StaticDNS2
Stack-based Buffe ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41209 (D-Link DAP-1325 SetHostIPv6StaticSettings StaticDNS1
Stack-based Buffe ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41208 (D-Link DAP-1325 SetHostIPv6StaticSettings StaticDefaultGateway
Stack-b ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41207 (D-Link DAP-1325 SetHostIPv6StaticSettings StaticAddress
Stack-based Bu ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41206 (D-Link DAP-1325 SetHostIPv6Settings IPv6Mode Stack-based
Buffer Overfl ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41205 (D-Link DAP-1325 SetAPLanSettings SubnetMask Stack-based Buffer
Overflo ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41204 (D-Link DAP-1325 SetAPLanSettings SecondaryDNS Stack-based
Buffer Overf ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41203 (D-Link DAP-1325 SetAPLanSettings PrimaryDNS Stack-based Buffer
Overflo ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41202 (D-Link DAP-1325 SetAPLanSettings Mode Stack-based Buffer
Overflow Remo ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41201 (D-Link DAP-1325 HNAP SetSetupWizardStatus Enabled Command
Injection Re ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41200 (D-Link DAP-1325 HNAP SetHostIPv6StaticSettings
StaticPrefixLength Comm ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41199 (D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDNS2
Command Inje ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41198 (D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDNS1
Command Inje ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41197 (D-Link DAP-1325 HNAP SetHostIPv6StaticSettings
StaticDefaultGateway Co ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41196 (D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticAddress
Command I ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41195 (D-Link DAP-1325 HNAP SetHostIPv6Settings IPv6Mode Command
Injection Re ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41194 (D-Link DAP-1325 HNAP SetAPLanSettings SubnetMask Command
Injection Rem ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41193 (D-Link DAP-1325 HNAP SetAPLanSettings SecondaryDNS Command
Injection R ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41192 (D-Link DAP-1325 HNAP SetAPLanSettings PrimaryDNS Command
Injection Rem ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41191 (D-Link DAP-1325 HNAP SetAPLanSettings Mode Command Injection
Remote Co ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41190 (D-Link DAP-1325 HNAP SetAPLanSettings IPAddr Command Injection
Remote ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41189 (D-Link DAP-1325 HNAP SetAPLanSettings Gateway Command
Injection Remote ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41188 (D-Link DAP-1325 HNAP SetAPLanSettings DeviceName Command
Injection Rem ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41187 (D-Link DAP-1325 HNAP Missing Authentication Remote Code
Execution Vuln ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41186 (D-Link DAP-1325 CGI Missing Authentication Information
Disclosure Vuln ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-41185 (Unified Automation UaGateway Certificate Parsing Integer
Overflow Deni ...)
TODO: check
CVE-2023-41184 (TP-Link Tapo C210 ActiveCells Stack-based Buffer Overflow
Remote Code ...)
@@ -1609,103 +1609,103 @@ CVE-2023-37331 (Kofax Power PDF GIF File Parsing
Stack-based Buffer Overflow Rem
CVE-2023-37330 (Kofax Power PDF exportAsText Exposed Dangerous Method Remote
Code Exec ...)
TODO: check
CVE-2023-37326 (D-Link DAP-2622 DDP Set Wireless Info Auth Password
Stack-based Buffer ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-37324 (D-Link DAP-2622 DDP Set Wireless Info Auth Username
Stack-based Buffer ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-37323 (D-Link DAP-2622 DDP Set SSID List PSK Stack-based Buffer
Overflow Remo ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-37322 (D-Link DAP-2622 DDP Set SSID List RADIUS Server Stack-based
Buffer Ove ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-37321 (D-Link DAP-2622 DDP Set SSID List RADIUS Secret Stack-based
Buffer Ove ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-37320 (D-Link DAP-2622 DDP Set SSID List SSID Name Stack-based Buffer
Overflo ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-37319 (D-Link DAP-2622 DDP Set IPv6 Address Stack-based Buffer
Overflow Remot ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-37318 (D-Link DAP-2622 DDP Set IPv6 Address Secondary DNS Stack-based
Buffer ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-37317 (D-Link DAP-2622 DDP Set IPv6 Address Primary DNS Stack-based
Buffer Ov ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-37316 (D-Link DAP-2622 DDP Set IPv6 Address Default Gateway
Stack-based Buffe ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-37315 (D-Link DAP-2622 DDP Set IPv6 Address Auth Password Stack-based
Buffer ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-37314 (D-Link DAP-2622 DDP Set IPv6 Address Auth Username Stack-based
Buffer ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-37313 (D-Link DAP-2622 DDP Set IPv4 Address Auth Username Stack-based
Buffer ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-37312 (D-Link DAP-2622 DDP Set Device Info Device Name Stack-based
Buffer Ove ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-37311 (D-Link DAP-2622 DDP Set Device Info Auth Password Stack-based
Buffer O ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-37310 (D-Link DAP-2622 DDP Set Device Info Auth Username Stack-based
Buffer O ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-37244 (The affected AutomationManager.AgentService.exe application
contains a ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35756 (D-Link DAP-2622 DDP Set Date-Time Auth Password Stack-based
Buffer Ove ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35755 (D-Link DAP-2622 DDP Set Date-Time Auth Username Stack-based
Buffer Ove ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35754 (D-Link DAP-2622 DDP Set AG Profile NMS URL Stack-based Buffer
Overflow ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35753 (D-Link DAP-2622 DDP Set AG Profile UUID Stack-based Buffer
Overflow Re ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35752 (D-Link DAP-2622 DDP Set AG Profile Auth Password Stack-based
Buffer Ov ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35751 (D-Link DAP-2622 DDP Set AG Profile Auth Username Stack-based
Buffer Ov ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35750 (D-Link DAP-2622 DDP Get SSID List WPA PSK Information
Disclosure Vulne ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35747 (D-Link DAP-2622 DDP Firmware Upgrade Auth Password Stack-based
Buffer ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35746 (D-Link DAP-2622 DDP Firmware Upgrade Auth Username Stack-based
Buffer ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35745 (D-Link DAP-2622 DDP Configuration Restore Filename Stack-based
Buffer ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35744 (D-Link DAP-2622 DDP Configuration Restore Server IPv6 Address
Stack-ba ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35743 (D-Link DAP-2622 DDP Configuration Restore Auth Password
Stack-based Bu ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35742 (D-Link DAP-2622 DDP Configuration Restore Auth Username
Stack-based Bu ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35741 (D-Link DAP-2622 DDP Configuration Backup Filename Stack-based
Buffer O ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35740 (D-Link DAP-2622 DDP Configuration Backup Server Address
Stack-based Bu ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35739 (D-Link DAP-2622 DDP Configuration Backup Server IPv6 Address
Stack-bas ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35738 (D-Link DAP-2622 DDP Configuration Backup Auth Password
Stack-based Buf ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35737 (D-Link DAP-2622 DDP Configuration Backup Auth Username
Stack-based Buf ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35736 (D-Link DAP-2622 DDP Change ID Password New Password
Stack-based Buffer ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35735 (D-Link DAP-2622 DDP Change ID Password New Username
Stack-based Buffer ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35734 (Sante DICOM Viewer Pro DCM File Parsing Use-After-Free
Information Dis ...)
TODO: check
CVE-2023-35733 (D-Link DAP-2622 DDP Change ID Password Auth Username
Stack-based Buffe ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35732 (D-Link DAP-2622 DDP Reset Factory Auth Password Stack-based
Buffer Ove ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35731 (D-Link DAP-2622 DDP Reset Factory Auth Username Stack-based
Buffer Ove ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35730 (D-Link DAP-2622 DDP Reset Auth Password Stack-based Buffer
Overflow Re ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35729 (D-Link DAP-2622 DDP Reset Auth Username Stack-based Buffer
Overflow Re ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35728 (D-Link DAP-2622 DDP Reboot Auth Password Stack-based Buffer
Overflow R ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35727 (D-Link DAP-2622 DDP Reboot Auth Username Stack-based Buffer
Overflow R ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35726 (D-Link DAP-2622 DDP User Verification Auth Password
Stack-based Buffer ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35725 (D-Link DAP-2622 DDP User Verification Auth Username
Stack-based Buffer ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35724 (D-Link DAP-2622 Telnet CLI Use of Hardcoded Credentials
Authentication ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35723 (D-Link DIR-X3260 prog.cgi SOAPAction Command Injection Remote
Code Exe ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-35722 (NETGEAR RAX30 UPnP Command Injection Remote Code Execution
Vulnerabili ...)
TODO: check
CVE-2023-35721 (NETGEAR Multiple Routers curl_post Improper Certificate
Validation Rem ...)
@@ -1793,23 +1793,23 @@ CVE-2023-34284 (NETGEAR RAX30 Use of Hard-coded
Credentials Authentication Bypas
CVE-2023-34283 (NETGEAR RAX30 USB Share Link Following Information Disclosure
Vulnerab ...)
TODO: check
CVE-2023-34282 (D-Link DIR-2150 HNAP Incorrect Implementation of
Authentication Algori ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-34281 (D-Link DIR-2150 GetFirmwareStatus Target Command Injection
Remote Code ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-34280 (D-Link DIR-2150 SetSysEmailSettings EmailTo Command Injection
Remote C ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-34279 (D-Link DIR-2150 GetDeviceSettings Target Command Injection
Remote Code ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-34278 (D-Link DIR-2150 SetSysEmailSettings EmailFrom Command
Injection Remote ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-34277 (D-Link DIR-2150 SetSysEmailSettings AccountName Command
Injection Remo ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-34276 (D-Link DIR-2150 SetTriggerPPPoEValidate Username Command
Injection Rem ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-34275 (D-Link DIR-2150 SetNTPServerSettings Command Injection Remote
Code Exe ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-34274 (D-Link DIR-2150 LoginPassword Incorrect Implementation of
Authenticati ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-34273 (Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds
Write Remot ...)
TODO: check
CVE-2023-34272 (Fatek Automation FvDesigner FPJ File Parsing Uninitialized
Pointer Rem ...)
@@ -1855,17 +1855,17 @@ CVE-2023-32171 (Unified Automation UaGateway OPC UA
Server Null Pointer Derefere
CVE-2023-32170 (Unified Automation UaGateway OPC UA Server Improper Input
Validation D ...)
TODO: check
CVE-2023-32169 (D-Link D-View Use of Hard-coded Cryptographic Key
Authentication Bypas ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32168 (D-Link D-View showUser Improper Authorization Privilege
Escalation Vul ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32167 (D-Link D-View uploadMib Directory Traversal Arbitrary File
Creation or ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32166 (D-Link D-View uploadFile Directory Traversal Arbitrary File
Creation V ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32165 (D-Link D-View TftpReceiveFileHandler Directory Traversal
Remote Code E ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32164 (D-Link D-View TftpSendFileThread Directory Traversal
Information Discl ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32161 (PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote
Code Ex ...)
TODO: check
CVE-2023-32160 (PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote
Code Ex ...)
@@ -1883,41 +1883,41 @@ CVE-2023-32155 (Tesla Model 3 bcmdhd Out-Of-Bounds
Write Local Privilege Escalat
CVE-2023-32154 (Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code
Execution Vuln ...)
TODO: check
CVE-2023-32153 (D-Link DIR-2640 EmailFrom Command Injection Remote Code
Execution Vuln ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32152 (D-Link DIR-2640 HNAP LoginPassword Authentication Bypass
Vulnerability ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32151 (D-Link DIR-2640 DestNetwork Command Injection Remote Code
Execution Vu ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32150 (D-Link DIR-2640 PrefixLen Command Injection Remote Code
Execution Vuln ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32149 (D-Link DIR-2640 prog.cgi Request Handling Stack-based Buffer
Overflow ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32148 (D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass
Vulnerability. ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32147 (D-Link DIR-2640 LocalIPAddress Command Injection Remote Code
Execution ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32146 (D-Link DAP-1360 Multiple Parameters Stack-Based Buffer
Overflow Remote ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32145 (D-Link DAP-1360 Hardcoded Credentials Authentication Bypass
Vulnerabil ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32144 (D-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer
Overflow ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32143 (D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation
Remote Code ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32142 (D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow
Remote Co ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32141 (D-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer
Overflow Re ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32140 (D-Link DAP-1360 webproc var:sys_Token Heap-based Buffer
Overflow Remot ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32139 (D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote
Code Execut ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32138 (D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code
Executi ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32137 (D-Link DAP-1360 webproc WEB_DisplayPage Directory Traversal
Informatio ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32136 (D-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow
Remote Co ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-32135 (Sante DICOM Viewer Pro DCM File Parsing Use-After-Free
Information Dis ...)
TODO: check
CVE-2023-32134 (Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Remote
Code Exe ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fad5eaeacd1d24a8bb533aba0dcd70771f44402a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fad5eaeacd1d24a8bb533aba0dcd70771f44402a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits