[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Dec 26 20:26:52 GMT 2023 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ac58c210 by Salvatore Bonaccorso at 2023-12-26T21:26:20+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,35 +1,35 @@
 CVE-2023-6268 (The JSON Content Importer WordPress plugin before 1.5.4 does not sanit ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-6250 (The BestWebSoft's Like & Share WordPress plugin before 2.74 discloses  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-6166 (The Quiz Maker WordPress plugin before 6.4.9.5 does not escape generat ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-6155 (The Quiz Maker WordPress plugin before 6.4.9.5 does not adequately aut ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-6114 (The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPre ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-5991 (The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-5980 (The BSK Forms Blacklist WordPress plugin before 3.7 does not sanitise  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-5939 (The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin bef ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-5931 (The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin bef ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-5674 (The WP Mail Log WordPress plugin before 1.1.3 does not properly saniti ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-5673 (The WP Mail Log WordPress plugin before 1.1.3 does not properly valida ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-5672 (The WP Mail Log WordPress plugin before 1.1.3 does not properly valida ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-5645 (The WP Mail Log WordPress plugin before 1.1.3 does not properly saniti ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-5644 (The WP Mail Log WordPress plugin before 1.1.3 does not correctly autho ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-5203 (The WP Sessions Time Monitoring Full Automatic WordPress plugin before ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-5180 (An issue was discovered in Open Design Alliance Drawings SDK before 20 ...)
-	TODO: check
+	NOT-FOR-US: Open Design Alliance Drawings SDK
 CVE-2023-52086 (resumable.php (aka PHP backend for resumable.js) 0.1.4 before 3c6dbf5  ...)
 	TODO: check
 CVE-2023-51107 (A floating point exception (divide-by-zero) vulnerability was discover ...)
@@ -43,29 +43,29 @@ CVE-2023-51104 (A floating point exception (divide-by-zero) vulnerability was di
 CVE-2023-51103 (A floating point exception (divide-by-zero) vulnerability was discover ...)
 	TODO: check
 CVE-2023-51102 (Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow  ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2023-51101 (Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow  ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2023-51100 (Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injecti ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2023-51099 (Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injecti ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2023-51098 (Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injecti ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2023-51097 (Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow  ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2023-51095 (Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow vi ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2023-51094 (Tenda M3 V1.0.0.12(4856) was discovered to contain a Command Execution ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2023-51093 (Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow vi ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2023-51092 (Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow vi ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2023-51091 (Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow vi ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2023-51090 (Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow vi ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2023-49949 (Passwork before 6.2.0 allows remote authenticated users to bypass 2FA  ...)
 	TODO: check
 CVE-2023-45251
@@ -73,11 +73,11 @@ CVE-2023-45251
 CVE-2023-43851
 	REJECTED
 CVE-2015-10127 (A vulnerability was found in PlusCaptcha Plugin up to 2.0.6 on WordPre ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2014-125109 (A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.27.  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2012-10017 (A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.04 o ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-51467 (The vulnerability allows attackers to bypass authentication to achieve ...)
 	NOT-FOR-US: Apache OFBiz
 CVE-2023-50968 (Arbitrary file properties reading vulnerability in Apache Software Fou ...)
@@ -117,41 +117,41 @@ CVE-2023-51363 (VR-S1000 firmware Ver. 2.37 and earlier allows a network-adjacen
 CVE-2023-50658 (The jose2go component before 1.6.0 for Go allows attackers to cause a  ...)
 	TODO: check
 CVE-2023-50339 (Stored cross-site scripting vulnerability exists in the User Managemen ...)
-	TODO: check
+	NOT-FOR-US: GROWI
 CVE-2023-50332 (Improper authorization vulnerability exists in the User Management (/a ...)
-	TODO: check
+	NOT-FOR-US: GROWI
 CVE-2023-50297 (Open redirect vulnerability in PowerCMS (6 Series, 5 Series, and 4 Ser ...)
 	NOT-FOR-US: PowerCMS
 CVE-2023-50294 (The App Settings (/admin/app) page in GROWI versions prior to v6.0.6 s ...)
-	TODO: check
+	NOT-FOR-US: GROWI
 CVE-2023-50175 (Stored cross-site scripting vulnerability exists in the App Settings ( ...)
-	TODO: check
+	NOT-FOR-US: GROWI
 CVE-2023-49807 (Stored cross-site scripting vulnerability when processing the MathJax  ...)
-	TODO: check
+	NOT-FOR-US: GROWI
 CVE-2023-49779 (Stored cross-site scripting vulnerability exists in the anchor tag of  ...)
-	TODO: check
+	NOT-FOR-US: GROWI
 CVE-2023-49598 (Stored cross-site scripting vulnerability exists in the event handlers ...)
-	TODO: check
+	NOT-FOR-US: GROWI
 CVE-2023-49119 (Stored cross-site scripting vulnerability via the img tags exists in G ...)
-	TODO: check
+	NOT-FOR-US: GROWI
 CVE-2023-49117 (PowerCMS (6 Series, 5 Series, and 4 Series) contains a stored cross-si ...)
 	NOT-FOR-US: PowerCMS
 CVE-2023-47215 (Stored cross-site scripting vulnerability which is exploiting a behavi ...)
-	TODO: check
+	NOT-FOR-US: GROWI
 CVE-2023-46711 (VR-S1000 firmware Ver. 2.37 and earlier uses a hard-coded cryptographi ...)
 	NOT-FOR-US: VR-S1000 firmware
 CVE-2023-46699 (Cross-site request forgery (CSRF) vulnerability exists in the User set ...)
-	TODO: check
+	NOT-FOR-US: GROWI
 CVE-2023-46681 (Improper neutralization of argument delimiters in a command ('Argument ...)
 	NOT-FOR-US: VR-S1000 firmware
 CVE-2023-45741 (VR-S1000 firmware Ver. 2.37 and earlier allows an attacker with access ...)
 	NOT-FOR-US: VR-S1000 firmware
 CVE-2023-45740 (Stored cross-site scripting vulnerability when processing profile imag ...)
-	TODO: check
+	NOT-FOR-US: GROWI
 CVE-2023-45737 (Stored cross-site scripting vulnerability exists in the App Settings ( ...)
-	TODO: check
+	NOT-FOR-US: GROWI
 CVE-2023-42436 (Stored cross-site scripting vulnerability exists in the presentation f ...)
-	TODO: check
+	NOT-FOR-US: GROWI
 CVE-2023-51782 (An issue was discovered in the Linux kernel before 6.6.8. rose_ioctl i ...)
 	- linux 6.6.8-1
 	NOTE: https://git.kernel.org/linus/810c38a369a0a0ce625b5c12169abce1dd9ccd53 (6.7-rc6)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ac58c2106b3f9146b26071c106e86d84de7549b9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ac58c2106b3f9146b26071c106e86d84de7549b9
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231226/f7a446b4/attachment.htm>

More information about the debian-security-tracker-commits mailing list