[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
58a5e945 by Moritz Muehlenhoff at 2024-08-29T12:15:05+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -22,7 +22,7 @@ CVE-2024-7606 (The Front End Users plugin for WordPress is vulnerable to Stored
 CVE-2024-7418 (The The Post Grid \u2013 Shortcode, Gutenberg Blocks and Elementor Add ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-7132 (The Page Builder Gutenberg Blocks  WordPress plugin before 3.1.13 does ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-6927 (The Viral Signup  WordPress plugin through 2.1 does not sanitise and e ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-5987 (The WP Accessibility Helper (WAH) plugin for WordPress is vulnerable t ...)
@@ -34,7 +34,7 @@ CVE-2024-5417 (The Gutentor  WordPress plugin before 3.3.6 does not validate and
 CVE-2024-4428 (Improper Privilege Management vulnerability in Menulux Information Tec ...)
 	NOT-FOR-US: Menulux Information Technologies Managment Portal
 CVE-2024-45440 (core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (eve ...)
-	TODO: check
+	- drupal7 <removed>
 CVE-2024-45436 (extractFromZipFile in model.go in Ollama before 0.1.47 can extract mem ...)
 	NOT-FOR-US: Ollama
 CVE-2024-45435 (Chartist 1.x through 1.3.0 allows Prototype Pollution via the extend f ...)
@@ -50,19 +50,19 @@ CVE-2024-45058 (i-Educar is free, completely online school management software t
 CVE-2024-45057 (i-Educar is free, completely online school management software that al ...)
 	NOT-FOR-US: i-Educar
 CVE-2024-45048 (PHPSpreadsheet is a pure PHP library for reading and writing spreadshe ...)
-	TODO: check
+	NOT-FOR-US: PHPSpreadsheet
 CVE-2024-45046 (PHPSpreadsheet is a pure PHP library for reading and writing spreadshe ...)
-	TODO: check
+	NOT-FOR-US: PHPSpreadsheet
 CVE-2024-43700 (xfpt versions prior to 1.01 fails to handle appropriately some paramet ...)
 	TODO: check
 CVE-2024-41918 ('Rakuten Ichiba App' for Android 12.4.0 and earlier and 'Rakuten Ichib ...)
-	TODO: check
+	NOT-FOR-US: Rakuten Ichiba App
 CVE-2024-3944 (The WP To Do plugin for WordPress is vulnerable to Stored Cross-Site S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-38304 (Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, co ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2024-38303 (Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, co ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2024-8195 (The Permalink Manager Lite plugin for WordPress is vulnerable to unaut ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-7745 (In WS_FTP Server versions before 8.8.8 (2022.0.8), a Missing Critical  ...)
@@ -191,7 +191,7 @@ CVE-2024-45049 (Hydra is a Continuous Integration service for Nix based projects
 CVE-2024-45038 (Meshtastic device firmware is a firmware for meshtastic devices to run ...)
 	NOT-FOR-US: Meshtastic device firmware
 CVE-2024-39771 (QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier  ...)
-	TODO: check
+	NOT-FOR-US: QBiC CLOUD
 CVE-2024-39584 (Dell Client Platform BIOS contains a Use of Default Cryptographic Key  ...)
 	NOT-FOR-US: Dell
 CVE-2023-45896 (ntfs3 in the Linux kernel before 6.5.11 allows a physically proximate  ...)
@@ -247,7 +247,7 @@ CVE-2024-7071 (Improper Neutralization of Special Elements used in an SQL Comman
 CVE-2024-6789 (A path traversal issue in API endpoint in M-Files Server before versio ...)
 	NOT-FOR-US: M-Files Server
 CVE-2024-6633 (The default credentials for the setup HSQL database (HSQLDB) for FileC ...)
-	TODO: check
+	NOT-FOR-US: FileCatalyst Workflow
 CVE-2024-6632 (A vulnerability exists in FileCatalyst Workflow whereby a field access ...)
 	NOT-FOR-US: FileCatalyst Workflow
 CVE-2024-5991 (In function MatchDomainName(), input param str is treated as a NULL te ...)
@@ -374,13 +374,13 @@ CVE-2024-43117 (Cross-Site Request Forgery (CSRF) vulnerability in WPMU DEV Humm
 CVE-2024-43116 (Cross-Site Request Forgery (CSRF) vulnerability in 10up Simple Local A ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-41176 (The MPD package included in TwinCAT/BSDallows an authenticated, low-pr ...)
-	TODO: check
+	NOT-FOR-US: TwinCAT/BSD
 CVE-2024-41175 (The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a ...)
-	TODO: check
+	NOT-FOR-US: TwinCAT/BSD
 CVE-2024-41174 (The IPC-Diagnostics package in TwinCAT/BSD is susceptible to improper  ...)
-	TODO: check
+	NOT-FOR-US: TwinCAT/BSD
 CVE-2024-41173 (The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a ...)
-	TODO: check
+	NOT-FOR-US: TwinCAT/BSD
 CVE-2024-39657 (Cross-Site Request Forgery (CSRF) vulnerability in Sender Sender \u201 ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-39645 (Cross-Site Request Forgery (CSRF) vulnerability in Themeum Tutor LMS.T ...)
@@ -434,7 +434,7 @@ CVE-2024-8151 (A vulnerability was found in SourceCodester Interactive Map with
 CVE-2024-8150 (A vulnerability was found in ContiNew Admin 3.2.0 and classified as cr ...)
 	NOT-FOR-US: ContiNew Admin
 CVE-2024-8105 (A vulnerability related to the use an insecure Platform Key (PK) has b ...)
-	TODO: check
+	NOT-FOR-US: Acer
 CVE-2024-8073 (Improper Input Validation vulnerability in Hillstone Networks Hillston ...)
 	NOT-FOR-US: Hillstone
 CVE-2024-7988 (A remote code execution vulnerability exists in the Rockwell Automatio ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/58a5e9458df850cd1f48a68149c51a8fcd818f0a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/58a5e9458df850cd1f48a68149c51a8fcd818f0a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240829/782727fd/attachment.htm>