[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Oct 3 09:34:36 BST 2023 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e4d62489 by Salvatore Bonaccorso at 2023-10-03T10:31:18+02:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3,7 +3,7 @@ CVE-2023-5345 (A use-after-free vulnerability in the Linux kernel's fs/smb/clien
 CVE-2023-5344 (Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1 ...)
 	TODO: check
 CVE-2023-5334 (The WP Responsive header image slider plugin for WordPress is vulnerab ...)
-	TODO: check
+	NOT-FOR-US: WP Responsive header image slider plugin for WordPress
 CVE-2023-5290
 	REJECTED
 CVE-2023-5160 (Mattermost fails to check the Show Full Name option at the /api/v4/tea ...)
@@ -13,53 +13,53 @@ CVE-2023-5106 (An issue has been discovered in Ultimate-licensed GitLab EE affec
 CVE-2023-4659 (Cross-Site Request Forgery vulnerability, whose exploitation could all ...)
 	TODO: check
 CVE-2023-44479 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jim  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-44477 (Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-44474 (Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in MD Jakir ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-44463 (An issue was discovered in pretix before 2023.7.1. Incorrect parsing o ...)
 	TODO: check
 CVE-2023-44266 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jewe ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-44265 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-44264 (Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-44263 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Riya ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-44262 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Renz ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-44245 (Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Leap Con ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-44244 (Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FooPlugi ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-44242 (Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-44239 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jobi ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-44230 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-44228 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-44218 (A flaw within the SonicWall NetExtender Pre-Logon feature enables an u ...)
-	TODO: check
+	NOT-FOR-US: SonicWall
 CVE-2023-44217 (A local privilege escalation vulnerability in SonicWall Net Extender M ...)
-	TODO: check
+	NOT-FOR-US: SonicWall
 CVE-2023-44145 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in jesw ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-44144 (Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Dreamfox ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-44012 (Cross Site Scripting vulnerability in mojoPortal v.2.7.0.0 allows a re ...)
-	TODO: check
+	NOT-FOR-US: mojoPortal
 CVE-2023-44011 (An issue in mojoPortal v.2.7.0.0 allows a remote attacker to execute a ...)
-	TODO: check
+	NOT-FOR-US: mojoPortal
 CVE-2023-44009 (File Upload vulnerability in mojoPortal v.2.7.0.0 allows a remote atta ...)
-	TODO: check
+	NOT-FOR-US: mojoPortal
 CVE-2023-44008 (File Upload vulnerability in mojoPortal v.2.7.0.0 allows a remote atta ...)
-	TODO: check
+	NOT-FOR-US: mojoPortal
 CVE-2023-43980 (Presto Changeo testsitecreator up to v1.1.1 was discovered to contain  ...)
-	TODO: check
+	NOT-FOR-US: Presto Changeo testsitecreator
 CVE-2023-43893 (Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection v ...)
 	TODO: check
 CVE-2023-43892 (Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection v ...)
@@ -69,9 +69,9 @@ CVE-2023-43891 (Netis N3Mv2-V1.0.1.865 was discovered to contain a command injec
 CVE-2023-43890 (Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection v ...)
 	TODO: check
 CVE-2023-43836 (There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend,  ...)
-	TODO: check
+	NOT-FOR-US: Jizhicms
 CVE-2023-43835 (Super Store Finder 3.7 and below is vulnerable to authenticated Arbitr ...)
-	TODO: check
+	NOT-FOR-US: Super Store Finder
 CVE-2023-43627 (Path traversal vulnerability in ACERA 1320 firmware ver.01.26 and earl ...)
 	TODO: check
 CVE-2023-43361 (Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local a ...)
@@ -79,31 +79,31 @@ CVE-2023-43361 (Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a l
 CVE-2023-43297 (An issue in animal-art-lab v13.6.1 allows attackers to send crafted no ...)
 	TODO: check
 CVE-2023-43268 (Deyue Remote Vehicle Management System v1.1 was discovered to contain  ...)
-	TODO: check
+	NOT-FOR-US: Deyue Remote Vehicle Management System
 CVE-2023-43267 (A cross-site scripting (XSS) vulnerability in the publish article func ...)
-	TODO: check
+	NOT-FOR-US: emlog
 CVE-2023-42771 (Authentication bypass vulnerability in ACERA 1320 firmware ver.01.26 a ...)
 	TODO: check
 CVE-2023-41859 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Asho ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-41856 (Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ClickToT ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-41855 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Regp ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-41847 (Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-41800 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in UniC ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-41797 (Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-41580 (Phpipam before v1.5.2 was discovered to contain a LDAP injection vulne ...)
 	TODO: check
 CVE-2023-41086 (Cross-site request forgery (CSRF) vulnerability exists in FURUNO SYSTE ...)
-	TODO: check
+	NOT-FOR-US: FURUNO SYSTEMS wireless LAN access point devices
 CVE-2023-40744
 	REJECTED
 CVE-2023-3967 (Allocation of Resources Without Limits or Throttling vulnerability in  ...)
-	TODO: check
+	NOT-FOR-US: Hitachi
 CVE-2023-3770 (Incorrect validation vulnerability of the data entered, allowing an at ...)
 	TODO: check
 CVE-2023-3769 (Incorrect data input validation vulnerability, which could allow an at ...)
@@ -117,13 +117,13 @@ CVE-2023-3656 (cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, E
 CVE-2023-3655 (cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwic ...)
 	TODO: check
 CVE-2023-3440 (Incorrect Default Permissions vulnerability in Hitachi JP1/Performance ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2023-3335 (Insertion of Sensitive Information into Log File vulnerability in Hita ...)
-	TODO: check
+	NOT-FOR-US: Hitachi
 CVE-2023-39429 (Cross-site scripting vulnerability in FURUNO SYSTEMS wireless LAN acce ...)
-	TODO: check
+	NOT-FOR-US: FURUNO SYSTEMS wireless LAN access point devices
 CVE-2023-39222 (OS command injection vulnerability in FURUNO SYSTEMS wireless LAN acce ...)
-	TODO: check
+	NOT-FOR-US: FURUNO SYSTEMS wireless LAN access point devices
 CVE-2023-37605 (Buffer Overflow vulnerability in baramundi software GmbH EMM Agent 23. ...)
 	TODO: check
 CVE-2023-36628 (A flaw exists in VASA which allows users with access to a vSphere/ESXi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4d624890306b1f0a26da3c2a2f1d3ba1967f69e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4d624890306b1f0a26da3c2a2f1d3ba1967f69e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231003/2cf9b540/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list