[Git][security-tracker-team/security-tracker][master] Process some NFUs

Fri May 31 20:47:15 BST 2024


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6a578cd8 by Salvatore Bonaccorso at 2024-05-31T21:45:20+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19,13 +19,13 @@ CVE-2024-4376 (The Premium Addons for Elementor plugin for WordPress is vulnerab
 CVE-2024-4205 (The Premium Addons for Elementor plugin for WordPress is vulnerable to ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-37032 (Ollama before 0.1.34 does not validate the format of the digest (sha25 ...)
-	TODO: check
+	NOT-FOR-US: Ollama
 CVE-2024-37018 (The OpenDaylight 0.15.3 controller allows topology poisoning via API r ...)
-	TODO: check
+	NOT-FOR-US: OpenDaylight
 CVE-2024-37017 (asdcplib (aka AS-DCP Lib) 2.13.1 has a heap-based buffer over-read in  ...)
-	TODO: check
+	NOT-FOR-US: asdcplib (aka AS-DCP Lib)
 CVE-2024-36246 (Missing authorization vulnerability exists in Unifier and Unifier Cast ...)
-	TODO: check
+	NOT-FOR-US: Unifier and Unifier Cast
 CVE-2024-36119 (Statamic is a, Laravel + Git powered CMS designed for building website ...)
 	TODO: check
 CVE-2024-32850 (Improper neutralization of special elements used in a command ('Comman ...)
@@ -101,7 +101,7 @@ CVE-2024-4330 (A path traversal vulnerability was identified in the parisneo/lol
 CVE-2024-3924 (A code injection vulnerability exists in the huggingface/text-generati ...)
 	TODO: check
 CVE-2024-3584 (qdrant/qdrant version 1.9.0-dev is vulnerable to path traversal due to ...)
-	TODO: check
+	NOT-FOR-US: qdrant
 CVE-2024-3583 (The Simple Like Page Plugin plugin for WordPress is vulnerable to Stor ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-3301 (An unsafe .NET object deserialization vulnerability in DELMIA Apriso R ...)
@@ -113,45 +113,45 @@ CVE-2024-36118 (MeterSphere is a test management and interface testing tool. In
 CVE-2024-35504 (A cross-site scripting (XSS) vulnerability in the login page of FineSo ...)
 	TODO: check
 CVE-2024-35469 (A SQL injection vulnerability in /hrm/user/ in SourceCodester Human Re ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Human Resource Management System
 CVE-2024-35468 (A SQL injection vulnerability in /hrm/index.php in SourceCodester Huma ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Human Resource Management System
 CVE-2024-35433 (ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Incorrect Access Contro ...)
-	TODO: check
+	NOT-FOR-US: ZKTeco ZKBio CVSecurity
 CVE-2024-35432 (ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Cross Site Scripting (X ...)
-	TODO: check
+	NOT-FOR-US: ZKTeco ZKBio CVSecurity
 CVE-2024-35431 (ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via ...)
-	TODO: check
+	NOT-FOR-US: ZKTeco ZKBio CVSecurity
 CVE-2024-35430 (In ZKTeco ZKBio CVSecurity v6.1.1 an authenticated user can bypass pas ...)
-	TODO: check
+	NOT-FOR-US: ZKTeco ZKBio CVSecurity
 CVE-2024-35429 (ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via ...)
-	TODO: check
+	NOT-FOR-US: ZKTeco ZKBio CVSecurity
 CVE-2024-35428 (ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via ...)
-	TODO: check
+	NOT-FOR-US: ZKTeco ZKBio CVSecurity
 CVE-2024-35359 (A vulnerability has been discovered in Di\xf1o Physics School Assistan ...)
-	TODO: check
+	NOT-FOR-US: Dino Physics School Assistant
 CVE-2024-35358 (A vulnerability has been discovered in Di\xf1o Physics School Assistan ...)
-	TODO: check
+	NOT-FOR-US: Dino Physics School Assistant
 CVE-2024-35357 (A vulnerability has been discovered in Di\xf1o Physics School Assistan ...)
-	TODO: check
+	NOT-FOR-US: Dino Physics School Assistant
 CVE-2024-35356 (A vulnerability has been discovered in Di\xf1o Physics School Assistan ...)
-	TODO: check
+	NOT-FOR-US: Dino Physics School Assistant
 CVE-2024-35355 (A vulnerability has been discovered in Di\xf1o Physics School Assistan ...)
-	TODO: check
+	NOT-FOR-US: Dino Physics School Assistant
 CVE-2024-35354 (A vulnerability has been discovered in Di\xf1o Physics School Assistan ...)
-	TODO: check
+	NOT-FOR-US: Dino Physics School Assistant
 CVE-2024-35353 (A vulnerability has been discovered in Di\xf1o Physics School Assistan ...)
-	TODO: check
+	NOT-FOR-US: Dino Physics School Assistant
 CVE-2024-35352 (A vulnerability has been discovered in Di\xf1o Physics School Assistan ...)
-	TODO: check
+	NOT-FOR-US: Dino Physics School Assistant
 CVE-2024-35351 (A vulnerability has been discovered in Di\xf1o Physics School Assistan ...)
-	TODO: check
+	NOT-FOR-US: Dino Physics School Assistant
 CVE-2024-35350 (A vulnerability has been discovered in Di\xf1o Physics School Assistan ...)
-	TODO: check
+	NOT-FOR-US: Dino Physics School Assistant
 CVE-2024-35349 (A vulnerability has been discovered in Di\xf1o Physics School Assistan ...)
-	TODO: check
+	NOT-FOR-US: Dino Physics School Assistant
 CVE-2024-35345 (A vulnerability has been discovered in Di\xf1o Physics School Assistan ...)
-	TODO: check
+	NOT-FOR-US: Dino Physics School Assistant
 CVE-2024-35228 (Wagtail is an open source content management system built on Django. D ...)
 	TODO: check
 CVE-2024-35189 (Fides is an open-source privacy engineering platform. The Fides webser ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6a578cd8d53073a4d35ce8aa9dcd6e38b1c1681f

-- 
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6a578cd8d53073a4d35ce8aa9dcd6e38b1c1681f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240531/da9170fb/attachment.htm>
