[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Thu Sep 28 21:29:07 BST 2023
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
da2beb27 by Salvatore Bonaccorso at 2023-09-28T22:28:31+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3,59 +3,59 @@ CVE-2023-5256 (In certain scenarios, Drupal's JSON:API module will output error
CVE-2023-5215 (A flaw was found in libnbd. A server can reply with a block size large ...)
TODO: check
CVE-2023-43884 (A Cross-site scripting (XSS) vulnerability in Reference ID from the pa ...)
- TODO: check
+ NOT-FOR-US: Subrion CMS
CVE-2023-43879 (Rite CMS 3.0 has a Cross-Site scripting (XSS) vulnerability that allow ...)
- TODO: check
+ NOT-FOR-US: Rite CMS
CVE-2023-43878 (Rite CMS 3.0 has Multiple Cross-Site scripting (XSS) vulnerabilities t ...)
- TODO: check
+ NOT-FOR-US: Rite CMS
CVE-2023-43876 (A Cross-Site Scripting (XSS) vulnerability in installation of October ...)
- TODO: check
+ NOT-FOR-US: October CMS
CVE-2023-43874 (Multiple Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 ...)
- TODO: check
+ NOT-FOR-US: e017 CMS
CVE-2023-43873 (A Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows ...)
- TODO: check
+ NOT-FOR-US: e017 CMS
CVE-2023-43872 (A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local a ...)
- TODO: check
+ NOT-FOR-US: CMSmadesimple
CVE-2023-43871 (A File upload vulnerability in WBCE v.1.6.1 allows a local attacker to ...)
- TODO: check
+ NOT-FOR-US: WBCE
CVE-2023-43869 (D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWA ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-43868 (D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via websGetVa ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-43867 (D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWa ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-43866 (D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWA ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-43865 (D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWa ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-43864 (D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWA ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-43863 (D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWa ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-43862 (D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formLangu ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-43861 (D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWa ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-43860 (D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWa ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-43664 (PrestaShop is an Open Source e-commerce web application. In the Presta ...)
- TODO: check
+ NOT-FOR-US: PrestaShop
CVE-2023-43663 (PrestaShop is an Open Source e-commerce web application. In affected v ...)
- TODO: check
+ NOT-FOR-US: PrestaShop
CVE-2023-43657 (discourse-encrypt is a plugin that provides a secure communication cha ...)
- TODO: check
+ NOT-FOR-US: discourse-encrypt plugin
CVE-2023-43323 (mooSocial 3.1.8 is vulnerable to external service interaction on post ...)
- TODO: check
+ NOT-FOR-US: mooSocial
CVE-2023-43226 (An arbitrary file upload vulnerability in dede/baidunews.php in DedeCM ...)
TODO: check
CVE-2023-43044 (IBM License Metric Tool 9.2 could allow a remote attacker to traverse ...)
NOT-FOR-US: IBM
CVE-2023-41911 (Samsung Mobile Processor Exynos 2200 allows a GPU Double Free (issue 1 ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2023-40375 (Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contain ...)
NOT-FOR-US: IBM
CVE-2023-40307 (An attacker with standard privileges on macOS when requesting administ ...)
- TODO: check
+ NOT-FOR-US: SAP
CVE-2023-39195
REJECTED
CVE-2023-5244 (Cross-site Scripting (XSS) - Reflected in GitHub repository microweber ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/da2beb27a5e8694d380bedb7b71d05fa71e443ea
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/da2beb27a5e8694d380bedb7b71d05fa71e443ea
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230928/24bf3cc7/attachment.htm>
More information about the debian-security-tracker-commits
mailing list