[Git][security-tracker-team/security-tracker][master] automatic update

Thu Feb 20 08:12:03 GMT 2025


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
57b12664 by security tracker role at 2025-02-20T08:11:56+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,89 @@
+CVE-2025-27218 (Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 bef ...)
+	TODO: check
+CVE-2025-27092 (GHOSTS is an open source user simulation framework for cyber experimen ...)
+	TODO: check
+CVE-2025-27090 (Sliver is an open source cross-platform adversary emulation/red team f ...)
+	TODO: check
+CVE-2025-26856 (Improper neutralization of special elements used in an OS command ('OS ...)
+	TODO: check
+CVE-2025-25947 (An issue in Bento4 v1.6.0-641 allows an attacker to trigger a segmenta ...)
+	TODO: check
+CVE-2025-25946 (An issue in Bento4 v1.6.0-641 allows an attacker to cause a memory lea ...)
+	TODO: check
+CVE-2025-25945 (An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive i ...)
+	TODO: check
+CVE-2025-25944 (Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local att ...)
+	TODO: check
+CVE-2025-25943 (Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local att ...)
+	TODO: check
+CVE-2025-25942 (An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive i ...)
+	TODO: check
+CVE-2025-25196 (OpenFGA is a high-performance and flexible authorization/permission en ...)
+	TODO: check
+CVE-2025-24989 (An improper access control vulnerability in Power Pages allows an unau ...)
+	TODO: check
+CVE-2025-24947 (A hash collision vulnerability (in the hash table used to manage conne ...)
+	TODO: check
+CVE-2025-24946 (The hash table used to manage connections in picoquic before b80fd3f u ...)
+	TODO: check
+CVE-2025-23020 (An issue was discovered in Kwik before 0.10.1. A hash collision vulner ...)
+	TODO: check
+CVE-2025-21355 (Missing Authentication for Critical Function in Microsoft Bing allows  ...)
+	TODO: check
+CVE-2025-1492 (Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 ...)
+	TODO: check
+CVE-2025-1293 (Hermes versions up to 0.4.0 improperly validated the JWT provided when ...)
+	TODO: check
+CVE-2025-1223 (An attacker can gain application privileges in order to perform limite ...)
+	TODO: check
+CVE-2025-1222 (An attacker can gain application privileges in order to perform limite ...)
+	TODO: check
+CVE-2025-0112 (A problem with a detection mechanism in the Palo Alto Networks Cortex  ...)
+	TODO: check
+CVE-2024-6697 (The product does not handle or incorrectly handles when it has insuffi ...)
+	TODO: check
+CVE-2024-6696 (The product implements access controls via a policy or other feature w ...)
+	TODO: check
+CVE-2024-5706 (The product receives input from an upstream component, but it does not ...)
+	TODO: check
+CVE-2024-5705 (The product performs an authorization check when an actor attempts to  ...)
+	TODO: check
+CVE-2024-49782 (IBM OpenPages with Watson 8.3 and 9.0    could allow a remote attacker ...)
+	TODO: check
+CVE-2024-49780 (IBM OpenPages with Watson 8.3 and 9.0  IBM OpenPages could allow a rem ...)
+	TODO: check
+CVE-2024-49355 (IBM OpenPages with Watson 8.3 and 9.0may write improperly neutralized  ...)
+	TODO: check
+CVE-2024-43196 (IBM OpenPages with Watson 8.3 and 9.0  application could allow an auth ...)
+	TODO: check
+CVE-2024-37363 (The product does not perform an authorization check when an actor atte ...)
+	TODO: check
+CVE-2024-37362 (The product transmits or stores authentication credentials, but it use ...)
+	TODO: check
+CVE-2024-37361 (The application deserializes untrusted data without sufficiently verif ...)
+	TODO: check
+CVE-2024-37360 (Hitachi Vantara Pentaho Business Analytics Server - Improper Neutraliz ...)
+	TODO: check
+CVE-2024-37359 (The web server receives a URL or similar request from an upstream comp ...)
+	TODO: check
+CVE-2024-13445 (The Elementor Website Builder \u2013 More Than Just a Page Builder plu ...)
+	TODO: check
+CVE-2024-13155 (The Unlimited Elements For Elementor plugin for WordPress is vulnerabl ...)
+	TODO: check
+CVE-2024-12284 (Authenticated privilege escalation inNetScaler Console and NetScaler A ...)
+	TODO: check
+CVE-2024-10339
+	REJECTED
+CVE-2023-51305 (PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple Stor ...)
+	TODO: check
+CVE-2023-51303 (PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML  ...)
+	TODO: check
+CVE-2023-51302 (PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vu ...)
+	TODO: check
+CVE-2023-51301 (A lack of rate limiting in the "Login Section, Forgot Email" feature o ...)
+	TODO: check
+CVE-2023-51300 (PHPJabbers Hotel Booking System v4.0 is vulnerable to Cross-Site Scrip ...)
+	TODO: check
 CVE-2025-27089 (Directus is a real-time API and App dashboard for managing SQL databas ...)
 	NOT-FOR-US: Directus
 CVE-2025-24965 (crun is an open source OCI Container Runtime fully written in C. In af ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/57b12664cd10f3d3d3279b8c43b3e4275b61983d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/57b12664cd10f3d3d3279b8c43b3e4275b61983d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250220/4fbd4d2a/attachment.htm>
