[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Jul 28 20:47:31 BST 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b17cdd6e by Salvatore Bonaccorso at 2023-07-28T21:46:49+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -15,9 +15,9 @@ CVE-2023-3984 (A vulnerability, which was classified as critical, was found in p
 CVE-2023-3977 (Several plugins for WordPress by Inisev are vulnerable to Cross-Site R ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2023-3774 (An unhandled error in Vault Enterprise's namespace creation may cause  ...)
-	TODO: check
+	NOT-FOR-US: HashiCorp Vault
 CVE-2023-3670 (In CODESYS Development System 3.5.9.0 to3.5.17.0 andCODESYS Scripting4 ...)
-	TODO: check
+	NOT-FOR-US: CODESYS
 CVE-2023-38609 (An injection issue was addressed with improved input validation. This  ...)
 	TODO: check
 CVE-2023-38604 (An out-of-bounds write issue was addressed with improved input validat ...)
@@ -35,7 +35,7 @@ CVE-2023-38590 (A buffer overflow issue was addressed with improved memory handl
 CVE-2023-38571 (This issue was addressed with improved validation of symlinks. This is ...)
 	TODO: check
 CVE-2023-38331 (Zoho ManageEngine Support Center Plus 14001 and below is vulnerable to ...)
-	TODO: check
+	NOT-FOR-US: Zoho ManageEngine
 CVE-2023-37285 (An out-of-bounds read was addressed with improved bounds checking. Thi ...)
 	TODO: check
 CVE-2023-36495 (An integer overflow was addressed with improved input validation. This ...)
@@ -43,13 +43,13 @@ CVE-2023-36495 (An integer overflow was addressed with improved input validation
 CVE-2023-34425 (The issue was addressed with improved memory handling. This issue is f ...)
 	TODO: check
 CVE-2023-33745 (TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper P ...)
-	TODO: check
+	NOT-FOR-US: TeleAdapt RoomCast TA-2400
 CVE-2023-33744 (TeleAdapt RoomCast TA-2400 1.0 through 3.1 suffers from Use of a Hard- ...)
-	TODO: check
+	NOT-FOR-US: TeleAdapt RoomCast TA-2400
 CVE-2023-33743 (TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper A ...)
-	TODO: check
+	NOT-FOR-US: TeleAdapt RoomCast TA-2400
 CVE-2023-33742 (TeleAdapt RoomCast TA-2400 1.0 through 3.1 suffers from Cleartext Stor ...)
-	TODO: check
+	NOT-FOR-US: TeleAdapt RoomCast TA-2400
 CVE-2023-32654 (A logic issue was addressed with improved state management. This issue ...)
 	TODO: check
 CVE-2023-32445 (This issue was addressed with improved checks. This issue is fixed in  ...)
@@ -24431,7 +24431,7 @@ CVE-2023-0960 (A vulnerability was found in SeaCMS 11.6 and classified as proble
 CVE-2023-0959 (Bhima version 1.27.0 allows a remote attacker to update the privileges ...)
 	NOT-FOR-US: Bhima
 CVE-2023-0958 (Several plugins for WordPress by Inisev are vulnerable to unauthorized ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-0957 (An issue was discovered in Gitpod versions prior to release-2022.11.2. ...)
 	NOT-FOR-US: Gitpod
 CVE-2023-0956



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b17cdd6e8d5f75892e3a7ab41c460e94bc47d629

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b17cdd6e8d5f75892e3a7ab41c460e94bc47d629
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230728/f8a7e7f6/attachment.htm>


More information about the debian-security-tracker-commits mailing list