[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
80be06d0 by Moritz Muehlenhoff at 2024-06-14T10:26:31+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -318,6 +318,8 @@ CVE-2023-35045 (Missing Authorization vulnerability in Fat Rat Fat Rat Collect.T
 	TODO: check
 CVE-2023-35040 (Missing Authorization vulnerability in SendPress SendPress Newsletters ...)
 	TODO: check
+CVE-2024-25142
+	- airflow <itp> (bug #819700)
 CVE-2024-5952 (Deep Sea Electronics DSE855 Restart Missing Authentication Denial-of-S ...)
 	NOT-FOR-US: Deep Sea Electronics DSE855 devices
 CVE-2024-5951 (Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denia ...)
@@ -385,9 +387,9 @@ CVE-2024-37308 (The Cooked Pro recipe plugin for WordPress is vulnerable to Pers
 CVE-2024-37307 (Cilium is a networking, observability, and security solution with an e ...)
 	- cilium <itp> (bug #858303)
 CVE-2024-37306 (Computer Vision Annotation Tool (CVAT) is an interactive video and ima ...)
-	TODO: check
+	NOT-FOR-US: Computer Vision Annotation Tool (CVAT)
 CVE-2024-37164 (Computer Vision Annotation Tool (CVAT) is an interactive video and ima ...)
-	TODO: check
+	NOT-FOR-US: Computer Vision Annotation Tool (CVAT)
 CVE-2024-37131 (SCG Policy Manager, all versions, contains an overly permissive Cross- ...)
 	NOT-FOR-US: Dell
 CVE-2024-37029 (Fuji Electric Tellus Lite V-Simulator  is vulnerable to a stack-based  ...)
@@ -395,13 +397,13 @@ CVE-2024-37029 (Fuji Electric Tellus Lite V-Simulator  is vulnerable to a stack-
 CVE-2024-37022 (Fuji Electric Tellus Lite V-Simulator  is vulnerable to an out-of-boun ...)
 	NOT-FOR-US: Fuji Electric Tellus Lite V-Simulator
 CVE-2024-36760 (A stack overflow vulnerability was found in version 1.18.0 of rhai. Th ...)
-	TODO: check
+	NOT-FOR-US: rhai
 CVE-2024-36647 (A stored cross-site scripting (XSS) vulnerability in Church CRM v5.8.0 ...)
 	NOT-FOR-US: Church CRM
 CVE-2024-36589 (An issue in Annonshop.app DecentralizeJustice/anonymousLocker commit 2 ...)
-	TODO: check
+	NOT-FOR-US: Anonshop
 CVE-2024-36588 (An issue in Annonshop.app DecentralizeJustice/ anonymousLocker commit  ...)
-	TODO: check
+	NOT-FOR-US: Anonshop
 CVE-2024-36587 (Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows n ...)
 	TODO: check
 CVE-2024-36586 (An issue in AdGuardHome v0.93 to latest allows unprivileged attackers  ...)
@@ -521,7 +523,7 @@ CVE-2024-5265 (The WPBakery Visual Composer plugin for WordPress is vulnerable t
 CVE-2024-4615 (The Elespare \u2013 Blog, Magazine and Newspaper Addons for Elementor  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-4576 (The component listed above contains a vulnerability that allows an att ...)
-	TODO: check
+	NOT-FOR-US: TIBCO
 CVE-2024-4201 (A cross-site scripting issue has been discovered in GitLab affecting a ...)
 	- gitlab <unfixed>
 CVE-2024-4149 (The Floating Chat Widget: Contact Chat Icons, WhatsApp, Telegram Chat, ...)
@@ -905,7 +907,7 @@ CVE-2024-37878 (Cross Site Scripting vulnerability in TWCMS v.2.0.3 allows a rem
 CVE-2024-37629 (SummerNote 0.8.18 is vulnerable to Cross Site Scripting (XSS) via the  ...)
 	NOT-FOR-US: SummerNote
 CVE-2024-37304 (NuGet Gallery is a package repository that powers nuget.org. The NuGet ...)
-	TODO: check
+	NOT-FOR-US: NuGet Gallery
 CVE-2024-37300 (OAuthenticator is software that allows OAuth2 identity providers to be ...)
 	TODO: check
 CVE-2024-37297 (WooCommerce is an open-source e-commerce platform built on WordPress.  ...)
@@ -993,7 +995,7 @@ CVE-2023-51524 (Missing Authorization vulnerability in weForms.This issue affect
 CVE-2023-51413 (Missing Authorization vulnerability in Piotnet Forms.This issue affect ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2023-49559 (An issue in vektah gqlparser open-source-library v.2.5.10 allows a rem ...)
-	TODO: check
+	NOT-FOR-US: vektah gqlparser
 CVE-2023-48280 (Missing Authorization vulnerability in Consensu.IO Consensu.Io.This is ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2023-47845 (Cross-Site Request Forgery (CSRF) vulnerability in Lim Kai Yang Grab & ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/80be06d07f580251915517fbce773feb7561f9e2

-- 
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/80be06d07f580251915517fbce773feb7561f9e2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240614/b4b9a498/attachment.htm>