[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Oct 15 15:03:28 BST 2024 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
af7a3e3e by security tracker role at 2024-10-14T20:12:03+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,119 @@
+CVE-2024-9936 (When manipulating the selection node cache, an attacker may have been  ...)
+	TODO: check
+CVE-2024-9823 (There exists a security vulnerability in Jetty's DosFilter which can b ...)
+	TODO: check
+CVE-2024-9139 (The affected product permits OS command injection through improperly r ...)
+	TODO: check
+CVE-2024-9137 (The affected product lacks an authentication check when sending comman ...)
+	TODO: check
+CVE-2024-8602 (When the XML is read from the codes in the PDF and parsed using a Docu ...)
+	TODO: check
+CVE-2024-8184 (There exists a security vulnerability in Jetty's ThreadLimitHandler.ge ...)
+	TODO: check
+CVE-2024-7847 (VULNERABILITY DETAILS  Rockwell Automation used the latest versions of ...)
+	TODO: check
+CVE-2024-6763 (Eclipse Jetty is a lightweight, highly scalable, Java-based web server ...)
+	TODO: check
+CVE-2024-6762 (Jetty PushSessionCacheFilter can be exploited by unauthenticated users ...)
+	TODO: check
+CVE-2024-48799 (An issue in LOREX TECHNOLOGY INC com.lorexcorp.lorexping 1.4.22 allows ...)
+	TODO: check
+CVE-2024-48798 (An issue in Hubble Connected (com.hubbleconnected.vervelife) 2.00.81 a ...)
+	TODO: check
+CVE-2024-48797 (An issue in PCS Engineering Preston Cinema (com.prestoncinema.app) 0.2 ...)
+	TODO: check
+CVE-2024-48796 (An issue in EQUES com.eques.plug 1.0.1 allows a remote attacker to obt ...)
+	TODO: check
+CVE-2024-48795 (An issue in Creative Labs Pte Ltd com.creative.apps.xficonnect 2.00.02 ...)
+	TODO: check
+CVE-2024-48793 (An issue in INATRONIC com.inatronic.bmw 2.7.1 allows a remote attacker ...)
+	TODO: check
+CVE-2024-48792 (An issue in Hideez com.hideez 2.7.8.3 allows a remote attacker to obta ...)
+	TODO: check
+CVE-2024-48791 (An issue in Plug n Play Camera com.starvedia.mCamView.zwave 5.5.1 allo ...)
+	TODO: check
+CVE-2024-48790 (An issue in ILIFE com.ilife.home.global 1.8.7 allows a remote attacker ...)
+	TODO: check
+CVE-2024-48789 (An issue in INATRONIC com.inatronic.drivedeck.home 2.6.23 allows a rem ...)
+	TODO: check
+CVE-2024-48261
+	REJECTED
+CVE-2024-48259 (Cloudlog 2.6.15 allows Oqrs.php request_form SQL injection via station ...)
+	TODO: check
+CVE-2024-48257 (Wavelog 1.8.5 allows Oqrs_model.php get_worked_modes station_id SQL in ...)
+	TODO: check
+CVE-2024-48255 (Cloudlog 2.6.15 allows Oqrs.php get_station_info station_id SQL inject ...)
+	TODO: check
+CVE-2024-48253 (Cloudlog 2.6.15 allows Oqrs.php delete_oqrs_line id SQL injection.)
+	TODO: check
+CVE-2024-48251 (Wavelog 1.8.5 allows Activated_gridmap_model.php get_band_confirmed SQ ...)
+	TODO: check
+CVE-2024-48249 (Wavelog 1.8.5 allows Gridmap_model.php get_band_confirmed SQL injectio ...)
+	TODO: check
+CVE-2024-48168 (A stack overflow vulnerability exists in the sub_402280 function of th ...)
+	TODO: check
+CVE-2024-48153 (DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious command ...)
+	TODO: check
+CVE-2024-48150 (D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_ ...)
+	TODO: check
+CVE-2024-48120 (X2CRM v8.5 is vulnerable to a stored Cross-Site Scripting (XSS) in the ...)
+	TODO: check
+CVE-2024-48119 (Vtiger CRM v8.2.0 has a HTML Injection vulnerability in the module par ...)
+	TODO: check
+CVE-2024-47885 (The Astro web framework has a DOM Clobbering gadget in the client-side ...)
+	TODO: check
+CVE-2024-47831 (Next.js is a React Framework for the Web. Cersions on the 10.x, 11.x,  ...)
+	TODO: check
+CVE-2024-47826 (eLabFTW is an open source electronic lab notebook for research labs. A ...)
+	TODO: check
+CVE-2024-47767 (Tuleap is a tool for end to end traceability of application and system ...)
+	TODO: check
+CVE-2024-47766 (Tuleap is a tool for end to end traceability of application and system ...)
+	TODO: check
+CVE-2024-46988 (Tuleap is a tool for end to end traceability of application and system ...)
+	TODO: check
+CVE-2024-46980 (Tuleap is a tool for end to end traceability of application and system ...)
+	TODO: check
+CVE-2024-46911 (Cross-site Resource Forgery (CSRF), Privilege escalation vulnerability ...)
+	TODO: check
+CVE-2024-46535 (Jepaas v7.2.8 was discovered to contain a SQL injection vulnerability  ...)
+	TODO: check
+CVE-2024-46528 (An Insecure Direct Object Reference (IDOR) vulnerability in KubeSphere ...)
+	TODO: check
+CVE-2024-45741 (In Splunk Enterprise versions below 9.2.3 and 9.1.6 and Splunk Cloud P ...)
+	TODO: check
+CVE-2024-45740 (In Splunk Enterprise versions below 9.2.3 and 9.1.6 and Splunk Cloud P ...)
+	TODO: check
+CVE-2024-45739 (In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6, the softw ...)
+	TODO: check
+CVE-2024-45738 (In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6, the softw ...)
+	TODO: check
+CVE-2024-45737 (In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk ...)
+	TODO: check
+CVE-2024-45736 (In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk ...)
+	TODO: check
+CVE-2024-45735 (In Splunk Enterprise versions below 9.2.3 and 9.1.6, and Splunk Secure ...)
+	TODO: check
+CVE-2024-45734 (In Splunk Enterprise versions 9.3.0, 9.2.3, and 9.1.6, a low-privilege ...)
+	TODO: check
+CVE-2024-45733 (In Splunk Enterprise for Windows versions below 9.2.3 and 9.1.6, a low ...)
+	TODO: check
+CVE-2024-45732 (In Splunk Enterprise versions below 9.3.1, and 9.2.0 versions below 9. ...)
+	TODO: check
+CVE-2024-45731 (In Splunk Enterprise for Windows versions below 9.3.1, 9.2.3, and 9.1. ...)
+	TODO: check
+CVE-2024-43701 (Software installed and run as a non-privileged user may conduct GPU sy ...)
+	TODO: check
+CVE-2024-41997 (An issue was discovered in version of Warp Terminal prior to 2024.07.1 ...)
+	TODO: check
+CVE-2024-40616
+	REJECTED
+CVE-2023-50780 (Apache ActiveMQ Artemis allows access to diagnostic information and co ...)
+	TODO: check
+CVE-2023-48082 (Nagios XI before 5.11.3 2024R1 was discovered to improperly handle API ...)
+	TODO: check
+CVE-2023-45817
+	REJECTED
 CVE-2024-9924 (The fix for CVE-2024-26261 was incomplete, and and the specific packag ...)
 	NOT-FOR-US: Hgiga OAKlouds
 CVE-2024-9923 (The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specif ...)
@@ -4169,6 +4285,7 @@ CVE-2024-46985 (DataEase is an open source data visualization analysis tool. Pri
 CVE-2024-46639 (A cross-site scripting (XSS) vulnerability in HelpDeskZ v2.0.2 allows  ...)
 	NOT-FOR-US: HelpDeskZ
 CVE-2024-46544 (Incorrect Default Permissions vulnerability in Apache Tomcat Connector ...)
+	{DLA-3919-1}
 	- libapache-mod-jk <unfixed> (bug #1082713)
 	NOTE: https://www.openwall.com/lists/oss-security/2024/09/23/1
 	NOTE: Fixed by: https://github.com/apache/tomcat-connectors/commit/d55706e92b65018c2e4c7ab14014a996b0174966 (JK_1_2_50)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/af7a3e3e3a8d54e3f921f6a5cad6de4e4b1e355a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/af7a3e3e3a8d54e3f921f6a5cad6de4e4b1e355a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241015/a00d17ff/attachment.htm>

More information about the debian-security-tracker-commits mailing list