Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
96c7606c by security tracker role at 2024-07-04T20:12:21+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,55 @@
+CVE-2024-6513
+ REJECTED
+CVE-2024-6511 (A vulnerability classified as problematic was found in
y_project RuoYi ...)
+ TODO: check
+CVE-2024-6507 (Command injection when ingesting a remote Kaggle dataset due to
a lack ...)
+ TODO: check
+CVE-2024-6506 (Information exposure vulnerability in the MRW plugin, in
its5.4.3 vers ...)
+ TODO: check
+CVE-2024-6434 (The Premium Addons for Elementor plugin for WordPress is
vulnerable to ...)
+ TODO: check
+CVE-2024-6319 (The IMGspider plugin for WordPress is vulnerable to arbitrary
file upl ...)
+ TODO: check
+CVE-2024-6318 (The IMGspider plugin for WordPress is vulnerable to arbitrary
file upl ...)
+ TODO: check
+CVE-2024-5943 (The Nested Pages plugin for WordPress is vulnerable to
Cross-Site Requ ...)
+ TODO: check
+CVE-2024-3904 (Incorrect Default Permissions vulnerability in Smart Device
Communicat ...)
+ TODO: check
+CVE-2024-39934 (Robotmk before 2.0.1 allows a local user to escalate
privileges (e.g., ...)
+ TODO: check
+CVE-2024-39933 (Gogs through 0.13.0 allows argument injection during the
tagging of a ...)
+ TODO: check
+CVE-2024-39932 (Gogs through 0.13.0 allows argument injection during the
previewing of ...)
+ TODO: check
+CVE-2024-39931 (Gogs through 0.13.0 allows deletion of internal files.)
+ TODO: check
+CVE-2024-39930 (The built-in SSH server of Gogs through 0.13.0 allows argument
injecti ...)
+ TODO: check
+CVE-2024-39929 (Exim through 4.97.1 misparses a multiline RFC 2231 header
filename, an ...)
+ TODO: check
+CVE-2024-39211 (Kaiten 57.128.8 allows remote attackers to enumerate user
accounts via ...)
+ TODO: check
+CVE-2024-39165 (QR/demoapp/qr_image.php in Asial JpGraph Professional through
4.2.6-pr ...)
+ TODO: check
+CVE-2024-37476 (Cross Site Scripting (XSS) vulnerability in Automattic
Newspack Campai ...)
+ TODO: check
+CVE-2024-37474 (Cross Site Scripting (XSS) vulnerability in Automattic
Newspack Ads al ...)
+ TODO: check
+CVE-2024-37472 (Cross Site Scripting (XSS) vulnerability in WofficeIO Woffice
allows R ...)
+ TODO: check
+CVE-2024-37471 (Cross Site Scripting (XSS) vulnerability in WofficeIO Woffice
Core all ...)
+ TODO: check
+CVE-2024-32754 (Under certain circumstances, when the controller is in factory
reset m ...)
+ TODO: check
+CVE-2024-22277 (VMware Cloud Director Availability contains an HTML injection
vulnerab ...)
+ TODO: check
+CVE-2024-1574 (Use of Externally-Controlled Input to Select Classes or Code
('Unsafe ...)
+ TODO: check
+CVE-2024-1573 (Improper Authentication vulnerability in the mobile monitoring
feature ...)
+ TODO: check
+CVE-2024-1182 (Uncontrolled Search Path Element vulnerability in ICONICS
GENESIS64 al ...)
+ TODO: check
CVE-2024-6464
REJECTED
CVE-2024-6463
@@ -320,7 +372,8 @@ CVE-2024-34586 (Improper access control in
KnoxCustomManagerService prior to SMR
NOT-FOR-US: Samsung
CVE-2024-34585 (Improper access control in launchApp of SystemUI prior to SMR
Jul-2024 ...)
NOT-FOR-US: Samsung
-CVE-2024-34584 (Improper privilege management in SumeNNService prior to SMR
Jul-2024 R ...)
+CVE-2024-34584
+ REJECTED
NOT-FOR-US: Samsung
CVE-2024-34583 (Improper access control in system property prior to SMR
Jul-2024 Relea ...)
NOT-FOR-US: Samsung
@@ -679,7 +732,7 @@ CVE-2024-0153 (Improper Restriction of Operations within
the Bounds of a Memory
TODO: check
CVE-2023-43554 (Memory corruption while processing IOCTL handler in FastRPC.)
NOT-FOR-US: Qualcomm
-CVE-2024-39884
+CVE-2024-39884 (A regression in the core of Apache HTTP Server 2.4.60 ignores
some use ...)
- apache2 2.4.61-1
[bookworm] - apache2 <not-affected> (Vulnerable code not present)
[bullseye] - apache2 <not-affected> (Vulnerable code not present)
@@ -71258,7 +71311,7 @@ CVE-2023-5063 (The Widget Responsive for Youtube plugin
for WordPress is vulnera
NOT-FOR-US: WordPress plugin
CVE-2023-5062 (The WordPress Charts plugin for WordPress is vulnerable to
Stored Cros ...)
NOT-FOR-US: WordPress plugin
-CVE-2023-4088 (Incorrect Default Permissions vulnerability due to incomplete
fix to a ...)
+CVE-2023-4088 (Incorrect Default Permissions vulnerability in Mitsubishi
Electric Cor ...)
NOT-FOR-US: Mitsubishi
CVE-2023-43621 (An issue was discovered in Croc through 9.6.5. The shared
secret, loca ...)
- croc <itp> (bug #1017956)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/96c7606cef59b9a44b7105633f1e1a1e7d6bd39b
--
This project does not include diff previews in email notifications.
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/96c7606cef59b9a44b7105633f1e1a1e7d6bd39b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
