[Git][security-tracker-team/security-tracker][master] automatic update

Tue Sep 10 09:12:41 BST 2024


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
73520a6a by security tracker role at 2024-09-10T08:12:35+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,93 @@
+CVE-2024-8611 (A vulnerability classified as critical was found in itsourcecode Tailo ...)
+	TODO: check
+CVE-2024-8610 (A vulnerability classified as problematic has been found in SourceCode ...)
+	TODO: check
+CVE-2024-8478 (The The Affiliate Super Assistent plugin for WordPress is vulnerable t ...)
+	TODO: check
+CVE-2024-8268 (The Frontend Dashboard plugin for WordPress is vulnerable to unauthori ...)
+	TODO: check
+CVE-2024-7955 (The Starbox  WordPress plugin before 3.5.2 does not sanitise and escap ...)
+	TODO: check
+CVE-2024-7891 (The Floating Contact Button WordPress plugin before 2.8 does not sanit ...)
+	TODO: check
+CVE-2024-7784 (During internal Axis Security Development Model (ASDM) threat-modellin ...)
+	TODO: check
+CVE-2024-7734 (An unauthenticated remote attacker canexploit the behavior of thepathf ...)
+	TODO: check
+CVE-2024-7655 (The Community by PeepSo \u2013 Social Network, Membership, Registratio ...)
+	TODO: check
+CVE-2024-7618 (The Community by PeepSo \u2013 Social Network, Membership, Registratio ...)
+	TODO: check
+CVE-2024-6979 (Amin Aliakbari, member of the AXIS OS Bug Bounty Program, has found a  ...)
+	TODO: check
+CVE-2024-6596 (An unauthenticated remote attacker can run malicious c# code included  ...)
+	TODO: check
+CVE-2024-6509 (Marinus Pfund, member of the AXIS OS Bug Bounty Program,  has found th ...)
+	TODO: check
+CVE-2024-6342 (**UNSUPPORTED WHEN ASSIGNED** A command injection vulnerability in the ...)
+	TODO: check
+CVE-2024-6173 (51l3nc3, member of the AXIS OS Bug Bounty Program, has found that a Gu ...)
+	TODO: check
+CVE-2024-45504 (Cross-site request forgery (CSRF) vulnerability in multiple Alps Syste ...)
+	TODO: check
+CVE-2024-45286 (Due to lack of proper authorization checks when calling user, a functi ...)
+	TODO: check
+CVE-2024-45285 (The RFC enabled function module allows a low privileged user to perfor ...)
+	TODO: check
+CVE-2024-45284 (An authenticated attacker with high privilege can use functions of SLC ...)
+	TODO: check
+CVE-2024-45283 (SAP NetWeaver AS for Java allows an authorized attacker to obtain sens ...)
+	TODO: check
+CVE-2024-45281 (SAP BusinessObjects Business Intelligence Platform allows a high privi ...)
+	TODO: check
+CVE-2024-45280 (Due to insufficient encoding of user-controlled inputs, SAP NetWeaver  ...)
+	TODO: check
+CVE-2024-45279 (Due to insufficient input validation, CRM Blueprint Application Builde ...)
+	TODO: check
+CVE-2024-44411 (D-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the  ...)
+	TODO: check
+CVE-2024-44410 (D-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the  ...)
+	TODO: check
+CVE-2024-44121 (Under certain conditions Statutory Reports in SAP S/4 HANA allows an a ...)
+	TODO: check
+CVE-2024-44120 (SAP NetWeaver Enterprise Portal is vulnerable to reflected cross site  ...)
+	TODO: check
+CVE-2024-44117 (The RFC enabled function module allows a low privileged user to perfor ...)
+	TODO: check
+CVE-2024-44116 (The RFC enabled function module allows a low privileged user to add an ...)
+	TODO: check
+CVE-2024-44115 (The RFC enabled function module allows a low privileged user to add UR ...)
+	TODO: check
+CVE-2024-44114 (SAP NetWeaver Application Server for ABAP and ABAP Platform allow user ...)
+	TODO: check
+CVE-2024-44113 (Due to missing authorization checks, SAP Business Warehouse (BEx Analy ...)
+	TODO: check
+CVE-2024-44112 (Due to missing authorization check in SAP for Oil & Gas (Transportatio ...)
+	TODO: check
+CVE-2024-44072 (OS command injection vulnerability exists in BUFFALO wireless LAN rout ...)
+	TODO: check
+CVE-2024-42427 (Dell ThinOS versions 2402 and 2405, contains an Improper Neutralizatio ...)
+	TODO: check
+CVE-2024-42424 (Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains ...)
+	TODO: check
+CVE-2024-42380 (The RFC enabled function module allows a low privileged user to read a ...)
+	TODO: check
+CVE-2024-42378 (Due to weak encoding of user-controlled inputs, eProcurement on SAP S/ ...)
+	TODO: check
+CVE-2024-42371 (The RFC enabled function module allows a low privileged user to delete ...)
+	TODO: check
+CVE-2024-41729 (Due to missing authorization checks, SAP BEx Analyzer allows an authen ...)
+	TODO: check
+CVE-2024-41728 (Due to missing authorization check, SAP NetWeaver Application Server f ...)
+	TODO: check
+CVE-2024-38270 (An insufficient entropy vulnerability caused by the improper use of a  ...)
+	TODO: check
+CVE-2024-27365 (An issue was discovered in Samsung Mobile Processor Exynos Exynos 980, ...)
+	TODO: check
+CVE-2024-21528 (All versions of the package node-gettext are vulnerable to Prototype P ...)
+	TODO: check
+CVE-2024-0067 (Marinus Pfund, member of the AXIS OS Bug Bounty Program,  has found th ...)
+	TODO: check
 CVE-2024-8605 (A vulnerability classified as problematic was found in code-projects I ...)
 	NOT-FOR-US: code-projects Inventory Management
 CVE-2024-8604 (A vulnerability classified as problematic has been found in SourceCode ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/73520a6ab125178edece9269f3b1e5f388bc3ae8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/73520a6ab125178edece9269f3b1e5f388bc3ae8
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240910/fe8063b5/attachment.htm>
