Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8464c668 by security tracker role at 2022-04-16T08:10:21+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,5 +1,249 @@
-CVE-2022-29281
+CVE-2022-29403
RESERVED
+CVE-2022-29402
+ RESERVED
+CVE-2022-29401
+ RESERVED
+CVE-2022-29400
+ RESERVED
+CVE-2022-29399
+ RESERVED
+CVE-2022-29398
+ RESERVED
+CVE-2022-29397
+ RESERVED
+CVE-2022-29396
+ RESERVED
+CVE-2022-29395
+ RESERVED
+CVE-2022-29394
+ RESERVED
+CVE-2022-29393
+ RESERVED
+CVE-2022-29392
+ RESERVED
+CVE-2022-29391
+ RESERVED
+CVE-2022-29390
+ RESERVED
+CVE-2022-29389
+ RESERVED
+CVE-2022-29388
+ RESERVED
+CVE-2022-29387
+ RESERVED
+CVE-2022-29386
+ RESERVED
+CVE-2022-29385
+ RESERVED
+CVE-2022-29384
+ RESERVED
+CVE-2022-29383
+ RESERVED
+CVE-2022-29382
+ RESERVED
+CVE-2022-29381
+ RESERVED
+CVE-2022-29380
+ RESERVED
+CVE-2022-29379
+ RESERVED
+CVE-2022-29378
+ RESERVED
+CVE-2022-29377
+ RESERVED
+CVE-2022-29376
+ RESERVED
+CVE-2022-29375
+ RESERVED
+CVE-2022-29374
+ RESERVED
+CVE-2022-29373
+ RESERVED
+CVE-2022-29372
+ RESERVED
+CVE-2022-29371
+ RESERVED
+CVE-2022-29370
+ RESERVED
+CVE-2022-29369
+ RESERVED
+CVE-2022-29368
+ RESERVED
+CVE-2022-29367
+ RESERVED
+CVE-2022-29366
+ RESERVED
+CVE-2022-29365
+ RESERVED
+CVE-2022-29364
+ RESERVED
+CVE-2022-29363
+ RESERVED
+CVE-2022-29362
+ RESERVED
+CVE-2022-29361
+ RESERVED
+CVE-2022-29360
+ RESERVED
+CVE-2022-29359
+ RESERVED
+CVE-2022-29358
+ RESERVED
+CVE-2022-29357
+ RESERVED
+CVE-2022-29356
+ RESERVED
+CVE-2022-29355
+ RESERVED
+CVE-2022-29354
+ RESERVED
+CVE-2022-29353
+ RESERVED
+CVE-2022-29352
+ RESERVED
+CVE-2022-29351
+ RESERVED
+CVE-2022-29350
+ RESERVED
+CVE-2022-29349
+ RESERVED
+CVE-2022-29348
+ RESERVED
+CVE-2022-29347
+ RESERVED
+CVE-2022-29346
+ RESERVED
+CVE-2022-29345
+ RESERVED
+CVE-2022-29344
+ RESERVED
+CVE-2022-29343
+ RESERVED
+CVE-2022-29342
+ RESERVED
+CVE-2022-29341
+ RESERVED
+CVE-2022-29340
+ RESERVED
+CVE-2022-29339
+ RESERVED
+CVE-2022-29338
+ RESERVED
+CVE-2022-29337
+ RESERVED
+CVE-2022-29336
+ RESERVED
+CVE-2022-29335
+ RESERVED
+CVE-2022-29334
+ RESERVED
+CVE-2022-29333
+ RESERVED
+CVE-2022-29332
+ RESERVED
+CVE-2022-29331
+ RESERVED
+CVE-2022-29330
+ RESERVED
+CVE-2022-29329
+ RESERVED
+CVE-2022-29328
+ RESERVED
+CVE-2022-29327
+ RESERVED
+CVE-2022-29326
+ RESERVED
+CVE-2022-29325
+ RESERVED
+CVE-2022-29324
+ RESERVED
+CVE-2022-29323
+ RESERVED
+CVE-2022-29322
+ RESERVED
+CVE-2022-29321
+ RESERVED
+CVE-2022-29320
+ RESERVED
+CVE-2022-29319
+ RESERVED
+CVE-2022-29318
+ RESERVED
+CVE-2022-29317
+ RESERVED
+CVE-2022-29316
+ RESERVED
+CVE-2022-29315
+ RESERVED
+CVE-2022-29314
+ RESERVED
+CVE-2022-29313
+ RESERVED
+CVE-2022-29312
+ RESERVED
+CVE-2022-29311
+ RESERVED
+CVE-2022-29310
+ RESERVED
+CVE-2022-29309
+ RESERVED
+CVE-2022-29308
+ RESERVED
+CVE-2022-29307
+ RESERVED
+CVE-2022-29306
+ RESERVED
+CVE-2022-29305
+ RESERVED
+CVE-2022-29304
+ RESERVED
+CVE-2022-29303
+ RESERVED
+CVE-2022-29302
+ RESERVED
+CVE-2022-29301
+ RESERVED
+CVE-2022-29300
+ RESERVED
+CVE-2022-29299
+ RESERVED
+CVE-2022-29298
+ RESERVED
+CVE-2022-29297
+ RESERVED
+CVE-2022-29296
+ RESERVED
+CVE-2022-29295
+ RESERVED
+CVE-2022-29294
+ RESERVED
+CVE-2022-29293
+ RESERVED
+CVE-2022-29292
+ RESERVED
+CVE-2022-29291
+ RESERVED
+CVE-2022-29290
+ RESERVED
+CVE-2022-29289
+ RESERVED
+CVE-2022-29288
+ RESERVED
+CVE-2022-29287 (Kentico CMS before 13.0.66 has an Insecure Direct Object
Reference vul ...)
+ TODO: check
+CVE-2022-29286
+ RESERVED
+CVE-2022-29285
+ RESERVED
+CVE-2022-29284
+ RESERVED
+CVE-2022-29283
+ RESERVED
+CVE-2022-29282
+ RESERVED
+CVE-2022-29281 (Notable before 1.9.0-beta.8 doesn't effectively prevent the
opening of ...)
+ TODO: check
CVE-2022-29280
RESERVED
CVE-2022-29279
@@ -60,8 +304,8 @@ CVE-2022-1367
RESERVED
CVE-2022-1366
RESERVED
-CVE-2022-1365
- RESERVED
+CVE-2022-1365 (Exposure of Private Personal Information to an Unauthorized
Actor in G ...)
+ TODO: check
CVE-2022-29265
RESERVED
CVE-2022-1364
@@ -561,8 +805,8 @@ CVE-2022-29074
RESERVED
CVE-2022-29073
RESERVED
-CVE-2022-29072
- RESERVED
+CVE-2022-29072 (7-Zip through 21.07 on Windows allows privilege escalation and
command ...)
+ TODO: check
CVE-2022-29071
RESERVED
CVE-2022-29070
@@ -768,8 +1012,8 @@ CVE-2022-29022
RESERVED
CVE-2022-29021
RESERVED
-CVE-2022-29020
- RESERVED
+CVE-2022-29020 (ForestBlog through 2022-02-16 allows admin/profile/save
userAvatar XSS ...)
+ TODO: check
CVE-2022-29019
RESERVED
CVE-2022-29018
@@ -5004,20 +5248,20 @@ CVE-2022-27429
RESERVED
CVE-2022-27428
RESERVED
-CVE-2022-27427
- RESERVED
-CVE-2022-27426
- RESERVED
-CVE-2022-27425
- RESERVED
+CVE-2022-27427 (A zero-code remote code injection vulnerability via
configuration.php ...)
+ TODO: check
+CVE-2022-27426 (A Server-Side Request Forgery (SSRF) in Chamilo LMS v1.11.13
allows at ...)
+ TODO: check
+CVE-2022-27425 (Chamilo LMS v1.11.13 was discovered to contain a cross-site
scripting ...)
+ TODO: check
CVE-2022-27424
RESERVED
-CVE-2022-27423
- RESERVED
-CVE-2022-27422
- RESERVED
-CVE-2022-27421
- RESERVED
+CVE-2022-27423 (Chamilo LMS v1.11.13 was discovered to contain a SQL injection
vulnera ...)
+ TODO: check
+CVE-2022-27422 (A reflected cross-site scripting (XSS) vulnerability in
Chamilo LMS v1 ...)
+ TODO: check
+CVE-2022-27421 (Chamilo LMS v1.11.13 lacks validation on the user modification
form, a ...)
+ TODO: check
CVE-2022-27420
RESERVED
CVE-2022-27419 (rtl_433 21.12 was discovered to contain a stack overflow in
the functi ...)
@@ -9235,8 +9479,8 @@ CVE-2022-24373
RESERVED
CVE-2022-24298
RESERVED
-CVE-2022-24279
- RESERVED
+CVE-2022-24279 (The package madlib-object-utils before 0.1.8 are vulnerable to
Prototy ...)
+ TODO: check
CVE-2022-24278
RESERVED
CVE-2022-24068
@@ -12319,7 +12563,7 @@ CVE-2022-24769 (Moby is an open-source project created
by Docker to enable and a
NOTE:
https://github.com/containerd/containerd/security/advisories/GHSA-c9cp-9c75-9v8c
CVE-2022-24768 (Argo CD is a declarative, GitOps continuous delivery tool for
Kubernet ...)
NOT-FOR-US: Argo CD
-CVE-2022-24767 (GitHub: Git for Windows' uninstaller vulnerable to DLL
hijacking when ...)
+CVE-2022-24767 (Git for Windows is a fork of Git containing Windows-specific
patches. ...)
NOT-FOR-US: Git-for-Windows (Git fork containing Windows-specific
patches)
CVE-2022-24766 (mitmproxy is an interactive, SSL/TLS-capable intercepting
proxy. In mi ...)
- mitmproxy <unfixed> (bug #1008948)
@@ -33976,7 +34220,7 @@ CVE-2021-42699 (The affected product is vulnerable to
cookie information being t
NOT-FOR-US: AzeoTech
CVE-2021-42698 (Project files are stored memory objects in the form of binary
serializ ...)
NOT-FOR-US: AzeoTech
-CVE-2021-42697 (Akka HTTP 10.1.x and 10.2.x before 10.2.7 can encounter stack
exhausti ...)
+CVE-2021-42697 (Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can
encounter ...)
NOT-FOR-US: Akka HTTP
CVE-2021-42696
RESERVED
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8464c668bdf562a38586e33d3db20bace75e006b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8464c668bdf562a38586e33d3db20bace75e006b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
