[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Aug 27 09:10:28 BST 2022



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b7e00dcb by security tracker role at 2022-08-27T08:10:19+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,9 @@
-CVE-2022-38785
+CVE-2022-38065
+	RESERVED
+CVE-2022-3011
 	RESERVED
+CVE-2022-38785
+	REJECTED
 CVE-2022-38784
 	RESERVED
 CVE-2022-38783
@@ -928,8 +932,8 @@ CVE-2022-2917
 	RESERVED
 CVE-2022-2916
 	RESERVED
-CVE-2022-2915
-	RESERVED
+CVE-2022-2915 (A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 app ...)
+	TODO: check
 CVE-2022-2914
 	RESERVED
 CVE-2022-2913
@@ -5887,20 +5891,20 @@ CVE-2022-36550
 	RESERVED
 CVE-2022-36549
 	RESERVED
-CVE-2022-36548
-	RESERVED
-CVE-2022-36547
-	RESERVED
-CVE-2022-36546
-	RESERVED
-CVE-2022-36545
-	RESERVED
-CVE-2022-36544
-	RESERVED
-CVE-2022-36543
-	RESERVED
-CVE-2022-36542
-	RESERVED
+CVE-2022-36548 (Edoc-doctor-appointment-system v1.0.1 was discovered to contain a stor ...)
+	TODO: check
+CVE-2022-36547 (Edoc-doctor-appointment-system v1.0.1 was discovered to contain a refl ...)
+	TODO: check
+CVE-2022-36546 (Edoc-doctor-appointment-system v1.0.1 was discovered to contain a Cros ...)
+	TODO: check
+CVE-2022-36545 (Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL  ...)
+	TODO: check
+CVE-2022-36544 (Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL  ...)
+	TODO: check
+CVE-2022-36543 (Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL  ...)
+	TODO: check
+CVE-2022-36542 (An access control issue in the component /ip/admin/ of Edoc-doctor-app ...)
+	TODO: check
 CVE-2022-36541
 	RESERVED
 CVE-2022-36540
@@ -5909,8 +5913,8 @@ CVE-2022-36539
 	RESERVED
 CVE-2022-36538
 	RESERVED
-CVE-2022-36537
-	RESERVED
+CVE-2022-36537 (ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows atta ...)
+	TODO: check
 CVE-2022-36536
 	RESERVED
 CVE-2022-36535
@@ -5925,8 +5929,8 @@ CVE-2022-36531
 	RESERVED
 CVE-2022-36530 (An issue was discovered in rageframe2 2.6.37. There is a XSS vulnerabi ...)
 	NOT-FOR-US: rageframe
-CVE-2022-36529
-	RESERVED
+CVE-2022-36529 (Kensite CMS v1.0 was discovered to contain multiple SQL injection vuln ...)
+	TODO: check
 CVE-2022-36528
 	RESERVED
 CVE-2022-36527 (Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or ...)
@@ -214003,8 +214007,8 @@ CVE-2019-15169
 	RESERVED
 CVE-2019-15168
 	RESERVED
-CVE-2019-15167
-	RESERVED
+CVE-2019-15167 (The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in prin ...)
+	TODO: check
 CVE-2019-15166 (lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 l ...)
 	{DSA-4547-1 DLA-1955-1}
 	- tcpdump 4.9.3-1 (bug #941698)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b7e00dcbae1c4d9c5a6f2cc2c625b01b28e565ff

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b7e00dcbae1c4d9c5a6f2cc2c625b01b28e565ff
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220827/1da5f3fb/attachment.htm>


More information about the debian-security-tracker-commits mailing list