Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e1c1a017 by security tracker role at 2022-03-04T20:10:20+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,183 @@
+CVE-2022-26476
+ RESERVED
+CVE-2022-26475
+ RESERVED
+CVE-2022-26474
+ RESERVED
+CVE-2022-26473
+ RESERVED
+CVE-2022-26472
+ RESERVED
+CVE-2022-26471
+ RESERVED
+CVE-2022-26470
+ RESERVED
+CVE-2022-26469
+ RESERVED
+CVE-2022-26468
+ RESERVED
+CVE-2022-26467
+ RESERVED
+CVE-2022-26466
+ RESERVED
+CVE-2022-26465
+ RESERVED
+CVE-2022-26464
+ RESERVED
+CVE-2022-26463
+ RESERVED
+CVE-2022-26462
+ RESERVED
+CVE-2022-26461
+ RESERVED
+CVE-2022-26460
+ RESERVED
+CVE-2022-26459
+ RESERVED
+CVE-2022-26458
+ RESERVED
+CVE-2022-26457
+ RESERVED
+CVE-2022-26456
+ RESERVED
+CVE-2022-26455
+ RESERVED
+CVE-2022-26454
+ RESERVED
+CVE-2022-26453
+ RESERVED
+CVE-2022-26452
+ RESERVED
+CVE-2022-26451
+ RESERVED
+CVE-2022-26450
+ RESERVED
+CVE-2022-26449
+ RESERVED
+CVE-2022-26448
+ RESERVED
+CVE-2022-26447
+ RESERVED
+CVE-2022-26446
+ RESERVED
+CVE-2022-26445
+ RESERVED
+CVE-2022-26444
+ RESERVED
+CVE-2022-26443
+ RESERVED
+CVE-2022-26442
+ RESERVED
+CVE-2022-26441
+ RESERVED
+CVE-2022-26440
+ RESERVED
+CVE-2022-26439
+ RESERVED
+CVE-2022-26438
+ RESERVED
+CVE-2022-26437
+ RESERVED
+CVE-2022-26436
+ RESERVED
+CVE-2022-26435
+ RESERVED
+CVE-2022-26434
+ RESERVED
+CVE-2022-26433
+ RESERVED
+CVE-2022-26432
+ RESERVED
+CVE-2022-26431
+ RESERVED
+CVE-2022-26430
+ RESERVED
+CVE-2022-26429
+ RESERVED
+CVE-2022-26428
+ RESERVED
+CVE-2022-26427
+ RESERVED
+CVE-2022-26426
+ RESERVED
+CVE-2022-26418
+ RESERVED
+CVE-2022-26416
+ RESERVED
+CVE-2022-26414
+ RESERVED
+CVE-2022-26413
+ RESERVED
+CVE-2022-26348
+ RESERVED
+CVE-2022-26347
+ RESERVED
+CVE-2022-26339
+ RESERVED
+CVE-2022-26123
+ RESERVED
+CVE-2022-26087
+ RESERVED
+CVE-2022-26078
+ RESERVED
+CVE-2022-26058
+ RESERVED
+CVE-2022-26055
+ RESERVED
+CVE-2022-26053
+ RESERVED
+CVE-2022-26039
+ RESERVED
+CVE-2022-26031
+ RESERVED
+CVE-2022-26027
+ RESERVED
+CVE-2022-25997
+ RESERVED
+CVE-2022-25968
+ RESERVED
+CVE-2022-25957
+ RESERVED
+CVE-2022-25920
+ RESERVED
+CVE-2022-25889
+ RESERVED
+CVE-2022-21224
+ RESERVED
+CVE-2022-0864
+ RESERVED
+CVE-2022-0863
+ RESERVED
+CVE-2022-0862
+ RESERVED
+CVE-2022-0861
+ RESERVED
+CVE-2022-0860
+ RESERVED
+CVE-2022-0859
+ RESERVED
+CVE-2022-0858
+ RESERVED
+CVE-2022-0857
+ RESERVED
+CVE-2022-0856
+ RESERVED
+CVE-2022-0855
+ RESERVED
+CVE-2022-0854
+ RESERVED
+CVE-2022-0853
+ RESERVED
+CVE-2022-0852
+ RESERVED
+CVE-2022-0851
+ RESERVED
+CVE-2022-0850
+ RESERVED
+CVE-2022-0849
+ RESERVED
+CVE-2022-0848 (OS Command Injection in GitHub repository part-db/part-db prior
to 0.5 ...)
+ TODO: check
CVE-2022-26412
RESERVED
CVE-2022-26411
@@ -86,14 +266,14 @@ CVE-2022-0843
RESERVED
CVE-2022-0842
RESERVED
-CVE-2022-0841 (OS Command Injection in GitHub repository ljharb/npm-lockfile
prior to ...)
+CVE-2022-0841 (OS Command Injection in GitHub repository ljharb/npm-lockfile
in v2.0. ...)
NOT-FOR-US: ljharb/npm-lockfile
CVE-2022-0840
RESERVED
-CVE-2022-0839
- RESERVED
-CVE-2022-0838
- RESERVED
+CVE-2022-0839 (Improper Restriction of XML External Entity Reference in GitHub
reposi ...)
+ TODO: check
+CVE-2022-0838 (Cross-site Scripting (XSS) - Reflected in GitHub repository
hestiacp/h ...)
+ TODO: check
CVE-2022-0837
RESERVED
CVE-2022-0836
@@ -130,10 +310,10 @@ CVE-2022-0834
RESERVED
CVE-2022-0833
RESERVED
-CVE-2022-0832
- RESERVED
-CVE-2022-0831
- RESERVED
+CVE-2022-0832 (Cross-site Scripting (XSS) - Stored in GitHub repository
pimcore/pimco ...)
+ TODO: check
+CVE-2022-0831 (Cross-site Scripting (XSS) - Stored in GitHub repository
pimcore/pimco ...)
+ TODO: check
CVE-2022-0830
RESERVED
CVE-2022-0829 (Improper Authorization in GitHub repository webmin/webmin prior
to 1.9 ...)
@@ -488,8 +668,8 @@ CVE-2022-26203
RESERVED
CVE-2022-26202
RESERVED
-CVE-2022-26201
- RESERVED
+CVE-2022-26201 (Victor CMS v1.0 was discovered to contain a SQL injection
vulnerabilit ...)
+ TODO: check
CVE-2022-26200
RESERVED
CVE-2022-26199
@@ -1437,8 +1617,8 @@ CVE-2022-0754
RESERVED
CVE-2022-0753 (Cross-site Scripting (XSS) - Reflected in GitHub repository
hestiacp/h ...)
NOT-FOR-US: Hestia Control Panel
-CVE-2022-0752
- RESERVED
+CVE-2022-0752 (Cross-site Scripting (XSS) - Generic in GitHub repository
hestiacp/hes ...)
+ TODO: check
CVE-2022-0751
RESERVED
[experimental] - gitlab 14.6.5+ds1-1
@@ -8895,8 +9075,8 @@ CVE-2022-0275
RESERVED
CVE-2022-23398
RESERVED
-CVE-2022-23397
- RESERVED
+CVE-2022-23397 (The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a
call to ...)
+ TODO: check
CVE-2022-23396
RESERVED
CVE-2022-23395 (jQuery Cookie 1.4.1 is affected by prototype pollution, which
can lead ...)
@@ -9033,10 +9213,10 @@ CVE-2022-23330 (A remote code execution (RCE)
vulnerability in HelloWorldAddonCo
NOT-FOR-US: jpress
CVE-2022-23329 (A vulnerability in
${"freemarker.template.utility.Execute"?new() of UJ ...)
NOT-FOR-US: UJCMS Jspxcms
-CVE-2022-23328
- RESERVED
-CVE-2022-23327
- RESERVED
+CVE-2022-23328 (A design flaw in all versions of Go-Ethereum allows an
attacker node t ...)
+ TODO: check
+CVE-2022-23327 (A design flaw in Go-Ethereum 1.10.12 and older versions allows
an atta ...)
+ TODO: check
CVE-2022-23326
RESERVED
CVE-2022-23325
@@ -9105,10 +9285,10 @@ CVE-2021-46396
RESERVED
CVE-2021-46395
RESERVED
-CVE-2021-46394
- RESERVED
-CVE-2021-46393
- RESERVED
+CVE-2021-46394 (There is a stack buffer overflow vulnerability in the
formSetPPTPServe ...)
+ TODO: check
+CVE-2021-46393 (There is a stack buffer overflow vulnerability in the
formSetPPTPServe ...)
+ TODO: check
CVE-2021-46392
RESERVED
CVE-2021-46391
@@ -9135,10 +9315,10 @@ CVE-2021-46381
RESERVED
CVE-2021-46380
RESERVED
-CVE-2021-46379
- RESERVED
-CVE-2021-46378
- RESERVED
+CVE-2021-46379 (DLink DIR850 ET850-1.08TRb03 is affected by an incorrect
access contro ...)
+ TODO: check
+CVE-2021-46378 (DLink DIR850 ET850-1.08TRb03 is affected by an incorrect
access contro ...)
+ TODO: check
CVE-2021-46377 (There is a front-end sql injection vulnerability in cszcms
1.2.9 via c ...)
NOT-FOR-US: cszcms
CVE-2021-46376
@@ -18925,8 +19105,8 @@ CVE-2021-44323
RESERVED
CVE-2021-44322
RESERVED
-CVE-2021-44321
- RESERVED
+CVE-2021-44321 (Mini-Inventory-and-Sales-Management-System is affected by
Cross Site R ...)
+ TODO: check
CVE-2021-44320
RESERVED
CVE-2021-44319
@@ -22782,10 +22962,10 @@ CVE-2021-43395
RESERVED
CVE-2021-43394 (Unisys OS 2200 Messaging Integration Services (NTSI) 7R3B IC3
and IC4, ...)
NOT-FOR-US: Unisys
-CVE-2021-43393
- RESERVED
-CVE-2021-43392
- RESERVED
+CVE-2021-43393 (STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN
sometimes ...)
+ TODO: check
+CVE-2021-43392 (STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN
sometimes ...)
+ TODO: check
CVE-2021-43396 (** DISPUTED ** In iconvdata/iso-2022-jp-3.c in the GNU C
Library (aka ...)
- glibc 2.32-5 (unimportant; bug #998622)
[buster] - glibc <not-affected> (Vulnerable code not present)
@@ -117016,14 +117196,14 @@ CVE-2020-18329
RESERVED
CVE-2020-18328
RESERVED
-CVE-2020-18327
- RESERVED
-CVE-2020-18326
- RESERVED
-CVE-2020-18325
- RESERVED
-CVE-2020-18324
- RESERVED
+CVE-2020-18327 (Cross Site Scripting (XSS) vulnerability exists in Alfresco
Alfresco C ...)
+ TODO: check
+CVE-2020-18326 (Cross Site Request Forgery (CSRF) vulnerability exists in
Intelliants ...)
+ TODO: check
+CVE-2020-18325 (Multilple Cross Site Scripting (XSS) vulnerability exists in
Intellian ...)
+ TODO: check
+CVE-2020-18324 (Cross Site Scripting (XSS) vulnerability exists in Subrion CMS
4.2.1 v ...)
+ TODO: check
CVE-2020-18323
RESERVED
CVE-2020-18322
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e1c1a01707d3ad7e6383cd34f1699d8bdec8681d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e1c1a01707d3ad7e6383cd34f1699d8bdec8681d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
