[Git][security-tracker-team/security-tracker][master] Cleanup some rejected NFU entries

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Jan 2 20:39:33 GMT 2024



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
62fe87e8 by Salvatore Bonaccorso at 2024-01-02T21:38:58+01:00
Cleanup some rejected NFU entries

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1395,40 +1395,30 @@ CVE-2023-51379 (An incorrect authorization vulnerability was identified in GitHu
 	NOT-FOR-US: GitHub Enterprise Server
 CVE-2023-49690
 	REJECTED
-	NOT-FOR-US: Job Portal
 CVE-2023-49689 (Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injectio ...)
 	NOT-FOR-US: Job Portal
 CVE-2023-49688 (Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injectio ...)
 	NOT-FOR-US: Job Portal
 CVE-2023-49687
 	REJECTED
-	NOT-FOR-US: Job Portal
 CVE-2023-49686
 	REJECTED
-	NOT-FOR-US: Job Portal
 CVE-2023-49685
 	REJECTED
-	NOT-FOR-US: Job Portal
 CVE-2023-49684
 	REJECTED
-	NOT-FOR-US: Job Portal
 CVE-2023-49683
 	REJECTED
-	NOT-FOR-US: Job Portal
 CVE-2023-49682
 	REJECTED
-	NOT-FOR-US: Job Portal
 CVE-2023-49681 (Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injectio ...)
 	NOT-FOR-US: Job Portal
 CVE-2023-49680
 	REJECTED
-	NOT-FOR-US: Job Portal
 CVE-2023-49679
 	REJECTED
-	NOT-FOR-US: Job Portal
 CVE-2023-49678
 	REJECTED
-	NOT-FOR-US: Job Portal
 CVE-2023-49677 (Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injectio ...)
 	NOT-FOR-US: Job Portal
 CVE-2023-49086 (Cacti is a robust performance and fault management framework and a fro ...)
@@ -1441,34 +1431,28 @@ CVE-2023-49084 (Cacti is a robust performance and fault management framework and
 	NOTE: https://github.com/Cacti/cacti/commit/58a980f335980ab57659420053d89d4e721ae3fc
 CVE-2023-48723
 	REJECTED
-	NOT-FOR-US: Student Result Management System
 CVE-2023-48722 (Student Result Management System v1.0 is vulnerable to multiple Unauth ...)
 	NOT-FOR-US: Student Result Management System
 CVE-2023-48720 (Student Result Management System v1.0 is vulnerable to multiple Unauth ...)
 	NOT-FOR-US: Student Result Management System
 CVE-2023-48719
 	REJECTED
-	NOT-FOR-US: Student Result Management System
 CVE-2023-48718 (Student Result Management System v1.0 is vulnerable to multiple Unauth ...)
 	NOT-FOR-US: Student Result Management System
 CVE-2023-48717
 	REJECTED
-	NOT-FOR-US: Student Result Management System
 CVE-2023-48716 (Student Result Management System v1.0 is vulnerable to multiple Unauth ...)
 	NOT-FOR-US: Student Result Management System
 CVE-2023-48690
 	REJECTED
-	NOT-FOR-US: Railway Reservation System
 CVE-2023-48689 (Railway Reservation System v1.0 is vulnerable to multiple Unauthentica ...)
 	NOT-FOR-US: Railway Reservation System
 CVE-2023-48688
 	REJECTED
-	NOT-FOR-US: Railway Reservation System
 CVE-2023-48687 (Railway Reservation System v1.0 is vulnerable to multiple Unauthentica ...)
 	NOT-FOR-US: Railway Reservation System
 CVE-2023-48686
 	REJECTED
-	NOT-FOR-US: Railway Reservation System
 CVE-2023-48685 (Railway Reservation System v1.0 is vulnerable to multiple Unauthentica ...)
 	NOT-FOR-US: Railway Reservation System
 CVE-2023-48308 (Nextcloud/Cloud is a calendar app for Nextcloud. An attacker can gain  ...)
@@ -1633,22 +1617,16 @@ CVE-2023-46791 (Online Matrimonial Project v1.0 is vulnerable to multiple Unauth
 	NOT-FOR-US: Online Matrimonial Project
 CVE-2023-45127
 	REJECTED
-	NOT-FOR-US: Online Examination System
 CVE-2023-45126
 	REJECTED
-	NOT-FOR-US: Online Examination System
 CVE-2023-45125
 	REJECTED
-	NOT-FOR-US: Online Examination System
 CVE-2023-45124
 	REJECTED
-	NOT-FOR-US: Online Examination System
 CVE-2023-45123
 	REJECTED
-	NOT-FOR-US: Online Examination System
 CVE-2023-45122
 	REJECTED
-	NOT-FOR-US: Online Examination System
 CVE-2023-45121 (Online Examination System v1.0 is vulnerable to multiple Authenticated ...)
 	NOT-FOR-US: Online Examination System
 CVE-2023-45120 (Online Examination System v1.0 is vulnerable to multiple Authenticated ...)
@@ -9683,17 +9661,14 @@ CVE-2023-46768 (Multi-thread vulnerability in the idmap module. Successful explo
 	NOT-FOR-US: Huawei
 CVE-2023-46680
 	REJECTED
-	NOT-FOR-US: Online Job Portal
 CVE-2023-46679 (Online Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL I ...)
 	NOT-FOR-US: Online Job Portal
 CVE-2023-46678
 	REJECTED
-	NOT-FOR-US: Online Job Portal
 CVE-2023-46677 (Online Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL I ...)
 	NOT-FOR-US: Online Job Portal
 CVE-2023-46676
 	REJECTED
-	NOT-FOR-US: Online Job Portal
 CVE-2023-46483 (Cross Site Scripting vulnerability in timetec AWDMS v.2.0 allows an at ...)
 	NOT-FOR-US: timetec AWDMS
 CVE-2023-46001 (Buffer Overflow vulnerability in gpac MP4Box v.2.3-DEV-rev573-g2013208 ...)
@@ -10451,33 +10426,26 @@ CVE-2023-45340 (Online Food Ordering System v1.0 is vulnerable to multiple Unaut
 	NOT-FOR-US: Online Food Ordering System
 CVE-2023-45339
 	REJECTED
-	NOT-FOR-US: Online Food Ordering System
 CVE-2023-45338 (Online Food Ordering System v1.0 is vulnerable to multiple Unauthentic ...)
 	NOT-FOR-US: Online Food Ordering System
 CVE-2023-45337
 	REJECTED
-	NOT-FOR-US: Online Food Ordering System
 CVE-2023-45336 (Online Food Ordering System v1.0 is vulnerable to multiple Unauthentic ...)
 	NOT-FOR-US: Online Food Ordering System
 CVE-2023-45335
 	REJECTED
-	NOT-FOR-US: Online Food Ordering System
 CVE-2023-45334 (Online Food Ordering System v1.0 is vulnerable to multiple Unauthentic ...)
 	NOT-FOR-US: Online Food Ordering System
 CVE-2023-45333
 	REJECTED
-	NOT-FOR-US: Online Food Ordering System
 CVE-2023-45332
 	REJECTED
-	NOT-FOR-US: Online Food Ordering System
 CVE-2023-45331
 	REJECTED
-	NOT-FOR-US: Online Food Ordering System
 CVE-2023-45330 (Online Food Ordering System v1.0 is vulnerable to multiple Unauthentic ...)
 	NOT-FOR-US: Online Food Ordering System
 CVE-2023-45329
 	REJECTED
-	NOT-FOR-US: Online Food Ordering System
 CVE-2023-45328 (Online Food Ordering System v1.0 is vulnerable to multiple Unauthentic ...)
 	NOT-FOR-US: Online Food Ordering System
 CVE-2023-45327 (Online Food Ordering System v1.0 is vulnerable to multiple Unauthentic ...)
@@ -10488,7 +10456,6 @@ CVE-2023-45325 (Online Food Ordering System v1.0 is vulnerable to multiple Unaut
 	NOT-FOR-US: Online Food Ordering System
 CVE-2023-45324
 	REJECTED
-	NOT-FOR-US: Online Food Ordering System
 CVE-2023-45323 (Online Food Ordering System v1.0 is vulnerable to multiple Unauthentic ...)
 	NOT-FOR-US: Online Food Ordering System
 CVE-2023-43336 (Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and ...)
@@ -10532,13 +10499,10 @@ CVE-2023-45201 (Online Examination System v1.0 is vulnerable to multiple Open Re
 	NOT-FOR-US: Online Examination System
 CVE-2023-45114
 	REJECTED
-	NOT-FOR-US: Online Examination System
 CVE-2023-45113
 	REJECTED
-	NOT-FOR-US: Online Examination System
 CVE-2023-45112
 	REJECTED
-	NOT-FOR-US: Online Examination System
 CVE-2023-45111 (Online Examination System v1.0 is vulnerable to multiple Unauthenticat ...)
 	NOT-FOR-US: Online Examination System
 CVE-2023-45019 (Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticat ...)
@@ -10547,18 +10511,14 @@ CVE-2023-45018 (Online Bus Booking System v1.0 is vulnerable to multiple Unauthe
 	NOT-FOR-US: Online Examination System
 CVE-2023-45017
 	REJECTED
-	NOT-FOR-US: Online Examination System
 CVE-2023-45016
 	REJECTED
-	NOT-FOR-US: Online Examination System
 CVE-2023-45015 (Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticat ...)
 	NOT-FOR-US: Online Examination System
 CVE-2023-45014
 	REJECTED
-	NOT-FOR-US: Online Examination System
 CVE-2023-45013
 	REJECTED
-	NOT-FOR-US: Online Examination System
 CVE-2023-45012 (Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticat ...)
 	NOT-FOR-US: Online Examination System
 CVE-2023-44954 (Cross Site Scripting vulnerability in BigTree CMS v.4.5.7 allows a rem ...)
@@ -10731,7 +10691,6 @@ CVE-2023-5514 (The response messages received from the eSOMS report generation u
 	NOT-FOR-US: Hitachi
 CVE-2023-5306
 	REJECTED
-	NOT-FOR-US: Online Blood Donation Management System
 CVE-2023-4198 (Improper Access Control in Dolibarr ERP CRM <= v17.0.3 allows an unaut ...)
 	- dolibarr <removed>
 CVE-2023-4197 (Improper input validation in Dolibarr ERP CRM <= v18.0.1 fails to stri ...)
@@ -10758,10 +10717,8 @@ CVE-2023-46278 (Uncontrolled resource consumption vulnerability in Cybozu Remote
 	NOT-FOR-US: Cybozu
 CVE-2023-44486
 	REJECTED
-	NOT-FOR-US: Online Blood Donation Management System
 CVE-2023-44485
 	REJECTED
-	NOT-FOR-US: Online Blood Donation Management System
 CVE-2023-44484 (Online Blood Donation Management System v1.0 is vulnerable to a Stored ...)
 	NOT-FOR-US: Online Blood Donation Management System
 CVE-2023-43295 (Cross Site Request Forgery vulnerability in Click Studios (SA) Pty Ltd ...)
@@ -11368,10 +11325,8 @@ CVE-2023-46246 (Vim is an improved version of the good old UNIX editor Vi. Heap-
 	NOTE: Crash in CLI tool, no security impact
 CVE-2023-44377
 	REJECTED
-	NOT-FOR-US: Online Art Gallery
 CVE-2023-44376
 	REJECTED
-	NOT-FOR-US: Online Art Gallery
 CVE-2023-5814 (A vulnerability was found in SourceCodester Task Reminder System 1.0.  ...)
 	NOT-FOR-US: SourceCodester Task Reminder System
 CVE-2023-5813 (A vulnerability was found in SourceCodester Task Reminder System 1.0 a ...)
@@ -11426,23 +11381,18 @@ CVE-2023-45498 (VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was
 	NOT-FOR-US: VinChin Backup & Recovery
 CVE-2023-44375
 	REJECTED
-	NOT-FOR-US: Online Art Gallery
 CVE-2023-44268
 	REJECTED
-	NOT-FOR-US: Online Art Gallery
 CVE-2023-44220 (SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and  ...)
 	NOT-FOR-US: SonicWall
 CVE-2023-44219 (A local privilege escalation vulnerability in SonicWall Directory Serv ...)
 	NOT-FOR-US: SonicWall
 CVE-2023-44162
 	REJECTED
-	NOT-FOR-US: Online Art Gallery
 CVE-2023-43738
 	REJECTED
-	NOT-FOR-US: Online Art Gallery
 CVE-2023-43737
 	REJECTED
-	NOT-FOR-US: Online Art Gallery
 CVE-2023-43352 (An issue in CMSmadesimple v.2.2.18 allows a local attacker to execute  ...)
 	NOT-FOR-US: CMSmadesimple
 CVE-2023-42406 (SQL injection vulnerability in D-Link Online behavior audit gateway DA ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/62fe87e858dd6e35c2acdc1e89b61a5b0b822d1a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/62fe87e858dd6e35c2acdc1e89b61a5b0b822d1a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240102/16e97f02/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list