[Git][security-tracker-team/security-tracker][master] Process NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e20a98d0 by Salvatore Bonaccorso at 2024-07-19T22:17:48+02:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,37 +1,37 @@
 CVE-2024-6916 (A vulnerability in Zowe CLI allows local, privileged actors to display ...)
-	TODO: check
+	NOT-FOR-US: Zowe CLI
 CVE-2024-6908 (Improper privilege management in Yugabyte Platform allows authenticate ...)
 	TODO: check
 CVE-2024-6907 (A vulnerability was found in SourceCodester Record Management System 1 ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Record Management System
 CVE-2024-6906 (A vulnerability was found in SourceCodester Record Management System 1 ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Record Management System
 CVE-2024-6905 (A vulnerability has been found in SourceCodester Record Management Sys ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Record Management System
 CVE-2024-6904 (A vulnerability, which was classified as critical, was found in Source ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Record Management System
 CVE-2024-6895 (Insufficient authentication in user account management in Yugabyte Pla ...)
 	TODO: check
 CVE-2024-5977 (The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-41603 (Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forge ...)
-	TODO: check
+	NOT-FOR-US: Spina CMS
 CVE-2024-41602 (Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and bef ...)
-	TODO: check
+	NOT-FOR-US: Spina CMS
 CVE-2024-41601 (Insecure Permissions vulnerability in lin-CMS v.0.2.0 and before allow ...)
-	TODO: check
+	NOT-FOR-US: lin-CMS
 CVE-2024-41600 (Insecure Permissions vulnerability in lin-CMS Springboot v.0.2.1 and b ...)
-	TODO: check
+	NOT-FOR-US: lin-CMS
 CVE-2024-41599 (Cross Site Scripting vulnerability in RuoYi v.4.7.9 and before allows  ...)
-	TODO: check
+	NOT-FOR-US: RuoYi
 CVE-2024-41597 (Cross Site Request Forgery vulnerability in ProcessWire v.3.0.229 allo ...)
-	TODO: check
+	NOT-FOR-US: ProcessWire
 CVE-2024-41492 (A stack overflow in Tenda AX1806 v1.0.0.1 allows attackers to cause a  ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2024-41281 (Linksys WRT54G v4.21.5 has a stack overflow vulnerability in get_merge ...)
-	TODO: check
+	NOT-FOR-US: Linksys
 CVE-2024-41172 (In versions of Apache CXF before 3.6.4 and 4.0.5 (3.5.x and lower vers ...)
-	TODO: check
+	NOT-FOR-US: Apache CXF
 CVE-2024-41124 (Puncia is the Official CLI utility for Subdomain Center & Exploit Obse ...)
 	TODO: check
 CVE-2024-41122 (Woodpecker is a simple yet powerful CI/CD engine with great extensibil ...)
@@ -43,17 +43,17 @@ CVE-2024-41107 (The CloudStack SAML authentication (disabled by default) does no
 CVE-2024-40400 (An arbitrary file upload vulnerability in the image upload function of ...)
 	TODO: check
 CVE-2024-39963 (AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX9 V22.03.01.46 and AX3000 Du ...)
-	TODO: check
+	NOT-FOR-US: AX3000 Dual-Band Gigabit Wi-Fi 6 Router
 CVE-2024-39962 (D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router v21_D240126 w ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2024-39906 (A command injection vulnerability was found in the IndieAuth functiona ...)
 	TODO: check
 CVE-2024-39457 (Cybozu Garoon 6.0.0 to 6.0.1 contains a cross-site scripting vulnerabi ...)
-	TODO: check
+	NOT-FOR-US: Cybozu
 CVE-2024-39123 (In janeczku Calibre-Web 0.6.0 to 0.6.21, the edit_book_comments functi ...)
 	TODO: check
 CVE-2024-37066 (A command injection vulnerability exists in Wyze V4 Pro firmware versi ...)
-	TODO: check
+	NOT-FOR-US: Wyze
 CVE-2024-32007 (An improper input validation of thep2c parameter in the Apache CXF JOS ...)
 	TODO: check
 CVE-2024-29736 (A SSRF vulnerability in WADL service description in versions of Apache ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e20a98d069c441f6265d2c950ecb0bcb9c146813

-- 
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e20a98d069c441f6265d2c950ecb0bcb9c146813
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240719/afcfa788/attachment.htm>