[Git][security-tracker-team/security-tracker][master] Process several NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Mar 1 20:51:22 GMT 2024 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
57d1c1c3 by Salvatore Bonaccorso at 2024-03-01T21:50:52+01:00
Process several NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,119 +1,119 @@
 CVE-2024-2078 (A Cross-Site Scripting (XSS) vulnerability has been found in HelpDeskZ ...)
-	TODO: check
+	NOT-FOR-US: HelpDeskZ
 CVE-2024-2077 (A vulnerability classified as critical has been found in SourceCodeste ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Simple Online Bidding System
 CVE-2024-2076 (A vulnerability was found in CodeAstro House Rental Management System  ...)
-	TODO: check
+	NOT-FOR-US: CodeAstro House Rental Management System
 CVE-2024-2075 (A vulnerability was found in SourceCodester Daily Habit Tracker 1.0. I ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Daily Habit Tracker
 CVE-2024-2074 (A vulnerability was found in Mini-Tmall up to 20231017 and classified  ...)
-	TODO: check
+	NOT-FOR-US: Mini-Tmall
 CVE-2024-2073 (A vulnerability has been found in SourceCodester Block Inserter for Dy ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Block Inserter for Dynamic Content
 CVE-2024-2072 (A vulnerability, which was classified as problematic, was found in Sou ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Flashcard Quiz App
 CVE-2024-2071 (A vulnerability, which was classified as problematic, has been found i ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester FAQ Management System
 CVE-2024-2070 (A vulnerability classified as problematic was found in SourceCodester  ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester FAQ Management System
 CVE-2024-2069 (A vulnerability classified as critical has been found in SourceCodeste ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester FAQ Management System
 CVE-2024-2068 (A vulnerability was found in SourceCodester Computer Inventory System  ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Computer Inventory System
 CVE-2024-2067 (A vulnerability was found in SourceCodester Computer Inventory System  ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Computer Inventory System
 CVE-2024-2066 (A vulnerability was found in SourceCodester Computer Inventory System  ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Computer Inventory System
 CVE-2024-2065 (A vulnerability was found in SourceCodester Barangay Population Monito ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Barangay Population Monitoring System
 CVE-2024-2064 (A vulnerability has been found in rahman SelectCours 1.0 and classifie ...)
-	TODO: check
+	NOT-FOR-US: rahman SelectCours
 CVE-2024-2063 (A vulnerability, which was classified as problematic, was found in Sou ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Petrol Pump Management Software
 CVE-2024-2062 (A vulnerability, which was classified as critical, has been found in S ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Petrol Pump Management Software
 CVE-2024-2061 (A vulnerability classified as critical was found in SourceCodester Pet ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Petrol Pump Management Software
 CVE-2024-2060 (A vulnerability classified as critical has been found in SourceCodeste ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Petrol Pump Management Software
 CVE-2024-2059 (A vulnerability was found in SourceCodester Petrol Pump Management Sof ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Petrol Pump Management Software
 CVE-2024-2058 (A vulnerability was found in SourceCodester Petrol Pump Management Sof ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Petrol Pump Management Software
 CVE-2024-2057 (A vulnerability was found in Harrison Chase LangChain 0.1.9. It has be ...)
-	TODO: check
+	NOT-FOR-US: Harrison Chase LangChain
 CVE-2024-27734 (A Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows an atta ...)
-	TODO: check
+	NOT-FOR-US: CSZ CMS
 CVE-2024-27692
 	REJECTED
 CVE-2024-27689 (Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Reques ...)
-	TODO: check
+	NOT-FOR-US: Stupid Simple CMS
 CVE-2024-27572 (LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via ...)
-	TODO: check
+	NOT-FOR-US: LBT T300-T390
 CVE-2024-27571 (LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via ...)
-	TODO: check
+	NOT-FOR-US: LBT T300-T390
 CVE-2024-27570 (LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via ...)
-	TODO: check
+	NOT-FOR-US: LBT T300-T390
 CVE-2024-27569 (LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via ...)
-	TODO: check
+	NOT-FOR-US: LBT T300-T390
 CVE-2024-27568 (LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via ...)
-	TODO: check
+	NOT-FOR-US: LBT T300-T390
 CVE-2024-27567 (LBT T300- T390 v2.2.1.8 were discovered to contain a stack overflow vi ...)
-	TODO: check
+	NOT-FOR-US: LBT T300-T390
 CVE-2024-27559 (Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Reques ...)
-	TODO: check
+	NOT-FOR-US: Stupid Simple CMS
 CVE-2024-27558 (Stupid Simple CMS 1.2.4 is vulnerable to Cross Site Scripting (XSS) wi ...)
-	TODO: check
+	NOT-FOR-US: Stupid Simple CMS
 CVE-2024-27499 (Bagisto v1.5.1 is vulnerable for Cross site scripting(XSS) via png fil ...)
-	TODO: check
+	NOT-FOR-US: Bagisto
 CVE-2024-27497 (Linksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypas ...)
-	TODO: check
+	NOT-FOR-US: Linksys
 CVE-2024-27298 (parse-server is a Parse Server for Node.js / Express. This vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: Parse Server
 CVE-2024-27296 (Directus is a real-time API and App dashboard for managing SQL databas ...)
-	TODO: check
+	NOT-FOR-US: Directus
 CVE-2024-27295 (Directus is a real-time API and App dashboard for managing SQL databas ...)
-	TODO: check
+	NOT-FOR-US: Directus
 CVE-2024-27140 (** UNSUPPORTED WHEN ASSIGNED **  Improper Neutralization of Input Duri ...)
-	TODO: check
+	NOT-FOR-US: Apache Archiva
 CVE-2024-27139 (** UNSUPPORTED WHEN ASSIGNED **  Incorrect Authorization vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Apache Archiva
 CVE-2024-27138 (** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: Apache Archiva
 CVE-2024-26280 (Apache Airflow, versions before 2.8.2, has a vulnerability that allows ...)
 	- airflow <itp> (bug #819700)
 CVE-2024-25972 (Initialization of a resource with an insecure default vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: Atsumi
 CVE-2024-25091 (Protection mechanism failure issue exists in RevoWorks SCVX prior to s ...)
-	TODO: check
+	NOT-FOR-US: RevoWorks
 CVE-2024-24907 (Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contai ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2024-24906 (Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contai ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2024-24905 (Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contai ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2024-24904 (Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contai ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2024-24903 (Dell Secure Connect Gateway (SCG) Policy Manager, version 5.10+, conta ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2024-24900 (Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contai ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2024-22458 (Dell Secure Connect Gateway, 5.18, contains an Inadequate Encryption S ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2024-22457 (Dell Secure Connect Gateway 5.20 contains an improper authentication v ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2024-1624 (An OS Command Injection vulnerability affecting documentation server o ...)
 	TODO: check
 CVE-2024-1453 (In Sante DICOM Viewer Pro versions 14.0.3 and prior, a user must open  ...)
-	TODO: check
+	NOT-FOR-US: Sante DICOM Viewer Pro
 CVE-2024-1174 (Previous versions of HP ThinPro (prior to HP ThinPro 8.0 SP 8) could p ...)
-	TODO: check
+	NOT-FOR-US: HP
 CVE-2024-1120 (The NextMove Lite \u2013 Thank You Page for WooCommerce and Finale Lit ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-0967 (A potential vulnerability has been identified in OpenText / Micro Focu ...)
-	TODO: check
+	NOT-FOR-US: OpenText
 CVE-2024-0692 (The SolarWinds Security Event Manager was susceptible to Remote Code E ...)
-	TODO: check
+	NOT-FOR-US: SolarWinds
 CVE-2023-52558 (In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, an ...)
 	TODO: check
 CVE-2023-52557 (In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp messa ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/57d1c1c34bff0f925e2a1c2da2df72bbd9b31710

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/57d1c1c34bff0f925e2a1c2da2df72bbd9b31710
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240301/4b2e2a2a/attachment.htm>

More information about the debian-security-tracker-commits mailing list