[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Aug 1 13:31:32 BST 2024



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ac09fbc3 by Salvatore Bonaccorso at 2024-08-01T14:31:02+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -103534,7 +103534,7 @@ CVE-2023-1579 (Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_ge
 CVE-2023-1578 (SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.19.)
 	NOT-FOR-US: pimcore
 CVE-2023-1577 (A path hijacking vulnerability was reported in Lenovo Driver Manager p ...)
-	TODO: check
+	NOT-FOR-US: Lenovo
 CVE-2023-1576
 	REJECTED
 CVE-2023-1575 (The Mega Main Menu plugin for WordPress is vulnerable to Stored Cross- ...)
@@ -133663,11 +133663,11 @@ CVE-2022-45437 (Improper Neutralization of Input During Web Page Generation ('Cr
 CVE-2022-45436 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: Pandora FMS
 CVE-2022-4003 (A denial-of-service vulnerability could allow an authenticated user to ...)
-	TODO: check
+	NOT-FOR-US: Motorola
 CVE-2022-4002 (A command injection vulnerability could allow an authenticated user to ...)
-	TODO: check
+	NOT-FOR-US: Motorola
 CVE-2022-4001 (An authentication bypass vulnerability could allow an attacker to acce ...)
-	TODO: check
+	NOT-FOR-US: Motorola
 CVE-2022-4000 (The WooCommerce Shipping WordPress plugin through 1.2.11 does not sani ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2022-3999 (The DPD Baltic Shipping WordPress plugin before 1.2.57 does not have a ...)
@@ -399359,9 +399359,9 @@ CVE-2019-6200 (An out-of-bounds read was addressed with improved input validatio
 CVE-2019-6199
 	RESERVED
 CVE-2019-6198 (A vulnerability was reported in Lenovo PC Manager prior to version2.8. ...)
-	TODO: check
+	NOT-FOR-US: Lenovo
 CVE-2019-6197 (A vulnerability was reported in Lenovo PC Manager prior to version 2.8 ...)
-	TODO: check
+	NOT-FOR-US: Lenovo
 CVE-2019-6196 (A symbolic link vulnerability in some Lenovo installation packages, pr ...)
 	NOT-FOR-US: Lenovo
 CVE-2019-6195 (An authorization bypass exists in Lenovo XClarity Controller (XCC) ver ...)
@@ -512294,7 +512294,7 @@ CVE-2017-3774 (A stack overflow vulnerability was discovered within the web admi
 CVE-2017-3773
 	REJECTED
 CVE-2017-3772 (A vulnerability was reported in Lenovo PC Manager versions prior to 2. ...)
-	TODO: check
+	NOT-FOR-US: Lenovo
 CVE-2017-3771 (System boot process is not adequately secured In Lenovo E95 and ThinkC ...)
 	NOT-FOR-US: Lenovo
 CVE-2017-3770 (Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ac09fbc3148aa3e4a28d75141e24a8e22fb07fe6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ac09fbc3148aa3e4a28d75141e24a8e22fb07fe6
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240801/3dab5c5a/attachment.htm>


More information about the debian-security-tracker-commits mailing list