[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Jul 31 13:53:23 BST 2024 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1d7d26aa by Salvatore Bonaccorso at 2024-07-31T14:52:47+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,83 +1,83 @@
 CVE-2024-7306 (A vulnerability, which was classified as critical, was found in Source ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Establishment Billing Management System
 CVE-2024-7303 (A vulnerability was found in itsourcecode Online Blood Bank Management ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode Online Blood Bank Management System
 CVE-2024-7300 (** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problema ...)
-	TODO: check
+	NOT-FOR-US: Bolt CMS
 CVE-2024-7299 (** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Bolt CMS  ...)
-	TODO: check
+	NOT-FOR-US: Bolt CMS
 CVE-2024-7290 (A vulnerability classified as critical has been found in SourceCodeste ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Establishment Billing Management System
 CVE-2024-7289 (A vulnerability was found in SourceCodester Establishment Billing Mana ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Establishment Billing Management System
 CVE-2024-7288 (A vulnerability was found in SourceCodester Establishment Billing Mana ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Establishment Billing Management System
 CVE-2024-7287 (A vulnerability was found in SourceCodester Establishment Billing Mana ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Establishment Billing Management System
 CVE-2024-7286 (A vulnerability was found in SourceCodester Establishment Billing Mana ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Establishment Billing Management System
 CVE-2024-7285 (A vulnerability has been found in SourceCodester Establishment Billing ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Establishment Billing Management System
 CVE-2024-7284 (A vulnerability, which was classified as problematic, was found in Sou ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Lot Reservation Management System
 CVE-2024-7283 (A vulnerability, which was classified as critical, has been found in S ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Lot Reservation Management System
 CVE-2024-7282 (A vulnerability classified as critical was found in SourceCodester Lot ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Lot Reservation Management System
 CVE-2024-7281 (A vulnerability classified as critical has been found in SourceCodeste ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Lot Reservation Management System
 CVE-2024-7280 (A vulnerability was found in SourceCodester Lot Reservation Management ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Lot Reservation Management System
 CVE-2024-7279 (A vulnerability was found in SourceCodester Lot Reservation Management ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Lot Reservation Management System
 CVE-2024-7278 (A vulnerability was found in itsourcecode Alton Management System 1.0. ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode Alton Management System
 CVE-2024-7277 (A vulnerability was found in itsourcecode Alton Management System 1.0  ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode Alton Management System
 CVE-2024-7276 (A vulnerability has been found in itsourcecode Alton Management System ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode Alton Management System
 CVE-2024-7275 (A vulnerability, which was classified as critical, was found in itsour ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode Alton Management System
 CVE-2024-7274 (A vulnerability, which was classified as critical, has been found in i ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode Alton Management System
 CVE-2024-7273 (A vulnerability classified as critical was found in itsourcecode Alton ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode Alton Management System
 CVE-2024-7205 (When the device is shared,the homepage module are before 2.19.0 in eWe ...)
 	TODO: check
 CVE-2024-6980 (A verbose error handling issue in the proxy service implemented in the ...)
-	TODO: check
+	NOT-FOR-US: GravityZone Update Server
 CVE-2024-6770 (The Lifetime free Drag & Drop Contact Form Builder for WordPress VForm ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-6695 (it's possible for an attacker to gain administrative access without ha ...)
 	TODO: check
 CVE-2024-6412 (The HTML Forms  WordPress plugin before 1.3.34 does not have CSRF chec ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-6408 (The Slider by 10Web  WordPress plugin before 1.2.57 does not sanitise  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-6272 (The SpiderContacts WordPress plugin through 1.1.7 does not sanitise an ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-6255 (A vulnerability in the JSON file handling of gaizhenbiao/chuanhuchatgp ...)
-	TODO: check
+	NOT-FOR-US: gaizhenbiao/chuanhuchatgpt
 CVE-2024-6165 (The WANotifier  WordPress plugin before 2.6.1 does not sanitise and es ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-5901 (The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to St ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-42381 (os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF fi ...)
 	TODO: check
 CVE-2024-39950 (A vulnerability has been found in Dahua products. Attackers can send c ...)
-	TODO: check
+	NOT-FOR-US: Dahua
 CVE-2024-39949 (A vulnerability has been found in Dahua products.Attackers can send ca ...)
-	TODO: check
+	NOT-FOR-US: Dahua
 CVE-2024-39948 (A vulnerability has been found in Dahua products.Attackers can send ca ...)
-	TODO: check
+	NOT-FOR-US: Dahua
 CVE-2024-39947 (A vulnerability has been found in Dahua products.After obtaining the o ...)
-	TODO: check
+	NOT-FOR-US: Dahua
 CVE-2024-39946 (A vulnerability has been found in Dahua products.After obtaining the a ...)
-	TODO: check
+	NOT-FOR-US: Dahua
 CVE-2024-39945 (A vulnerability has been found in Dahua products.After obtaining the a ...)
-	TODO: check
+	NOT-FOR-US: Dahua
 CVE-2024-39944 (A vulnerability has been found in Dahua products.Attackers can send ca ...)
-	TODO: check
+	NOT-FOR-US: Dahua
 CVE-2024-38983 (Prototype Pollution in alykoshin mini-deep-assign v0.0.8 allows an att ...)
 	TODO: check
 CVE-2024-37281 (An issue was discovered in Kibana where a user with Viewer role could  ...)
@@ -105726,7 +105726,7 @@ CVE-2023-28076 (CloudLink 7.1.2 and all prior versions contain a broken or risky
 CVE-2023-28075 (Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A ...)
 	NOT-FOR-US: Dell
 CVE-2023-28074 (Dell BSAFE Crypto-C Micro Edition 4.1.5 and Dell BSAFE Micro Edition S ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2023-28073 (Dell BIOS contains an improper authentication vulnerability. A locally ...)
 	NOT-FOR-US: Dell
 CVE-2023-28072 (Dell Alienware Command Center, versions prior to 5.5.51.0, contain a d ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d7d26aadf6c7f07de034e3274f1f8af7765c5b1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d7d26aadf6c7f07de034e3274f1f8af7765c5b1
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240731/165e55cc/attachment.htm>

More information about the debian-security-tracker-commits mailing list