[Git][security-tracker-team/security-tracker][master] Process NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
38dd7947 by Salvatore Bonaccorso at 2024-07-25T22:48:39+02:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,57 +1,57 @@
 CVE-2024-7101 (A vulnerability, which was classified as critical, has been found in F ...)
-	TODO: check
+	NOT-FOR-US: orIP Tecnologia Administracao PABX
 CVE-2024-7007 (Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable to an  ...)
-	TODO: check
+	NOT-FOR-US: Positron Broadcast Signal Processor TRA7005
 CVE-2024-6589 (The LearnPress \u2013 WordPress LMS Plugin plugin for WordPress is vul ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-6558 (HMS Industrial Networks  Anybus-CompactCom 30 products are vulnerable  ...)
-	TODO: check
+	NOT-FOR-US: HMS Industrial Networks Anybus-CompactCom 30 products
 CVE-2024-41806 (The Open edX Platform is a learning management platform. Instructors c ...)
-	TODO: check
+	NOT-FOR-US: Open edX
 CVE-2024-41801 (OpenProject is open source project management software. Prior to versi ...)
-	TODO: check
+	NOT-FOR-US: OpenProject
 CVE-2024-41800 (Craft is a content management system (CMS). Craft CMS 5 allows reuse o ...)
-	TODO: check
+	NOT-FOR-US: Craft CMS
 CVE-2024-40873 (There is a cross-site scripting vulnerability in the Secure Access adm ...)
-	TODO: check
+	NOT-FOR-US: Absolute Secure Access
 CVE-2024-40872 (There is an elevation of privilege vulnerability in server and client  ...)
-	TODO: check
+	NOT-FOR-US: Absolute Secure Access
 CVE-2024-40324 (A CRLF injection vulnerability in E-Staff v5.1 allows attackers to ins ...)
-	TODO: check
+	NOT-FOR-US: E-Staff
 CVE-2024-40318 (An arbitrary file upload vulnerability in Webkul Qloapps v1.6.0.0 allo ...)
-	TODO: check
+	NOT-FOR-US: Webkul Qloapps
 CVE-2024-39674 (Plaintext vulnerability in the Gallery search module. Impact: Successf ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2024-39673 (Vulnerability of serialisation/deserialisation mismatch in the iAware  ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2024-39672 (Memory request logic vulnerability in the memory module. Impact: Succe ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2024-39671 (Access control vulnerability in the security verification module. Impa ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2024-39670 (Privilege escalation vulnerability in the account synchronisation modu ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2024-38289 (A boolean-based SQL injection issue in the Virtual Meeting Password (V ...)
-	TODO: check
+	NOT-FOR-US: R-HUB TurboMeeting
 CVE-2024-38288 (A command-injection issue in the Certificate Signing Request (CSR) fun ...)
-	TODO: check
+	NOT-FOR-US: R-HUB TurboMeeting
 CVE-2024-38287 (The password-reset mechanism in the Forgot Password functionality in R ...)
-	TODO: check
+	NOT-FOR-US: R-HUB TurboMeeting
 CVE-2024-37084 (In Spring Cloud Data Flow versions prior to 2.11.4,a malicious user wh ...)
-	TODO: check
+	NOT-FOR-US: Spring Cloud Data Flow
 CVE-2024-36542 (Insecure permissions in kuma v2.7.0 allows attackers to access sensiti ...)
-	TODO: check
+	NOT-FOR-US: Kuma
 CVE-2024-36111 (KubePi is a K8s panel. Starting in version 1.6.3 and prior to version  ...)
-	TODO: check
+	NOT-FOR-US: KubePi
 CVE-2024-29069 (In snapd versions prior to 2.62, snapd failed to properly check the de ...)
 	TODO: check
 CVE-2024-29068 (In snapd versions prior to 2.62, snapd failed to properly check the fi ...)
 	TODO: check
 CVE-2024-28772 (IBM Security Directory Integrator 7.2.0 and IBM Security Verify Direct ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2024-1724 (In snapd versions prior to 2.62, when using AppArmor for enforcement o ...)
 	TODO: check
 CVE-2023-7271 (Privilege escalation vulnerability in the NMS module Impact: Successfu ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2024-7091 (An issue was discovered in GitLab CE/EE affecting all versions startin ...)
 	- gitlab <unfixed>
 CVE-2024-7081 (A vulnerability was found in itsourcecode Tailoring Management System  ...)
@@ -149,7 +149,7 @@ CVE-2024-7069 (A vulnerability, which was classified as critical, has been found
 CVE-2024-7068 (A vulnerability classified as problematic has been found in SourceCode ...)
 	NOT-FOR-US: SourceCodester Insurance Management System
 CVE-2024-7067 (A vulnerability was found in kirilkirkov Ecommerce-Laravel-Bootstrap u ...)
-	TODO: check
+	NOT-FOR-US: kirilkirkov Ecommerce-Laravel-Bootstrap
 CVE-2024-7066 (A vulnerability was found in F-logic DataCube3 1.0. It has been declar ...)
 	NOT-FOR-US: F-logic DataCube3
 CVE-2024-7065 (A vulnerability was found in Spina CMS up to 2.18.0. It has been class ...)
@@ -169449,7 +169449,7 @@ CVE-2022-32769 (Multiple authentication bypass vulnerabilities exist in the obje
 CVE-2022-32768 (Multiple authentication bypass vulnerabilities exist in the objects id ...)
 	NOT-FOR-US: WWBN AVideo
 CVE-2022-32759 (IBM Security Directory Integrator 7.2.0 and IBM Security Verify Direct ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2022-32758
 	RESERVED
 CVE-2022-32757 (IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 uses an inadequ ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/38dd794761ea37b0c8d090082dbc97713bd327fa

-- 
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/38dd794761ea37b0c8d090082dbc97713bd327fa
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240725/217d012a/attachment-0001.htm>