[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8f88f0f1 by Moritz Mühlenhoff at 2023-08-01T12:49:22+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -27,7 +27,7 @@ CVE-2023-4010 (A flaw was found in the USB Host Controller Driver framework in t
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2227726
 	NOTE: https://github.com/wanrenmi/a-usb-kernel-bug
 CVE-2023-3997 (Splunk SOAR versions 6.0.2 and earlier are indirectly affected by a po ...)
-	TODO: check
+	NOT-FOR-US: Splunk SOAR
 CVE-2023-3983 (An authenticated SQL injection vulnerability exists in Advantech iView ...)
 	NOT-FOR-US: Advantech iView
 CVE-2023-3817 (Issue summary: Checking excessively long DH keys or parameters may be  ...)
@@ -53,7 +53,7 @@ CVE-2023-3134 (The Forminator WordPress plugin before 1.24.4 does not properly e
 CVE-2023-3130 (The Short URL WordPress plugin before 1.6.5 does not sanitise and esca ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2023-38989 (An issue in the delete function in the UserController class of jeesite ...)
-	TODO: check
+	NOT-FOR-US: jeesite
 CVE-2023-38750 (In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 ...)
 	NOT-FOR-US: Zimbra
 CVE-2023-38311 (An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting ...)
@@ -89,7 +89,7 @@ CVE-2023-36090 (Authentication Bypass vulnerability in D-Link DIR-885L FW102b01
 CVE-2023-36089 (Authentication Bypass vulnerability in D-Link DIR-645 firmware version ...)
 	NOT-FOR-US: D-Link
 CVE-2023-35861 (A shell-injection vulnerability in email notifications on Supermicro m ...)
-	TODO: check
+	NOT-FOR-US: Supermicro
 CVE-2023-35792 (Vound Intella Connect 2.6.0.3 is vulnerable to stored Cross-site Scrip ...)
 	NOT-FOR-US: Vound Intella Connect
 CVE-2023-35791 (Vound Intella Connect 2.6.0.3 has an Open Redirect vulnerability.)
@@ -109,7 +109,7 @@ CVE-2023-34644 (Remote code execution vulnerability in Ruijie Networks Product:
 CVE-2023-34635 (Wifi Soft Unibox Administration 3.0 and 3.1 is vulnerable to SQL Injec ...)
 	NOT-FOR-US: Wifi Soft Unibox Administration
 CVE-2023-33534 (A Cross-Site Request Forgery (CSRF) in Guanzhou Tozed Kangwei Intellig ...)
-	TODO: check
+	NOT-FOR-US: Guanzhou Tozed Kangwei
 CVE-2020-36763 (Cross Site Scripting (XSS) vulnerability in DuxCMS 2.1 allows remote a ...)
 	NOT-FOR-US: DuxCMS
 CVE-2023-4007 (Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpm ...)
@@ -25199,7 +25199,7 @@ CVE-2023-26141
 CVE-2023-26140
 	RESERVED
 CVE-2023-26139 (Versions of the package underscore-keypath from 0.0.11 are vulnerable  ...)
-	TODO: check
+	NOT-FOR-US: Node underscore-keypath
 CVE-2023-26138 (All versions of the package drogonframework/drogon are vulnerable to C ...)
 	NOT-FOR-US: Drogon
 CVE-2023-26137 (All versions of the package drogonframework/drogon are vulnerable to H ...)
@@ -59279,9 +59279,9 @@ CVE-2022-42185
 CVE-2022-42184
 	RESERVED
 CVE-2022-42183 (Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Server-Side  ...)
-	TODO: check
+	NOT-FOR-US: Precisely Spectrum Spatial Analyst
 CVE-2022-42182 (Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Directory Tr ...)
-	TODO: check
+	NOT-FOR-US: Precisely Spectrum Spatial Analyst
 CVE-2022-42181
 	RESERVED
 CVE-2022-42180



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f88f0f1b5e337487c661b181364d1986ecb51df

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f88f0f1b5e337487c661b181364d1986ecb51df
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230801/790385ef/attachment.htm>