Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f8de0725 by security tracker role at 2025-06-12T20:12:40+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,125 @@
+CVE-2025-6031 (Amazon Cloud Cam is a home security camera that was deprecated
on Dece ...)
+ TODO: check
+CVE-2025-6021 (A flaw was found in libxml2's xmlBuildQName function, where
integer ov ...)
+ TODO: check
+CVE-2025-6003 (The WordPress Single Sign-On (SSO) plugin for WordPress is
vulnerable ...)
+ TODO: check
+CVE-2025-5996 (An issue has been discovered in GitLab CE/EE affecting all
versions fr ...)
+ TODO: check
+CVE-2025-5982 (An issue has been discovered in GitLab EE affecting all
versions from ...)
+ TODO: check
+CVE-2025-5485 (User names used to access the web management interface are
limited to ...)
+ TODO: check
+CVE-2025-5484 (A username and password are required to authenticate to the
central S ...)
+ TODO: check
+CVE-2025-5195 (An issue has been discovered in GitLab CE/EE affecting all
versions fr ...)
+ TODO: check
+CVE-2025-4613 (Path traversal in Google Web Designer's template handling
versions pri ...)
+ TODO: check
+CVE-2025-4418 (An improper validation of integrity check value vulnerability
exists i ...)
+ TODO: check
+CVE-2025-4417 (A cross-site scripting vulnerability exists in AVEVAPI
Connector for ...)
+ TODO: check
+CVE-2025-4278 (An issue has been discovered in GitLab CE/EE affecting all
versions st ...)
+ TODO: check
+CVE-2025-49579 (Citizen is a MediaWiki skin that makes extensions part of the
cohesive ...)
+ TODO: check
+CVE-2025-49578 (Citizen is a MediaWiki skin that makes extensions part of the
cohesive ...)
+ TODO: check
+CVE-2025-49577 (Citizen is a MediaWiki skin that makes extensions part of the
cohesive ...)
+ TODO: check
+CVE-2025-49576 (Citizen is a MediaWiki skin that makes extensions part of the
cohesive ...)
+ TODO: check
+CVE-2025-49575 (Citizen is a MediaWiki skin that makes extensions part of the
cohesive ...)
+ TODO: check
+CVE-2025-49467 (A SQL injection vulnerability in JEvents component before
3.6.88 and 3 ...)
+ TODO: check
+CVE-2025-49200 (The created backup files are unencrypted, making the
application vulne ...)
+ TODO: check
+CVE-2025-49199 (The backup ZIPs are not signed by the application, leading to
the poss ...)
+ TODO: check
+CVE-2025-49198 (The Media Server\u2019s authorization tokens have a poor
quality of ra ...)
+ TODO: check
+CVE-2025-49197 (The application uses a weak password hash function, allowing
an attack ...)
+ TODO: check
+CVE-2025-49196 (A service supports the use of a deprecated and unsafe TLS
version. Thi ...)
+ TODO: check
+CVE-2025-49195 (The FTP server\u2019s login mechanism does not restrict
authentication ...)
+ TODO: check
+CVE-2025-49194 (The server supports authentication methods in which
credentials are se ...)
+ TODO: check
+CVE-2025-49193 (The application fails to implement several security headers.
These hea ...)
+ TODO: check
+CVE-2025-49192 (The web application is vulnerable to clickjacking attacks. The
site ca ...)
+ TODO: check
+CVE-2025-49191 (Linked URLs during the creation of iFrame widgets and
dashboards are v ...)
+ TODO: check
+CVE-2025-49190 (The application is vulnerable to Server-Side Request Forgery
(SSRF). A ...)
+ TODO: check
+CVE-2025-49189 (The HttpOnlyflag of the session cookie \"@@\" is set to false.
Since t ...)
+ TODO: check
+CVE-2025-49188 (The application sends user credentials as URL parameters
instead of PO ...)
+ TODO: check
+CVE-2025-49187 (For failed login attempts, the application returns different
error mes ...)
+ TODO: check
+CVE-2025-49186 (The product does not implement sufficient measures to prevent
multiple ...)
+ TODO: check
+CVE-2025-49185 (The web application is susceptible to cross-site-scripting
attacks. An ...)
+ TODO: check
+CVE-2025-49184 (A remote unauthorized attacker may gather sensitive
information of the ...)
+ TODO: check
+CVE-2025-49183 (All communication with the REST API is unencrypted (HTTP),
allowing an ...)
+ TODO: check
+CVE-2025-49182 (Files in the source code contain login credentials for the
admin user ...)
+ TODO: check
+CVE-2025-49181 (Due to missing authorization of an API endpoint, unauthorized
users ca ...)
+ TODO: check
+CVE-2025-49081 (There is an insufficient input validation vulnerability in the
warehou ...)
+ TODO: check
+CVE-2025-49080 (There is a memory management vulnerability in Absolute Secure
Access s ...)
+ TODO: check
+CVE-2025-48699
+ REJECTED
+CVE-2025-46035 (Buffer Overflow vulnerability in Tenda AC6 v.15.03.05.16
allows a remo ...)
+ TODO: check
+CVE-2025-44019 (AVEVA PI Data Archive products are vulnerable to an uncaught
exception ...)
+ TODO: check
+CVE-2025-43866 (vantage6 is an open-source infrastructure for privacy
preserving analy ...)
+ TODO: check
+CVE-2025-43863 (vantage6 is an open source framework built to enable, manage
and deplo ...)
+ TODO: check
+CVE-2025-40592 (A vulnerability has been identified in Mendix Studio Pro 10
(All versi ...)
+ TODO: check
+CVE-2025-36573 (Dell Smart Dock Firmware, versions prior to 01.00.08.01,
contain an In ...)
+ TODO: check
+CVE-2025-36539 (AVEVA PI Data Archive products are vulnerable to an uncaught
exceptio ...)
+ TODO: check
+CVE-2025-2745 (A cross-site scripting vulnerability exists in AVEVAPI Web API
version ...)
+ TODO: check
+CVE-2025-2254 (An issue has been discovered in GitLab CE/EE affecting all
versions fr ...)
+ TODO: check
+CVE-2025-29744 (pg-promise before 11.5.5 is vulnerable to SQL Injection due to
imprope ...)
+ TODO: check
+CVE-2025-1516 (An issue has been discovered in GitLab CE/EE affecting all
versions fr ...)
+ TODO: check
+CVE-2025-1478 (An issue has been discovered in GitLab CE/EE affecting all
versions fr ...)
+ TODO: check
+CVE-2025-0673 (An issue has been discovered in GitLab CE/EE affecting all
versions fr ...)
+ TODO: check
+CVE-2024-9512 (An issue has been discovered in GitLab EE affecting all
versions prior ...)
+ TODO: check
+CVE-2024-7562 (A potential elevated privilege issue has been reported with
InstallShi ...)
+ TODO: check
+CVE-2024-56158 (XWiki is a generic wiki platform. It's possible to execute any
SQL que ...)
+ TODO: check
+CVE-2024-55567 (Improper input validation was discovered in UsbCoreDxe in
Insyde Insyd ...)
+ TODO: check
+CVE-2024-44906 (uptrace pgdriver v1.2.1 was discovered to contain a SQL
injection vuln ...)
+ TODO: check
+CVE-2024-44905 (go-pg pg v10.13.0 was discovered to contain a SQL injection
vulnerabil ...)
+ TODO: check
+CVE-2023-45256 (Multiple SQL injection vulnerabilities in the EuroInformation
Monetico ...)
+ TODO: check
CVE-2025-30399
NOT-FOR-US: Microsoft .NET
CVE-2025-6009 (A vulnerability was found in kiCode111 like-girl 5.2.0 and
classified ...)
@@ -1295,7 +1417,7 @@ CVE-2025-5877 (A vulnerability, which was classified as
problematic, has been fo
NOT-FOR-US: Fengoffice Feng Office
CVE-2025-5876 (A vulnerability classified as problematic was found in Lucky
LM-520-SC ...)
NOT-FOR-US: Lucky LM-520-SC, LM-520-FSC and LM-520-FSC-SAM
-CVE-2025-5875 (A vulnerability classified as critical has been found in
TP-Link TL-IP ...)
+CVE-2025-5875 (A vulnerability classified as critical has been found in
TP-LINK Techn ...)
NOT-FOR-US: TP-Link
CVE-2025-5874 (A vulnerability was found in Redash up to 10.1.0/25.1.0. It has
been r ...)
NOT-FOR-US: Redash
@@ -84005,7 +84127,7 @@ CVE-2024-7626 (The WP Delicious \u2013 Recipe Plugin
for Food Bloggers (formerly
NOT-FOR-US: WordPress plugin
CVE-2024-45597 (Pluto is a superset of Lua 5.4 with a focus on general-purpose
program ...)
NOT-FOR-US: Pluto
-CVE-2024-44107 (DLL hijacking in the management console of Ivanti Workspace
Control ve ...)
+CVE-2024-44107 (DLL hijacking in the management console of Ivanti Workspace
Control be ...)
NOT-FOR-US: Ivanti
CVE-2024-44106 (Insufficient server-side controls in the management console of
Ivanti ...)
NOT-FOR-US: Ivanti
@@ -84013,7 +84135,7 @@ CVE-2024-44105 (Cleartext transmission of sensitive
information in the managemen
NOT-FOR-US: Ivanti
CVE-2024-44104 (An incorrectly implemented authentication scheme that is
subjected to ...)
NOT-FOR-US: Ivanti
-CVE-2024-44103 (DLL hijacking in the management console of Ivanti Workspace
Control ve ...)
+CVE-2024-44103 (DLL hijacking in the management console of Ivanti Workspace
Control be ...)
NOT-FOR-US: Ivanti
CVE-2024-43690 (Inclusion of Functionality from Untrusted Control
Sphere(CWE-829) in t ...)
NOT-FOR-US: Gallagher
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f8de0725b113279a01c88a01620f1c512c11e2a0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f8de0725b113279a01c88a01620f1c512c11e2a0
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
