Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ad83af21 by Salvatore Bonaccorso at 2024-11-26T22:05:08+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -45,68 +45,68 @@ CVE-2024-52336 (A script injection vulnerability was
identified in the Tuned pac
- tuned <unfixed>
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2324540
CVE-2024-52008 (Fides is an open-source privacy engineering platform. The user
invite ...)
- TODO: check
+ NOT-FOR-US: Fides
CVE-2024-51058 (Local File Inclusion (LFI) vulnerability has been discovered
in TCPDF ...)
- tcpdf <unfixed>
NOTE:
https://github.com/tecnickcom/TCPDF/commit/bfa7d2b6d455ebf72ebe3d48fbd487ee5a1f6f3b
(6.7.6)
CVE-2024-50377 (A CWE-798 "Use of Hard-coded Credentials" was discovered
affecting the ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2024-50376 (A CWE-79 "Improper Neutralization of Input During Web Page
Generation ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2024-50375 (A CWE-306 "Missing Authentication for Critical Function" was
discovere ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2024-50374 (A CWE-78 "Improper Neutralization of Special Elements used in
an OS Co ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2024-50373 (A CWE-78 "Improper Neutralization of Special Elements used in
an OS Co ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2024-50372 (A CWE-78 "Improper Neutralization of Special Elements used in
an OS Co ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2024-50371 (A CWE-78 "Improper Neutralization of Special Elements used in
an OS Co ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2024-50370 (A CWE-78 "Improper Neutralization of Special Elements used in
an OS Co ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2024-50369 (A CWE-78 "Improper Neutralization of Special Elements used in
an OS Co ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2024-50368 (A CWE-78 "Improper Neutralization of Special Elements used in
an OS Co ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2024-50367 (A CWE-78 "Improper Neutralization of Special Elements used in
an OS Co ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2024-50366 (A CWE-78 "Improper Neutralization of Special Elements used in
an OS Co ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2024-50365 (A CWE-78 "Improper Neutralization of Special Elements used in
an OS Co ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2024-50364 (A CWE-78 "Improper Neutralization of Special Elements used in
an OS Co ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2024-50363 (A CWE-78 "Improper Neutralization of Special Elements used in
an OS Co ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2024-50362 (A CWE-78 "Improper Neutralization of Special Elements used in
an OS Co ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2024-50361 (A CWE-78 "Improper Neutralization of Special Elements used in
an OS Co ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2024-50360 (A CWE-78 "Improper Neutralization of Special Elements used in
an OS Co ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2024-50359 (A CWE-78 "Improper Neutralization of Special Elements used in
an OS Co ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2024-50358 (A CWE-15 "External Control of System or Configuration Setting"
was dis ...)
- TODO: check
+ NOT-FOR-US: Advantech
CVE-2024-49053 (Microsoft Dynamics 365 Sales Spoofing Vulnerability)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2024-49052 (Missing authentication for critical function in Microsoft
Azure Policy ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2024-49038 (Improper neutralization of input during web page generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2024-49035 (An improper access control vulnerability in
Partner.Microsoft.com allo ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2024-38834 (VMware Aria Operations contains a stored cross-site scripting
vulnerab ...)
- TODO: check
+ NOT-FOR-US: VMware
CVE-2024-38833 (VMware Aria Operations contains a stored cross-site scripting
vulnerab ...)
- TODO: check
+ NOT-FOR-US: VMware
CVE-2024-38832 (VMware Aria Operations contains a stored cross-site scripting
vulnerab ...)
- TODO: check
+ NOT-FOR-US: VMware
CVE-2024-38831 (VMware Aria Operations contains a local privilege escalation
vulnerabi ...)
- TODO: check
+ NOT-FOR-US: VMware
CVE-2024-38830 (VMware Aria Operations contains a local privilege escalation
vulnerabi ...)
- TODO: check
+ NOT-FOR-US: VMware
CVE-2024-36463 (The implementation of atob in "Zabbix JS" allows to create a
string wi ...)
TODO: check
CVE-2024-32965 (Lobe Chat is an open-source, AI chat framework. Versions of
lobe-chat ...)
@@ -116,11 +116,11 @@ CVE-2024-22117 (When a URL is added to the map element,
it is recorded in the da
CVE-2024-11828 (A denial of service (DoS) condition was discovered in GitLab
CE/EE aff ...)
- gitlab <unfixed>
CVE-2024-11743 (A vulnerability, which was classified as problematic, was
found in Sou ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Best House Rental Management System
CVE-2024-11742 (A vulnerability, which was classified as problematic, has been
found i ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Best House Rental Management System
CVE-2024-11680 (ProjectSend versions prior to r1720 are affected by an
improper authen ...)
- TODO: check
+ NOT-FOR-US: ProjectSend
CVE-2024-11669 (An issue was discovered in GitLab CE/EE affecting all versions
from 16 ...)
- gitlab <not-affected> (Vulnerable code introduced later)
CVE-2024-11668 (An issue has been discovered in GitLab CE/EE affecting all
versions fr ...)
@@ -128,25 +128,25 @@ CVE-2024-11668 (An issue has been discovered in GitLab
CE/EE affecting all versi
CVE-2024-11407 (There exists a denial of service through Data corruption in
gRPC-C++ - ...)
TODO: check
CVE-2024-11192 (The Spotify Play Button for WordPress plugin for WordPress is
vulnerab ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-11177
REJECTED
CVE-2024-11145 (Valor Apps Easy Folder Listing Pro has a deserialization
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Valor
CVE-2024-11119 (The BNE Gallery Extended plugin for WordPress is vulnerable to
Stored ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-11091 (The Support SVG \u2013 Upload svg files in wordpress without
hassle pl ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-11032 (The Parsi Date plugin for WordPress is vulnerable to Reflected
Cross-S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-11024 (The AppPresser \u2013 Mobile App Framework plugin for
WordPress is vul ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-10878 (The Sugar Calendar \u2013 Simple Event Management plugin for
WordPress ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-10579 (The Hustle \u2013 Email Marketing, Lead Generation, Optins,
Popups plu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-10308 (The Jeg Elementor Kit plugin for WordPress is vulnerable to
Stored Cro ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-10240 (An issue has been discovered in GitLab EE affecting all
versions start ...)
- gitlab <not-affected> (Vulnerable code introduced later)
CVE-2024-XXXX [Supplemental group inheritance grants unintended access to GID
0 due to lack of supplemental groups from mod_sql]
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ad83af21cf4e4ea87cb06b90938f822989dfe818
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ad83af21cf4e4ea87cb06b90938f822989dfe818
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
