[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Mar 1 20:12:10 GMT 2024 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d7ac97d9 by security tracker role at 2024-03-01T20:11:56+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,135 @@
+CVE-2024-2078 (A Cross-Site Scripting (XSS) vulnerability has been found in HelpDeskZ ...)
+	TODO: check
+CVE-2024-2077 (A vulnerability classified as critical has been found in SourceCodeste ...)
+	TODO: check
+CVE-2024-2076 (A vulnerability was found in CodeAstro House Rental Management System  ...)
+	TODO: check
+CVE-2024-2075 (A vulnerability was found in SourceCodester Daily Habit Tracker 1.0. I ...)
+	TODO: check
+CVE-2024-2074 (A vulnerability was found in Mini-Tmall up to 20231017 and classified  ...)
+	TODO: check
+CVE-2024-2073 (A vulnerability has been found in SourceCodester Block Inserter for Dy ...)
+	TODO: check
+CVE-2024-2072 (A vulnerability, which was classified as problematic, was found in Sou ...)
+	TODO: check
+CVE-2024-2071 (A vulnerability, which was classified as problematic, has been found i ...)
+	TODO: check
+CVE-2024-2070 (A vulnerability classified as problematic was found in SourceCodester  ...)
+	TODO: check
+CVE-2024-2069 (A vulnerability classified as critical has been found in SourceCodeste ...)
+	TODO: check
+CVE-2024-2068 (A vulnerability was found in SourceCodester Computer Inventory System  ...)
+	TODO: check
+CVE-2024-2067 (A vulnerability was found in SourceCodester Computer Inventory System  ...)
+	TODO: check
+CVE-2024-2066 (A vulnerability was found in SourceCodester Computer Inventory System  ...)
+	TODO: check
+CVE-2024-2065 (A vulnerability was found in SourceCodester Barangay Population Monito ...)
+	TODO: check
+CVE-2024-2064 (A vulnerability has been found in rahman SelectCours 1.0 and classifie ...)
+	TODO: check
+CVE-2024-2063 (A vulnerability, which was classified as problematic, was found in Sou ...)
+	TODO: check
+CVE-2024-2062 (A vulnerability, which was classified as critical, has been found in S ...)
+	TODO: check
+CVE-2024-2061 (A vulnerability classified as critical was found in SourceCodester Pet ...)
+	TODO: check
+CVE-2024-2060 (A vulnerability classified as critical has been found in SourceCodeste ...)
+	TODO: check
+CVE-2024-2059 (A vulnerability was found in SourceCodester Petrol Pump Management Sof ...)
+	TODO: check
+CVE-2024-2058 (A vulnerability was found in SourceCodester Petrol Pump Management Sof ...)
+	TODO: check
+CVE-2024-2057 (A vulnerability was found in Harrison Chase LangChain 0.1.9. It has be ...)
+	TODO: check
+CVE-2024-27734 (A Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows an atta ...)
+	TODO: check
+CVE-2024-27692
+	REJECTED
+CVE-2024-27689 (Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Reques ...)
+	TODO: check
+CVE-2024-27572 (LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via ...)
+	TODO: check
+CVE-2024-27571 (LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via ...)
+	TODO: check
+CVE-2024-27570 (LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via ...)
+	TODO: check
+CVE-2024-27569 (LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via ...)
+	TODO: check
+CVE-2024-27568 (LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via ...)
+	TODO: check
+CVE-2024-27567 (LBT T300- T390 v2.2.1.8 were discovered to contain a stack overflow vi ...)
+	TODO: check
+CVE-2024-27559 (Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Reques ...)
+	TODO: check
+CVE-2024-27558 (Stupid Simple CMS 1.2.4 is vulnerable to Cross Site Scripting (XSS) wi ...)
+	TODO: check
+CVE-2024-27499 (Bagisto v1.5.1 is vulnerable for Cross site scripting(XSS) via png fil ...)
+	TODO: check
+CVE-2024-27497 (Linksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypas ...)
+	TODO: check
+CVE-2024-27298 (parse-server is a Parse Server for Node.js / Express. This vulnerabili ...)
+	TODO: check
+CVE-2024-27296 (Directus is a real-time API and App dashboard for managing SQL databas ...)
+	TODO: check
+CVE-2024-27295 (Directus is a real-time API and App dashboard for managing SQL databas ...)
+	TODO: check
+CVE-2024-27140 (** UNSUPPORTED WHEN ASSIGNED **  Improper Neutralization of Input Duri ...)
+	TODO: check
+CVE-2024-27139 (** UNSUPPORTED WHEN ASSIGNED **  Incorrect Authorization vulnerability ...)
+	TODO: check
+CVE-2024-27138 (** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability  ...)
+	TODO: check
+CVE-2024-26280 (Apache Airflow, versions before 2.8.2, has a vulnerability that allows ...)
+	TODO: check
+CVE-2024-25972 (Initialization of a resource with an insecure default vulnerability in ...)
+	TODO: check
+CVE-2024-25091 (Protection mechanism failure issue exists in RevoWorks SCVX prior to s ...)
+	TODO: check
+CVE-2024-24907 (Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contai ...)
+	TODO: check
+CVE-2024-24906 (Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contai ...)
+	TODO: check
+CVE-2024-24905 (Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contai ...)
+	TODO: check
+CVE-2024-24904 (Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contai ...)
+	TODO: check
+CVE-2024-24903 (Dell Secure Connect Gateway (SCG) Policy Manager, version 5.10+, conta ...)
+	TODO: check
+CVE-2024-24900 (Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contai ...)
+	TODO: check
+CVE-2024-22458 (Dell Secure Connect Gateway, 5.18, contains an Inadequate Encryption S ...)
+	TODO: check
+CVE-2024-22457 (Dell Secure Connect Gateway 5.20 contains an improper authentication v ...)
+	TODO: check
+CVE-2024-1624 (An OS Command Injection vulnerability affecting documentation server o ...)
+	TODO: check
+CVE-2024-1453 (In Sante DICOM Viewer Pro versions 14.0.3 and prior, a user must open  ...)
+	TODO: check
+CVE-2024-1174 (Previous versions of HP ThinPro (prior to HP ThinPro 8.0 SP 8) could p ...)
+	TODO: check
+CVE-2024-1120 (The NextMove Lite \u2013 Thank You Page for WooCommerce and Finale Lit ...)
+	TODO: check
+CVE-2024-0967 (A potential vulnerability has been identified in OpenText / Micro Focu ...)
+	TODO: check
+CVE-2024-0692 (The SolarWinds Security Event Manager was susceptible to Remote Code E ...)
+	TODO: check
+CVE-2023-52558 (In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, an ...)
+	TODO: check
+CVE-2023-52557 (In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp messa ...)
+	TODO: check
+CVE-2023-52556 (In OpenBSD 7.4 before errata 009, a race condition between pf(4)'s pro ...)
+	TODO: check
+CVE-2023-50378 (Lack of proper input validation and constraint enforcement in Apache A ...)
+	TODO: check
+CVE-2023-48674 (Dell Platform BIOS contains an Improper Null Termination vulnerability ...)
+	TODO: check
+CVE-2023-46951 (Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allow ...)
+	TODO: check
+CVE-2023-46950 (Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allow ...)
+	TODO: check
+CVE-2023-39254 (Dell Update Package (DUP), Versions prior to 4.9.10 contain an Uncontr ...)
+	TODO: check
 CVE-2024-2045 (Session version 1.17.5 allows obtaining internal application files and ...)
 	TODO: check
 CVE-2024-2022 (A vulnerability was found in Netentsec NS-ASG Application Security Gat ...)
@@ -2514,7 +2646,7 @@ CVE-2024-23122 (A maliciously crafted 3DM file when parsed in opennurbs.dll thro
 	NOT-FOR-US: Autodesk
 CVE-2024-23121 (A maliciously crafted MODEL file when parsed in libodxdll.dll through  ...)
 	NOT-FOR-US: Autodesk
-CVE-2024-23120 (A maliciously crafted STP file when parsed in ASMIMPORT228A.dll throug ...)
+CVE-2024-23120 (A maliciously crafted STP file in ASMIMPORT228A.dll when parsed throug ...)
 	NOT-FOR-US: Autodesk
 CVE-2024-1053 (The Event Tickets and Registration plugin for WordPress is vulnerable  ...)
 	NOT-FOR-US: WordPress plugin



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d7ac97d9c8a18b12ec2b8a4558120c7eac989a85

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d7ac97d9c8a18b12ec2b8a4558120c7eac989a85
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240301/1d0ac68f/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list