[Git][security-tracker-team/security-tracker][master] automatic update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ef3140e7 by security tracker role at 2024-04-13T20:11:58+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,8 +1,28 @@
-CVE-2024-32487 [less(1) with LESSOPEN mishandles \n in paths]
+CVE-2024-3739 (A vulnerability classified as critical was found in cym1102 nginxWebUI ...)
+	TODO: check
+CVE-2024-3738 (A vulnerability classified as critical has been found in cym1102 nginx ...)
+	TODO: check
+CVE-2024-3737 (A vulnerability was found in cym1102 nginxWebUI up to 3.9.9. It has be ...)
+	TODO: check
+CVE-2024-3736 (A vulnerability was found in cym1102 nginxWebUI up to 3.9.9. It has be ...)
+	TODO: check
+CVE-2024-3735 (A vulnerability was found in Smart Office up to 20240405. It has been  ...)
+	TODO: check
+CVE-2024-3721 (A vulnerability was found in TBK DVR-4104 and DVR-4216 up to 20240412  ...)
+	TODO: check
+CVE-2024-3720 (A vulnerability has been found in Tianwell Fire Intelligent Command Pl ...)
+	TODO: check
+CVE-2024-3719 (A vulnerability, which was classified as critical, was found in Campco ...)
+	TODO: check
+CVE-2024-3662 (The WPZOOM Social Feed Widget & Block plugin for WordPress is vulnerab ...)
+	TODO: check
+CVE-2023-6494 (The WPC Smart Quick View for WooCommerce plugin for WordPress is vulne ...)
+	TODO: check
+CVE-2024-32487 (less through 653 allows OS command execution via a newline character i ...)
 	- less <unfixed> (bug #1068938)
 	NOTE: https://www.openwall.com/lists/oss-security/2024/04/12/5
 	NOTE: Fixed by: https://github.com/gwsw/less/commit/007521ac3c95bc76e3d59c6dbfe75d06c8075c33
-CVE-2024-26817 [amdkfd: use calloc instead of kzalloc to avoid integer overflow]
+CVE-2024-26817 (In the Linux kernel, the following vulnerability has been resolved:  a ...)
 	- linux <unfixed>
 	NOTE: https://git.kernel.org/linus/3b0daecfeac0103aba8b293df07a0cbaf8b43f29
 CVE-2024-3027 (The Smart Slider 3 plugin for WordPress is vulnerable to unauthorized  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ef3140e7f28a017b0f3520ead8fc060756be20b7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ef3140e7f28a017b0f3520ead8fc060756be20b7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240413/24c97978/attachment.htm>