[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Aug 1 09:23:18 BST 2023
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
cbe2253b by Salvatore Bonaccorso at 2023-08-01T10:22:45+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,21 +1,21 @@
CVE-2023-4033 (OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0 ...)
- TODO: check
+ NOT-FOR-US: mlflow
CVE-2023-3825 (PTC\u2019s KEPServerEX Versions 6.0 to 6.14.263 are vulnerable to bein ...)
- TODO: check
+ NOT-FOR-US: PTC KEPServerEX
CVE-2023-3462 (HashiCorp's Vault and Vault Enterprise are vulnerable to user enumerat ...)
- TODO: check
+ NOT-FOR-US: HashiCorp Vault
CVE-2023-39122 (BMC Control-M Software v9.0.20.200 was discovered to contain a SQL inj ...)
- TODO: check
+ NOT-FOR-US: BMC Control-M Software
CVE-2023-37772 (Online Shopping Portal Project v3.1 was discovered to contain a SQL in ...)
- TODO: check
+ NOT-FOR-US: Online Shopping Portal Project
CVE-2023-37496 (HCL Verse is susceptible to a Stored Cross Site Scripting (XSS) vulner ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2023-36984 (LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure.)
- TODO: check
+ NOT-FOR-US: LavaLite CMS
CVE-2023-36983 (LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure.)
- TODO: check
+ NOT-FOR-US: LavaLite CMS
CVE-2023-34960 (A command injection vulnerability in the wsConvertPpt component of Cha ...)
- TODO: check
+ NOT-FOR-US: Chamilo CMS
CVE-2023-4026
REJECTED
CVE-2023-4010 (A flaw was found in the USB Host Controller Driver framework in the Li ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cbe2253b32797bd73be53250edb17ef1c7b63f1e
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cbe2253b32797bd73be53250edb17ef1c7b63f1e
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230801/9f4d8336/attachment.htm>
More information about the debian-security-tracker-commits
mailing list