Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a211a493 by Salvatore Bonaccorso at 2024-11-27T21:41:36+01:00
Process some more NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -15,17 +15,17 @@ CVE-2024-53264 (bunkerweb is an Open-source and
next-generation Web Application
CVE-2024-53254
REJECTED
CVE-2024-52951 (Stored Cross-Site Scripting in the Access Request History in
Omada Ide ...)
- TODO: check
+ NOT-FOR-US: Omada
CVE-2024-52323 (ZohocorpManageEngine Analytics Plus versions below 6100 are
vulnerable ...)
- TODO: check
+ NOT-FOR-US: Zoho ManageEngine
CVE-2024-51228 (An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and
TOTOLINK-CX- ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2024-47181 (Contiki-NG is an open-source, cross-platform operating system
for IoT ...)
- TODO: check
+ NOT-FOR-US: Contiki-NG
CVE-2024-46055 (OpenVidReview 1.0 is vulnerable to Cross Site Scripting (XSS)
in revie ...)
- TODO: check
+ NOT-FOR-US: OpenVidReview
CVE-2024-46054 (OpenVidReview 1.0 is vulnerable to Incorrect Access Control.
The /uplo ...)
- TODO: check
+ NOT-FOR-US: OpenVidReview
CVE-2024-42333 (The researcher is showing that it is possible to leak a small
amount o ...)
TODO: check
CVE-2024-42332 (The researcher is showing that due to the way the SNMP trap
log is par ...)
@@ -43,33 +43,33 @@ CVE-2024-42327 (A non-admin user account on the Zabbix
frontend with the default
CVE-2024-42326 (There was discovered a use after free bug in browser.c in the
es_brows ...)
TODO: check
CVE-2024-41126 (Contiki-NG is an open-source, cross-platform operating system
for IoT ...)
- TODO: check
+ NOT-FOR-US: Contiki-NG
CVE-2024-41125 (Contiki-NG is an open-source, cross-platform operating system
for IoT ...)
- TODO: check
+ NOT-FOR-US: Contiki-NG
CVE-2024-37816 (Quectel EC25-EUX EC25EUXGAR08A05M1G was discovered to contain
a stack ...)
- TODO: check
+ NOT-FOR-US: Quectel
CVE-2024-36468 (The reported vulnerability is a stack buffer overflow in the
zbx_snmp_ ...)
TODO: check
CVE-2024-36464 (When exporting media types, the password is exported in the
YAML in pl ...)
TODO: check
CVE-2024-31976 (EnGenius EWS356-FIR 1.1.30 and earlier devices allow a remote
attacker ...)
- TODO: check
+ NOT-FOR-US: EnGenius EWS356-FIR
CVE-2024-21703 (This Medium severity Security Misconfiguration vulnerability
was intro ...)
- TODO: check
+ NOT-FOR-US: Atlassian
CVE-2024-11862 (Non constant time cryptographic operation in
Devolutions.XTS.NET 2024. ...)
- TODO: check
+ NOT-FOR-US: Devolutions
CVE-2024-11860 (A vulnerability classified as critical has been found in
SourceCodeste ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Best House Rental Management System
CVE-2024-11667 (A directory traversal vulnerability in the web management
interface of ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2024-11160
REJECTED
CVE-2024-11025 (An authenticated attacker with low privileges may use a SQL
Injection ...)
TODO: check
CVE-2024-11009 (The Internal Linking for SEO traffic & Ranking \u2013 Auto
internal li ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-10521 (The WordPress Contact Forms by Cimatti plugin for WordPress is
vulnera ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-54003 (Jenkins Simple Queue Plugin 1.4.4 and earlier does not escape
the view ...)
NOT-FOR-US: Jenkins plugin
CVE-2024-54004 (Jenkins Filesystem List Parameter Plugin 0.0.14 and earlier
does not r ...)
@@ -133546,7 +133546,7 @@ CVE-2023-29003 (SvelteKit is a web development
framework. The SvelteKit framewor
CVE-2023-29002 (Cilium is a networking, observability, and security solution
with an e ...)
- cilium <itp> (bug #858303)
CVE-2023-29001 (Contiki-NG is an open-source, cross-platform operating system
for IoT ...)
- TODO: check
+ NOT-FOR-US: Contiki-NG
CVE-2023-29000 (The Nextcloud Desktop Client is a tool to synchronize files
from Nextc ...)
- nextcloud-desktop 3.7.0-1
[bullseye] - nextcloud-desktop <no-dsa> (Minor issue)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a211a493878d179d9ea96a07337ca00dc86e479c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a211a493878d179d9ea96a07337ca00dc86e479c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
