[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8aae1276 by Moritz Muehlenhoff at 2024-11-18T11:18:31+01:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
 CVE-2024-5030 (The CM Table Of Contents  WordPress plugin before 1.2.3 does not have  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-52947 (A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.2 ...)
 	- lemonldap-ng 2.20.1+ds-1
 	NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/3257
@@ -21,27 +21,27 @@ CVE-2024-52940 (AnyDesk through 8.1.0 on Windows, when Allow Direct Connections
 CVE-2024-52926 (Delinea Privilege Manager before 12.0.2 mishandles the security of the ...)
 	NOT-FOR-US: Delinea
 CVE-2024-52922 (In Bitcoin Core before 25.1, an attacker can cause a node to not downl ...)
-	TODO: check
+	- bitcoin <removed>
 CVE-2024-52921 (In Bitcoin Core before 25.0, a peer can affect the download state of o ...)
-	TODO: check
+	- bitcoin <removed>
 CVE-2024-52920 (Bitcoin Core before 0.20.0 allows remote attackers to cause a denial o ...)
-	TODO: check
+	- bitcoin <removed>
 CVE-2024-52919 (Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and  ...)
-	TODO: check
+	- bitcoin <removed>
 CVE-2024-52918 (Bitcoin-Qt in Bitcoin Core before 0.20.0 allows remote attackers to ca ...)
-	TODO: check
+	- bitcoin <removed>
 CVE-2024-52917 (Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allo ...)
-	TODO: check
+	- bitcoin <removed>
 CVE-2024-52916 (Bitcoin Core before 0.15.0 allows a denial of service (OOM kill of a d ...)
-	TODO: check
+	- bitcoin <removed>
 CVE-2024-52915 (Bitcoin Core before 0.20.0 allows remote attackers to cause a denial o ...)
-	TODO: check
+	- bitcoin <removed>
 CVE-2024-52914 (In Bitcoin Core before 0.18.0, a node could be stalled for hours when  ...)
-	TODO: check
+	- bitcoin <removed>
 CVE-2024-52913 (In Bitcoin Core before 0.21.0, an attacker could prevent a node from s ...)
-	TODO: check
+	- bitcoin <removed>
 CVE-2024-52912 (Bitcoin Core before 0.21.0 allows a network split that is resultant fr ...)
-	TODO: check
+	- bitcoin <removed>
 CVE-2024-49574 (Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable  ...)
 	TODO: check
 CVE-2024-43704 (Software installed and run as a non-privileged user may conduct improp ...)
@@ -51,27 +51,27 @@ CVE-2024-38828 (Spring MVC controller methods with an @RequestBody byte[]method
 CVE-2024-22067 (ZTE NH8091 product has an improper permission control vulnerability. D ...)
 	TODO: check
 CVE-2024-11315 (The DVC from TRCore has a Path Traversal vulnerability and does not re ...)
-	TODO: check
+	NOT-FOR-US: TRCore DVC
 CVE-2024-11314 (The DVC from TRCore has a Path Traversal vulnerability and does not re ...)
-	TODO: check
+	NOT-FOR-US: TRCore DVC
 CVE-2024-11313 (The DVC from TRCore has a Path Traversal vulnerability and does not re ...)
-	TODO: check
+	NOT-FOR-US: TRCore DVC
 CVE-2024-11312 (The DVC from TRCore has a Path Traversal vulnerability and does not re ...)
-	TODO: check
+	NOT-FOR-US: TRCore DVC
 CVE-2024-11311 (The DVC from TRCore has a Path Traversal vulnerability and does not re ...)
-	TODO: check
+	NOT-FOR-US: TRCore DVC
 CVE-2024-11310 (The DVC from TRCore has a Path Traversal vulnerability, allowing unaut ...)
-	TODO: check
+	NOT-FOR-US: TRCore DVC
 CVE-2024-11309 (The DVC from TRCore has a Path Traversal vulnerability, allowing unaut ...)
-	TODO: check
+	NOT-FOR-US: TRCore DVC
 CVE-2024-11308 (The DVC from TRCore encrypts files using a hardcoded key. Attackers ca ...)
-	TODO: check
+	NOT-FOR-US: TRCore DVC
 CVE-2024-11306 (A vulnerability, which was classified as critical, has been found in A ...)
 	TODO: check
 CVE-2024-11305 (A vulnerability classified as critical was found in Altenergy Power Co ...)
 	TODO: check
 CVE-2019-25220 (Bitcoin Core before 24.0.1 allows remote attackers to cause a denial o ...)
-	TODO: check
+	- bitcoin <removed>
 CVE-2015-20111 (miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other ...)
 	TODO: check
 CVE-2024-52876 (Holy Stone Remote ID Module HSRID01, firmware distributed with the Dro ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8aae1276179e3af541becd0f2a1322e523ea6fad

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8aae1276179e3af541becd0f2a1322e523ea6fad
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241118/308cbb73/attachment-0001.htm>