[Git][security-tracker-team/security-tracker][master] automatic update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3dec2b56 by security tracker role at 2024-11-18T08:12:02+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,77 @@
+CVE-2024-5030 (The CM Table Of Contents  WordPress plugin before 1.2.3 does not have  ...)
+	TODO: check
+CVE-2024-52947 (A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.2 ...)
+	TODO: check
+CVE-2024-52946 (An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Ch ...)
+	TODO: check
+CVE-2024-52945 (An issue was discovered in Veritas NetBackup before 10.5. This only ap ...)
+	TODO: check
+CVE-2024-52944 (An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882 ...)
+	TODO: check
+CVE-2024-52943 (An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882 ...)
+	TODO: check
+CVE-2024-52942 (An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882 ...)
+	TODO: check
+CVE-2024-52941 (An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882 ...)
+	TODO: check
+CVE-2024-52940 (AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is ena ...)
+	TODO: check
+CVE-2024-52926 (Delinea Privilege Manager before 12.0.2 mishandles the security of the ...)
+	TODO: check
+CVE-2024-52922 (In Bitcoin Core before 25.1, an attacker can cause a node to not downl ...)
+	TODO: check
+CVE-2024-52921 (In Bitcoin Core before 25.0, a peer can affect the download state of o ...)
+	TODO: check
+CVE-2024-52920 (Bitcoin Core before 0.20.0 allows remote attackers to cause a denial o ...)
+	TODO: check
+CVE-2024-52919 (Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and  ...)
+	TODO: check
+CVE-2024-52918 (Bitcoin-Qt in Bitcoin Core before 0.20.0 allows remote attackers to ca ...)
+	TODO: check
+CVE-2024-52917 (Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allo ...)
+	TODO: check
+CVE-2024-52916 (Bitcoin Core before 0.15.0 allows a denial of service (OOM kill of a d ...)
+	TODO: check
+CVE-2024-52915 (Bitcoin Core before 0.20.0 allows remote attackers to cause a denial o ...)
+	TODO: check
+CVE-2024-52914 (In Bitcoin Core before 0.18.0, a node could be stalled for hours when  ...)
+	TODO: check
+CVE-2024-52913 (In Bitcoin Core before 0.21.0, an attacker could prevent a node from s ...)
+	TODO: check
+CVE-2024-52912 (Bitcoin Core before 0.21.0 allows a network split that is resultant fr ...)
+	TODO: check
+CVE-2024-49574 (Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable  ...)
+	TODO: check
+CVE-2024-43704 (Software installed and run as a non-privileged user may conduct improp ...)
+	TODO: check
+CVE-2024-38828 (Spring MVC controller methods with an @RequestBody byte[]method parame ...)
+	TODO: check
+CVE-2024-22067 (ZTE NH8091 product has an improper permission control vulnerability. D ...)
+	TODO: check
+CVE-2024-11315 (The DVC from TRCore has a Path Traversal vulnerability and does not re ...)
+	TODO: check
+CVE-2024-11314 (The DVC from TRCore has a Path Traversal vulnerability and does not re ...)
+	TODO: check
+CVE-2024-11313 (The DVC from TRCore has a Path Traversal vulnerability and does not re ...)
+	TODO: check
+CVE-2024-11312 (The DVC from TRCore has a Path Traversal vulnerability and does not re ...)
+	TODO: check
+CVE-2024-11311 (The DVC from TRCore has a Path Traversal vulnerability and does not re ...)
+	TODO: check
+CVE-2024-11310 (The DVC from TRCore has a Path Traversal vulnerability, allowing unaut ...)
+	TODO: check
+CVE-2024-11309 (The DVC from TRCore has a Path Traversal vulnerability, allowing unaut ...)
+	TODO: check
+CVE-2024-11308 (The DVC from TRCore encrypts files using a hardcoded key. Attackers ca ...)
+	TODO: check
+CVE-2024-11306 (A vulnerability, which was classified as critical, has been found in A ...)
+	TODO: check
+CVE-2024-11305 (A vulnerability classified as critical was found in Altenergy Power Co ...)
+	TODO: check
+CVE-2019-25220 (Bitcoin Core before 24.0.1 allows remote attackers to cause a denial o ...)
+	TODO: check
+CVE-2015-20111 (miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other ...)
+	TODO: check
 CVE-2024-52876 (Holy Stone Remote ID Module HSRID01, firmware distributed with the Dro ...)
 	NOT-FOR-US: Holy Stone Remote ID Module HSRID01
 CVE-2024-52872 (In Flagsmith before 2.134.1, the get_document endpoint is not correctl ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3dec2b56d1a468180cdf8130908c24065c19a3eb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3dec2b56d1a468180cdf8130908c24065c19a3eb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241118/a15e3fea/attachment-0001.htm>