[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Aug 13 21:22:40 BST 2024



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
eaab7800 by Salvatore Bonaccorso at 2024-08-13T22:22:01+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -67,7 +67,7 @@ CVE-2024-42736 (In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cs
 CVE-2024-42368 (OpenTelemetry, also known as OTel, is a vendor-neutral open source Obs ...)
 	TODO: check
 CVE-2024-41774 (IBM Common Licensing 9.0 is vulnerable to stored cross-site scripting. ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2024-41711 (A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Serie ...)
 	TODO: check
 CVE-2024-41623 (An issue in D3D Security D3D IP Camera (D8801) v.V9.1.17.1.4-20180428  ...)
@@ -77,7 +77,7 @@ CVE-2024-41614 (symphonycms <=2.7.10 is vulnerable to Cross Site Scripting (XSS)
 CVE-2024-41613 (A Cross Site Scripting (XSS) vulnerability in Symphony CMS 2.7.10 allo ...)
 	TODO: check
 CVE-2024-40697 (IBM Common Licensing 9.0 does not require that users should have stron ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2024-3913 (An unauthenticated remote attacker can use this vulnerability to chang ...)
 	TODO: check
 CVE-2024-39651 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
@@ -279,7 +279,7 @@ CVE-2024-36505 (An improper access control vulnerability [CWE-284] in FortiOS 7.
 CVE-2024-36446 (The provisioning manager component of Mitel MiVoice MX-ONE through 7.6 ...)
 	TODO: check
 CVE-2024-35124 (A vulnerability in the combination of the OpenBMC's FW1050.00 through  ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2024-2259 (This vulnerability exists in InstaRISPACS software due to insufficient ...)
 	TODO: check
 CVE-2024-29995 (Windows Kerberos Elevation of Privilege Vulnerability)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eaab78002fd7bc5b84969a274bfe959eed5d2fd9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eaab78002fd7bc5b84969a274bfe959eed5d2fd9
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240813/90ce59bb/attachment.htm>


More information about the debian-security-tracker-commits mailing list