[Git][security-tracker-team/security-tracker][master] automatic update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8e78c894 by security tracker role at 2024-05-13T08:12:08+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,39 @@
+CVE-2024-4809 (A vulnerability has been found in SourceCodester Open Source Clinic Ma ...)
+	TODO: check
+CVE-2024-4808 (A vulnerability, which was classified as critical, was found in Kaship ...)
+	TODO: check
+CVE-2024-4807 (A vulnerability, which was classified as critical, has been found in K ...)
+	TODO: check
+CVE-2024-4806 (A vulnerability classified as critical was found in Kashipara College  ...)
+	TODO: check
+CVE-2024-4805 (A vulnerability classified as critical has been found in Kashipara Col ...)
+	TODO: check
+CVE-2024-4804 (A vulnerability was found in Kashipara College Management System 1.0.  ...)
+	TODO: check
+CVE-2024-4803 (A vulnerability was found in Kashipara College Management System 1.0.  ...)
+	TODO: check
+CVE-2024-4802 (A vulnerability was found in Kashipara College Management System 1.0.  ...)
+	TODO: check
+CVE-2024-4801 (A vulnerability was found in Kashipara College Management System 1.0 a ...)
+	TODO: check
+CVE-2024-4800 (A vulnerability has been found in Kashipara College Management System  ...)
+	TODO: check
+CVE-2024-3239 (The Post Grid Gutenberg Blocks and WordPress Blog Plugin  WordPress pl ...)
+	TODO: check
+CVE-2024-35205 (The WPS Office (aka cn.wps.moffice_eng) application before 17.0.0 for  ...)
+	TODO: check
+CVE-2024-35204 (Veritas System Recovery before 23.2_Hotfix has incorrect permissions f ...)
+	TODO: check
+CVE-2024-32700 (Unrestricted Upload of File with Dangerous Type vulnerability in Kogne ...)
+	TODO: check
+CVE-2024-2299 (A stored Cross-Site Scripting (XSS) vulnerability exists in the parisn ...)
+	TODO: check
+CVE-2024-29212 (Due to an  unsafe de-serialization method used by the Veeam Service Pr ...)
+	TODO: check
+CVE-2024-26306 (iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server wi ...)
+	TODO: check
+CVE-2023-5052 (vulnerability in Uniform Server Zero, version 10.2.5, consisting of an ...)
+	TODO: check
 CVE-2024-4799 (A vulnerability, which was classified as critical, was found in Kaship ...)
 	NOT-FOR-US: Kashipara College Management System
 CVE-2024-4798 (A vulnerability, which was classified as critical, has been found in S ...)
@@ -53100,7 +53136,7 @@ CVE-2023-2358 (Hitachi Vantara Pentaho Business Analytics Server prior to versio
 	NOT-FOR-US: Hitachi Vantara Pentaho Business Analytics Server
 CVE-2023-29497 (A privacy issue was addressed with improved handling of temporary file ...)
 	NOT-FOR-US: Apple
-CVE-2023-43040 [Improperly verified POST keys]
+CVE-2023-43040 (IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to ...)
 	{DLA-3629-1}
 	- ceph 16.2.11+ds-5 (bug #1053690)
 	[bookworm] - ceph <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8e78c8948c97e8346baaccce80737717691832cd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8e78c8948c97e8346baaccce80737717691832cd
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240513/a073efca/attachment.htm>