Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
05b5a0d5 by Salvatore Bonaccorso at 2024-08-29T22:58:23+02:00
Process NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -119,95 +119,95 @@ CVE-2024-43917 (Improper Neutralization of Special
Elements used in an SQL Comma
CVE-2024-43804 (Roxy-WI is a web interface for managing Haproxy, Nginx, Apache
and Kee ...)
TODO: check
CVE-2024-43144 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-43132 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-41964 (Kirby is a CMS targeting designers and editors. Kirby allows
to restri ...)
- TODO: check
+ NOT-FOR-US: Kirby CMS
CVE-2024-41372 (Organizr v1.90 was discovered to contain a SQL injection
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Organizr
CVE-2024-41371 (Organizr v1.90 is vulnerable to Cross Site Scripting (XSS) via
api.php ...)
- TODO: check
+ NOT-FOR-US: Organizr
CVE-2024-41370 (Organizr v1.90 was discovered to contain a SQL injection
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Organizr
CVE-2024-41369 (RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote
code execut ...)
- TODO: check
+ NOT-FOR-US: RPi-Jukebox-RFID
CVE-2024-41368 (RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote
code execut ...)
- TODO: check
+ NOT-FOR-US: RPi-Jukebox-RFID
CVE-2024-41367 (RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote
code execut ...)
- TODO: check
+ NOT-FOR-US: RPi-Jukebox-RFID
CVE-2024-41366 (RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote
code execut ...)
- TODO: check
+ NOT-FOR-US: RPi-Jukebox-RFID
CVE-2024-41364 (RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote
code execut ...)
- TODO: check
+ NOT-FOR-US: RPi-Jukebox-RFID
CVE-2024-41361 (RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote
code execut ...)
- TODO: check
+ NOT-FOR-US: RPi-Jukebox-RFID
CVE-2024-41358 (phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via
app\admin\ ...)
TODO: check
CVE-2024-41351 (bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting
(XSS) vi ...)
- TODO: check
+ NOT-FOR-US: bjyadmin
CVE-2024-41350 (bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting
(XSS) vi ...)
- TODO: check
+ NOT-FOR-US: bjyadmin
CVE-2024-41348 (openflights commit 5234b5b is vulnerable to Cross-Site
Scripting (XSS) ...)
- TODO: check
+ NOT-FOR-US: openflights
CVE-2024-41347 (openflights commit 5234b5b is vulnerable to Cross-Site
Scripting (XSS) ...)
- TODO: check
+ NOT-FOR-US: openflights
CVE-2024-41346 (openflights commit 5234b5b is vulnerable to Cross-Site
Scripting (XSS) ...)
- TODO: check
+ NOT-FOR-US: openflights
CVE-2024-41345 (openflights commit 5234b5b is vulnerable to Cross-Site
Scripting (XSS) ...)
- TODO: check
+ NOT-FOR-US: openflights
CVE-2024-3679 (The Premium SEO Pack \u2013 WP SEO Plugin plugin for WordPress
is vuln ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-39658 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-39653 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-39638 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-39622 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-39620 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-38795 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-38793 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-38693 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-35133 (IBM Security Verify Access 10.0.0 through 10.0.8 OIDC Provider
could a ...)
NOT-FOR-US: IBM
CVE-2024-35118 (IBM MaaS360 for Android 6.31 through 8.60 is using hard coded
credenti ...)
NOT-FOR-US: IBM
CVE-2024-34019 (Local privilege escalation due to DLL hijacking vulnerability.
The fol ...)
- TODO: check
+ NOT-FOR-US: Acronis Snap Deploy (Windows)
CVE-2024-34018 (Sensitive information disclosure due to insecure folder
permissions. T ...)
- TODO: check
+ NOT-FOR-US: Acronis Snap Deploy (Windows)
CVE-2024-34017 (Local privilege escalation due to DLL hijacking vulnerability.
The fol ...)
- TODO: check
+ NOT-FOR-US: Acronis Snap Deploy (Windows)
CVE-2024-2541 (The Popup Builder plugin for WordPress is vulnerable to
Sensitive Info ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-29731 (SQL injection vulnerabilities in SportsNET affecting version
4.0.1. Th ...)
- TODO: check
+ NOT-FOR-US: SportsNET
CVE-2024-29730 (SQL injection vulnerabilities in SportsNET affecting version
4.0.1. Th ...)
- TODO: check
+ NOT-FOR-US: SportsNET
CVE-2024-29729 (SQL injection vulnerabilities in SportsNET affecting version
4.0.1. Th ...)
- TODO: check
+ NOT-FOR-US: SportsNET
CVE-2024-29728 (SQL injection vulnerabilities in SportsNET affecting version
4.0.1. Th ...)
- TODO: check
+ NOT-FOR-US: SportsNET
CVE-2024-29727 (SQL injection vulnerabilities in SportsNET affecting version
4.0.1. Th ...)
- TODO: check
+ NOT-FOR-US: SportsNET
CVE-2024-29726 (SQL injection vulnerabilities in SportsNET affecting version
4.0.1. Th ...)
- TODO: check
+ NOT-FOR-US: SportsNET
CVE-2024-29725 (SQL injection vulnerabilities in SportsNET affecting version
4.0.1. Th ...)
- TODO: check
+ NOT-FOR-US: SportsNET
CVE-2024-29724 (SQL injection vulnerabilities in SportsNET affecting version
4.0.1. Th ...)
- TODO: check
+ NOT-FOR-US: SportsNET
CVE-2024-29723 (SQL injection vulnerabilities in SportsNET affecting version
4.0.1. Th ...)
- TODO: check
+ NOT-FOR-US: SportsNET
CVE-2024-1384 (The Premium Portfolio Features for Phlox theme plugin for
WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-1056 (The FunnelKit Funnel Builder Pro plugin for WordPress is
vulnerable to ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-4442 (In the Linux kernel, the following vulnerability has been
resolved: t ...)
- linux 5.10.24-1
NOTE:
https://git.kernel.org/linus/8811f4a9836e31c14ecdf79d9f3cb7c5d463265d (5.12-rc3)
@@ -169972,7 +169972,7 @@ CVE-2022-2442 (The Migration, Backup, Staging \u2013
WPvivid plugin for WordPres
CVE-2022-2441 (The ImageMagick Engine plugin for WordPress is vulnerable to
remote co ...)
NOT-FOR-US: WordPress plugin
CVE-2022-2440 (The Theme Editor plugin for WordPress is vulnerable to
deserialization ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-2439
RESERVED
CVE-2022-2438 (The Broken Link Checker plugin for WordPress is vulnerable to
deserial ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/05b5a0d590e63d97924fc4bbb6af318e78e213af
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/05b5a0d590e63d97924fc4bbb6af318e78e213af
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
