[Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Tue Aug 1 11:50:40 BST 2023
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
8f88f0f1 by Moritz Mühlenhoff at 2023-08-01T12:49:22+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -27,7 +27,7 @@ CVE-2023-4010 (A flaw was found in the USB Host Controller Driver framework in t
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2227726
NOTE: https://github.com/wanrenmi/a-usb-kernel-bug
CVE-2023-3997 (Splunk SOAR versions 6.0.2 and earlier are indirectly affected by a po ...)
- TODO: check
+ NOT-FOR-US: Splunk SOAR
CVE-2023-3983 (An authenticated SQL injection vulnerability exists in Advantech iView ...)
NOT-FOR-US: Advantech iView
CVE-2023-3817 (Issue summary: Checking excessively long DH keys or parameters may be ...)
@@ -53,7 +53,7 @@ CVE-2023-3134 (The Forminator WordPress plugin before 1.24.4 does not properly e
CVE-2023-3130 (The Short URL WordPress plugin before 1.6.5 does not sanitise and esca ...)
NOT-FOR-US: WordPress plugin
CVE-2023-38989 (An issue in the delete function in the UserController class of jeesite ...)
- TODO: check
+ NOT-FOR-US: jeesite
CVE-2023-38750 (In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 ...)
NOT-FOR-US: Zimbra
CVE-2023-38311 (An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting ...)
@@ -89,7 +89,7 @@ CVE-2023-36090 (Authentication Bypass vulnerability in D-Link DIR-885L FW102b01
CVE-2023-36089 (Authentication Bypass vulnerability in D-Link DIR-645 firmware version ...)
NOT-FOR-US: D-Link
CVE-2023-35861 (A shell-injection vulnerability in email notifications on Supermicro m ...)
- TODO: check
+ NOT-FOR-US: Supermicro
CVE-2023-35792 (Vound Intella Connect 2.6.0.3 is vulnerable to stored Cross-site Scrip ...)
NOT-FOR-US: Vound Intella Connect
CVE-2023-35791 (Vound Intella Connect 2.6.0.3 has an Open Redirect vulnerability.)
@@ -109,7 +109,7 @@ CVE-2023-34644 (Remote code execution vulnerability in Ruijie Networks Product:
CVE-2023-34635 (Wifi Soft Unibox Administration 3.0 and 3.1 is vulnerable to SQL Injec ...)
NOT-FOR-US: Wifi Soft Unibox Administration
CVE-2023-33534 (A Cross-Site Request Forgery (CSRF) in Guanzhou Tozed Kangwei Intellig ...)
- TODO: check
+ NOT-FOR-US: Guanzhou Tozed Kangwei
CVE-2020-36763 (Cross Site Scripting (XSS) vulnerability in DuxCMS 2.1 allows remote a ...)
NOT-FOR-US: DuxCMS
CVE-2023-4007 (Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpm ...)
@@ -25199,7 +25199,7 @@ CVE-2023-26141
CVE-2023-26140
RESERVED
CVE-2023-26139 (Versions of the package underscore-keypath from 0.0.11 are vulnerable ...)
- TODO: check
+ NOT-FOR-US: Node underscore-keypath
CVE-2023-26138 (All versions of the package drogonframework/drogon are vulnerable to C ...)
NOT-FOR-US: Drogon
CVE-2023-26137 (All versions of the package drogonframework/drogon are vulnerable to H ...)
@@ -59279,9 +59279,9 @@ CVE-2022-42185
CVE-2022-42184
RESERVED
CVE-2022-42183 (Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Server-Side ...)
- TODO: check
+ NOT-FOR-US: Precisely Spectrum Spatial Analyst
CVE-2022-42182 (Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Directory Tr ...)
- TODO: check
+ NOT-FOR-US: Precisely Spectrum Spatial Analyst
CVE-2022-42181
RESERVED
CVE-2022-42180
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f88f0f1b5e337487c661b181364d1986ecb51df
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f88f0f1b5e337487c661b181364d1986ecb51df
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230801/790385ef/attachment.htm>
More information about the debian-security-tracker-commits
mailing list