[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Jun 9 09:10:30 BST 2022 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
951d4762 by security tracker role at 2022-06-09T08:10:21+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,359 @@
+CVE-2022-32738
+	RESERVED
+CVE-2022-32737
+	RESERVED
+CVE-2022-32736
+	RESERVED
+CVE-2022-32735
+	RESERVED
+CVE-2022-32734
+	RESERVED
+CVE-2022-32733
+	RESERVED
+CVE-2022-32732
+	RESERVED
+CVE-2022-32731
+	RESERVED
+CVE-2022-32730
+	RESERVED
+CVE-2022-32729
+	RESERVED
+CVE-2022-32728
+	RESERVED
+CVE-2022-32727
+	RESERVED
+CVE-2022-32726
+	RESERVED
+CVE-2022-32725
+	RESERVED
+CVE-2022-32724
+	RESERVED
+CVE-2022-32723
+	RESERVED
+CVE-2022-32722
+	RESERVED
+CVE-2022-32721
+	RESERVED
+CVE-2022-32720
+	RESERVED
+CVE-2022-32719
+	RESERVED
+CVE-2022-32718
+	RESERVED
+CVE-2022-32717
+	RESERVED
+CVE-2022-32716
+	RESERVED
+CVE-2022-32715
+	RESERVED
+CVE-2022-32714
+	RESERVED
+CVE-2022-32713
+	RESERVED
+CVE-2022-32712
+	RESERVED
+CVE-2022-32711
+	RESERVED
+CVE-2022-32710
+	RESERVED
+CVE-2022-32709
+	RESERVED
+CVE-2022-32708
+	RESERVED
+CVE-2022-32707
+	RESERVED
+CVE-2022-32706
+	RESERVED
+CVE-2022-32705
+	RESERVED
+CVE-2022-32704
+	RESERVED
+CVE-2022-32703
+	RESERVED
+CVE-2022-32702
+	RESERVED
+CVE-2022-32701
+	RESERVED
+CVE-2022-32700
+	RESERVED
+CVE-2022-32699
+	RESERVED
+CVE-2022-32698
+	RESERVED
+CVE-2022-32697
+	RESERVED
+CVE-2022-32696
+	RESERVED
+CVE-2022-32695
+	RESERVED
+CVE-2022-32694
+	RESERVED
+CVE-2022-32693
+	RESERVED
+CVE-2022-32692
+	RESERVED
+CVE-2022-32691
+	RESERVED
+CVE-2022-32690
+	RESERVED
+CVE-2022-32689
+	RESERVED
+CVE-2022-32688
+	RESERVED
+CVE-2022-32687
+	RESERVED
+CVE-2022-32686
+	RESERVED
+CVE-2022-32685
+	RESERVED
+CVE-2022-32684
+	RESERVED
+CVE-2022-32683
+	RESERVED
+CVE-2022-32682
+	RESERVED
+CVE-2022-32681
+	RESERVED
+CVE-2022-32680
+	RESERVED
+CVE-2022-32679
+	RESERVED
+CVE-2022-32678
+	RESERVED
+CVE-2022-32677
+	RESERVED
+CVE-2022-32676
+	RESERVED
+CVE-2022-32675
+	RESERVED
+CVE-2022-32674
+	RESERVED
+CVE-2022-32673
+	RESERVED
+CVE-2022-32672
+	RESERVED
+CVE-2022-32671
+	RESERVED
+CVE-2022-32670
+	RESERVED
+CVE-2022-32669
+	RESERVED
+CVE-2022-32668
+	RESERVED
+CVE-2022-32667
+	RESERVED
+CVE-2022-32666
+	RESERVED
+CVE-2022-32665
+	RESERVED
+CVE-2022-32664
+	RESERVED
+CVE-2022-32663
+	RESERVED
+CVE-2022-32662
+	RESERVED
+CVE-2022-32661
+	RESERVED
+CVE-2022-32660
+	RESERVED
+CVE-2022-32659
+	RESERVED
+CVE-2022-32658
+	RESERVED
+CVE-2022-32657
+	RESERVED
+CVE-2022-32656
+	RESERVED
+CVE-2022-32655
+	RESERVED
+CVE-2022-32654
+	RESERVED
+CVE-2022-32653
+	RESERVED
+CVE-2022-32652
+	RESERVED
+CVE-2022-32651
+	RESERVED
+CVE-2022-32650
+	RESERVED
+CVE-2022-32649
+	RESERVED
+CVE-2022-32648
+	RESERVED
+CVE-2022-32647
+	RESERVED
+CVE-2022-32646
+	RESERVED
+CVE-2022-32645
+	RESERVED
+CVE-2022-32644
+	RESERVED
+CVE-2022-32643
+	RESERVED
+CVE-2022-32642
+	RESERVED
+CVE-2022-32641
+	RESERVED
+CVE-2022-32640
+	RESERVED
+CVE-2022-32639
+	RESERVED
+CVE-2022-32638
+	RESERVED
+CVE-2022-32637
+	RESERVED
+CVE-2022-32636
+	RESERVED
+CVE-2022-32635
+	RESERVED
+CVE-2022-32634
+	RESERVED
+CVE-2022-32633
+	RESERVED
+CVE-2022-32632
+	RESERVED
+CVE-2022-32631
+	RESERVED
+CVE-2022-32630
+	RESERVED
+CVE-2022-32629
+	RESERVED
+CVE-2022-32628
+	RESERVED
+CVE-2022-32627
+	RESERVED
+CVE-2022-32626
+	RESERVED
+CVE-2022-32625
+	RESERVED
+CVE-2022-32624
+	RESERVED
+CVE-2022-32623
+	RESERVED
+CVE-2022-32622
+	RESERVED
+CVE-2022-32621
+	RESERVED
+CVE-2022-32620
+	RESERVED
+CVE-2022-32619
+	RESERVED
+CVE-2022-32618
+	RESERVED
+CVE-2022-32617
+	RESERVED
+CVE-2022-32616
+	RESERVED
+CVE-2022-32615
+	RESERVED
+CVE-2022-32614
+	RESERVED
+CVE-2022-32613
+	RESERVED
+CVE-2022-32612
+	RESERVED
+CVE-2022-32611
+	RESERVED
+CVE-2022-32610
+	RESERVED
+CVE-2022-32609
+	RESERVED
+CVE-2022-32608
+	RESERVED
+CVE-2022-32607
+	RESERVED
+CVE-2022-32606
+	RESERVED
+CVE-2022-32605
+	RESERVED
+CVE-2022-32604
+	RESERVED
+CVE-2022-32603
+	RESERVED
+CVE-2022-32602
+	RESERVED
+CVE-2022-32601
+	RESERVED
+CVE-2022-32600
+	RESERVED
+CVE-2022-32599
+	RESERVED
+CVE-2022-32598
+	RESERVED
+CVE-2022-32597
+	RESERVED
+CVE-2022-32596
+	RESERVED
+CVE-2022-32595
+	RESERVED
+CVE-2022-32594
+	RESERVED
+CVE-2022-32593
+	RESERVED
+CVE-2022-32592
+	RESERVED
+CVE-2022-32591
+	RESERVED
+CVE-2022-32590
+	RESERVED
+CVE-2022-32589
+	RESERVED
+CVE-2022-32569
+	RESERVED
+CVE-2022-32568
+	RESERVED
+CVE-2022-32567
+	RESERVED
+CVE-2022-32566
+	RESERVED
+CVE-2022-32565
+	RESERVED
+CVE-2022-32564
+	RESERVED
+CVE-2022-32563
+	RESERVED
+CVE-2022-32562
+	RESERVED
+CVE-2022-32561
+	RESERVED
+CVE-2022-32560
+	RESERVED
+CVE-2022-32559
+	RESERVED
+CVE-2022-32558
+	RESERVED
+CVE-2022-32557
+	RESERVED
+CVE-2022-32556
+	RESERVED
+CVE-2022-32555
+	RESERVED
+CVE-2022-32554
+	RESERVED
+CVE-2022-32553
+	RESERVED
+CVE-2022-32552
+	RESERVED
+CVE-2022-30944
+	RESERVED
+CVE-2022-30601
+	RESERVED
+CVE-2022-30542
+	RESERVED
+CVE-2022-30539
+	RESERVED
+CVE-2022-29920
+	RESERVED
+CVE-2022-29896
+	RESERVED
+CVE-2022-29523
+	RESERVED
+CVE-2022-28699
+	RESERVED
+CVE-2022-28697
+	RESERVED
+CVE-2022-2036 (Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacqu ...)
+	TODO: check
 CVE-2022-32551
 	RESERVED
 CVE-2022-32550
@@ -701,8 +1057,8 @@ CVE-2017-20019
 	RESERVED
 CVE-2017-20018
 	RESERVED
-CVE-2016-15002
-	RESERVED
+CVE-2016-15002 (A vulnerability, which was classified as critical, was found in MONyog ...)
+	TODO: check
 CVE-2019-25070
 	RESERVED
 CVE-2019-25069
@@ -900,8 +1256,8 @@ CVE-2022-1987 (Buffer Over-read in GitHub repository bfabiszewski/libmobi prior
 	- libmobi 0.11+dfsg-1
 	NOTE: https://huntr.dev/bounties/e8197737-7557-443e-a59f-2a86e8dda75f/
 	NOTE: https://github.com/bfabiszewski/libmobi/commit/612562bc1ea38f1708b044e7a079c47a05b1291d (v0.11)
-CVE-2022-1986
-	RESERVED
+CVE-2022-1986 (OS Command Injection in GitHub repository gogs/gogs prior to 0.12.9. ...)
+	TODO: check
 CVE-2022-32234
 	RESERVED
 CVE-2022-30943
@@ -1064,8 +1420,8 @@ CVE-2022-32197
 	RESERVED
 CVE-2022-32196
 	RESERVED
-CVE-2022-32195
-	RESERVED
+CVE-2022-32195 (Open edX platform before 2022-06-06 allows XSS via the "next" paramete ...)
+	TODO: check
 CVE-2022-32194
 	RESERVED
 CVE-2022-32193
@@ -2477,8 +2833,8 @@ CVE-2022-31650 (In SoX 14.4.2, there is a floating-point exception in lsx_aiffst
 	[bullseye] - sox <no-dsa> (Minor issue)
 	[buster] - sox <no-dsa> (Minor issue)
 	NOTE: https://sourceforge.net/p/sox/bugs/360/
-CVE-2022-31649
-	RESERVED
+CVE-2022-31649 (ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Inf ...)
+	TODO: check
 CVE-2022-31648 (Talend Administration Center is vulnerable to a reflected Cross-Site S ...)
 	NOT-FOR-US: Talend Administration Center
 CVE-2022-31647
@@ -3052,8 +3408,8 @@ CVE-2022-31498 (LibreHealth EHR Base 2.0.0 allows interface/orders/patient_match
 	NOT-FOR-US: LibreHealth EHR Base
 CVE-2022-31497 (LibreHealth EHR Base 2.0.0 allows interface/main/finder/finder_navigat ...)
 	NOT-FOR-US: LibreHealth EHR Base
-CVE-2022-31496
-	RESERVED
+CVE-2022-31496 (LibreHealth EHR Base 2.0.0 allows incorrect interface/super/manage_sit ...)
+	TODO: check
 CVE-2022-31495 (LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page ...)
 	NOT-FOR-US: LibreHealth EHR Base
 CVE-2022-31494 (LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php action XSS. ...)
@@ -3414,8 +3770,8 @@ CVE-2022-31315
 	RESERVED
 CVE-2022-31314
 	RESERVED
-CVE-2022-31313
-	RESERVED
+CVE-2022-31313 (api-res-py package in PyPI 0.1 is vulnerable to a code execution backd ...)
+	TODO: check
 CVE-2022-31312
 	RESERVED
 CVE-2022-31311
@@ -6944,8 +7300,8 @@ CVE-2022-30077
 	RESERVED
 CVE-2022-30076
 	RESERVED
-CVE-2022-30075
-	RESERVED
+CVE-2022-30075 (In TP-Link Router AX50 firmware 210730 and older, import of a maliciou ...)
+	TODO: check
 CVE-2022-30074
 	RESERVED
 CVE-2022-30073 (WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via /admin/ ...)
@@ -10142,10 +10498,10 @@ CVE-2022-29016
 	RESERVED
 CVE-2022-29015
 	RESERVED
-CVE-2022-29014
-	RESERVED
-CVE-2022-29013
-	RESERVED
+CVE-2022-29014 (A local file inclusion vulnerability in Razer Sila Gaming Router v2.0. ...)
+	TODO: check
+CVE-2022-29013 (A command injection in the command parameter of Razer Sila Gaming Rout ...)
+	TODO: check
 CVE-2022-29012
 	RESERVED
 CVE-2022-29011
@@ -19250,14 +19606,14 @@ CVE-2022-25809 (Improper Neutralization of audio output from 3rd and 4th Generat
 	NOT-FOR-US: Amazon Echo Dot devices
 CVE-2022-25808
 	RESERVED
-CVE-2022-25807
-	RESERVED
-CVE-2022-25806
-	RESERVED
-CVE-2022-25805
-	RESERVED
-CVE-2022-25804
-	RESERVED
+CVE-2022-25807 (An issue was discovered in the IGEL Universal Management Suite (UMS) 6 ...)
+	TODO: check
+CVE-2022-25806 (An issue was discovered in the IGEL Universal Management Suite (UMS) 6 ...)
+	TODO: check
+CVE-2022-25805 (An issue was discovered in the IGEL Universal Management Suite (UMS) 6 ...)
+	TODO: check
+CVE-2022-25804 (An issue was discovered in the IGEL Universal Management Suite (UMS) 6 ...)
+	TODO: check
 CVE-2022-25803
 	RESERVED
 CVE-2022-25802



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/951d4762526b26095d8fe58d86265fd0d698469a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/951d4762526b26095d8fe58d86265fd0d698469a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220609/9c779a7e/attachment.htm>

More information about the debian-security-tracker-commits mailing list