[Git][security-tracker-team/security-tracker][master] Process NFUs

Fri May 5 08:50:10 BST 2023


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2d26e9ed by Salvatore Bonaccorso at 2023-05-05T09:49:37+02:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -15726,7 +15726,7 @@ CVE-2023-26018
 CVE-2023-26017 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Blue ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2023-26016 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tauh ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-26015
 	RESERVED
 CVE-2023-26014
@@ -15734,11 +15734,11 @@ CVE-2023-26014
 CVE-2023-26013
 	RESERVED
 CVE-2023-26012 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Denz ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-26011
 	RESERVED
 CVE-2023-26010 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPMo ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-26009
 	RESERVED
 CVE-2023-26008 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ajay ...)
@@ -15794,7 +15794,7 @@ CVE-2023-25984
 CVE-2023-25983
 	RESERVED
 CVE-2023-25982 (Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-25981
 	RESERVED
 CVE-2023-25980
@@ -15804,7 +15804,7 @@ CVE-2023-25979 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability i
 CVE-2023-25978
 	RESERVED
 CVE-2023-25977 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in 9see ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-25976
 	RESERVED
 CVE-2023-25975
@@ -15834,9 +15834,9 @@ CVE-2023-25964
 CVE-2023-25963
 	RESERVED
 CVE-2023-25962 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Bipl ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-25961 (Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Catch Th ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-25960
 	RESERVED
 CVE-2023-25959
@@ -17645,7 +17645,7 @@ CVE-2023-25460
 CVE-2023-25459
 	RESERVED
 CVE-2023-25458 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GMO  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-25457
 	RESERVED
 CVE-2023-25456 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Klav ...)
@@ -24421,7 +24421,7 @@ CVE-2023-23061
 CVE-2023-23060
 	RESERVED
 CVE-2023-23059 (An issue was discovered in GeoVision GV-Edge Recording Manager 2.2.3.0 ...)
-	TODO: check
+	NOT-FOR-US: GeoVision GV-Edge Recording Manager
 CVE-2023-23058
 	RESERVED
 CVE-2023-23057
@@ -34314,7 +34314,7 @@ CVE-2022-4261 (Rapid7 Nexpose and InsightVM versions prior to 6.6.172 failed to
 CVE-2022-4260 (The WP-Ban WordPress plugin before 1.69.1 does not sanitise and escape ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2022-4259 (Due to improper input validation in the Alerts controller, a SQL injec ...)
-	TODO: check
+	NOT-FOR-US: Nozomi Networks
 CVE-2022-4258 (In multiple versions of HIMA PC based Software an unquoted Windows sea ...)
 	NOT-FOR-US: HIMA
 CVE-2022-4257 (A vulnerability was found in C-DATA Web Management System. It has been ...)
@@ -35846,7 +35846,7 @@ CVE-2022-45820 (SQL Injection (SQLi) vulnerability inLearnPress \u2013 WordPress
 CVE-2022-45819
 	RESERVED
 CVE-2022-45818 (Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2022-45817 (Cross-Site Scripting (XSS) vulnerability in Erin Garscadden GC Testimo ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2022-45816 (Auth. Stored Cross-Site Scripting (XSS) vulnerability inGD bbPress Att ...)
@@ -43613,7 +43613,7 @@ CVE-2023-20128 (Multiple vulnerabilities in the web-based management interface o
 CVE-2023-20127 (Multiple vulnerabilities in the web-based management interface of Cisc ...)
 	NOT-FOR-US: Cisco
 CVE-2023-20126 (A vulnerability in the web-based management interface of Cisco SPA112  ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2023-20125
 	RESERVED
 CVE-2023-20124 (A vulnerability in the web-based management interface of Cisco Small B ...)
@@ -204381,7 +204381,7 @@ CVE-2020-22431
 CVE-2020-22430
 	RESERVED
 CVE-2020-22429 (redox-os v0.1.0 was discovered to contain a use-after-free bug via the ...)
-	TODO: check
+	NOT-FOR-US: redox-os
 CVE-2020-22428 (SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scr ...)
 	NOT-FOR-US: SolarWinds
 CVE-2020-22427 (NagiosXI 5.6.11 is affected by a remote code execution (RCE) vulnerabi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2d26e9ed69cb27ef201618d06675e919a4962780

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2d26e9ed69cb27ef201618d06675e919a4962780
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230505/7cd2a0b6/attachment.htm>
