[Git][security-tracker-team/security-tracker][master] Process some more NFUs

Tue Mar 19 20:34:44 GMT 2024


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ff60b87c by Salvatore Bonaccorso at 2024-03-19T21:34:16+01:00
Process some more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,19 +1,19 @@
 CVE-2024-2639 (A vulnerability was found in Bdtask Wholesale Inventory Management Sys ...)
-	TODO: check
+	NOT-FOR-US: Bdtask Wholesale Inventory Management System
 CVE-2024-2636 (An Unrestricted Upload of File vulnerability has been found on Cegid M ...)
-	TODO: check
+	NOT-FOR-US: Meta4 HR
 CVE-2024-2635 (The configuration pages available are not intended to be placed on an  ...)
-	TODO: check
+	NOT-FOR-US: Meta4 HR
 CVE-2024-2634 (A Cross-Site Scripting Vulnerability has been found on Meta4 HR affect ...)
-	TODO: check
+	NOT-FOR-US: Meta4 HR
 CVE-2024-2633 (A Cross-Site Scripting Vulnerability has been found on Meta4 HR affect ...)
-	TODO: check
+	NOT-FOR-US: Meta4 HR
 CVE-2024-2632 (A Information Exposure Vulnerability has been found on Meta4 HR. This  ...)
-	TODO: check
+	NOT-FOR-US: Meta4 HR
 CVE-2024-2545
 	REJECTED
 CVE-2024-2442 (Franklin Fueling System EVO 550 and EVO 5000 are vulnerable to a Path  ...)
-	TODO: check
+	NOT-FOR-US: Franklin Fueling System
 CVE-2024-2307 (A flaw was found in osbuild-composer. A condition can be triggered tha ...)
 	TODO: check
 CVE-2024-2169 (Implementations of UDP application protocol are vulnerable to network  ...)
@@ -115,31 +115,31 @@ CVE-2024-29091 (Improper Neutralization of Input During Web Page Generation ('Cr
 CVE-2024-29089 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-29027 (Parse Server is an open source backend that can be deployed to any inf ...)
-	TODO: check
+	NOT-FOR-US: Parse Server
 CVE-2024-28734 (Cross Site Scripting vulnerability in Unit4 Financials by Coda v.2024Q ...)
-	TODO: check
+	NOT-FOR-US: Unit4 Financials by Coda
 CVE-2024-28595 (SQL Injection vulnerability in Employee Management System v1.0 allows  ...)
-	TODO: check
+	NOT-FOR-US: Employee Management System
 CVE-2024-28394 (An issue in Advanced Plugins reportsstatistics v1.3.20 and before allo ...)
-	TODO: check
+	NOT-FOR-US: PrestaShop module
 CVE-2024-28303 (Open Source Medicine Ordering System v1.0 was discovered to contain a  ...)
-	TODO: check
+	NOT-FOR-US: Open Source Medicine Ordering System
 CVE-2024-27998 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-27997 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-27996 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-21677 (This High severity Path Traversal vulnerability was introduced in vers ...)
-	TODO: check
+	NOT-FOR-US: Confluence Data Center
 CVE-2024-1401 (The Profile Box Shortcode And Widget WordPress plugin before 1.2.1 doe ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-1146 (Cross-Site Scripting vulnerability in Devklan's Alma Blog that affects ...)
-	TODO: check
+	NOT-FOR-US: Devklan's Alma Blog
 CVE-2024-1145 (User enumeration vulnerability in Devklan's Alma Blog that affects ver ...)
-	TODO: check
+	NOT-FOR-US: Devklan's Alma Blog
 CVE-2024-1144 (Improper access control vulnerability in Devklan's Alma Blog that affe ...)
-	TODO: check
+	NOT-FOR-US: Devklan's Alma Blog
 CVE-2024-0450 (An issue was found in the CPython `zipfile` module affecting versions  ...)
 	TODO: check
 CVE-2023-6597 (An issue was found in the CPython `tempfile.TemporaryDirectory` class  ...)
@@ -149,23 +149,23 @@ CVE-2023-50966 (erlang-jose (aka JOSE for Erlang and Elixir) through 1.11.6 allo
 CVE-2023-4426
 	REJECTED
 CVE-2023-44092 (Improper Neutralization of Special Elements used in an OS Command ('OS ...)
-	TODO: check
+	NOT-FOR-US: Pandora FMS
 CVE-2023-44091 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: Pandora FMS
 CVE-2023-44090 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: Pandora FMS
 CVE-2023-42920 (Claris International has fixed a dylib hijacking vulnerability in the  ...)
-	TODO: check
+	NOT-FOR-US: Claris International
 CVE-2023-41793 (: Path Traversal vulnerability in Pandora FMS on all allows Path Trave ...)
-	TODO: check
+	NOT-FOR-US: Pandora FMS
 CVE-2023-40279 (An issue was discovered in OpenClinic GA 5.247.01. An attacker can per ...)
-	TODO: check
+	NOT-FOR-US: OpenClinic GA
 CVE-2023-40278 (An issue was discovered in OpenClinic GA 5.247.01. An Information Disc ...)
-	TODO: check
+	NOT-FOR-US: OpenClinic GA
 CVE-2023-32260 (Misinterpretation of Input vulnerability in OpenText\u2122 Service Man ...)
-	TODO: check
+	NOT-FOR-US: OpenText
 CVE-2023-32259 (Insufficient Granularity of Access Control vulnerability in OpenText\u ...)
-	TODO: check
+	NOT-FOR-US: OpenText
 CVE-2024-27439 (An error in the evaluation of the fetch metadata headers could allow a ...)
 	NOT-FOR-US: Apache Wicket
 CVE-2024-24683 (Improper Input Validation vulnerability in Apache Hop Engine.This issu ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ff60b87c5bdbec4087cb18f2706aeb404cf8ea52

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ff60b87c5bdbec4087cb18f2706aeb404cf8ea52
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240319/820f00ff/attachment-0001.htm>
