[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Aug 1 09:23:18 BST 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cbe2253b by Salvatore Bonaccorso at 2023-08-01T10:22:45+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,21 +1,21 @@
 CVE-2023-4033 (OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0 ...)
-	TODO: check
+	NOT-FOR-US: mlflow
 CVE-2023-3825 (PTC\u2019s KEPServerEX Versions 6.0 to 6.14.263 are vulnerable to bein ...)
-	TODO: check
+	NOT-FOR-US: PTC KEPServerEX
 CVE-2023-3462 (HashiCorp's Vault and Vault Enterprise are vulnerable to user enumerat ...)
-	TODO: check
+	NOT-FOR-US: HashiCorp Vault
 CVE-2023-39122 (BMC Control-M Software v9.0.20.200 was discovered to contain a SQL inj ...)
-	TODO: check
+	NOT-FOR-US: BMC Control-M Software
 CVE-2023-37772 (Online Shopping Portal Project v3.1 was discovered to contain a SQL in ...)
-	TODO: check
+	NOT-FOR-US: Online Shopping Portal Project
 CVE-2023-37496 (HCL Verse is susceptible to a Stored Cross Site Scripting (XSS) vulner ...)
-	TODO: check
+	NOT-FOR-US: HCL
 CVE-2023-36984 (LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure.)
-	TODO: check
+	NOT-FOR-US: LavaLite CMS
 CVE-2023-36983 (LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure.)
-	TODO: check
+	NOT-FOR-US: LavaLite CMS
 CVE-2023-34960 (A command injection vulnerability in the wsConvertPpt component of Cha ...)
-	TODO: check
+	NOT-FOR-US: Chamilo CMS
 CVE-2023-4026
 	REJECTED
 CVE-2023-4010 (A flaw was found in the USB Host Controller Driver framework in the Li ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cbe2253b32797bd73be53250edb17ef1c7b63f1e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cbe2253b32797bd73be53250edb17ef1c7b63f1e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230801/9f4d8336/attachment.htm>


More information about the debian-security-tracker-commits mailing list