Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
cf007eae by Salvatore Bonaccorso at 2024-02-20T09:20:29+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,13 +1,13 @@
CVE-2024-26134 (cbor2 provides encoding and decoding for the Concise Binary
Object Rep ...)
TODO: check
CVE-2024-26129 (PrestaShop is an open-source e-commerce platform. Starting in
version ...)
- TODO: check
+ NOT-FOR-US: PrestaShop
CVE-2024-25974 (The Frentix GmbH OpenOlat LMS is affected by stored a
Cross-Site Scrip ...)
- TODO: check
+ NOT-FOR-US: Frentix GmbH OpenOlat LMS
CVE-2024-25973 (The Frentix GmbH OpenOlat LMS is affected by multiple stored
Cross-Sit ...)
- TODO: check
+ NOT-FOR-US: Frentix GmbH OpenOlat LMS
CVE-2024-25149 (Liferay Portal 7.2.0 through 7.4.1, and older unsupported
versions, an ...)
- TODO: check
+ NOT-FOR-US: Liferay
CVE-2024-22234 (In Spring Security, versions 6.1.x prior to 6.1.7 and versions
6.2.x p ...)
TODO: check
CVE-2024-1651 (Torrentpier version 2.4.1 allows executing arbitrary commands
on the s ...)
@@ -17,35 +17,35 @@ CVE-2024-1648 (electron-pdf version 20.0.0 allows an
external attacker to remote
CVE-2024-1647 (Pyhtml2pdf version 0.0.6 allows an external attacker to
remotely obtai ...)
TODO: check
CVE-2024-1644 (Suite CRM version 7.14.2 allows including local php files. This
is pos ...)
- TODO: check
+ NOT-FOR-US: Suite CRM
CVE-2024-1638 (The documentation specifies that the BT_GATT_PERM_READ_LESC and
BT_GAT ...)
TODO: check
CVE-2024-1559 (The Link Library plugin for WordPress is vulnerable to Stored
Cross-Si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-1510 (The WP Shortcodes Plugin \u2014 Shortcodes Ultimate plugin for
WordPre ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-1297 (Loomio version 2.22.0 allows executing arbitrary commands on
the serve ...)
TODO: check
CVE-2024-0715 (Expression Language Injection vulnerability in Hitachi Global
Link Man ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2023-6764 (A format string vulnerability in a function of the IPSec VPN
feature i ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2023-6399 (A format string vulnerability in Zyxel ATP series firmware
versions fr ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2023-6398 (A post-authentication command injection vulnerability in the
file uplo ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2023-6397 (A null pointer dereference vulnerability in Zyxel ATP series
firmware ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2023-6260 (Improper Neutralization of Special Elements used in an OS
Command ('OS ...)
TODO: check
CVE-2023-6259 (Insufficiently Protected Credentials, : Improper Access Control
vulner ...)
TODO: check
CVE-2023-5190 (Open redirect vulnerability in the Countries Management\u2019s
edit re ...)
- TODO: check
+ NOT-FOR-US: Liferay
CVE-2023-44308 (Open redirect vulnerability in adaptive media administration
page in L ...)
- TODO: check
+ NOT-FOR-US: Liferay
CVE-2022-48625 (Yealink Config Encrypt Tool add RSA before 1.2 has a built-in
RSA key ...)
- TODO: check
+ NOT-FOR-US: Yealink
CVE-2024-1635 (A vulnerability was found in Undertow. This vulnerability
impacts a se ...)
- undertow <unfixed>
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2264928
@@ -83237,7 +83237,7 @@ CVE-2022-45322
CVE-2022-45321
RESERVED
CVE-2022-45320 (Liferay Portal before 7.4.3.16 and Liferay DXP before 7.2 fix
pack 19, ...)
- TODO: check
+ NOT-FOR-US: Liferay
CVE-2022-45319
RESERVED
CVE-2022-45318
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cf007eaed89ebeab41a8bfde52131a4d96be4cd8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cf007eaed89ebeab41a8bfde52131a4d96be4cd8
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
