Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d4cf6cc5 by Salvatore Bonaccorso at 2024-05-06T22:23:44+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,143 +1,143 @@
CVE-2024-4568 (In Xpdf 4.05 (and earlier), a PDF object loop in the PDF
resources lea ...)
TODO: check
CVE-2024-4549 (A denial of service vulnerability exists in Delta Electronics
DIAEnerg ...)
- TODO: check
+ NOT-FOR-US: Delta Electronics
CVE-2024-4548 (An SQLi vulnerability exists inDelta Electronics DIAEnergie
v1.10.1.86 ...)
- TODO: check
+ NOT-FOR-US: Delta Electronics
CVE-2024-4547 (A SQLi vulnerability exists inDelta ElectronicsDIAEnergie
v1.10.1.8610 ...)
- TODO: check
+ NOT-FOR-US: Delta Electronics
CVE-2024-4528 (A vulnerability was found in SourceCodester Prison Management
System 1 ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Prison Management System
CVE-2024-4527 (A vulnerability was found in Campcodes Complete Web-Based
School Manag ...)
- TODO: check
+ NOT-FOR-US: Campcodes Complete Web-Based School Management System
CVE-2024-4526 (A vulnerability was found in Campcodes Complete Web-Based
School Manag ...)
- TODO: check
+ NOT-FOR-US: Campcodes Complete Web-Based School Management System
CVE-2024-4525 (A vulnerability has been found in Campcodes Complete Web-Based
School ...)
- TODO: check
+ NOT-FOR-US: Campcodes Complete Web-Based School Management System
CVE-2024-4524 (A vulnerability, which was classified as problematic, was found
in Cam ...)
- TODO: check
+ NOT-FOR-US: Campcodes Complete Web-Based School Management System
CVE-2024-4523 (A vulnerability, which was classified as problematic, has been
found i ...)
- TODO: check
+ NOT-FOR-US: Campcodes Complete Web-Based School Management System
CVE-2024-4522 (A vulnerability classified as problematic was found in
Campcodes Compl ...)
- TODO: check
+ NOT-FOR-US: Campcodes Complete Web-Based School Management System
CVE-2024-4521 (A vulnerability classified as problematic has been found in
Campcodes ...)
- TODO: check
+ NOT-FOR-US: Campcodes Complete Web-Based School Management System
CVE-2024-4519 (A vulnerability was found in Campcodes Complete Web-Based
School Manag ...)
- TODO: check
+ NOT-FOR-US: Campcodes Complete Web-Based School Management System
CVE-2024-4518 (A vulnerability was found in Campcodes Complete Web-Based
School Manag ...)
- TODO: check
+ NOT-FOR-US: Campcodes Complete Web-Based School Management System
CVE-2024-4517 (A vulnerability was found in Campcodes Complete Web-Based
School Manag ...)
- TODO: check
+ NOT-FOR-US: Campcodes Complete Web-Based School Management System
CVE-2024-4516 (A vulnerability was found in Campcodes Complete Web-Based
School Manag ...)
- TODO: check
+ NOT-FOR-US: Campcodes Complete Web-Based School Management System
CVE-2024-4515 (A vulnerability has been found in Campcodes Complete Web-Based
School ...)
- TODO: check
+ NOT-FOR-US: Campcodes Complete Web-Based School Management System
CVE-2024-4514 (A vulnerability, which was classified as problematic, was found
in Cam ...)
- TODO: check
+ NOT-FOR-US: Campcodes Complete Web-Based School Management System
CVE-2024-4513 (A vulnerability, which was classified as problematic, has been
found i ...)
- TODO: check
+ NOT-FOR-US: Campcodes Complete Web-Based School Management System
CVE-2024-4512 (A vulnerability classified as problematic was found in
SourceCodester ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Prison Management System
CVE-2024-4511 (A vulnerability classified as critical has been found in
Shanghai Sunf ...)
- TODO: check
+ NOT-FOR-US: Shanghai Sunfull Automation BACnet Server
CVE-2024-4510 (A vulnerability was found in Ruijie RG-UAC up to 20240428. It
has been ...)
- TODO: check
+ NOT-FOR-US: Ruijie RG-UAC
CVE-2024-4509 (A vulnerability was found in Ruijie RG-UAC up to 20240428. It
has been ...)
- TODO: check
+ NOT-FOR-US: Ruijie RG-UAC
CVE-2024-4508 (A vulnerability was found in Ruijie RG-UAC up to 20240428. It
has been ...)
- TODO: check
+ NOT-FOR-US: Ruijie RG-UAC
CVE-2024-4507 (A vulnerability was found in Ruijie RG-UAC up to 20240428 and
classifi ...)
- TODO: check
+ NOT-FOR-US: Ruijie RG-UAC
CVE-2024-4506 (A vulnerability has been found in Ruijie RG-UAC up to 20240428
and cla ...)
- TODO: check
+ NOT-FOR-US: Ruijie RG-UAC
CVE-2024-4505 (A vulnerability, which was classified as critical, was found in
Ruijie ...)
- TODO: check
+ NOT-FOR-US: Ruijie RG-UAC
CVE-2024-4504 (A vulnerability, which was classified as critical, has been
found in R ...)
- TODO: check
+ NOT-FOR-US: Ruijie RG-UAC
CVE-2024-4503 (A vulnerability classified as critical was found in Ruijie
RG-UAC up t ...)
- TODO: check
+ NOT-FOR-US: Ruijie RG-UAC
CVE-2024-4502 (A vulnerability classified as critical has been found in Ruijie
RG-UAC ...)
- TODO: check
+ NOT-FOR-US: Ruijie RG-UAC
CVE-2024-3756 (The MF Gig Calendar WordPress plugin through 1.2.1 does not
have CSRF ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-3755 (The MF Gig Calendar WordPress plugin through 1.2.1 does not
sanitise a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-3752 (The Crelly Slider WordPress plugin through 1.4.5 does not
sanitise and ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-3661 (By design, the DHCP protocol does not authenticate messages,
including ...)
TODO: check
CVE-2024-3576 (The NPort 5100A Series prior to version 1.6 is affected by web
server ...)
- TODO: check
+ NOT-FOR-US: Moxa
CVE-2024-34538 (Mateso PasswordSafe through 8.13.9.26689 has Weak
Cryptography.)
- TODO: check
+ NOT-FOR-US: Mateso PasswordSafe
CVE-2024-34529 (Nebari through 2024.4.1 prints the temporary Keycloak root
password.)
- TODO: check
+ NOT-FOR-US: Nebari
CVE-2024-34528 (WordOps through 3.20.0 has a wo/cli/plugins/stack_pref.py
TOCTOU race ...)
TODO: check
CVE-2024-34527 (spaces_plugin/app.py in SolidUI 0.4.0 has an unnecessary print
stateme ...)
TODO: check
CVE-2024-34525 (FileCodeBox 2.0 stores a OneDrive password and AWS key in a
cleartext ...)
- TODO: check
+ NOT-FOR-US: FileCodeBox
CVE-2024-34524 (In XLANG OpenAgents through fe73ac4, the allowed_file
protection mecha ...)
TODO: check
CVE-2024-34519 (Avantra Server 24.x before 24.0.7 and 24.1.x before 24.1.1
mishandles ...)
- TODO: check
+ NOT-FOR-US: Avantra Server
CVE-2024-34515 (image-optimizer before 1.7.3 allows PHAR deserialization,
e.g., the ph ...)
TODO: check
CVE-2024-34472 (An issue was discovered in HSC Mailinspector 5.2.17-3 through
v.5.2.18 ...)
- TODO: check
+ NOT-FOR-US: HSC Mailinspector
CVE-2024-34471 (An issue was discovered in HSC Mailinspector 5.2.17-3. A Path
Traversa ...)
- TODO: check
+ NOT-FOR-US: HSC Mailinspector
CVE-2024-34470 (An issue was discovered in HSC Mailinspector 5.2.17-3 through
v.5.2.18 ...)
- TODO: check
+ NOT-FOR-US: HSC Mailinspector
CVE-2024-34466
REJECTED
CVE-2024-34412 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34390 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34389 (Missing Authorization vulnerability in AF themes WP Post
Author.This i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34388 (Exposure of Sensitive Information to an Unauthorized Actor
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34387 (Missing Authorization vulnerability in AF themes WP Post
Author.This i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34386 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34383 (Authorization Bypass Through User-Controlled Key vulnerability
in The ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34382 (Exposure of Sensitive Information to an Unauthorized Actor
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34381 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34380 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34379 (Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme
Restaura ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34378 (Missing Authorization vulnerability in LeadConnector.This
issue affect ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34377 (Missing Authorization vulnerability in A WP Life Video Gallery
\u2013 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34376 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34375 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34374 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34373 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34372 (Missing Authorization vulnerability in AddonMaster Post Grid
Master.Th ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34371 (Missing Authorization vulnerability in Hamid Alinia \u2013
idehweb Log ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34369 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34368 (Exposure of Sensitive Information to an Unauthorized Actor
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34367 (Cross-Site Request Forgery (CSRF) vulnerability in Popup Box
Team Popu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34366 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-34252 (wasm3 v0.5.0 was discovered to contain a global buffer
overflow which ...)
TODO: check
CVE-2024-34251 (An out-of-bound memory read vulnerability was discovered in
Bytecode A ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d4cf6cc54338d1f0862e4fe300d024d4b37540d0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d4cf6cc54338d1f0862e4fe300d024d4b37540d0
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
