Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4ec19353 by Moritz Muehlenhoff at 2024-09-10T10:45:13+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3,31 +3,31 @@ CVE-2024-8611 (A vulnerability classified as critical was
found in itsourcecode
CVE-2024-8610 (A vulnerability classified as problematic has been found in
SourceCode ...)
TODO: check
CVE-2024-8478 (The The Affiliate Super Assistent plugin for WordPress is
vulnerable t ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-8268 (The Frontend Dashboard plugin for WordPress is vulnerable to
unauthori ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-7955 (The Starbox WordPress plugin before 3.5.2 does not sanitise
and escap ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-7891 (The Floating Contact Button WordPress plugin before 2.8 does
not sanit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-7784 (During internal Axis Security Development Model (ASDM)
threat-modellin ...)
- TODO: check
+ NOT-FOR-US: Axis
CVE-2024-7734 (An unauthenticated remote attacker canexploit the behavior of
thepathf ...)
- TODO: check
+ NOT-FOR-US: Phoenix
CVE-2024-7655 (The Community by PeepSo \u2013 Social Network, Membership,
Registratio ...)
- TODO: check
+ NOT-FOR-US: PeepSo
CVE-2024-7618 (The Community by PeepSo \u2013 Social Network, Membership,
Registratio ...)
- TODO: check
+ NOT-FOR-US: PeepSo
CVE-2024-6979 (Amin Aliakbari, member of the AXIS OS Bug Bounty Program, has
found a ...)
- TODO: check
+ NOT-FOR-US: Axis
CVE-2024-6596 (An unauthenticated remote attacker can run malicious c# code
included ...)
- TODO: check
+ NOT-FOR-US: Endress+Hauser
CVE-2024-6509 (Marinus Pfund, member of the AXIS OS Bug Bounty Program, has
found th ...)
- TODO: check
+ NOT-FOR-US: Axis
CVE-2024-6342 (**UNSUPPORTED WHEN ASSIGNED** A command injection vulnerability
in the ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2024-6173 (51l3nc3, member of the AXIS OS Bug Bounty Program, has found
that a Gu ...)
- TODO: check
+ NOT-FOR-US: Axis
CVE-2024-45504 (Cross-site request forgery (CSRF) vulnerability in multiple
Alps Syste ...)
TODO: check
CVE-2024-45286 (Due to lack of proper authorization checks when calling user,
a functi ...)
@@ -37,57 +37,57 @@ CVE-2024-45285 (The RFC enabled function module allows a
low privileged user to
CVE-2024-45284 (An authenticated attacker with high privilege can use
functions of SLC ...)
TODO: check
CVE-2024-45283 (SAP NetWeaver AS for Java allows an authorized attacker to
obtain sens ...)
- TODO: check
+ NOT-FOR-US: SAP
CVE-2024-45281 (SAP BusinessObjects Business Intelligence Platform allows a
high privi ...)
- TODO: check
+ NOT-FOR-US: SAP
CVE-2024-45280 (Due to insufficient encoding of user-controlled inputs, SAP
NetWeaver ...)
- TODO: check
+ NOT-FOR-US: SAP
CVE-2024-45279 (Due to insufficient input validation, CRM Blueprint
Application Builde ...)
- TODO: check
+ NOT-FOR-US: SAP
CVE-2024-44411 (D-Link DI-8300 v16.07.26A1 is vulnerable to command injection
via the ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2024-44410 (D-Link DI-8300 v16.07.26A1 is vulnerable to command injection
via the ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2024-44121 (Under certain conditions Statutory Reports in SAP S/4 HANA
allows an a ...)
- TODO: check
+ NOT-FOR-US: SAP
CVE-2024-44120 (SAP NetWeaver Enterprise Portal is vulnerable to reflected
cross site ...)
- TODO: check
+ NOT-FOR-US: SAP
CVE-2024-44117 (The RFC enabled function module allows a low privileged user
to perfor ...)
- TODO: check
+ NOT-FOR-US: SAP
CVE-2024-44116 (The RFC enabled function module allows a low privileged user
to add an ...)
- TODO: check
+ NOT-FOR-US: SAP
CVE-2024-44115 (The RFC enabled function module allows a low privileged user
to add UR ...)
- TODO: check
+ NOT-FOR-US: SAP
CVE-2024-44114 (SAP NetWeaver Application Server for ABAP and ABAP Platform
allow user ...)
- TODO: check
+ NOT-FOR-US: SAP
CVE-2024-44113 (Due to missing authorization checks, SAP Business Warehouse
(BEx Analy ...)
- TODO: check
+ NOT-FOR-US: SAP
CVE-2024-44112 (Due to missing authorization check in SAP for Oil & Gas
(Transportatio ...)
- TODO: check
+ NOT-FOR-US: SAP
CVE-2024-44072 (OS command injection vulnerability exists in BUFFALO wireless
LAN rout ...)
- TODO: check
+ NOT-FOR-US: BUFFALO
CVE-2024-42427 (Dell ThinOS versions 2402 and 2405, contains an Improper
Neutralizatio ...)
- TODO: check
+ NOT-FOR-US: Dell
CVE-2024-42424 (Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2,
contains ...)
- TODO: check
+ NOT-FOR-US: Dell
CVE-2024-42380 (The RFC enabled function module allows a low privileged user
to read a ...)
- TODO: check
+ NOT-FOR-US: SAP
CVE-2024-42378 (Due to weak encoding of user-controlled inputs, eProcurement
on SAP S/ ...)
- TODO: check
+ NOT-FOR-US: SAP
CVE-2024-42371 (The RFC enabled function module allows a low privileged user
to delete ...)
- TODO: check
+ NOT-FOR-US: SAP
CVE-2024-41729 (Due to missing authorization checks, SAP BEx Analyzer allows
an authen ...)
- TODO: check
+ NOT-FOR-US: SAP
CVE-2024-41728 (Due to missing authorization check, SAP NetWeaver Application
Server f ...)
- TODO: check
+ NOT-FOR-US: SAP
CVE-2024-38270 (An insufficient entropy vulnerability caused by the improper
use of a ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2024-27365 (An issue was discovered in Samsung Mobile Processor Exynos
Exynos 980, ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2024-21528 (All versions of the package node-gettext are vulnerable to
Prototype P ...)
TODO: check
CVE-2024-0067 (Marinus Pfund, member of the AXIS OS Bug Bounty Program, has
found th ...)
- TODO: check
+ NOT-FOR-US: Axis
CVE-2024-8605 (A vulnerability classified as problematic was found in
code-projects I ...)
NOT-FOR-US: code-projects Inventory Management
CVE-2024-8604 (A vulnerability classified as problematic has been found in
SourceCode ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4ec1935310120569b03d3a349396593ce82e5629
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4ec1935310120569b03d3a349396593ce82e5629
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
