[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Dec 2 20:54:41 GMT 2024 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
49861358 by Salvatore Bonaccorso at 2024-12-02T21:53:58+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -109,123 +109,123 @@ CVE-2024-53708 (Missing Authorization vulnerability in AutoQuiz AI Quiz allows A
 CVE-2024-53707 (Cross-Site Request Forgery (CSRF) vulnerability in Ahmet \u0130mamo\u0 ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-53617 (A Cross Site Scripting vulnerability in LibrePhotos before commit 3223 ...)
-	TODO: check
+	NOT-FOR-US: LibrePhotos
 CVE-2024-53566 (An issue in the action_listcategories() function of Sangoma Asterisk v ...)
 	TODO: check
 CVE-2024-53564 (An authenticated arbitrary file upload vulnerability in the component  ...)
-	TODO: check
+	NOT-FOR-US: FreePBX
 CVE-2024-53484 (Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation d ...)
 	TODO: check
 CVE-2024-53459 (Sysax Multi Server 6.99 is vulnerable to Cross Site Scripting (XSS) vi ...)
 	TODO: check
 CVE-2024-53364 (A SQL injection vulnerability was found in PHPGURUKUL Vehicle Parking  ...)
-	TODO: check
+	NOT-FOR-US: PHPGURUKUL Vehicle Parking Management System
 CVE-2024-53259 (quic-go is an implementation of the QUIC protocol in Go. An off-path a ...)
 	TODO: check
 CVE-2024-52806 (SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functio ...)
 	TODO: check
 CVE-2024-52732 (Incorrect access control in wms-Warehouse management system-zeqp v2.20 ...)
-	TODO: check
+	NOT-FOR-US: wms-Warehouse management system-zeqp
 CVE-2024-52724 (ZZCMS 2023 was discovered to contain a SQL injection vulnerability in  ...)
-	TODO: check
+	NOT-FOR-US: ZZCMS
 CVE-2024-52503 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52502 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: Imbasynergy ImbaChat
 CVE-2024-52494 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52493 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52492 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52491 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52489 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52487 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52486 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52484 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52483 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52482 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52479 (Cross-Site Request Forgery (CSRF) vulnerability in Ben Marshall Jobify ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52478 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52477 (Cross-Site Request Forgery (CSRF) vulnerability in No-nonsense Labs Do ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52476 (Unrestricted Upload of File with Dangerous Type vulnerability in stefa ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52469 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52468 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52467 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52466 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52465 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52464 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52463 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52462 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52461 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52460 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52459 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52458 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52457 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52456 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52455 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52454 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52453 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52452 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-51900 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-50381 (A vulnerability exists in Snap One OVRC cloud where an attacker can im ...)
-	TODO: check
+	NOT-FOR-US: Snap One OVRC cloud
 CVE-2024-50380 (Snap One OVRC cloud uses the MAC address as an identifier to provide i ...)
-	TODO: check
+	NOT-FOR-US: Snap One OVRC cloud
 CVE-2024-49763 (PlexRipper is a cross-platform media downloader for Plex. PlexRipper\u ...)
-	TODO: check
+	NOT-FOR-US: PlexRipper
 CVE-2024-46909 (In WhatsUp Gold versions released before 2024.0.1, aremote unauthentic ...)
-	TODO: check
+	NOT-FOR-US: WhatsUp
 CVE-2024-46908 (In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vul ...)
-	TODO: check
+	NOT-FOR-US: WhatsUp
 CVE-2024-46907 (In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vul ...)
-	TODO: check
+	NOT-FOR-US: WhatsUp
 CVE-2024-46906 (In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vul ...)
-	TODO: check
+	NOT-FOR-US: WhatsUp
 CVE-2024-46905 (In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vul ...)
-	TODO: check
+	NOT-FOR-US: WhatsUp
 CVE-2024-43053 (Memory corruption while invoking IOCTL calls from user space to read W ...)
-	TODO: check
+	NOT-FOR-US: Qualcomm
 CVE-2024-43052 (Memory corruption while processing API calls to NPU with invalid input ...)
-	TODO: check
+	NOT-FOR-US: Qualcomm
 CVE-2024-43050 (Memory corruption while invoking IOCTL calls from user space to issue  ...)
-	TODO: check
+	NOT-FOR-US: Qualcomm
 CVE-2024-43049 (Memory corruption while invoking IOCTL calls from user space to set ge ...)
-	TODO: check
+	NOT-FOR-US: Qualcomm
 CVE-2024-43048 (Memory corruption when invalid input is passed to invoke GPU Headroom  ...)
-	TODO: check
+	NOT-FOR-US: Qualcomm
 CVE-2024-39343 (An issue was discovered in Samsung Mobile Processor and Wearable Proce ...)
-	TODO: check
+	NOT-FOR-US: Samsung
 CVE-2024-38827 (The usage of String.toLowerCase()and String.toUpperCase()has some Loca ...)
 	TODO: check
 CVE-2024-33063 (Transient DOS while parsing the ML IE when a beacon with common info l ...)
@@ -374,7 +374,7 @@ CVE-2024-53103 (In the Linux kernel, the following vulnerability has been resolv
 	[bookworm] - linux 6.1.119-1
 	NOTE: https://git.kernel.org/linus/e629295bd60abf4da1db85b82819ca6a4f6c1e79 (6.13-rc1)
 CVE-2024-45520 (WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1 allows a remote  ...)
-	TODO: check
+	NOT-FOR-US: WithSecure
 CVE-2024-20139 (In Bluetooth firmware, there is a possible firmware asssert due to imp ...)
 	TODO: check
 CVE-2024-20138 (In wlan driver, there is a possible out of bound read due to improper  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/498613582771d88f9f05d6e0a8953cea2878f6e5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/498613582771d88f9f05d6e0a8953cea2878f6e5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241202/9e6d0d33/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list