[Git][security-tracker-team/security-tracker][master] automatic update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3cae84a6 by security tracker role at 2023-06-03T08:12:09+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,33 @@
+CVE-2023-3083 (Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassn ...)
+	TODO: check
+CVE-2023-3055 (The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross- ...)
+	TODO: check
+CVE-2023-3053 (The Page Builder by AZEXO plugin for WordPress is vulnerable to unauth ...)
+	TODO: check
+CVE-2023-3052 (The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross- ...)
+	TODO: check
+CVE-2023-3051 (The Page Builder by AZEXO plugin for WordPress is vulnerable to Stored ...)
+	TODO: check
+CVE-2023-3044 (An excessively large PDF page size (found in fuzz testing, unlikely in ...)
+	TODO: check
+CVE-2023-33143 (Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability)
+	TODO: check
+CVE-2023-2816 (Consul and Consul Enterprise allowed any user with service:write permi ...)
+	TODO: check
+CVE-2023-2781 (The User Email Verification for WooCommerce plugin for WordPress is vu ...)
+	TODO: check
+CVE-2023-2416 (The Online Booking & Scheduling Calendar for WordPress by vcita plugin ...)
+	TODO: check
+CVE-2023-2415 (The Online Booking & Scheduling Calendar for WordPress by vcita plugin ...)
+	TODO: check
+CVE-2023-2407 (The Event Registration Calendar By vcita plugin, versions up to and in ...)
+	TODO: check
+CVE-2023-2406 (The Event Registration Calendar By vcita plugin, versions up to and in ...)
+	TODO: check
+CVE-2023-2405 (The CRM and Lead Management by vcita plugin for WordPress is vulnerabl ...)
+	TODO: check
+CVE-2023-2404 (The CRM and Lead Management by vcita plugin for WordPress is vulnerabl ...)
+	TODO: check
 CVE-2023-3075 (Cross-Site Request Forgery (CSRF) in GitHub repository tsolucio/corebo ...)
 	NOT-FOR-US: Corebos
 CVE-2023-3074 (Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/core ...)
@@ -2875,18 +2905,18 @@ CVE-2023-2305
 	RESERVED
 CVE-2023-2304 (The Favorites plugin for WordPress is vulnerable to Stored Cross-Site  ...)
 	NOT-FOR-US: Favorites plugin for WordPress
-CVE-2023-2303
-	RESERVED
-CVE-2023-2302
-	RESERVED
-CVE-2023-2301
-	RESERVED
-CVE-2023-2300
-	RESERVED
-CVE-2023-2299
-	RESERVED
-CVE-2023-2298
-	RESERVED
+CVE-2023-2303 (The Contact Form and Calls To Action by vcita plugin for WordPress is  ...)
+	TODO: check
+CVE-2023-2302 (The Contact Form and Calls To Action by vcita plugin for WordPress is  ...)
+	TODO: check
+CVE-2023-2301 (The Contact Form Builder by vcita plugin for WordPress is vulnerable t ...)
+	TODO: check
+CVE-2023-2300 (The Contact Form Builder by vcita plugin for WordPress is vulnerable t ...)
+	TODO: check
+CVE-2023-2299 (The Online Booking & Scheduling Calendar for WordPress by vcita plugin ...)
+	TODO: check
+CVE-2023-2298 (The Online Booking & Scheduling Calendar for WordPress by vcita plugin ...)
+	TODO: check
 CVE-2023-2297 (The Profile Builder \u2013 User Profile & User Registration Forms plug ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2023-2296 (The Loginizer WordPress plugin before 1.7.9 does not escape a paramete ...)
@@ -12906,8 +12936,8 @@ CVE-2023-27988 (The post-authentication command injection vulnerability in the Z
 	NOT-FOR-US: Zyxel
 CVE-2023-27987 (In Apache Linkis <=1.3.1,due to the default token generated by Linkis  ...)
 	NOT-FOR-US: Apache Linkis
-CVE-2023-1297
-	RESERVED
+CVE-2023-1297 (Consul and Consul Enterprise's cluster peering implementation containe ...)
+	TODO: check
 CVE-2023-1296 (HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.5.0 did not correct ...)
 	- nomad <not-affected> (Vulnerable code not present)
 	NOTE: https://discuss.hashicorp.com/t/hcsec-2023-09-nomad-acls-can-not-deny-access-to-workloads-own-variables/51390
@@ -22044,10 +22074,10 @@ CVE-2023-24805 (cups-filters contains backends, filters, and other software requ
 	NOTE: Fixed by: https://github.com/OpenPrinting/cups-filters/commit/93e60d3df358c0ae6f3dba79e1c9684657683d89 (1.x)
 CVE-2023-24804 (The ownCloud Android app allows ownCloud users to access, share, and e ...)
 	NOT-FOR-US: ownCloud Android app
-CVE-2023-0584
-	RESERVED
-CVE-2023-0583
-	RESERVED
+CVE-2023-0584 (The VK Blocks plugin for WordPress is vulnerable to improper authoriza ...)
+	TODO: check
+CVE-2023-0583 (The VK Blocks plugin for WordPress is vulnerable to improper authoriza ...)
+	TODO: check
 CVE-2023-0582
 	RESERVED
 CVE-2023-0581 (The PrivateContent plugin for WordPress is vulnerable to protection me ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3cae84a687e6bc6ef121cf71e7a171c0d0c65874

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3cae84a687e6bc6ef121cf71e7a171c0d0c65874
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230603/23f04308/attachment.htm>