Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
38dd7947 by Salvatore Bonaccorso at 2024-07-25T22:48:39+02:00
Process NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,57 +1,57 @@
CVE-2024-7101 (A vulnerability, which was classified as critical, has been
found in F ...)
- TODO: check
+ NOT-FOR-US: orIP Tecnologia Administracao PABX
CVE-2024-7007 (Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable
to an ...)
- TODO: check
+ NOT-FOR-US: Positron Broadcast Signal Processor TRA7005
CVE-2024-6589 (The LearnPress \u2013 WordPress LMS Plugin plugin for WordPress
is vul ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-6558 (HMS Industrial Networks Anybus-CompactCom 30 products are
vulnerable ...)
- TODO: check
+ NOT-FOR-US: HMS Industrial Networks Anybus-CompactCom 30 products
CVE-2024-41806 (The Open edX Platform is a learning management platform.
Instructors c ...)
- TODO: check
+ NOT-FOR-US: Open edX
CVE-2024-41801 (OpenProject is open source project management software. Prior
to versi ...)
- TODO: check
+ NOT-FOR-US: OpenProject
CVE-2024-41800 (Craft is a content management system (CMS). Craft CMS 5 allows
reuse o ...)
- TODO: check
+ NOT-FOR-US: Craft CMS
CVE-2024-40873 (There is a cross-site scripting vulnerability in the Secure
Access adm ...)
- TODO: check
+ NOT-FOR-US: Absolute Secure Access
CVE-2024-40872 (There is an elevation of privilege vulnerability in server and
client ...)
- TODO: check
+ NOT-FOR-US: Absolute Secure Access
CVE-2024-40324 (A CRLF injection vulnerability in E-Staff v5.1 allows
attackers to ins ...)
- TODO: check
+ NOT-FOR-US: E-Staff
CVE-2024-40318 (An arbitrary file upload vulnerability in Webkul Qloapps
v1.6.0.0 allo ...)
- TODO: check
+ NOT-FOR-US: Webkul Qloapps
CVE-2024-39674 (Plaintext vulnerability in the Gallery search module. Impact:
Successf ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2024-39673 (Vulnerability of serialisation/deserialisation mismatch in the
iAware ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2024-39672 (Memory request logic vulnerability in the memory module.
Impact: Succe ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2024-39671 (Access control vulnerability in the security verification
module. Impa ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2024-39670 (Privilege escalation vulnerability in the account
synchronisation modu ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2024-38289 (A boolean-based SQL injection issue in the Virtual Meeting
Password (V ...)
- TODO: check
+ NOT-FOR-US: R-HUB TurboMeeting
CVE-2024-38288 (A command-injection issue in the Certificate Signing Request
(CSR) fun ...)
- TODO: check
+ NOT-FOR-US: R-HUB TurboMeeting
CVE-2024-38287 (The password-reset mechanism in the Forgot Password
functionality in R ...)
- TODO: check
+ NOT-FOR-US: R-HUB TurboMeeting
CVE-2024-37084 (In Spring Cloud Data Flow versions prior to 2.11.4,a malicious
user wh ...)
- TODO: check
+ NOT-FOR-US: Spring Cloud Data Flow
CVE-2024-36542 (Insecure permissions in kuma v2.7.0 allows attackers to access
sensiti ...)
- TODO: check
+ NOT-FOR-US: Kuma
CVE-2024-36111 (KubePi is a K8s panel. Starting in version 1.6.3 and prior to
version ...)
- TODO: check
+ NOT-FOR-US: KubePi
CVE-2024-29069 (In snapd versions prior to 2.62, snapd failed to properly
check the de ...)
TODO: check
CVE-2024-29068 (In snapd versions prior to 2.62, snapd failed to properly
check the fi ...)
TODO: check
CVE-2024-28772 (IBM Security Directory Integrator 7.2.0 and IBM Security
Verify Direct ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2024-1724 (In snapd versions prior to 2.62, when using AppArmor for
enforcement o ...)
TODO: check
CVE-2023-7271 (Privilege escalation vulnerability in the NMS module Impact:
Successfu ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2024-7091 (An issue was discovered in GitLab CE/EE affecting all versions
startin ...)
- gitlab <unfixed>
CVE-2024-7081 (A vulnerability was found in itsourcecode Tailoring Management
System ...)
@@ -149,7 +149,7 @@ CVE-2024-7069 (A vulnerability, which was classified as
critical, has been found
CVE-2024-7068 (A vulnerability classified as problematic has been found in
SourceCode ...)
NOT-FOR-US: SourceCodester Insurance Management System
CVE-2024-7067 (A vulnerability was found in kirilkirkov
Ecommerce-Laravel-Bootstrap u ...)
- TODO: check
+ NOT-FOR-US: kirilkirkov Ecommerce-Laravel-Bootstrap
CVE-2024-7066 (A vulnerability was found in F-logic DataCube3 1.0. It has been
declar ...)
NOT-FOR-US: F-logic DataCube3
CVE-2024-7065 (A vulnerability was found in Spina CMS up to 2.18.0. It has
been class ...)
@@ -169449,7 +169449,7 @@ CVE-2022-32769 (Multiple authentication bypass
vulnerabilities exist in the obje
CVE-2022-32768 (Multiple authentication bypass vulnerabilities exist in the
objects id ...)
NOT-FOR-US: WWBN AVideo
CVE-2022-32759 (IBM Security Directory Integrator 7.2.0 and IBM Security
Verify Direct ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2022-32758
RESERVED
CVE-2022-32757 (IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 uses an
inadequ ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/38dd794761ea37b0c8d090082dbc97713bd327fa
--
This project does not include diff previews in email notifications.
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/38dd794761ea37b0c8d090082dbc97713bd327fa
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
