Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e1c971ee by security tracker role at 2023-12-23T20:12:22+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,17 @@
+CVE-2023-6744 (The Divi theme for WordPress is vulnerable to Stored Cross-Site
Script ...)
+ TODO: check
+CVE-2023-5962 (A weak cryptographic algorithm vulnerability has been
identified in io ...)
+ TODO: check
+CVE-2023-5961 (A Cross-Site Request Forgery (CSRF) vulnerability has been
identified ...)
+ TODO: check
+CVE-2023-49594 (An information disclosure vulnerability exists in the
challenge functi ...)
+ TODO: check
+CVE-2020-36769 (The Widget Settings Importer/Exporter Plugin for WordPress is
vulnera ...)
+ TODO: check
+CVE-2016-15036 (** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in
Deis Work ...)
+ TODO: check
+CVE-2014-125108 (A vulnerability was found in w3c online-spellchecker-py up to
20140130 ...)
+ TODO: check
CVE-2023-51443
- freeswitch <itp> (bug #389591)
CVE-2023-7002 (The Backup Migration plugin for WordPress is vulnerable to OS
Command ...)
@@ -555,7 +569,7 @@ CVE-2023-41166 (An issue was discovered in Stormshield
Network Security (SNS) 3.
NOT-FOR-US: Stormshield Network Security (SNS)
CVE-2023-7018 (Deserialization of Untrusted Data in GitHub repository
huggingface/tra ...)
NOT-FOR-US: Transformers
-CVE-2023-7008 [Unsigned name response in signed zone is not refused when
DNSSEC=yes]
+CVE-2023-7008 (A vulnerability was found in systemd-resolved. This issue may
allow sy ...)
- systemd <unfixed> (bug #1059278)
[bookworm] - systemd <no-dsa> (Minor issue)
[bullseye] - systemd <not-affected> (Vulnerable code introduced in
v248-rc1)
@@ -3772,7 +3786,7 @@ CVE-2023-34439 (Pleasanter 1.3.47.0 and earlier contains
a stored cross-site scr
CVE-2023-32268 (Exposure of Proxy Administrator Credentials An authenticated
administ ...)
NOT-FOR-US: Microfocus
CVE-2023-46218 (This flaw allows a malicious HTTP server to set "super
cookies" in cur ...)
- {DLA-3692-1}
+ {DSA-5587-1 DLA-3692-1}
- curl 8.5.0-1 (bug #1057646)
NOTE: Introduced by:
https://github.com/curl/curl/commit/e77b5b7453c1e8ccd7ec0816890d98e2f392e465
(curl-7_46_0)
NOTE: Fixed by:
https://github.com/curl/curl/commit/2b0994c29a721c91c572cff7808c572a24d251eb
(curl-8_5_0)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e1c971eefdb7ff414bcc289bc886bfe4fe3750b9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e1c971eefdb7ff414bcc289bc886bfe4fe3750b9
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
