[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat May 18 09:12:06 BST 2024



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bfb6dbc0 by security tracker role at 2024-05-18T08:11:41+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,45 @@
+CVE-2024-5069 (A vulnerability, which was classified as critical, has been found in S ...)
+	TODO: check
+CVE-2024-4891 (The Essential Blocks \u2013 Page Builder Gutenberg Blocks, Patterns &  ...)
+	TODO: check
+CVE-2024-4865 (The Happy Addons for Elementor plugin for WordPress is vulnerable to S ...)
+	TODO: check
+CVE-2024-4849 (The WordPress Automatic Plugin plugin for WordPress is vulnerable to S ...)
+	TODO: check
+CVE-2024-4709 (The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & D ...)
+	TODO: check
+CVE-2024-4698 (The Testimonial Carousel For Elementor plugin for WordPress is vulnera ...)
+	TODO: check
+CVE-2024-4374 (The DethemeKit For Elementor plugin for WordPress is vulnerable to Sto ...)
+	TODO: check
+CVE-2024-4264 (A remote code execution (RCE) vulnerability exists in the berriai/lite ...)
+	TODO: check
+CVE-2024-3812 (The Salient Core plugin for WordPress is vulnerable to Local File Incl ...)
+	TODO: check
+CVE-2024-3811 (The Salient Shortcodes plugin for WordPress is vulnerable to Stored Cr ...)
+	TODO: check
+CVE-2024-3810 (The Salient Shortcodes plugin for WordPress is vulnerable to Local Fil ...)
+	TODO: check
+CVE-2024-3714 (The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for  ...)
+	TODO: check
+CVE-2024-35313 (In Tor Arti before 1.2.3, circuits sometimes incorrectly have a length ...)
+	TODO: check
+CVE-2024-35312 (In Tor Arti before 1.2.3, STUB circuits incorrectly have a length of 2 ...)
+	TODO: check
+CVE-2024-2782 (The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & D ...)
+	TODO: check
+CVE-2024-2772 (The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & D ...)
+	TODO: check
+CVE-2024-2771 (The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & D ...)
+	TODO: check
+CVE-2024-23583 (An attacker could potentially intercept credentials via the task manag ...)
+	TODO: check
+CVE-2024-23556 (SSL/TLS Renegotiation functionality potentially leading to DoS attack  ...)
+	TODO: check
+CVE-2024-23554 (Cross-Site Request Forgery (CSRF) on Session Token vulnerability that  ...)
+	TODO: check
+CVE-2023-52424 (The IEEE 802.11 standard sometimes enables an adversary to trick a vic ...)
+	TODO: check
 CVE-2024-5072 (Improper input validation in PAM JIT elevation feature in Devolutions  ...)
 	NOT-FOR-US: Devolutions Server
 CVE-2024-5066 (A vulnerability classified as critical was found in PHPGurukul Online  ...)
@@ -14551,10 +14593,10 @@ CVE-2024-0083 (NVIDIA ChatRTX for Windows contains a vulnerability in the UI, wh
 	NOT-FOR-US: NVIDIA ChatRTX
 CVE-2024-0082 (NVIDIA ChatRTX for Windows contains a vulnerability in the UI, where a ...)
 	NOT-FOR-US: NVIDIA ChatRTX
-CVE-2024-25743 (In the Linux kernel through 6.7.2, an untrusted hypervisor can inject  ...)
+CVE-2024-25743 (In the Linux kernel through 6.9, an untrusted hypervisor can inject vi ...)
 	- linux <unfixed>
 	NOTE: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3008.html
-CVE-2024-25742
+CVE-2024-25742 (In the Linux kernel before 6.9, an untrusted hypervisor can inject vir ...)
 	- linux <unfixed>
 	NOTE: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3008.html
 CVE-2024-3464 (A vulnerability was found in SourceCodester Laundry Management System  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bfb6dbc0860a88f1196900861cdb4fc94b5f32f9

-- 
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bfb6dbc0860a88f1196900861cdb4fc94b5f32f9
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240518/5845be26/attachment.htm>


More information about the debian-security-tracker-commits mailing list