Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ec18bad2 by Salvatore Bonaccorso at 2025-02-20T10:05:36+01:00
Process more NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -41,15 +41,15 @@ CVE-2025-1223 (An attacker can gain application privileges
in order to perform l
CVE-2025-1222 (An attacker can gain application privileges in order to perform
limite ...)
NOT-FOR-US: Citrix
CVE-2025-0112 (A problem with a detection mechanism in the Palo Alto Networks
Cortex ...)
- TODO: check
+ NOT-FOR-US: Palo Alto Networks
CVE-2024-6697 (The product does not handle or incorrectly handles when it has
insuffi ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2024-6696 (The product implements access controls via a policy or other
feature w ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2024-5706 (The product receives input from an upstream component, but it
does not ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2024-5705 (The product performs an authorization check when an actor
attempts to ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2024-49782 (IBM OpenPages with Watson 8.3 and 9.0 could allow a remote
attacker ...)
NOT-FOR-US: IBM
CVE-2024-49780 (IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages could
allow a rem ...)
@@ -59,15 +59,15 @@ CVE-2024-49355 (IBM OpenPages with Watson 8.3 and 9.0may
write improperly neutra
CVE-2024-43196 (IBM OpenPages with Watson 8.3 and 9.0 application could allow
an auth ...)
NOT-FOR-US: IBM
CVE-2024-37363 (The product does not perform an authorization check when an
actor atte ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2024-37362 (The product transmits or stores authentication credentials,
but it use ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2024-37361 (The application deserializes untrusted data without
sufficiently verif ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2024-37360 (Hitachi Vantara Pentaho Business Analytics Server - Improper
Neutraliz ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2024-37359 (The web server receives a URL or similar request from an
upstream comp ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2024-13445 (The Elementor Website Builder \u2013 More Than Just a Page
Builder plu ...)
NOT-FOR-US: WordPress plugin
CVE-2024-13155 (The Unlimited Elements For Elementor plugin for WordPress is
vulnerabl ...)
@@ -77,15 +77,15 @@ CVE-2024-12284 (Authenticated privilege escalation
inNetScaler Console and NetSc
CVE-2024-10339
REJECTED
CVE-2023-51305 (PHPJabbers Car Park Booking System v3.0 is vulnerable to
Multiple Stor ...)
- TODO: check
+ NOT-FOR-US: PHPJabbers Car Park Booking System
CVE-2023-51303 (PHPJabbers Event Ticketing System v1.0 is vulnerable to
Multiple HTML ...)
- TODO: check
+ NOT-FOR-US: PHPJabbers Event Ticketing System
CVE-2023-51302 (PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV
Injection vu ...)
- TODO: check
+ NOT-FOR-US: PHPJabbers Hotel Booking System
CVE-2023-51301 (A lack of rate limiting in the "Login Section, Forgot Email"
feature o ...)
- TODO: check
+ NOT-FOR-US: PHPJabbers Hotel Booking System
CVE-2023-51300 (PHPJabbers Hotel Booking System v4.0 is vulnerable to
Cross-Site Scrip ...)
- TODO: check
+ NOT-FOR-US: PHPJabbers Hotel Booking System
CVE-2025-27089 (Directus is a real-time API and App dashboard for managing SQL
databas ...)
NOT-FOR-US: Directus
CVE-2025-24965 (crun is an open source OCI Container Runtime fully written in
C. In af ...)
@@ -120,7 +120,7 @@ CVE-2025-1075 (Insertion of Sensitive Information into Log
File in Checkmk GmbH'
CVE-2025-1024 (A vulnerability exists in ChurchCRM 5.13.0that allows an
attacker to e ...)
NOT-FOR-US: ChurchCRM
CVE-2025-1007 (In OpenVSX version v0.9.0 to v0.20.0, the
/user/namespace/{namespace} ...)
- TODO: check
+ NOT-FOR-US: OpenVSX
CVE-2025-1006 (Use after free in Network in Google Chrome prior to
133.0.6943.126 all ...)
- chromium <unfixed>
[bullseye] - chromium <end-of-life> (see #1061268)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ec18bad2e421b1b33d8d01b13494f78e0b3780a5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ec18bad2e421b1b33d8d01b13494f78e0b3780a5
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
