[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Apr 29 10:42:48 BST 2024 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5e6a1c60 by Salvatore Bonaccorso at 2024-04-29T11:42:21+02:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,7 +1,7 @@
 CVE-2024-4303 (ArmorX Android APP's multi-factor authentication (MFA) for the login f ...)
 	TODO: check
 CVE-2024-4302 (Super 8 Live Chat online customer service platform fails to properly f ...)
-	TODO: check
+	NOT-FOR-US: Super 8 Live Chat online customer service platform
 CVE-2024-4301 (N-Reporter and N-Cloud, products of the N-Partner, have an OS Command  ...)
 	TODO: check
 CVE-2024-4300 (E-WEBInformationCo. FS-EZViewer(Web) exposes sensitive information in  ...)
@@ -37,73 +37,73 @@ CVE-2024-33899 (RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows a
 CVE-2024-33891 (Delinea Secret Server before 11.7.000001 allows attackers to bypass au ...)
 	TODO: check
 CVE-2024-33686 (Missing Authorization vulnerability in Extend Themes Pathway, Extend T ...)
-	TODO: check
+	NOT-FOR-US: WordPress themes
 CVE-2024-33681 (Cross-Site Request Forgery (CSRF) vulnerability in Sandor Kovacs Regen ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33649 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33648 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33646 (Cross-Site Request Forgery (CSRF) vulnerability in Toast Plugins Stick ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33645 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33643 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33641 (Deserialization of Untrusted Data vulnerability in Team Yoast Custom f ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33640 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33637 (Insertion of Sensitive Information into Log File vulnerability in Soli ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33634 (Server-Side Request Forgery (SSRF) vulnerability in Piotnet Piotnet Ad ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33633 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33632 (Cross-Site Request Forgery (CSRF) vulnerability in Piotnet Piotnet Add ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33631 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33630 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33629 (Server-Side Request Forgery (SSRF) vulnerability in Creative Motion Au ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33627 (Server-Side Request Forgery (SSRF) vulnerability in Cusmin Absolutely  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33584 (URL Redirection to Untrusted Site ('Open Redirect') vulnerability in D ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33575 (Exposure of Sensitive Information to an Unauthorized Actor vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33571 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33566 (Missing Authorization vulnerability in N-Media OrderConvo allows OS Co ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33562 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33559 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33554 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33553 (Deserialization of Untrusted Data vulnerability in 8theme XStore Core. ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33551 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33548 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33546 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33544 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33542 (Authorization Bypass Through User-Controlled Key vulnerability in Fabi ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33540 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33539 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33538 (Exposure of Sensitive Information to an Unauthorized Actor vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33537 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-33339
 	REJECTED
 CVE-2024-33331



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5e6a1c605246c482c2f97b4f3ea9a688134347f2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5e6a1c605246c482c2f97b4f3ea9a688134347f2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240429/e198306b/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list