Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f67c4f0a by security tracker role at 2023-11-24T08:11:29+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,4 +1,22 @@
-CVE-2023-6118 (: Path Traversal: '/../filedir' vulnerability in Neutron IP
Camera all ...)
+CVE-2023-49216 (Usedesk before 1.7.57 allows profile stored XSS.)
+ TODO: check
+CVE-2023-49215 (Usedesk before 1.7.57 allows filter reflected XSS.)
+ TODO: check
+CVE-2023-49214 (Usedesk before 1.7.57 allows chat template injection.)
+ TODO: check
+CVE-2023-49213 (The API endpoints in Ironman PowerShell Universal 3.0.0
through 4.2.0 ...)
+ TODO: check
+CVE-2023-48796 (Exposure of Sensitive Information to an Unauthorized Actor
vulnerabili ...)
+ TODO: check
+CVE-2023-47529 (Exposure of Sensitive Information to an Unauthorized Actor
vulnerabili ...)
+ TODO: check
+CVE-2023-47244 (Exposure of Sensitive Information to an Unauthorized Actor
vulnerabili ...)
+ TODO: check
+CVE-2023-44303 (RVTools, Version 3.9.2 and above, contain a sensitive data
exposure vu ...)
+ TODO: check
+CVE-2023-33706 (SysAid before 23.2.15 allows Indirect Object Reference (IDOR)
attacks ...)
+ TODO: check
+CVE-2023-6118 (Path Traversal: '/../filedir' vulnerability in Neutron IP
Camera allow ...)
NOT-FOR-US: Neutron IP Camera
CVE-2023-5972 (A null pointer dereference flaw was found in the nft_inner.c
functiona ...)
- linux 6.5.10-1
@@ -410,7 +428,7 @@ CVE-2023-6213 (Memory safety bugs present in Firefox 119.
Some of these bugs sho
- firefox 120.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2023-49/#CVE-2023-6213
CVE-2023-6212 (Memory safety bugs present in Firefox 119, Firefox ESR 115.4,
and Thun ...)
- {DSA-5561-1}
+ {DSA-5561-1 DLA-3661-1}
- firefox 120.0-1
- firefox-esr 115.5.0esr-1
- thunderbird 1:115.5.0-1
@@ -424,7 +442,7 @@ CVE-2023-6210 (When an https: web page created a pop-up
from a "javascript:" URL
- firefox 120.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2023-49/#CVE-2023-6210
CVE-2023-6209 (Relative URLs starting with three slashes were incorrectly
parsed, and ...)
- {DSA-5561-1}
+ {DSA-5561-1 DLA-3661-1}
- firefox 120.0-1
- firefox-esr 115.5.0esr-1
- thunderbird 1:115.5.0-1
@@ -432,7 +450,7 @@ CVE-2023-6209 (Relative URLs starting with three slashes
were incorrectly parsed
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2023-50/#CVE-2023-6209
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2023-52/#CVE-2023-6209
CVE-2023-6208 (When using X11, text selected by the page using the Selection
API was ...)
- {DSA-5561-1}
+ {DSA-5561-1 DLA-3661-1}
- firefox 120.0-1
- firefox-esr 115.5.0esr-1
- thunderbird 1:115.5.0-1
@@ -440,7 +458,7 @@ CVE-2023-6208 (When using X11, text selected by the page
using the Selection API
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2023-50/#CVE-2023-6208
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2023-52/#CVE-2023-6208
CVE-2023-6207 (Ownership mismanagement led to a use-after-free in
ReadableByteStreams ...)
- {DSA-5561-1}
+ {DSA-5561-1 DLA-3661-1}
- firefox 120.0-1
- firefox-esr 115.5.0esr-1
- thunderbird 1:115.5.0-1
@@ -448,7 +466,7 @@ CVE-2023-6207 (Ownership mismanagement led to a
use-after-free in ReadableByteSt
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2023-50/#CVE-2023-6207
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2023-52/#CVE-2023-6207
CVE-2023-6206 (The black fade animation when exiting fullscreen is roughly the
length ...)
- {DSA-5561-1}
+ {DSA-5561-1 DLA-3661-1}
- firefox 120.0-1
- firefox-esr 115.5.0esr-1
- thunderbird 1:115.5.0-1
@@ -456,7 +474,7 @@ CVE-2023-6206 (The black fade animation when exiting
fullscreen is roughly the l
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2023-50/#CVE-2023-6206
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2023-52/#CVE-2023-6206
CVE-2023-6205 (It was possible to cause the use of a MessagePort after it had
already ...)
- {DSA-5561-1}
+ {DSA-5561-1 DLA-3661-1}
- firefox 120.0-1
- firefox-esr 115.5.0esr-1
- thunderbird 1:115.5.0-1
@@ -464,7 +482,7 @@ CVE-2023-6205 (It was possible to cause the use of a
MessagePort after it had al
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2023-50/#CVE-2023-6205
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2023-52/#CVE-2023-6205
CVE-2023-6204 (On some systems\u2014depending on the graphics settings and
drivers\u2 ...)
- {DSA-5561-1}
+ {DSA-5561-1 DLA-3661-1}
- firefox 120.0-1
- firefox-esr 115.5.0esr-1
- thunderbird 1:115.5.0-1
@@ -43325,8 +43343,8 @@ CVE-2023-26281 (IBM HTTP Server 8.5 used by IBM
WebSphere Application Server cou
NOT-FOR-US: IBM
CVE-2023-26280
RESERVED
-CVE-2023-26279
- RESERVED
+CVE-2023-26279 (IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a
local us ...)
+ TODO: check
CVE-2023-26278 (IBM QRadar WinCollect Agent 10.0 through 10.1.3 could allow a
local au ...)
NOT-FOR-US: IBM
CVE-2023-26277 (IBM QRadar WinCollect Agent 10.0 though 10.1.3 could allow a
local use ...)
@@ -160695,8 +160713,8 @@ CVE-2021-39010
RESERVED
CVE-2021-39009 (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 stores user
credential ...)
NOT-FOR-US: IBM
-CVE-2021-39008
- RESERVED
+CVE-2021-39008 (IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a
privileg ...)
+ TODO: check
CVE-2021-39007
RESERVED
CVE-2021-39006 (IBM QRadar WinCollect Agent 10.0 and 10.0.1 could allow an
attacker to ...)
@@ -233968,6 +233986,7 @@ CVE-2020-22526
CVE-2020-22525
RESERVED
CVE-2020-22524 (Buffer Overflow vulnerability in FreeImage_Load function in
FreeImage ...)
+ {DLA-3662-1}
- freeimage 3.18.0+ds2-10 (bug #1051889)
NOTE: https://sourceforge.net/p/freeimage/bugs/319/
NOTE: Fixed with r1848 from
http://svn.code.sf.net/p/freeimage/svn/FreeImage/
@@ -236519,10 +236538,12 @@ CVE-2020-21430
CVE-2020-21429
RESERVED
CVE-2020-21428 (Buffer Overflow vulnerability in function LoadRGB in
PluginDDS.cpp in ...)
+ {DLA-3662-1}
- freeimage 3.18.0+ds2-10 (bug #1051738)
NOTE: https://sourceforge.net/p/freeimage/bugs/299/
NOTE: Fixed with r1877 from
http://svn.code.sf.net/p/freeimage/svn/FreeImage/
CVE-2020-21427 (Buffer Overflow vulnerability in function LoadPixelDataRLE8 in
PluginB ...)
+ {DLA-3662-1}
- freeimage 3.18.0+ds2-10 (bug #1051737)
NOTE: https://sourceforge.net/p/freeimage/bugs/298/
NOTE: Probably fixed with r1832 and r1836 from
http://svn.code.sf.net/p/freeimage/svn/FreeImage/
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f67c4f0ad22c0f89f5718efc62b80011f9a85c44
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f67c4f0ad22c0f89f5718efc62b80011f9a85c44
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
