[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Jan 24 20:12:29 GMT 2024 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
93962be7 by security tracker role at 2024-01-24T20:12:18+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,20 +1,118 @@
-CVE-2024-23905
+CVE-2024-23649 (Lemmy is a link aggregator and forum for the fediverse. Starting in ve ...)
+	TODO: check
+CVE-2024-23648 (Pimcore's Admin Classic Bundle provides a backend user interface for P ...)
+	TODO: check
+CVE-2024-23646 (Pimcore's Admin Classic Bundle provides a backend user interface for P ...)
+	TODO: check
+CVE-2024-23644 (Trillium is a composable toolkit for building internet applications wi ...)
+	TODO: check
+CVE-2024-23641 (SvelteKit is a web development kit. In SvelteKit 2, sending a GET requ ...)
+	TODO: check
+CVE-2024-22725 (Orthanc versions before 1.12.2 are affected by a reflected cross-site  ...)
+	TODO: check
+CVE-2024-22720 (Kanboard 1.2.34 is vulnerable to Html Injection in the group managemen ...)
+	TODO: check
+CVE-2024-22651 (There is a command injection vulnerability in the ssdpcgi_main functio ...)
+	TODO: check
+CVE-2024-22309 (Deserialization of Untrusted Data vulnerability in QuantumCloud ChatBo ...)
+	TODO: check
+CVE-2024-22308 (URL Redirection to Untrusted Site ('Open Redirect') vulnerability in s ...)
+	TODO: check
+CVE-2024-22301 (Exposure of Sensitive Information to an Unauthorized Actor vulnerabili ...)
+	TODO: check
+CVE-2024-22294 (Exposure of Sensitive Information to an Unauthorized Actor vulnerabili ...)
+	TODO: check
+CVE-2024-22284 (Deserialization of Untrusted Data vulnerability in Thomas Belser Asgar ...)
+	TODO: check
+CVE-2024-22229 (Dell Unity, versions prior to 5.4, contain a vulnerability whereby log ...)
+	TODO: check
+CVE-2024-22154 (Exposure of Sensitive Information to an Unauthorized Actor vulnerabili ...)
+	TODO: check
+CVE-2024-22152 (Unrestricted Upload of File with Dangerous Type vulnerability in WebTo ...)
+	TODO: check
+CVE-2024-22141 (Exposure of Sensitive Information to an Unauthorized Actor vulnerabili ...)
+	TODO: check
+CVE-2024-22135 (Unrestricted Upload of File with Dangerous Type vulnerability in WebTo ...)
+	TODO: check
+CVE-2024-22134 (Server-Side Request Forgery (SSRF) vulnerability in Renzo Johnson Cont ...)
+	TODO: check
+CVE-2024-0854 (URL redirection to untrusted site ('Open Redirect') vulnerability in f ...)
+	TODO: check
+CVE-2023-6697 (The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulne ...)
+	TODO: check
+CVE-2023-52221 (Unrestricted Upload of File with Dangerous Type vulnerability in UkrSo ...)
+	TODO: check
+CVE-2023-52040 (An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows a ...)
+	TODO: check
+CVE-2023-52039 (An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows a ...)
+	TODO: check
+CVE-2023-52038 (An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows a ...)
+	TODO: check
+CVE-2023-51890 (An infinite loop issue discovered in Mathtex 1.05 and before allows a  ...)
+	TODO: check
+CVE-2023-51889 (Stack Overflow vulnerability in the validate() function in Mathtex v.1 ...)
+	TODO: check
+CVE-2023-51888 (Buffer Overflow vulnerability in the nomath() function in Mathtex v.1. ...)
+	TODO: check
+CVE-2023-51887 (Command Injection vulnerability in Mathtex v.1.05 and before allows a  ...)
+	TODO: check
+CVE-2023-51886 (Buffer Overflow vulnerability in the main() function in Mathtex 1.05 a ...)
+	TODO: check
+CVE-2023-51885 (Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a re ...)
+	TODO: check
+CVE-2023-51702 (Since version 5.2.0, when using deferrable mode with the path of a Kub ...)
+	TODO: check
+CVE-2023-50944 (Apache Airflow, versions before 2.8.1, have a vulnerability that allow ...)
+	TODO: check
+CVE-2023-50943 (Apache Airflow, versions before 2.8.1, have a vulnerability that allow ...)
+	TODO: check
+CVE-2023-44281 (Dell Pair Installer version prior to 1.2.1 contains an elevation of pr ...)
+	TODO: check
+CVE-2023-44001 (An issue in Ailand clinic mini-app on Line v13.6.1 allows attackers to ...)
+	TODO: check
+CVE-2023-44000 (An issue in Otakara lapis totuka mini-app on Line v13.6.1 allows attac ...)
+	TODO: check
+CVE-2023-43999 (An issue in COLORFUL_laundry mini-app on Line v13.6.1 allows attackers ...)
+	TODO: check
+CVE-2023-43998 (An issue in Books-futaba mini-app on Line v13.6.1 allows attackers to  ...)
+	TODO: check
+CVE-2023-43997 (An issue in Yoruichi hobby base mini-app on Line v13.6.1 allows attack ...)
+	TODO: check
+CVE-2023-43996 (An issue in Q co ltd mini-app on Line v13.6.1 allows attackers to send ...)
+	TODO: check
+CVE-2023-43995 (An issue in picot.golf mini-app on Line v13.6.1 allows attackers to se ...)
+	TODO: check
+CVE-2023-43994 (An issue in Cleaning_makotoya mini-app on Line v13.6.1 allows attacker ...)
+	TODO: check
+CVE-2023-43993 (An issue in smaregi_app_market mini-app on Line v13.6.1 allows attacke ...)
+	TODO: check
+CVE-2023-43992 (An issue in STOCKMAN GROUP mini-app on Line v13.6.1 allows attackers t ...)
+	TODO: check
+CVE-2023-43991 (An issue in PRIMA CLINIC mini-app on Line v13.6.1 allows attackers to  ...)
+	TODO: check
+CVE-2023-43990 (An issue in cherub-hair mini-app on Line v13.6.1 allows attackers to s ...)
+	TODO: check
+CVE-2023-43989 (An issue in mokumoku chohu mini-app on Line v13.6.1 allows attackers t ...)
+	TODO: check
+CVE-2023-43988 (An issue in nature fitness saijo mini-app on Line v13.6.1 allows attac ...)
+	TODO: check
+CVE-2024-23905 (Jenkins Red Hat Dependency Analytics Plugin 0.7.1 and earlier programm ...)
 	NOT-FOR-US: Jenkins plugin
-CVE-2024-23904
+CVE-2024-23904 (Jenkins Log Command Plugin 1.0.2 and earlier does not disable a featur ...)
 	NOT-FOR-US: Jenkins plugin
-CVE-2024-23903
+CVE-2024-23903 (Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier us ...)
 	NOT-FOR-US: Jenkins plugin
-CVE-2024-23902
+CVE-2024-23902 (A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Br ...)
 	NOT-FOR-US: Jenkins plugin
-CVE-2024-23901
+CVE-2024-23901 (Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier un ...)
 	NOT-FOR-US: Jenkins plugin
-CVE-2024-23900
+CVE-2024-23900 (Jenkins Matrix Project Plugin 822.v01b_8c85d16d2 and earlier does not  ...)
 	NOT-FOR-US: Jenkins plugin
-CVE-2024-23899
+CVE-2024-23899 (Jenkins Git server Plugin 99.va_0826a_b_cdfa_d and earlier does not di ...)
 	NOT-FOR-US: Jenkins plugin
-CVE-2024-23898
+CVE-2024-23898 (Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.42 ...)
 	- jenkins <removed>
-CVE-2024-23897
+CVE-2024-23897 (Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a  ...)
 	- jenkins <removed>
 CVE-2024-XXXX [RUSTSEC-2024-0006]
 	- rust-shlex 1.3.0-1
@@ -279,6 +377,7 @@ CVE-2023-44401 (The Silverstripe CMS GraphQL Server serves Silverstripe data as
 CVE-2023-42143 (Missing Integrity Check in Shelly TRV 20220811-152343/v2.1.8 at 5afc928c  ...)
 	NOT-FOR-US: Shelly
 CVE-2024-0755 (Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thun ...)
+	{DSA-5606-1 DSA-5605-1}
 	- firefox 122.0-1
 	- firefox-esr 115.7.0esr-1
 	- thunderbird 1:115.7.0-1
@@ -289,6 +388,7 @@ CVE-2024-0754 (Some WASM source files could have caused a crash when loaded in d
 	- firefox 122.0-1
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/#CVE-2024-0754
 CVE-2024-0753 (In specific HSTS configurations an attacker could have bypassed HSTS o ...)
+	{DSA-5606-1 DSA-5605-1}
 	- firefox 122.0-1
 	- firefox-esr 115.7.0esr-1
 	- thunderbird 1:115.7.0-1
@@ -299,6 +399,7 @@ CVE-2024-0752 (A use-after-free crash could have occurred on macOS if a Firefox
 	- firefox <not-affected> (Only affects Firefox on MacOS)
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/#CVE-2024-0752
 CVE-2024-0751 (A malicious devtools extension could have been used to escalate privil ...)
+	{DSA-5606-1 DSA-5605-1}
 	- firefox 122.0-1
 	- firefox-esr 115.7.0esr-1
 	- thunderbird 1:115.7.0-1
@@ -306,6 +407,7 @@ CVE-2024-0751 (A malicious devtools extension could have been used to escalate p
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-02/#CVE-2024-0751
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-04/#CVE-2024-0751
 CVE-2024-0750 (A bug in popup notifications delay calculation could have made it poss ...)
+	{DSA-5606-1 DSA-5605-1}
 	- firefox 122.0-1
 	- firefox-esr 115.7.0esr-1
 	- thunderbird 1:115.7.0-1
@@ -313,6 +415,7 @@ CVE-2024-0750 (A bug in popup notifications delay calculation could have made it
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-02/#CVE-2024-0750
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-04/#CVE-2024-0750
 CVE-2024-0749 (A phishing site could have repurposed an `about:` dialog to show phish ...)
+	{DSA-5606-1 DSA-5605-1}
 	- firefox 122.0-1
 	- firefox-esr 115.7.0esr-1
 	- thunderbird 1:115.7.0-1
@@ -323,6 +426,7 @@ CVE-2024-0748 (A compromised content process could have updated the document URI
 	- firefox 122.0-1
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/#CVE-2024-0748
 CVE-2024-0747 (When a parent page loaded a child in an iframe with `unsafe-inline`, t ...)
+	{DSA-5606-1 DSA-5605-1}
 	- firefox 122.0-1
 	- firefox-esr 115.7.0esr-1
 	- thunderbird 1:115.7.0-1
@@ -330,6 +434,7 @@ CVE-2024-0747 (When a parent page loaded a child in an iframe with `unsafe-inlin
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-02/#CVE-2024-0747
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-04/#CVE-2024-0747
 CVE-2024-0746 (A Linux user opening the print preview dialog could have caused the br ...)
+	{DSA-5606-1 DSA-5605-1}
 	- firefox 122.0-1
 	- firefox-esr 115.7.0esr-1
 	- thunderbird 1:115.7.0-1
@@ -347,6 +452,7 @@ CVE-2024-0743 (An unchecked return value in TLS handshake code could have caused
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/#CVE-2024-0743
 	TODO: check src:nss
 CVE-2024-0742 (It was possible for certain browser prompts and dialogs to be activate ...)
+	{DSA-5606-1 DSA-5605-1}
 	- firefox 122.0-1
 	- firefox-esr 115.7.0esr-1
 	- thunderbird 1:115.7.0-1
@@ -354,6 +460,7 @@ CVE-2024-0742 (It was possible for certain browser prompts and dialogs to be act
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-02/#CVE-2024-0742
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-04/#CVE-2024-0742
 CVE-2024-0741 (An out of bounds write in ANGLE could have allowed an attacker to corr ...)
+	{DSA-5606-1 DSA-5605-1}
 	- firefox 122.0-1
 	- firefox-esr 115.7.0esr-1
 	- thunderbird 1:115.7.0-1
@@ -58222,7 +58329,7 @@ CVE-2023-25297
 	RESERVED
 CVE-2023-25296
 	RESERVED
-CVE-2023-25295 (Cross Site Scripting (XSS) vulnerability in GRN Software Group eVEWA3  ...)
+CVE-2023-25295 (A Cross Site Scripting (XSS) vulnerability in evewa3ajax.php in GRUEN  ...)
 	NOT-FOR-US: GRN Software Group eVEWA3 Community
 CVE-2023-25294
 	RESERVED
@@ -158075,8 +158182,8 @@ CVE-2021-43586
 	RESERVED
 CVE-2021-43585
 	RESERVED
-CVE-2021-43584
-	RESERVED
+CVE-2021-43584 (DOM-based Cross Site Scripting (XSS vulnerability in 'Tail Event Logs' ...)
+	TODO: check
 CVE-2021-43583
 	RESERVED
 CVE-2021-3956 (A read-only authentication bypass vulnerability was reported in the Th ...)
@@ -164291,16 +164398,16 @@ CVE-2021-42148
 	RESERVED
 CVE-2021-3877
 	REJECTED
-CVE-2021-42147
-	RESERVED
-CVE-2021-42146
-	RESERVED
-CVE-2021-42145
-	RESERVED
-CVE-2021-42144
-	RESERVED
-CVE-2021-42143
-	RESERVED
+CVE-2021-42147 (Buffer over-read vulnerability in the dtls_sha256_update function in C ...)
+	TODO: check
+CVE-2021-42146 (An issue was discovered in Contiki-NG tinyDTLS through master branch 5 ...)
+	TODO: check
+CVE-2021-42145 (An assertion failure discovered in in check_certificate_request() in C ...)
+	TODO: check
+CVE-2021-42144 (Buffer over-read vulnerability in Contiki-NG tinyDTLS through master b ...)
+	TODO: check
+CVE-2021-42143 (An issue was discovered in Contiki-NG tinyDTLS through master branch 5 ...)
+	TODO: check
 CVE-2021-42142 (An issue was discovered in Contiki-NG tinyDTLS through master branch 5 ...)
 	TODO: check
 CVE-2021-42141 (An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30. One ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/93962be7f3146ababa01e14023be9dc72d9d4387

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/93962be7f3146ababa01e14023be9dc72d9d4387
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240124/ea46a84a/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list