[Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Jun 6 21:32:09 BST 2023
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
1f73b103 by Salvatore Bonaccorso at 2023-06-06T22:31:43+02:00
Process NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -63,33 +63,33 @@ CVE-2023-32550 (Landscape's server-status page exposed sensitive system informat
CVE-2023-32549 (Landscape cryptographic keys were insecurely generated with a weak pse ...)
TODO: check
CVE-2023-32545 (The affected application lacks proper validation of user-supplied data ...)
- TODO: check
+ NOT-FOR-US: Horner Automation
CVE-2023-32539 (The affected application lacks proper validation of user-supplied data ...)
- TODO: check
+ NOT-FOR-US: Horner Automation
CVE-2023-32289 (The affected application lacks proper validation of user-supplied data ...)
- TODO: check
+ NOT-FOR-US: Horner Automation
CVE-2023-32281 (The affected application lacks proper validation of user-supplied data ...)
- TODO: check
+ NOT-FOR-US: Horner Automation
CVE-2023-32203 (The affected application lacks proper validation of user-supplied data ...)
- TODO: check
+ NOT-FOR-US: Horner Automation
CVE-2023-31606 (A Regular Expression Denial of Service (ReDoS) issue was discovered in ...)
TODO: check
CVE-2023-31569 (TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a co ...)
NOT-FOR-US: TOTOLINK
CVE-2023-31278 (The affected application lacks proper validation of user-supplied data ...)
- TODO: check
+ NOT-FOR-US: Horner Automation
CVE-2023-31244 (The affected product does not properly validate user-supplied data. If ...)
- TODO: check
+ NOT-FOR-US: Horner Automation
CVE-2023-2833 (The ReviewX plugin for WordPress is vulnerable to privilege escalation ...)
NOT-FOR-US: ReviewX plugin for WordPress
CVE-2023-2801 (Grafana is an open-source platform for monitoring and observability. ...)
TODO: check
CVE-2023-29503 (The affected application lacks proper validation of user-supplied data ...)
- TODO: check
+ NOT-FOR-US: Horner Automation
CVE-2023-28653 (The affected application lacks proper validation of user-supplied data ...)
- TODO: check
+ NOT-FOR-US: Horner Automation
CVE-2023-27916 (The affected application lacks proper validation of user-supplied data ...)
- TODO: check
+ NOT-FOR-US: Horner Automation
CVE-2023-34417
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2023-20/#CVE-2023-34417
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1f73b103a56fdc3ae5e7af51cc46e4b26255704b
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1f73b103a56fdc3ae5e7af51cc46e4b26255704b
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230606/2f094ea8/attachment.htm>
More information about the debian-security-tracker-commits
mailing list