[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
da2beb27 by Salvatore Bonaccorso at 2023-09-28T22:28:31+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3,59 +3,59 @@ CVE-2023-5256 (In certain scenarios, Drupal's JSON:API module will output error
 CVE-2023-5215 (A flaw was found in libnbd. A server can reply with a block size large ...)
 	TODO: check
 CVE-2023-43884 (A Cross-site scripting (XSS) vulnerability in Reference ID from the pa ...)
-	TODO: check
+	NOT-FOR-US: Subrion CMS
 CVE-2023-43879 (Rite CMS 3.0 has a Cross-Site scripting (XSS) vulnerability that allow ...)
-	TODO: check
+	NOT-FOR-US: Rite CMS
 CVE-2023-43878 (Rite CMS 3.0 has Multiple Cross-Site scripting (XSS) vulnerabilities t ...)
-	TODO: check
+	NOT-FOR-US: Rite CMS
 CVE-2023-43876 (A Cross-Site Scripting (XSS) vulnerability in installation of October  ...)
-	TODO: check
+	NOT-FOR-US: October CMS
 CVE-2023-43874 (Multiple Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2  ...)
-	TODO: check
+	NOT-FOR-US: e017 CMS
 CVE-2023-43873 (A Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows  ...)
-	TODO: check
+	NOT-FOR-US: e017 CMS
 CVE-2023-43872 (A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local a ...)
-	TODO: check
+	NOT-FOR-US: CMSmadesimple
 CVE-2023-43871 (A File upload vulnerability in WBCE v.1.6.1 allows a local attacker to ...)
-	TODO: check
+	NOT-FOR-US: WBCE
 CVE-2023-43869 (D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWA ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2023-43868 (D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via websGetVa ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2023-43867 (D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWa ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2023-43866 (D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWA ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2023-43865 (D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWa ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2023-43864 (D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWA ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2023-43863 (D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWa ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2023-43862 (D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formLangu ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2023-43861 (D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWa ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2023-43860 (D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWa ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2023-43664 (PrestaShop is an Open Source e-commerce web application. In the Presta ...)
-	TODO: check
+	NOT-FOR-US: PrestaShop
 CVE-2023-43663 (PrestaShop is an Open Source e-commerce web application. In affected v ...)
-	TODO: check
+	NOT-FOR-US: PrestaShop
 CVE-2023-43657 (discourse-encrypt is a plugin that provides a secure communication cha ...)
-	TODO: check
+	NOT-FOR-US: discourse-encrypt plugin
 CVE-2023-43323 (mooSocial 3.1.8 is vulnerable to external service interaction on post  ...)
-	TODO: check
+	NOT-FOR-US: mooSocial
 CVE-2023-43226 (An arbitrary file upload vulnerability in dede/baidunews.php in DedeCM ...)
 	TODO: check
 CVE-2023-43044 (IBM License Metric Tool 9.2 could allow a remote attacker to traverse  ...)
 	NOT-FOR-US: IBM
 CVE-2023-41911 (Samsung Mobile Processor Exynos 2200 allows a GPU Double Free (issue 1 ...)
-	TODO: check
+	NOT-FOR-US: Samsung
 CVE-2023-40375 (Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contain ...)
 	NOT-FOR-US: IBM
 CVE-2023-40307 (An attacker with standard privileges on macOS when requesting administ ...)
-	TODO: check
+	NOT-FOR-US: SAP
 CVE-2023-39195
 	REJECTED
 CVE-2023-5244 (Cross-site Scripting (XSS) - Reflected in GitHub repository microweber ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/da2beb27a5e8694d380bedb7b71d05fa71e443ea

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/da2beb27a5e8694d380bedb7b71d05fa71e443ea
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230928/24bf3cc7/attachment.htm>