[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
43f60d4a by Salvatore Bonaccorso at 2023-05-02T23:27:07+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -10510,7 +10510,7 @@ CVE-2020-36668 (The JetBackup \u2013 WP Backup, Migrate & Restore plugin for Wor
 CVE-2020-36667 (The JetBackup \u2013 WP Backup, Migrate & Restore plugin for WordPress ...)
 	NOT-FOR-US: JetBackup WP Backup, Migrate & Restore plugin for WordPress
 CVE-2023-27892 (Insufficient length checks in the ShapeShift KeepKey hardware wallet f ...)
-	TODO: check
+	NOT-FOR-US: ShapeShift KeepKey hardware wallet firmware
 CVE-2023-27891 (rami.io pretix before 4.17.1 allows OAuth application authorization fr ...)
 	NOT-FOR-US: rami.io
 CVE-2023-27890 (The Export User plugin through 2.0 for MyBB allows XSS during the proc ...)
@@ -13963,7 +13963,7 @@ CVE-2023-26548 (The pgmng module has a vulnerability in serialization/deserializ
 CVE-2023-26547 (The InputMethod module has a vulnerability of serialization/deserializ ...)
 	NOT-FOR-US: Huawei
 CVE-2023-26546 (European Chemicals Agency IUCLID before 6.27.6 allows remote authentic ...)
-	TODO: check
+	NOT-FOR-US: European Chemicals Agency IUCLID
 CVE-2023-24544 (Improper access control vulnerability in Buffalo network devices allow ...)
 	NOT-FOR-US: Buffalo network devices
 CVE-2023-24464 (Stored-cross-site scripting vulnerability in Buffalo network devices a ...)
@@ -15348,7 +15348,7 @@ CVE-2023-26091 (The frp_form_answers (aka Forms Export) extension before 3.1.2,
 CVE-2023-26090
 	RESERVED
 CVE-2023-26089 (European Chemicals Agency IUCLID 6.x before 6.27.6 allows authenticati ...)
-	TODO: check
+	NOT-FOR-US: European Chemicals Agency IUCLID
 CVE-2023-26088 (In Malwarebytes before 4.5.23, a symbolic link may be used delete any  ...)
 	NOT-FOR-US: Malwarebytes
 CVE-2023-26087
@@ -22382,7 +22382,7 @@ CVE-2023-23725
 CVE-2023-23724
 	RESERVED
 CVE-2023-23723 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winw ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-23722 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winw ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2023-23721 (Cross-Site Request Forgery (CSRF) vulnerability in David Gwyer Admin L ...)
@@ -28434,15 +28434,15 @@ CVE-2022-47880
 CVE-2022-47879
 	RESERVED
 CVE-2022-47878 (Incorrect input validation for the default-storage-path in the setting ...)
-	TODO: check
+	NOT-FOR-US: Jedox
 CVE-2022-47877 (A Stored cross-site scripting vulnerability in Jedox 2020.2.5 allows r ...)
-	TODO: check
+	NOT-FOR-US: Jedox
 CVE-2022-47876 (The integrator in Jedox GmbH Jedox 2020.2.5 allows remote authenticate ...)
-	TODO: check
+	NOT-FOR-US: Jedox
 CVE-2022-47875 (A Directory Traversal vulnerability in /be/erpc.php in Jedox GmbH Jedo ...)
-	TODO: check
+	NOT-FOR-US: Jedox
 CVE-2022-47874 (Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows ...)
-	TODO: check
+	NOT-FOR-US: Jedox
 CVE-2022-47873 (Netcad KEOS 1.0 is vulnerable to XML External Entity (XXE) resulting i ...)
 	NOT-FOR-US: Netcad KEOS
 CVE-2022-47872 (maccms10 2021.1000.2000 is vulnerable to Server-side request forgery ( ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/43f60d4a216d36d45158a3bb708108c7b7cfd267

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/43f60d4a216d36d45158a3bb708108c7b7cfd267
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230502/1c6af0ee/attachment.htm>