[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff (@jmm) jmm at debian.org
Fri Dec 1 14:59:47 GMT 2023 


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
721bd0d4 by Moritz Muehlenhoff at 2023-12-01T15:57:07+01:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,19 +1,19 @@
 CVE-2023-6396
 	- gitlab <not-affected> (Specific to EE)
 CVE-2023-6442 (A vulnerability was found in PHPGurukul Nipah Virus Testing Management ...)
-	TODO: check
+	NOT-FOR-US: PHPGurukul
 CVE-2023-6440 (A vulnerability was found in SourceCodester Book Borrower System 1.0 a ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester
 CVE-2023-6033 (Improper neutralization of input in Jira integration configuration in  ...)
 	- gitlab <unfixed>
 CVE-2023-5995 (An issue has been discovered in GitLab EE affecting all versions start ...)
 	- gitlab <not-affected> (Specific to EE)
 CVE-2023-5915 (A vulnerability of Uncontrolled Resource Consumption has been identifi ...)
-	TODO: check
+	NOT-FOR-US: Yokogawa Electric Corporation STARDOM
 CVE-2023-5909 (KEPServerEX does not properly validate certificates from clients which ...)
-	TODO: check
+	NOT-FOR-US: KEPServerEX
 CVE-2023-5908 (KEPServerEX is vulnerable to a buffer overflow which may allow an atta ...)
-	TODO: check
+	NOT-FOR-US: KEPServerEX
 CVE-2023-5226 (An issue has been discovered in GitLab affecting all versions before 1 ...)
 	- gitlab <unfixed>
 CVE-2023-4912 (An issue has been discovered in GitLab EE affecting all versions start ...)
@@ -25,57 +25,57 @@ CVE-2023-4317 (An issue has been discovered in GitLab affecting all versions sta
 CVE-2023-49735 (** UNSUPPORTED WHEN ASSIGNED **  The value set as the DefaultLocaleRes ...)
 	TODO: check
 CVE-2023-48894 (Incorrect Access Control vulnerability in jshERP V3.3 allows attackers ...)
-	TODO: check
+	NOT-FOR-US: jshERP
 CVE-2023-48016 (Restaurant Table Booking System V1.0 is vulnerable to SQL Injection in ...)
-	TODO: check
+	NOT-FOR-US: Restaurant Table Booking System
 CVE-2023-47454 (An Untrusted search path vulnerability in NetEase CloudMusic 2.10.4 fo ...)
-	TODO: check
+	NOT-FOR-US: NetEase CloudMusic
 CVE-2023-47453 (An Untrusted search path vulnerability in Sohu Video Player 7.0.15.0 a ...)
-	TODO: check
+	NOT-FOR-US: Sohu Video Player
 CVE-2023-47452 (An Untrusted search path vulnerability in notepad++ 6.5 allows local u ...)
-	TODO: check
+	NOT-FOR-US: notepad++
 CVE-2023-47307 (Buffer Overflow vulnerability in /apply.cgi in Shenzhen Libituo Techno ...)
-	TODO: check
+	NOT-FOR-US: Shenzhen Libituo
 CVE-2023-47279 (In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Delta Electronics
 CVE-2023-47207 (In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Delta Electronics
 CVE-2023-46956 (SQL injection vulnerability in Packers and Movers Management System v. ...)
-	TODO: check
+	NOT-FOR-US: Packers and Movers Management System
 CVE-2023-46690 (In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Delta Electronics
 CVE-2023-46389 (LOYTEC electronics GmbH LINX-212 firmware 6.2.4 and LINX-151 Firmware  ...)
-	TODO: check
+	NOT-FOR-US: LOYTEC
 CVE-2023-46388 (LOYTEC electronics GmbH LINX-212 6.2.4 and LINX-151 7.2.4 are vulnerab ...)
-	TODO: check
+	NOT-FOR-US: LOYTEC
 CVE-2023-46387 (LOYTEC electronics GmbH LINX-212 firmware 6.2.4 and LINX-151 firmware  ...)
-	TODO: check
+	NOT-FOR-US: LOYTEC
 CVE-2023-46386 (LOYTEC electronics GmbH LINX-212 firmware 6.2.4 and LINX-151 firmware  ...)
-	TODO: check
+	NOT-FOR-US: LOYTEC
 CVE-2023-46385 (LOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable to Inse ...)
-	TODO: check
+	NOT-FOR-US: LOYTEC
 CVE-2023-46384 (LOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable to Inse ...)
-	TODO: check
+	NOT-FOR-US: LOYTEC
 CVE-2023-46383 (LOYTEC electronics GmbH LINX Configurator 7.4.10 uses HTTP Basic Authe ...)
-	TODO: check
+	NOT-FOR-US: LOYTEC
 CVE-2023-46326 (ZStack Cloud version 3.10.38 and before allows unauthenticated API acc ...)
-	TODO: check
+	NOT-FOR-US: ZStack Cloud
 CVE-2023-45253 (An issue was discovered in Huddly HuddlyCameraService before version 8 ...)
-	TODO: check
+	NOT-FOR-US: Huddly HuddlyCameraService
 CVE-2023-45252 (DLL Hijacking vulnerability in Huddly HuddlyCameraService before versi ...)
-	TODO: check
+	NOT-FOR-US: Huddly HuddlyCameraService
 CVE-2023-43455 (An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B2 ...)
-	TODO: check
+	NOT-FOR-US: TOTOLINK
 CVE-2023-43454 (An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B2 ...)
-	TODO: check
+	NOT-FOR-US: TOTOLINK
 CVE-2023-43453 (An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B2 ...)
-	TODO: check
+	NOT-FOR-US: TOTOLINK
 CVE-2023-43089 (Dell Rugged Control Center, version prior to 4.7, contains insufficien ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2023-42917 (A memory corruption vulnerability was addressed with improved locking. ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2023-42916 (An out-of-bounds read was addressed with improved input validation. Th ...)
-	TODO: check
+	NOT-FOR-US: Apple
 CVE-2023-3964 (An issue has been discovered in GitLab affecting all versions starting ...)
 	- gitlab <unfixed>
 CVE-2023-3949 (An issue has been discovered in GitLab affecting all versions starting ...)
@@ -83,7 +83,7 @@ CVE-2023-3949 (An issue has been discovered in GitLab affecting all versions sta
 CVE-2023-3443 (An issue has been discovered in GitLab affecting all versions starting ...)
 	- gitlab <unfixed>
 CVE-2023-39226 (In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Delta Electronics
 CVE-2023-6439 (A vulnerability classified as problematic was found in ZenTao PMS 18.8 ...)
 	NOT-FOR-US: ZenTao PMS
 CVE-2023-6438 (A vulnerability classified as problematic has been found in IceCMS 2.0 ...)
@@ -169522,7 +169522,7 @@ CVE-2021-35977 (An issue was discovered in Digi RealPort for Windows through 4.8
 CVE-2021-35976 (The feature to preview a website in Plesk Obsidian 18.0.0 through 18.0 ...)
 	NOT-FOR-US: Plesk Obsidian
 CVE-2021-35975 (Absolute path traversal vulnerability in the Systematica SMTP Adapter  ...)
-	TODO: check
+	NOT-FOR-US: Systematica SMTP Adapter component
 CVE-2021-35974
 	RESERVED
 CVE-2021-35973 (NETGEAR WAC104 devices before 1.0.4.15 are affected by an authenticati ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/721bd0d40fdc23664125e6132bc2d1b26a3feafb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/721bd0d40fdc23664125e6132bc2d1b26a3feafb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231201/e685725f/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list