[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Jun 3 09:24:26 BST 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8d490126 by Salvatore Bonaccorso at 2023-06-03T10:23:55+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,13 +1,13 @@
 CVE-2023-3083 (Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassn ...)
 	TODO: check
 CVE-2023-3055 (The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross- ...)
-	TODO: check
+	NOT-FOR-US: Page Builder by AZEXO plugin for WordPress
 CVE-2023-3053 (The Page Builder by AZEXO plugin for WordPress is vulnerable to unauth ...)
-	TODO: check
+	NOT-FOR-US: Page Builder by AZEXO plugin for WordPress
 CVE-2023-3052 (The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross- ...)
-	TODO: check
+	NOT-FOR-US: Page Builder by AZEXO plugin for WordPress
 CVE-2023-3051 (The Page Builder by AZEXO plugin for WordPress is vulnerable to Stored ...)
-	TODO: check
+	NOT-FOR-US: Page Builder by AZEXO plugin for WordPress
 CVE-2023-3044 (An excessively large PDF page size (found in fuzz testing, unlikely in ...)
 	TODO: check
 CVE-2023-33143 (Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability)
@@ -15,19 +15,19 @@ CVE-2023-33143 (Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerabi
 CVE-2023-2816 (Consul and Consul Enterprise allowed any user with service:write permi ...)
 	TODO: check
 CVE-2023-2781 (The User Email Verification for WooCommerce plugin for WordPress is vu ...)
-	TODO: check
+	NOT-FOR-US: User Email Verification for WooCommerce plugin for WordPress
 CVE-2023-2416 (The Online Booking & Scheduling Calendar for WordPress by vcita plugin ...)
-	TODO: check
+	NOT-FOR-US: Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress
 CVE-2023-2415 (The Online Booking & Scheduling Calendar for WordPress by vcita plugin ...)
-	TODO: check
+	NOT-FOR-US: Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress
 CVE-2023-2407 (The Event Registration Calendar By vcita plugin, versions up to and in ...)
 	TODO: check
 CVE-2023-2406 (The Event Registration Calendar By vcita plugin, versions up to and in ...)
 	TODO: check
 CVE-2023-2405 (The CRM and Lead Management by vcita plugin for WordPress is vulnerabl ...)
-	TODO: check
+	NOT-FOR-US: CRM and Lead Management by vcita plugin for WordPress
 CVE-2023-2404 (The CRM and Lead Management by vcita plugin for WordPress is vulnerabl ...)
-	TODO: check
+	NOT-FOR-US: CRM and Lead Management by vcita plugin for WordPress
 CVE-2023-3075 (Cross-Site Request Forgery (CSRF) in GitHub repository tsolucio/corebo ...)
 	NOT-FOR-US: Corebos
 CVE-2023-3074 (Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/core ...)
@@ -2906,17 +2906,17 @@ CVE-2023-2305
 CVE-2023-2304 (The Favorites plugin for WordPress is vulnerable to Stored Cross-Site  ...)
 	NOT-FOR-US: Favorites plugin for WordPress
 CVE-2023-2303 (The Contact Form and Calls To Action by vcita plugin for WordPress is  ...)
-	TODO: check
+	NOT-FOR-US: Contact Form and Calls To Action by vcita plugin for WordPress
 CVE-2023-2302 (The Contact Form and Calls To Action by vcita plugin for WordPress is  ...)
-	TODO: check
+	NOT-FOR-US: Contact Form and Calls To Action by vcita plugin for WordPress
 CVE-2023-2301 (The Contact Form Builder by vcita plugin for WordPress is vulnerable t ...)
-	TODO: check
+	NOT-FOR-US: Contact Form Builder by vcita plugin for WordPress
 CVE-2023-2300 (The Contact Form Builder by vcita plugin for WordPress is vulnerable t ...)
-	TODO: check
+	NOT-FOR-US: Contact Form Builder by vcita plugin for WordPress
 CVE-2023-2299 (The Online Booking & Scheduling Calendar for WordPress by vcita plugin ...)
-	TODO: check
+	NOT-FOR-US: Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress
 CVE-2023-2298 (The Online Booking & Scheduling Calendar for WordPress by vcita plugin ...)
-	TODO: check
+	NOT-FOR-US: Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress
 CVE-2023-2297 (The Profile Builder \u2013 User Profile & User Registration Forms plug ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2023-2296 (The Loginizer WordPress plugin before 1.7.9 does not escape a paramete ...)
@@ -22075,9 +22075,9 @@ CVE-2023-24805 (cups-filters contains backends, filters, and other software requ
 CVE-2023-24804 (The ownCloud Android app allows ownCloud users to access, share, and e ...)
 	NOT-FOR-US: ownCloud Android app
 CVE-2023-0584 (The VK Blocks plugin for WordPress is vulnerable to improper authoriza ...)
-	TODO: check
+	NOT-FOR-US: VK Blocks plugin for WordPress
 CVE-2023-0583 (The VK Blocks plugin for WordPress is vulnerable to improper authoriza ...)
-	TODO: check
+	NOT-FOR-US: VK Blocks plugin for WordPress
 CVE-2023-0582
 	RESERVED
 CVE-2023-0581 (The PrivateContent plugin for WordPress is vulnerable to protection me ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8d490126c4dbcdb315645df07ca14123e46e43be

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8d490126c4dbcdb315645df07ca14123e46e43be
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230603/d43a697f/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list