Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 49861358 by Salvatore Bonaccorso at 2024-12-02T21:53:58+01:00 Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -109,123 +109,123 @@ CVE-2024-53708 (Missing Authorization vulnerability in AutoQuiz AI Quiz allows A CVE-2024-53707 (Cross-Site Request Forgery (CSRF) vulnerability in Ahmet \u0130mamo\u0 ...) NOT-FOR-US: WordPress plugin CVE-2024-53617 (A Cross Site Scripting vulnerability in LibrePhotos before commit 3223 ...) - TODO: check + NOT-FOR-US: LibrePhotos CVE-2024-53566 (An issue in the action_listcategories() function of Sangoma Asterisk v ...) TODO: check CVE-2024-53564 (An authenticated arbitrary file upload vulnerability in the component ...) - TODO: check + NOT-FOR-US: FreePBX CVE-2024-53484 (Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation d ...) TODO: check CVE-2024-53459 (Sysax Multi Server 6.99 is vulnerable to Cross Site Scripting (XSS) vi ...) TODO: check CVE-2024-53364 (A SQL injection vulnerability was found in PHPGURUKUL Vehicle Parking ...) - TODO: check + NOT-FOR-US: PHPGURUKUL Vehicle Parking Management System CVE-2024-53259 (quic-go is an implementation of the QUIC protocol in Go. An off-path a ...) TODO: check CVE-2024-52806 (SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functio ...) TODO: check CVE-2024-52732 (Incorrect access control in wms-Warehouse management system-zeqp v2.20 ...) - TODO: check + NOT-FOR-US: wms-Warehouse management system-zeqp CVE-2024-52724 (ZZCMS 2023 was discovered to contain a SQL injection vulnerability in ...) - TODO: check + NOT-FOR-US: ZZCMS CVE-2024-52503 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52502 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: Imbasynergy ImbaChat CVE-2024-52494 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52493 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52492 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52491 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52489 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52487 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52486 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52484 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52483 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52482 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52479 (Cross-Site Request Forgery (CSRF) vulnerability in Ben Marshall Jobify ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52478 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52477 (Cross-Site Request Forgery (CSRF) vulnerability in No-nonsense Labs Do ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52476 (Unrestricted Upload of File with Dangerous Type vulnerability in stefa ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52469 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52468 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52467 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52466 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52465 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52464 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52463 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52462 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52461 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52460 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52459 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52458 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52457 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52456 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52455 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52454 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52453 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-52452 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-51900 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2024-50381 (A vulnerability exists in Snap One OVRC cloud where an attacker can im ...) - TODO: check + NOT-FOR-US: Snap One OVRC cloud CVE-2024-50380 (Snap One OVRC cloud uses the MAC address as an identifier to provide i ...) - TODO: check + NOT-FOR-US: Snap One OVRC cloud CVE-2024-49763 (PlexRipper is a cross-platform media downloader for Plex. PlexRipper\u ...) - TODO: check + NOT-FOR-US: PlexRipper CVE-2024-46909 (In WhatsUp Gold versions released before 2024.0.1, aremote unauthentic ...) - TODO: check + NOT-FOR-US: WhatsUp CVE-2024-46908 (In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vul ...) - TODO: check + NOT-FOR-US: WhatsUp CVE-2024-46907 (In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vul ...) - TODO: check + NOT-FOR-US: WhatsUp CVE-2024-46906 (In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vul ...) - TODO: check + NOT-FOR-US: WhatsUp CVE-2024-46905 (In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vul ...) - TODO: check + NOT-FOR-US: WhatsUp CVE-2024-43053 (Memory corruption while invoking IOCTL calls from user space to read W ...) - TODO: check + NOT-FOR-US: Qualcomm CVE-2024-43052 (Memory corruption while processing API calls to NPU with invalid input ...) - TODO: check + NOT-FOR-US: Qualcomm CVE-2024-43050 (Memory corruption while invoking IOCTL calls from user space to issue ...) - TODO: check + NOT-FOR-US: Qualcomm CVE-2024-43049 (Memory corruption while invoking IOCTL calls from user space to set ge ...) - TODO: check + NOT-FOR-US: Qualcomm CVE-2024-43048 (Memory corruption when invalid input is passed to invoke GPU Headroom ...) - TODO: check + NOT-FOR-US: Qualcomm CVE-2024-39343 (An issue was discovered in Samsung Mobile Processor and Wearable Proce ...) - TODO: check + NOT-FOR-US: Samsung CVE-2024-38827 (The usage of String.toLowerCase()and String.toUpperCase()has some Loca ...) TODO: check CVE-2024-33063 (Transient DOS while parsing the ML IE when a beacon with common info l ...) @@ -374,7 +374,7 @@ CVE-2024-53103 (In the Linux kernel, the following vulnerability has been resolv [bookworm] - linux 6.1.119-1 NOTE: https://git.kernel.org/linus/e629295bd60abf4da1db85b82819ca6a4f6c1e79 (6.13-rc1) CVE-2024-45520 (WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1 allows a remote ...) - TODO: check + NOT-FOR-US: WithSecure CVE-2024-20139 (In Bluetooth firmware, there is a possible firmware asssert due to imp ...) TODO: check CVE-2024-20138 (In wlan driver, there is a possible out of bound read due to improper ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/498613582771d88f9f05d6e0a8953cea2878f6e5 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/498613582771d88f9f05d6e0a8953cea2878f6e5 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits