Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8aae1276 by Moritz Muehlenhoff at 2024-11-18T11:18:31+01:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
CVE-2024-5030 (The CM Table Of Contents WordPress plugin before 1.2.3 does
not have ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-52947 (A cross-site scripting (XSS) vulnerability in LemonLDAP::NG
before 2.2 ...)
- lemonldap-ng 2.20.1+ds-1
NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/3257
@@ -21,27 +21,27 @@ CVE-2024-52940 (AnyDesk through 8.1.0 on Windows, when
Allow Direct Connections
CVE-2024-52926 (Delinea Privilege Manager before 12.0.2 mishandles the
security of the ...)
NOT-FOR-US: Delinea
CVE-2024-52922 (In Bitcoin Core before 25.1, an attacker can cause a node to
not downl ...)
- TODO: check
+ - bitcoin <removed>
CVE-2024-52921 (In Bitcoin Core before 25.0, a peer can affect the download
state of o ...)
- TODO: check
+ - bitcoin <removed>
CVE-2024-52920 (Bitcoin Core before 0.20.0 allows remote attackers to cause a
denial o ...)
- TODO: check
+ - bitcoin <removed>
CVE-2024-52919 (Bitcoin Core before 22.0 has a CAddrMan nIdCount integer
overflow and ...)
- TODO: check
+ - bitcoin <removed>
CVE-2024-52918 (Bitcoin-Qt in Bitcoin Core before 0.20.0 allows remote
attackers to ca ...)
- TODO: check
+ - bitcoin <removed>
CVE-2024-52917 (Bitcoin Core before 22.0 has a miniupnp infinite loop in which
it allo ...)
- TODO: check
+ - bitcoin <removed>
CVE-2024-52916 (Bitcoin Core before 0.15.0 allows a denial of service (OOM
kill of a d ...)
- TODO: check
+ - bitcoin <removed>
CVE-2024-52915 (Bitcoin Core before 0.20.0 allows remote attackers to cause a
denial o ...)
- TODO: check
+ - bitcoin <removed>
CVE-2024-52914 (In Bitcoin Core before 0.18.0, a node could be stalled for
hours when ...)
- TODO: check
+ - bitcoin <removed>
CVE-2024-52913 (In Bitcoin Core before 0.21.0, an attacker could prevent a
node from s ...)
- TODO: check
+ - bitcoin <removed>
CVE-2024-52912 (Bitcoin Core before 0.21.0 allows a network split that is
resultant fr ...)
- TODO: check
+ - bitcoin <removed>
CVE-2024-49574 (Zohocorp ManageEngine ADAudit Plus versions below 8123 are
vulnerable ...)
TODO: check
CVE-2024-43704 (Software installed and run as a non-privileged user may
conduct improp ...)
@@ -51,27 +51,27 @@ CVE-2024-38828 (Spring MVC controller methods with an
@RequestBody byte[]method
CVE-2024-22067 (ZTE NH8091 product has an improper permission control
vulnerability. D ...)
TODO: check
CVE-2024-11315 (The DVC from TRCore has a Path Traversal vulnerability and
does not re ...)
- TODO: check
+ NOT-FOR-US: TRCore DVC
CVE-2024-11314 (The DVC from TRCore has a Path Traversal vulnerability and
does not re ...)
- TODO: check
+ NOT-FOR-US: TRCore DVC
CVE-2024-11313 (The DVC from TRCore has a Path Traversal vulnerability and
does not re ...)
- TODO: check
+ NOT-FOR-US: TRCore DVC
CVE-2024-11312 (The DVC from TRCore has a Path Traversal vulnerability and
does not re ...)
- TODO: check
+ NOT-FOR-US: TRCore DVC
CVE-2024-11311 (The DVC from TRCore has a Path Traversal vulnerability and
does not re ...)
- TODO: check
+ NOT-FOR-US: TRCore DVC
CVE-2024-11310 (The DVC from TRCore has a Path Traversal vulnerability,
allowing unaut ...)
- TODO: check
+ NOT-FOR-US: TRCore DVC
CVE-2024-11309 (The DVC from TRCore has a Path Traversal vulnerability,
allowing unaut ...)
- TODO: check
+ NOT-FOR-US: TRCore DVC
CVE-2024-11308 (The DVC from TRCore encrypts files using a hardcoded key.
Attackers ca ...)
- TODO: check
+ NOT-FOR-US: TRCore DVC
CVE-2024-11306 (A vulnerability, which was classified as critical, has been
found in A ...)
TODO: check
CVE-2024-11305 (A vulnerability classified as critical was found in Altenergy
Power Co ...)
TODO: check
CVE-2019-25220 (Bitcoin Core before 24.0.1 allows remote attackers to cause a
denial o ...)
- TODO: check
+ - bitcoin <removed>
CVE-2015-20111 (miniupnp before 4c90b87, as used in Bitcoin Core before 0.12
and other ...)
TODO: check
CVE-2024-52876 (Holy Stone Remote ID Module HSRID01, firmware distributed with
the Dro ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8aae1276179e3af541becd0f2a1322e523ea6fad
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8aae1276179e3af541becd0f2a1322e523ea6fad
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
