[Git][security-tracker-team/security-tracker][master] Process more NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Mar 22 08:28:18 GMT 2024
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
8d06da28 by Salvatore Bonaccorso at 2024-03-22T09:27:50+01:00
Process more NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -87,13 +87,13 @@ CVE-2024-28441 (File Upload vulnerability in magicflue v.7.0 and before allows a
CVE-2024-28171 (It is possible to perform a path traversal attack and write outside of ...)
NOT-FOR-US: Delta Electronics
CVE-2024-28119 (Grav is an open-source, flat-file content management system. Prior to ...)
- TODO: check
+ NOT-FOR-US: Grav CMS
CVE-2024-28118 (Grav is an open-source, flat-file content management system. Prior to ...)
- TODO: check
+ NOT-FOR-US: Grav CMS
CVE-2024-28117 (Grav is an open-source, flat-file content management system. Prior to ...)
- TODO: check
+ NOT-FOR-US: Grav CMS
CVE-2024-28116 (Grav is an open-source, flat-file content management system. Grav CMS ...)
- TODO: check
+ NOT-FOR-US: Grav CMS
CVE-2024-28045 (Improper neutralization of input within the affected product could lea ...)
NOT-FOR-US: Delta Electronics
CVE-2024-28040 (SQL injection vulnerability exists in GetDIAE_astListParameters.)
@@ -101,7 +101,7 @@ CVE-2024-28040 (SQL injection vulnerability exists in GetDIAE_astListParameters.
CVE-2024-28029 (Privileges are not fully verified server-side, which can be abused by ...)
NOT-FOR-US: Delta Electronics
CVE-2024-27921 (Grav is an open-source, flat-file content management system. A file up ...)
- TODO: check
+ NOT-FOR-US: Grav CMS
CVE-2024-26557 (Codiad v2.8.4 allows reflected XSS via the components/market/dialog.ph ...)
TODO: check
CVE-2024-25937 (SQL injection vulnerability exists in the script DIAE_tagHandler.ashx.)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8d06da2838a9e9b385e671ad61f0e5b99c5e7222
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8d06da2838a9e9b385e671ad61f0e5b99c5e7222
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240322/62066626/attachment.htm>
More information about the debian-security-tracker-commits
mailing list