[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Dec 1 08:12:13 GMT 2023
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
980e574b by security tracker role at 2023-12-01T08:11:40+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,87 @@
+CVE-2023-6442 (A vulnerability was found in PHPGurukul Nipah Virus Testing Management ...)
+ TODO: check
+CVE-2023-6440 (A vulnerability was found in SourceCodester Book Borrower System 1.0 a ...)
+ TODO: check
+CVE-2023-6033 (Improper neutralization of input in Jira integration configuration in ...)
+ TODO: check
+CVE-2023-5995 (An issue has been discovered in GitLab EE affecting all versions start ...)
+ TODO: check
+CVE-2023-5915 (A vulnerability of Uncontrolled Resource Consumption has been identifi ...)
+ TODO: check
+CVE-2023-5909 (KEPServerEX does not properly validate certificates from clients which ...)
+ TODO: check
+CVE-2023-5908 (KEPServerEX is vulnerable to a buffer overflow which may allow an atta ...)
+ TODO: check
+CVE-2023-5226 (An issue has been discovered in GitLab affecting all versions before 1 ...)
+ TODO: check
+CVE-2023-4912 (An issue has been discovered in GitLab EE affecting all versions start ...)
+ TODO: check
+CVE-2023-4658 (An issue has been discovered in GitLab EE affecting all versions start ...)
+ TODO: check
+CVE-2023-4317 (An issue has been discovered in GitLab affecting all versions starting ...)
+ TODO: check
+CVE-2023-49735 (** UNSUPPORTED WHEN ASSIGNED ** The value set as the DefaultLocaleRes ...)
+ TODO: check
+CVE-2023-48894 (Incorrect Access Control vulnerability in jshERP V3.3 allows attackers ...)
+ TODO: check
+CVE-2023-48016 (Restaurant Table Booking System V1.0 is vulnerable to SQL Injection in ...)
+ TODO: check
+CVE-2023-47454 (An Untrusted search path vulnerability in NetEase CloudMusic 2.10.4 fo ...)
+ TODO: check
+CVE-2023-47453 (An Untrusted search path vulnerability in Sohu Video Player 7.0.15.0 a ...)
+ TODO: check
+CVE-2023-47452 (An Untrusted search path vulnerability in notepad++ 6.5 allows local u ...)
+ TODO: check
+CVE-2023-47307 (Buffer Overflow vulnerability in /apply.cgi in Shenzhen Libituo Techno ...)
+ TODO: check
+CVE-2023-47279 (In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability ...)
+ TODO: check
+CVE-2023-47207 (In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability ...)
+ TODO: check
+CVE-2023-46956 (SQL injection vulnerability in Packers and Movers Management System v. ...)
+ TODO: check
+CVE-2023-46690 (In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability ...)
+ TODO: check
+CVE-2023-46389 (LOYTEC electronics GmbH LINX-212 firmware 6.2.4 and LINX-151 Firmware ...)
+ TODO: check
+CVE-2023-46388 (LOYTEC electronics GmbH LINX-212 6.2.4 and LINX-151 7.2.4 are vulnerab ...)
+ TODO: check
+CVE-2023-46387 (LOYTEC electronics GmbH LINX-212 firmware 6.2.4 and LINX-151 firmware ...)
+ TODO: check
+CVE-2023-46386 (LOYTEC electronics GmbH LINX-212 firmware 6.2.4 and LINX-151 firmware ...)
+ TODO: check
+CVE-2023-46385 (LOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable to Inse ...)
+ TODO: check
+CVE-2023-46384 (LOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable to Inse ...)
+ TODO: check
+CVE-2023-46383 (LOYTEC electronics GmbH LINX Configurator 7.4.10 uses HTTP Basic Authe ...)
+ TODO: check
+CVE-2023-46326 (ZStack Cloud version 3.10.38 and before allows unauthenticated API acc ...)
+ TODO: check
+CVE-2023-45253 (An issue was discovered in Huddly HuddlyCameraService before version 8 ...)
+ TODO: check
+CVE-2023-45252 (DLL Hijacking vulnerability in Huddly HuddlyCameraService before versi ...)
+ TODO: check
+CVE-2023-43455 (An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B2 ...)
+ TODO: check
+CVE-2023-43454 (An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B2 ...)
+ TODO: check
+CVE-2023-43453 (An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B2 ...)
+ TODO: check
+CVE-2023-43089 (Dell Rugged Control Center, version prior to 4.7, contains insufficien ...)
+ TODO: check
+CVE-2023-42917 (A memory corruption vulnerability was addressed with improved locking. ...)
+ TODO: check
+CVE-2023-42916 (An out-of-bounds read was addressed with improved input validation. Th ...)
+ TODO: check
+CVE-2023-3964 (An issue has been discovered in GitLab affecting all versions starting ...)
+ TODO: check
+CVE-2023-3949 (An issue has been discovered in GitLab affecting all versions starting ...)
+ TODO: check
+CVE-2023-3443 (An issue has been discovered in GitLab affecting all versions starting ...)
+ TODO: check
+CVE-2023-39226 (In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability ...)
+ TODO: check
CVE-2023-6439 (A vulnerability classified as problematic was found in ZenTao PMS 18.8 ...)
NOT-FOR-US: ZenTao PMS
CVE-2023-6438 (A vulnerability classified as problematic has been found in IceCMS 2.0 ...)
@@ -1161,9 +1245,9 @@ CVE-2023-47316 (Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access
NOT-FOR-US: Headwind MDM Web panel
CVE-2023-47315 (Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Contro ...)
NOT-FOR-US: Headwind MDM Web panel
-CVE-2023-47314 (Headwind MDM Web panel 5.22.1 is vulnerable to Cross Site Scripting (X ...)
+CVE-2023-47314 (Headwind MDM Web panel 5.22.1 is vulnerable to cross-site scripting (X ...)
NOT-FOR-US: Headwind MDM Web panel
-CVE-2023-47313 (Headwind MDM Web panel 5.22.1 is vulnerable to Directory Traversal.)
+CVE-2023-47313 (Headwind MDM Web panel 5.22.1 is vulnerable to Directory Traversal. Th ...)
NOT-FOR-US: Headwind MDM Web panel
CVE-2023-47312 (Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Contro ...)
NOT-FOR-US: Headwind MDM Web panel
@@ -4333,12 +4417,12 @@ CVE-2023-42802 (GLPI is a free asset and IT management software package. Startin
- glpi <removed>
NOTE: https://github.com/glpi-project/glpi/security/advisories/GHSA-rrh2-x4ch-pq3m
CVE-2023-47360 (Videolan VLC prior to version 3.0.20 contains an Integer underflow tha ...)
- {DSA-5545-1}
+ {DSA-5545-1 DLA-3679-1}
- vlc 3.0.20-1
NOTE: https://0xariana.github.io/blog/real_bugs/vlc/mms
NOTE: https://code.videolan.org/videolan/vlc/-/commit/27840cb5b20bc4651ba6af01d0a7ae6da17297ef
CVE-2023-47359 (Videolan VLC prior to version 3.0.20 contains an incorrect offset read ...)
- {DSA-5545-1}
+ {DSA-5545-1 DLA-3679-1}
- vlc 3.0.20-1
NOTE: https://0xariana.github.io/blog/real_bugs/vlc/mms
NOTE: https://code.videolan.org/videolan/vlc/-/commit/27840cb5b20bc4651ba6af01d0a7ae6da17297ef
@@ -66302,6 +66386,7 @@ CVE-2022-45584
CVE-2022-45583
RESERVED
CVE-2022-45582 (Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1. ...)
+ {DLA-3678-1}
- horizon 3:23.1.0-3
[bookworm] - horizon 3:23.0.0-5+deb12u1
[bullseye] - horizon 3:18.6.2-5+deb11u2
@@ -169419,8 +169504,8 @@ CVE-2021-35977 (An issue was discovered in Digi RealPort for Windows through 4.8
NOT-FOR-US: Digi RealPort
CVE-2021-35976 (The feature to preview a website in Plesk Obsidian 18.0.0 through 18.0 ...)
NOT-FOR-US: Plesk Obsidian
-CVE-2021-35975
- RESERVED
+CVE-2021-35975 (Absolute path traversal vulnerability in the Systematica SMTP Adapter ...)
+ TODO: check
CVE-2021-35974
RESERVED
CVE-2021-35973 (NETGEAR WAC104 devices before 1.0.4.15 are affected by an authenticati ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/980e574be32aace231ea565cadcb6e3b6a182cd7
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/980e574be32aace231ea565cadcb6e3b6a182cd7
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231201/2f5d3cfd/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list