[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Jun 19 09:12:07 BST 2024 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
984c4d8a by security tracker role at 2024-06-19T08:11:52+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,79 @@
+CVE-2024-6146 (Actiontec WCB6200Q uh_get_postdata_withupload Stack-based Buffer Overf ...)
+	TODO: check
+CVE-2024-6145 (Actiontec WCB6200Q Cookie Format String Remote Code Execution Vulnerab ...)
+	TODO: check
+CVE-2024-6144 (Actiontec WCB6200Q Multipart Boundary Stack-based Buffer Overflow Remo ...)
+	TODO: check
+CVE-2024-6143 (Actiontec WCB6200Q uh_tcp_recv_header Buffer Overflow Remote Code Exec ...)
+	TODO: check
+CVE-2024-6142 (Actiontec WCB6200Q uh_tcp_recv_content Buffer Overflow Remote Code Exe ...)
+	TODO: check
+CVE-2024-6132 (The Pexels: Free Stock Photos plugin for WordPress is vulnerable to ar ...)
+	TODO: check
+CVE-2024-6129 (A vulnerability, which was classified as problematic, was found in spa ...)
+	TODO: check
+CVE-2024-6128 (A vulnerability, which was classified as problematic, has been found i ...)
+	TODO: check
+CVE-2024-6125 (The Login with phone number plugin for WordPress is vulnerable to unau ...)
+	TODO: check
+CVE-2024-5970 (The MaxGalleria plugin for WordPress is vulnerable to Stored Cross-Sit ...)
+	TODO: check
+CVE-2024-5853 (The Image Optimizer, Resizer and CDN \u2013 Sirv plugin for WordPress  ...)
+	TODO: check
+CVE-2024-5768 (The MIMO Woocommerce Order Tracking plugin for WordPress is vulnerable ...)
+	TODO: check
+CVE-2024-5724 (The Photo Video Gallery Master plugin for WordPress is vulnerable to P ...)
+	TODO: check
+CVE-2024-5649 (The Universal Slider plugin for WordPress is vulnerable to PHP Object  ...)
+	TODO: check
+CVE-2024-5574 (The WP Magazine Modules Lite plugin for WordPress is vulnerable to Loc ...)
+	TODO: check
+CVE-2024-5343 (The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for Word ...)
+	TODO: check
+CVE-2024-5208 (An uncontrolled resource consumption vulnerability exists in the `uplo ...)
+	TODO: check
+CVE-2024-5021 (The WordPress Picture / Portfolio / Media Gallery plugin for WordPress ...)
+	TODO: check
+CVE-2024-4873 (The Replace Image plugin for WordPress is vulnerable to Insecure Direc ...)
+	TODO: check
+CVE-2024-4787 (The Cost Calculator Builder PRO for WordPress is vulnerable to arbitra ...)
+	TODO: check
+CVE-2024-4663 (The OSM Map Widget for Elementor plugin for WordPress is vulnerable to ...)
+	TODO: check
+CVE-2024-4623 (The Blogmentor \u2013 Blog Layouts for Elementor plugin for WordPress  ...)
+	TODO: check
+CVE-2024-4541 (The Custom Product List Table plugin for WordPress is vulnerable to Cr ...)
+	TODO: check
+CVE-2024-4450 (The AliExpress Dropshipping with AliNext Lite plugin for WordPress is  ...)
+	TODO: check
+CVE-2024-3984 (The EmbedSocial \u2013 Social Media Feeds, Reviews and Galleries plugi ...)
+	TODO: check
+CVE-2024-3894 (The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for Word ...)
+	TODO: check
+CVE-2024-3229 (The Salon booking system plugin for WordPress is vulnerable to arbitra ...)
+	TODO: check
+CVE-2024-37881 (SiteGuard WP Plugin provides a functionality to customize the path to  ...)
+	TODO: check
+CVE-2024-37387 (Use of potentially dangerous function issue exists in Ricoh Streamline ...)
+	TODO: check
+CVE-2024-37124 (Use of potentially dangerous function issue exists in Ricoh Streamline ...)
+	TODO: check
+CVE-2024-36978 (In the Linux kernel, the following vulnerability has been resolved:  n ...)
+	TODO: check
+CVE-2024-36480 (Use of hard-coded credentials issue exists in Ricoh Streamline NX PC C ...)
+	TODO: check
+CVE-2024-36252 (Improper restriction of communication channel to intended endpoints is ...)
+	TODO: check
+CVE-2024-35298 (Improper authorization in handler for custom URL scheme issue in 'ZOZO ...)
+	TODO: check
+CVE-2024-2381 (The AliExpress Dropshipping with AliNext Lite plugin for WordPress is  ...)
+	TODO: check
+CVE-2024-1407 (The Paid Memberships Pro \u2013 Content Restriction, User Registration ...)
+	TODO: check
+CVE-2024-0789 (The WP Maintenance plugin for WordPress is vulnerable to IP Address Sp ...)
+	TODO: check
+CVE-2023-6692 (The Ultimate Blocks \u2013 WordPress Blocks Plugin plugin for WordPres ...)
+	TODO: check
 CVE-2024-6116 (A vulnerability, which was classified as critical, has been found in i ...)
 	NOT-FOR-US: itsourcecode Simple Online Hotel Reservation System
 CVE-2024-6115 (A vulnerability classified as critical was found in itsourcecode Simpl ...)
@@ -2229,11 +2305,13 @@ CVE-2024-36302 (An origin validation vulnerability in the Trend Micro Apex One s
 CVE-2024-35329 (libyaml 0.2.5 is vulnerable to a heap-based Buffer Overflow in yaml_do ...)
 	NOTE: disputed libyaml issue, to be rejected
 CVE-2024-35242 (Composer is a dependency manager for PHP. On the 2.x branch prior to v ...)
+	{DSA-5715-1}
 	- composer 2.7.7-1 (bug #1073126)
 	NOTE: https://github.com/composer/composer/security/advisories/GHSA-v9qv-c7wm-wgmf
 	NOTE: https://github.com/composer/composer/commit/fc57b93603d7d90b71ca8ec77b1c8a9171fdb467 (2.2.24)
 	NOTE: https://github.com/composer/composer/commit/6bd43dff859c597c09bd03a7e7d6443822d0a396 (2.7.7)
 CVE-2024-35241 (Composer is a dependency manager for PHP. On the 2.x branch prior to v ...)
+	{DSA-5715-1}
 	- composer 2.7.7-1 (bug #1073125)
 	NOTE: https://github.com/composer/composer/security/advisories/GHSA-47f6-5gq3-vx9c
 	NOTE: https://github.com/composer/composer/commit/b93fc6ca437da35ae73d667d0618749c763b67d4 (2.2.24)
@@ -87457,7 +87535,7 @@ CVE-2023-30314 (An issue discovered in 360 V6G, 360 T5G, 360 T6M, and 360 P1 rou
 	NOT-FOR-US: 360 V6G, 360 T5G, 360 T6M, and 360 P1 routers
 CVE-2023-30313 (An issue discovered in Wavlink QUANTUM D2G routers allows attackers to ...)
 	NOT-FOR-US: Wavlink QUANTUM D2G routers
-CVE-2023-30312 (An issue discovered in routers running Openwrt 18.06, 19.07, 21.02, 22 ...)
+CVE-2023-30312 (An issue discovered in OpenWrt 18.06, 19.07, 21.02, 22.03, and beyond  ...)
 	NOT-FOR-US: Openwrt
 CVE-2023-30311 (An issue discovered in H3C Magic R365 and H3C Magic R100 routers allow ...)
 	NOT-FOR-US: H3C Magic R365 and H3C Magic R100 routers



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/984c4d8adbc34ac2219642cbacb59ce8092f6746

-- 
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/984c4d8adbc34ac2219642cbacb59ce8092f6746
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240619/ee209c56/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list