Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
58a5e945 by Moritz Muehlenhoff at 2024-08-29T12:15:05+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -22,7 +22,7 @@ CVE-2024-7606 (The Front End Users plugin for WordPress is
vulnerable to Stored
CVE-2024-7418 (The The Post Grid \u2013 Shortcode, Gutenberg Blocks and
Elementor Add ...)
NOT-FOR-US: WordPress plugin
CVE-2024-7132 (The Page Builder Gutenberg Blocks WordPress plugin before
3.1.13 does ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-6927 (The Viral Signup WordPress plugin through 2.1 does not
sanitise and e ...)
NOT-FOR-US: WordPress plugin
CVE-2024-5987 (The WP Accessibility Helper (WAH) plugin for WordPress is
vulnerable t ...)
@@ -34,7 +34,7 @@ CVE-2024-5417 (The Gutentor WordPress plugin before 3.3.6
does not validate and
CVE-2024-4428 (Improper Privilege Management vulnerability in Menulux
Information Tec ...)
NOT-FOR-US: Menulux Information Technologies Managment Portal
CVE-2024-45440 (core/authorize.php in Drupal 11.x-dev allows Full Path
Disclosure (eve ...)
- TODO: check
+ - drupal7 <removed>
CVE-2024-45436 (extractFromZipFile in model.go in Ollama before 0.1.47 can
extract mem ...)
NOT-FOR-US: Ollama
CVE-2024-45435 (Chartist 1.x through 1.3.0 allows Prototype Pollution via the
extend f ...)
@@ -50,19 +50,19 @@ CVE-2024-45058 (i-Educar is free, completely online school
management software t
CVE-2024-45057 (i-Educar is free, completely online school management software
that al ...)
NOT-FOR-US: i-Educar
CVE-2024-45048 (PHPSpreadsheet is a pure PHP library for reading and writing
spreadshe ...)
- TODO: check
+ NOT-FOR-US: PHPSpreadsheet
CVE-2024-45046 (PHPSpreadsheet is a pure PHP library for reading and writing
spreadshe ...)
- TODO: check
+ NOT-FOR-US: PHPSpreadsheet
CVE-2024-43700 (xfpt versions prior to 1.01 fails to handle appropriately some
paramet ...)
TODO: check
CVE-2024-41918 ('Rakuten Ichiba App' for Android 12.4.0 and earlier and
'Rakuten Ichib ...)
- TODO: check
+ NOT-FOR-US: Rakuten Ichiba App
CVE-2024-3944 (The WP To Do plugin for WordPress is vulnerable to Stored
Cross-Site S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-38304 (Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to
2.22.x, co ...)
- TODO: check
+ NOT-FOR-US: Dell
CVE-2024-38303 (Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to
2.22.x, co ...)
- TODO: check
+ NOT-FOR-US: Dell
CVE-2024-8195 (The Permalink Manager Lite plugin for WordPress is vulnerable
to unaut ...)
NOT-FOR-US: WordPress plugin
CVE-2024-7745 (In WS_FTP Server versions before 8.8.8 (2022.0.8), a Missing
Critical ...)
@@ -191,7 +191,7 @@ CVE-2024-45049 (Hydra is a Continuous Integration service
for Nix based projects
CVE-2024-45038 (Meshtastic device firmware is a firmware for meshtastic
devices to run ...)
NOT-FOR-US: Meshtastic device firmware
CVE-2024-39771 (QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and
earlier ...)
- TODO: check
+ NOT-FOR-US: QBiC CLOUD
CVE-2024-39584 (Dell Client Platform BIOS contains a Use of Default
Cryptographic Key ...)
NOT-FOR-US: Dell
CVE-2023-45896 (ntfs3 in the Linux kernel before 6.5.11 allows a physically
proximate ...)
@@ -247,7 +247,7 @@ CVE-2024-7071 (Improper Neutralization of Special Elements
used in an SQL Comman
CVE-2024-6789 (A path traversal issue in API endpoint in M-Files Server before
versio ...)
NOT-FOR-US: M-Files Server
CVE-2024-6633 (The default credentials for the setup HSQL database (HSQLDB)
for FileC ...)
- TODO: check
+ NOT-FOR-US: FileCatalyst Workflow
CVE-2024-6632 (A vulnerability exists in FileCatalyst Workflow whereby a field
access ...)
NOT-FOR-US: FileCatalyst Workflow
CVE-2024-5991 (In function MatchDomainName(), input param str is treated as a
NULL te ...)
@@ -374,13 +374,13 @@ CVE-2024-43117 (Cross-Site Request Forgery (CSRF)
vulnerability in WPMU DEV Humm
CVE-2024-43116 (Cross-Site Request Forgery (CSRF) vulnerability in 10up Simple
Local A ...)
NOT-FOR-US: WordPress plugin
CVE-2024-41176 (The MPD package included in TwinCAT/BSDallows an
authenticated, low-pr ...)
- TODO: check
+ NOT-FOR-US: TwinCAT/BSD
CVE-2024-41175 (The IPC-Diagnostics package included in TwinCAT/BSD is
vulnerable to a ...)
- TODO: check
+ NOT-FOR-US: TwinCAT/BSD
CVE-2024-41174 (The IPC-Diagnostics package in TwinCAT/BSD is susceptible to
improper ...)
- TODO: check
+ NOT-FOR-US: TwinCAT/BSD
CVE-2024-41173 (The IPC-Diagnostics package included in TwinCAT/BSD is
vulnerable to a ...)
- TODO: check
+ NOT-FOR-US: TwinCAT/BSD
CVE-2024-39657 (Cross-Site Request Forgery (CSRF) vulnerability in Sender
Sender \u201 ...)
NOT-FOR-US: WordPress plugin
CVE-2024-39645 (Cross-Site Request Forgery (CSRF) vulnerability in Themeum
Tutor LMS.T ...)
@@ -434,7 +434,7 @@ CVE-2024-8151 (A vulnerability was found in SourceCodester
Interactive Map with
CVE-2024-8150 (A vulnerability was found in ContiNew Admin 3.2.0 and
classified as cr ...)
NOT-FOR-US: ContiNew Admin
CVE-2024-8105 (A vulnerability related to the use an insecure Platform Key
(PK) has b ...)
- TODO: check
+ NOT-FOR-US: Acer
CVE-2024-8073 (Improper Input Validation vulnerability in Hillstone Networks
Hillston ...)
NOT-FOR-US: Hillstone
CVE-2024-7988 (A remote code execution vulnerability exists in the Rockwell
Automatio ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/58a5e9458df850cd1f48a68149c51a8fcd818f0a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/58a5e9458df850cd1f48a68149c51a8fcd818f0a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
