Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
65af07a0 by security tracker role at 2025-03-17T20:12:35+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,195 @@
+CVE-2025-30143 (Rule 3000216 (before version 2) in Akamai App & API Protector 
(with Ak ...)
+       TODO: check
+CVE-2025-2401 (Buffer overflow vulnerability in Immunity Debugger affecting 
version 1 ...)
+       TODO: check
+CVE-2025-2392 (A vulnerability, which was classified as critical, has been 
found in c ...)
+       TODO: check
+CVE-2025-2391 (A vulnerability classified as critical was found in 
code-projects Bloo ...)
+       TODO: check
+CVE-2025-2390 (A vulnerability classified as critical has been found in 
code-projects ...)
+       TODO: check
+CVE-2025-2389 (A vulnerability was found in code-projects Blood Bank 
Management Syste ...)
+       TODO: check
+CVE-2025-2388 (A vulnerability was found in Keytop 
\u8def\u5185\u505c\u8f66\u6536\u8d ...)
+       TODO: check
+CVE-2025-2387 (A vulnerability was found in SourceCodester Online Food 
Ordering Syste ...)
+       TODO: check
+CVE-2025-2386 (A vulnerability was found in PHPGurukul Local Services Search 
Engine M ...)
+       TODO: check
+CVE-2025-2385 (A vulnerability has been found in code-projects Modern Bag 1.0 
and cla ...)
+       TODO: check
+CVE-2025-2384 (A vulnerability, which was classified as critical, was found in 
code-p ...)
+       TODO: check
+CVE-2025-2383 (A vulnerability, which was classified as critical, has been 
found in P ...)
+       TODO: check
+CVE-2025-2382 (A vulnerability classified as critical was found in PHPGurukul 
Online  ...)
+       TODO: check
+CVE-2025-2381 (A vulnerability classified as critical has been found in 
PHPGurukul Cu ...)
+       TODO: check
+CVE-2025-2380 (A vulnerability was found in PHPGurukul Apartment Visitors 
Management  ...)
+       TODO: check
+CVE-2025-2379 (A vulnerability was found in PHPGurukul Apartment Visitors 
Management  ...)
+       TODO: check
+CVE-2025-2378 (A vulnerability was found in PHPGurukul Medical Card Generation 
System ...)
+       TODO: check
+CVE-2025-2377 (A vulnerability was found in SourceCodester Vehicle Management 
System  ...)
+       TODO: check
+CVE-2025-2376 (A vulnerability has been found in viames Pair Framework up to 
1.9.11 a ...)
+       TODO: check
+CVE-2025-2375 (A vulnerability, which was classified as problematic, was found 
in PHP ...)
+       TODO: check
+CVE-2025-2374 (A vulnerability, which was classified as critical, has been 
found in P ...)
+       TODO: check
+CVE-2025-2373 (A vulnerability classified as critical was found in PHPGurukul 
Human M ...)
+       TODO: check
+CVE-2025-2372 (A vulnerability classified as critical has been found in 
PHPGurukul Hu ...)
+       TODO: check
+CVE-2025-2371 (A vulnerability was found in PHPGurukul Human Metapneumovirus 
Testing  ...)
+       TODO: check
+CVE-2025-2370 (A vulnerability was found in TOTOLINK EX1800T up to 
9.1.0cu.2112_B2022 ...)
+       TODO: check
+CVE-2025-2369 (A vulnerability was found in TOTOLINK EX1800T up to 
9.1.0cu.2112_B2022 ...)
+       TODO: check
+CVE-2025-2241 (A flaw was found in Hive, a component of Multicluster Engine 
(MCE) and ...)
+       TODO: check
+CVE-2025-2202 (Broken access control vulnerability in the Innovaci\xf3n y 
Cualificaci ...)
+       TODO: check
+CVE-2025-2201 (Broken access control vulnerability in the IcProgress 
Innovaci\xf3n y  ...)
+       TODO: check
+CVE-2025-2200 (QL injection vulnerability in the IcProgreso Innovaci\xf3n y 
Cualifica ...)
+       TODO: check
+CVE-2025-2199 (SQL injection vulnerability in the Innovaci\xf3n y 
Cualificaci\xf3n lo ...)
+       TODO: check
+CVE-2025-29788 (The Syliud PayPal Plugin is the Sylius Core Team\u2019s plugin 
for the ...)
+       TODO: check
+CVE-2025-29787 (`zip` is a zip library for rust which supports reading and 
writing of  ...)
+       TODO: check
+CVE-2025-29786 (Expr is an expression language and expression evaluation for 
Go. Prior ...)
+       TODO: check
+CVE-2025-29431 (Code-projects Online Class and Exam Scheduling System V1.0 is 
vulnerab ...)
+       TODO: check
+CVE-2025-29430 (Code-projects Online Class and Exam Scheduling System V1.0 is 
vulnerab ...)
+       TODO: check
+CVE-2025-29429 (Code-projects Online Class and Exam Scheduling System V1.0 is 
vulnerab ...)
+       TODO: check
+CVE-2025-29427 (Code-projects Online Class and Exam Scheduling System V1.0 is 
vulnerab ...)
+       TODO: check
+CVE-2025-29425 (Code-projects Online Class and Exam Scheduling System 1.0 is 
vulnerabl ...)
+       TODO: check
+CVE-2025-27512 (Zincati is an auto-update agent for Fedora CoreOS hosts. 
Zincati ships ...)
+       TODO: check
+CVE-2025-27102 (Agate is central authentication server software for OBiBa 
epidemiology ...)
+       TODO: check
+CVE-2025-26393 (SolarWinds Service Desk is affected by a broken access control 
vulnera ...)
+       TODO: check
+CVE-2025-26127 (A stored cross-site scripting (XSS) vulnerability in the Send 
for Appr ...)
+       TODO: check
+CVE-2025-26125 (An exposed ioctl in the IMFForceDelete driver of IObit Malware 
Fighter ...)
+       TODO: check
+CVE-2025-26042 (Uptime Kuma >== 1.23.0 has a ReDoS vulnerability, specifically 
when an ...)
+       TODO: check
+CVE-2025-25914 (SQL injection vulnerability in Online Exam Mastering System 
v.1.0 allo ...)
+       TODO: check
+CVE-2025-25685 (An issue was discovered in GL-INet Beryl AX GL-MT3000 v4.7.0. 
Attacker ...)
+       TODO: check
+CVE-2025-25684 (A lack of validation in the path parameter (/download) of 
GL-INet Bery ...)
+       TODO: check
+CVE-2025-25650 (An issue in the storage of NFC card data in Dorset DG 201 
Digital Lock ...)
+       TODO: check
+CVE-2025-25621 (Unifiedtransform 2.0 is vulnerable to Incorrect Access 
Control, which  ...)
+       TODO: check
+CVE-2025-25618 (Incorrect Access Control in Unifiedtransform 2.0 leads to 
Privilege Es ...)
+       TODO: check
+CVE-2025-25612 (FS Inc S3150-8T2F prior to version S3150-8T2F_2.2.0D_135103 is 
vulnera ...)
+       TODO: check
+CVE-2025-24185 (An out-of-bounds write issue was addressed with improved input 
validat ...)
+       TODO: check
+CVE-2025-22474 (Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 
10.5.6. ...)
+       TODO: check
+CVE-2025-22473 (Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 
10.5.6. ...)
+       TODO: check
+CVE-2025-22472 (Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 
10.5.6. ...)
+       TODO: check
+CVE-2025-1774 (Incorrect string encodingvulnerability in NASK - PIB BotSense 
allows i ...)
+       TODO: check
+CVE-2025-1398 (Mattermost Desktop App versions <=5.10.0 explicitly declared 
unnecessa ...)
+       TODO: check
+CVE-2025-0833 (A stored Cross-site Scripting (XSS) vulnerability affecting 
Route Mana ...)
+       TODO: check
+CVE-2025-0832 (A stored Cross-site Scripting (XSS) vulnerability affecting 
Project Ga ...)
+       TODO: check
+CVE-2025-0830 (A stored Cross-site Scripting (XSS) vulnerability affecting 
Meeting Ma ...)
+       TODO: check
+CVE-2025-0829 (A stored Cross-site Scripting (XSS) vulnerability affecting 3D 
Markup  ...)
+       TODO: check
+CVE-2025-0828 (A stored Cross-site Scripting (XSS) vulnerability affecting 
Engineerin ...)
+       TODO: check
+CVE-2025-0827 (A stored Cross-site Scripting (XSS) vulnerability affecting 
3DPlay in  ...)
+       TODO: check
+CVE-2025-0826 (A stored Cross-site Scripting (XSS) vulnerability affecting 3D 
Navigat ...)
+       TODO: check
+CVE-2025-0601 (A stored Cross-site Scripting (XSS) vulnerability affecting 
Issue Mana ...)
+       TODO: check
+CVE-2025-0600 (A stored Cross-site Scripting (XSS) vulnerability affecting 
Product Ex ...)
+       TODO: check
+CVE-2025-0599 (A stored Cross-site Scripting (XSS) vulnerability affecting 
Document M ...)
+       TODO: check
+CVE-2025-0598 (A stored Cross-site Scripting (XSS) vulnerability affecting 
Relations  ...)
+       TODO: check
+CVE-2025-0596 (A stored Cross-site Scripting (XSS) vulnerability affecting 
Bookmark E ...)
+       TODO: check
+CVE-2025-0595 (A stored Cross-site Scripting (XSS) vulnerability affecting 
3DDashboar ...)
+       TODO: check
+CVE-2025-0495 (Buildx is a Docker CLI plugin that extends build capabilities 
using Bu ...)
+       TODO: check
+CVE-2024-9055 (The DPA countermeasures on Silicon Labs' Series 2 devices are 
not rese ...)
+       TODO: check
+CVE-2024-8510 (N-central is vulnerable to a path traversal that allows 
unintended acc ...)
+       TODO: check
+CVE-2024-54565 (The issue was addressed with improved checks. This issue is 
fixed in m ...)
+       TODO: check
+CVE-2024-54559 (The issue was addressed with improved checks. This issue is 
fixed in m ...)
+       TODO: check
+CVE-2024-54525 (A logic issue was addressed with improved file handling. This 
issue is ...)
+       TODO: check
+CVE-2024-54027 (A Use of Hard-coded Cryptographic Key vulnerability [CWE-321] 
in Forti ...)
+       TODO: check
+CVE-2024-49561 (Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 
10.5.6. ...)
+       TODO: check
+CVE-2024-49559 (Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 
10.5.6. ...)
+       TODO: check
+CVE-2024-48831 (Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 
contain(s) a Use  ...)
+       TODO: check
+CVE-2024-48830 (Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 
10.5.6. ...)
+       TODO: check
+CVE-2024-48828 (Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 
10.5.6. ...)
+       TODO: check
+CVE-2024-48017 (Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 
10.5.6. ...)
+       TODO: check
+CVE-2024-48015 (Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 
10.5.6. ...)
+       TODO: check
+CVE-2024-48013 (Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 
10.5.6. ...)
+       TODO: check
+CVE-2024-44866 (A buffer overflow in the GuitarPro1::read function of 
MuseScore Studio ...)
+       TODO: check
+CVE-2024-44276 (This issue was addressed by using HTTPS when sending 
information over  ...)
+       TODO: check
+CVE-2024-12992 (Improper Neutralization of Special Elements used in a Command 
vulnerab ...)
+       TODO: check
+CVE-2024-12971 (Improper Neutralization of Special Elements used in a Command 
vulnerab ...)
+       TODO: check
+CVE-2023-52321
+       REJECTED
+CVE-2023-52320
+       REJECTED
+CVE-2023-52319
+       REJECTED
+CVE-2023-52318
+       REJECTED
+CVE-2023-52317
+       REJECTED
+CVE-2023-52316
+       REJECTED
 CVE-2025-30089 (gurk (aka gurk-rs) through 0.6.3 mishandles ANSI escape 
sequences.)
        NOT-FOR-US: Rust crate gurk
 CVE-2025-2396 (The U-Office Force from e-Excellence has an Arbitrary File 
Upload vuln ...)
@@ -1138,6 +1330,7 @@ CVE-2025-27393 (A vulnerability has been identified in 
SCALANCE LPE9403 (6GK5998
 CVE-2025-27392 (A vulnerability has been identified in SCALANCE LPE9403 
(6GK5998-3GS00 ...)
        NOT-FOR-US: Siemens
 CVE-2025-27363 (An out of bounds write exists in FreeType versions 2.13.0 and 
below (n ...)
+       {DSA-5880-1}
        - freetype 2.13.1+dfsg-1
        NOTE: https://www.facebook.com/security/advisories/cve-2025-27363
        NOTE: https://gitlab.freedesktop.org/freetype/freetype/-/issues/1322
@@ -29635,6 +29828,7 @@ CVE-2024-55655 (sigstore-python is a Python tool for 
generating and verifying Si
 CVE-2024-55653 (PwnDoc is a penetration test report generator. In versions up 
to and i ...)
        NOT-FOR-US: PwnDoc
 CVE-2024-54133 (Action Pack is a framework for handling and responding to web 
requests ...)
+       {DSA-5881-1}
        - rails 2:7.2.2.1+dfsg-1 (bug #1089755)
        NOTE: 
https://github.com/rails/rails/security/advisories/GHSA-vfm5-rmrh-j26v
        NOTE: 
https://github.com/rails/rails/commit/2e3f41e4538b9ca1044357f6644f037bbb7c6c49 
(v8.0.0.1)
@@ -46816,6 +47010,7 @@ CVE-2024-48758 (dingfanzu CMS V1.0 was discovered to 
contain a Cross-Site Reques
 CVE-2024-48180 (ClassCMS <=4.8 is vulnerable to file inclusion in the nowView 
method i ...)
        NOT-FOR-US: ClassCMS
 CVE-2024-47889 (Action Mailer is a framework for designing email service 
layers. Start ...)
+       {DSA-5881-1}
        - rails 2:7.2.2.1+dfsg-1 (bug #1085376)
        NOTE: 
https://github.com/rails/rails/security/advisories/GHSA-h47h-mwp9-c6q6
        NOTE: 
https://github.com/rails/rails/commit/be898cc996986decfe238341d96b2a6573b8fd2e 
(v7.2.1.1)
@@ -46823,6 +47018,7 @@ CVE-2024-47889 (Action Mailer is a framework for 
designing email service layers.
        NOTE: 
https://github.com/rails/rails/commit/0e5694f4d32544532d2301a9b4084eacb6986e94 
(v7.0.8.5)
        NOTE: 
https://github.com/rails/rails/commit/985f1923fa62806ff676e41de67c3b4552131ab9 
(v6.1.7.9)
 CVE-2024-47888 (Action Text brings rich text content and editing to Rails. 
Starting in ...)
+       {DSA-5881-1}
        - rails 2:7.2.2.1+dfsg-1 (bug #1085376)
        NOTE: 
https://github.com/rails/rails/security/advisories/GHSA-wwhv-wxv9-rpgw
        NOTE: 
https://github.com/rails/rails/commit/ba286c0a310b7f19cf5cac2a7a4c9def5cf9882e 
(v7.2.1.1)
@@ -46830,6 +47026,7 @@ CVE-2024-47888 (Action Text brings rich text content 
and editing to Rails. Start
        NOTE: 
https://github.com/rails/rails/commit/727b0946c3cab04b825c039435eac963d4e91822 
(v7.0.8.5)
        NOTE: 
https://github.com/rails/rails/commit/4f4312b21a6448336de7c7ab0c4d94b378def468 
(v6.1.7.9)
 CVE-2024-47887 (Action Pack is a framework for handling and responding to web 
requests ...)
+       {DSA-5881-1}
        - rails 2:7.2.2.1+dfsg-1 (bug #1085376)
        NOTE: 
https://github.com/rails/rails/security/advisories/GHSA-vfg9-r3fq-jvx4
        NOTE: 
https://github.com/rails/rails/commit/f4dc83d8926509d0958ec21fcdbc2e7df3d32ce2 
(v7.2.1.1)
@@ -46993,6 +47190,7 @@ CVE-2024-45072 (IBM WebSphere Application Server 8.5 
and 9.0 is vulnerable to an
 CVE-2024-45071 (IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to 
stored c ...)
        NOT-FOR-US: IBM
 CVE-2024-41128 (Action Pack is a framework for handling and responding to web 
requests ...)
+       {DSA-5881-1}
        - rails 2:7.2.2.1+dfsg-1 (bug #1085376)
        NOTE: 
https://github.com/rails/rails/security/advisories/GHSA-x76w-6vjr-8xgj
        NOTE: 
https://github.com/rails/rails/commit/27121e80f6dbb260f5a9f0452cd8411cb681f075 
(v7.2.1.1)
@@ -79407,6 +79605,7 @@ CVE-2024-2368 (The Mollie Forms plugin for WordPress is 
vulnerable to Cross-Site
 CVE-2024-2087 (The Brizy \u2013 Page Builder plugin for WordPress is 
vulnerable to St ...)
        NOT-FOR-US: WordPress plugin
 CVE-2024-28103 (Action Pack is a framework for handling and responding to web 
requests ...)
+       {DSA-5881-1}
        - rails 2:7.2.2.1+dfsg-1 (bug #1072705)
        [bullseye] - rails <not-affected> (Vulnerable code introduced later)
        [buster] - rails <not-affected> (Vulnerable code introduced later)
@@ -113464,6 +113663,7 @@ CVE-2021-46908 (In the Linux kernel, the following 
vulnerability has been resolv
 CVE-2021-46907
        REJECTED
 CVE-2024-26144 (Rails is a web-application framework. Starting with version 
5.2.0, the ...)
+       {DSA-5881-1}
        - rails 2:7.2.2.1+dfsg-1 (bug #1065119)
        [bullseye] - rails <no-dsa> (Minor issue)
        NOTE: 
https://discuss.rubyonrails.org/t/possible-sensitive-session-information-leak-in-active-storage/84945
@@ -145955,6 +146155,7 @@ CVE-2023-40317
 CVE-2023-40316
        - moodle <removed>
 CVE-2023-38037 (ActiveSupport::EncryptedFile writes contents that will be 
encrypted to ...)
+       {DSA-5881-1}
        - rails 2:7.2.2.1+dfsg-1 (bug #1051057)
        [bullseye] - rails <no-dsa> (Minor issue)
        NOTE: https://github.com/advisories/GHSA-cr5q-6q9f-rq6q
@@ -169779,6 +169980,7 @@ CVE-2023-28364 (An Open Redirect vulnerability exists 
prior to version 1.52.117,
 CVE-2023-28363
        RESERVED
 CVE-2023-28362 (The redirect_to method in Rails allows provided values to 
contain char ...)
+       {DSA-5881-1}
        - rails 2:7.2.2.1+dfsg-1 (bug #1051058)
        [bullseye] - rails <no-dsa> (Minor issue)
        NOTE: 
https://discuss.rubyonrails.org/t/cve-2023-28362-possible-xss-via-user-supplied-values-to-redirect-to/83132
@@ -309735,8 +309937,8 @@ CVE-2021-32586 (An improper input validation 
vulnerability in the web server CGI
        NOT-FOR-US: FortiGuard
 CVE-2021-32585 (An improper neutralization of input during web page generation 
vulnera ...)
        NOT-FOR-US: FortiWAN
-CVE-2021-32584
-       RESERVED
+CVE-2021-32584 (An improper access control (CWE-284) vulnerability in FortiWLC 
version ...)
+       TODO: check
 CVE-2021-32583
        RESERVED
 CVE-2021-32582 (An issue was discovered in ConnectWise Automate before 2021.5. 
A blind ...)
@@ -326753,8 +326955,8 @@ CVE-2021-26089 (An improper symlink following in 
FortiClient for Mac 6.4.3 and b
        NOT-FOR-US: FortiClient
 CVE-2021-26088 (An improper authentication vulnerability in FSSO Collector 
version 5.0 ...)
        NOT-FOR-US: Fortinet
-CVE-2021-26087
-       RESERVED
+CVE-2021-26087 (An improper neutralization of input during web page generation 
in Fort ...)
+       TODO: check
 CVE-2021-26086 (Affected versions of Atlassian Jira Server and Data Center 
allow remot ...)
        NOT-FOR-US: Atlassian
 CVE-2021-26085 (Affected versions of Atlassian Confluence Server allow remote 
attacker ...)
@@ -336206,8 +336408,8 @@ CVE-2021-22128 (An improper access control 
vulnerability in FortiProxy SSL VPN p
        NOT-FOR-US: FortiProxy SSL VPN portal
 CVE-2021-22127 (An improper input validation vulnerability in FortiClient for 
Linux 6. ...)
        NOT-FOR-US: FortiClient
-CVE-2021-22126
-       RESERVED
+CVE-2021-22126 (A use of hard-coded password vulnerability in FortiWLC version 
8.5.2 a ...)
+       TODO: check
 CVE-2021-22125 (An instance of improper neutralization of special elements in 
the snif ...)
        NOT-FOR-US: FortiSandbox
 CVE-2021-22124 (An uncontrolled resource consumption (denial of service) 
vulnerability ...)
@@ -347815,8 +348017,8 @@ CVE-2020-29012 (An insufficient session expiration 
vulnerability in FortiSandbox
        NOT-FOR-US: FortiGuard
 CVE-2020-29011 (Instances of SQL Injection vulnerabilities in the checksum 
search and  ...)
        NOT-FOR-US: FortiSandbox
-CVE-2020-29010
-       RESERVED
+CVE-2020-29010 (An exposure of sensitive information to an unauthorized actor 
vulnerab ...)
+       TODO: check
 CVE-2020-29009
        RESERVED
 CVE-2020-29008
@@ -400510,8 +400712,8 @@ CVE-2020-9297 (Netflix Titus, all versions prior to 
version v0.1.1-rc.274, uses
        NOT-FOR-US: Netflix Titus
 CVE-2020-9296 (Netflix Titus uses Java Bean Validation (JSR 380) custom 
constraint va ...)
        NOT-FOR-US: Netflix Conductor
-CVE-2020-9295
-       RESERVED
+CVE-2020-9295 (FortiOS 6.2 running AV engine version 6.00142 and below, 
FortiOS 6.4 r ...)
+       TODO: check
 CVE-2020-9294 (An improper authentication vulnerability in FortiMail 5.4.10, 
6.0.7, 6 ...)
        NOT-FOR-US: FortiMail Fortiguard
 CVE-2020-9293
@@ -429127,8 +429329,8 @@ CVE-2019-17661 (A CSV injection in the 
codepress-admin-columns (aka Admin Column
        NOT-FOR-US: WordPress plugin
 CVE-2019-17660 (A cross-site scripting (XSS) vulnerability in 
admin/translate/translat ...)
        - limesurvey <itp> (bug #472802)
-CVE-2019-17659
-       RESERVED
+CVE-2019-17659 (A use of hard-coded cryptographic key vulnerability in 
FortiSIEM versi ...)
+       TODO: check
 CVE-2019-17658 (An unquoted service path vulnerability in the FortiClient 
FortiTray co ...)
        NOT-FOR-US: Fortiguard
 CVE-2019-17657 (An Uncontrolled Resource Consumption vulnerability in Fortinet 
FortiSw ...)
@@ -434867,8 +435069,8 @@ CVE-2019-15708 (A system command injection 
vulnerability in the FortiAP-S/W2 6.2
        NOT-FOR-US: Fortiguard
 CVE-2019-15707 (An improper access control vulnerability in FortiMail admin 
webUI 6.2. ...)
        NOT-FOR-US: FortiMail admin webUI
-CVE-2019-15706
-       RESERVED
+CVE-2019-15706 (An improper neutralization of input during web page generation 
in the  ...)
+       TODO: check
 CVE-2019-15705 (An Improper Input Validation vulnerability in the SSL VPN 
portal of Fo ...)
        NOT-FOR-US: Fortinet FortiOS
 CVE-2019-15704 (A clear text storage of sensitive information vulnerability in 
FortiCl ...)
@@ -463016,8 +463218,8 @@ CVE-2019-6699 (An improper neutralization of input 
vulnerability in Fortinet For
        NOT-FOR-US: Fortiguard
 CVE-2019-6698 (Use of Hard-coded Credentials vulnerability in FortiRecorder 
all versi ...)
        NOT-FOR-US: Fortinet
-CVE-2019-6697
-       RESERVED
+CVE-2019-6697 (An Improper Neutralization of Input vulnerability affecting 
FortiGate  ...)
+       TODO: check
 CVE-2019-6696 (An improper input validation vulnerability in FortiOS 6.2.1, 
6.2.0, 6. ...)
        NOT-FOR-US: Fortiguard
 CVE-2019-6695 (Lack of root file system integrity checking in Fortinet 
FortiManager V ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/65af07a02df964ae0458acc947f3620ab5499234

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/65af07a02df964ae0458acc947f3620ab5499234
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to