[Git][security-tracker-team/security-tracker][master] Process some more NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a211a493 by Salvatore Bonaccorso at 2024-11-27T21:41:36+01:00
Process some more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -15,17 +15,17 @@ CVE-2024-53264 (bunkerweb is an Open-source and next-generation Web Application
 CVE-2024-53254
 	REJECTED
 CVE-2024-52951 (Stored Cross-Site Scripting in the Access Request History in Omada Ide ...)
-	TODO: check
+	NOT-FOR-US: Omada
 CVE-2024-52323 (ZohocorpManageEngine Analytics Plus versions below 6100 are vulnerable ...)
-	TODO: check
+	NOT-FOR-US: Zoho ManageEngine
 CVE-2024-51228 (An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX- ...)
-	TODO: check
+	NOT-FOR-US: TOTOLINK
 CVE-2024-47181 (Contiki-NG is an open-source, cross-platform operating system for IoT  ...)
-	TODO: check
+	NOT-FOR-US: Contiki-NG
 CVE-2024-46055 (OpenVidReview 1.0 is vulnerable to Cross Site Scripting (XSS) in revie ...)
-	TODO: check
+	NOT-FOR-US: OpenVidReview
 CVE-2024-46054 (OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /uplo ...)
-	TODO: check
+	NOT-FOR-US: OpenVidReview
 CVE-2024-42333 (The researcher is showing that it is possible to leak a small amount o ...)
 	TODO: check
 CVE-2024-42332 (The researcher is showing that due to the way the SNMP trap log is par ...)
@@ -43,33 +43,33 @@ CVE-2024-42327 (A non-admin user account on the Zabbix frontend with the default
 CVE-2024-42326 (There was discovered a use after free bug in browser.c in the es_brows ...)
 	TODO: check
 CVE-2024-41126 (Contiki-NG is an open-source, cross-platform operating system for IoT  ...)
-	TODO: check
+	NOT-FOR-US: Contiki-NG
 CVE-2024-41125 (Contiki-NG is an open-source, cross-platform operating system for IoT  ...)
-	TODO: check
+	NOT-FOR-US: Contiki-NG
 CVE-2024-37816 (Quectel EC25-EUX EC25EUXGAR08A05M1G was discovered to contain a stack  ...)
-	TODO: check
+	NOT-FOR-US: Quectel
 CVE-2024-36468 (The reported vulnerability is a stack buffer overflow in the zbx_snmp_ ...)
 	TODO: check
 CVE-2024-36464 (When exporting media types, the password is exported in the YAML in pl ...)
 	TODO: check
 CVE-2024-31976 (EnGenius EWS356-FIR 1.1.30 and earlier devices allow a remote attacker ...)
-	TODO: check
+	NOT-FOR-US: EnGenius EWS356-FIR
 CVE-2024-21703 (This Medium severity Security Misconfiguration vulnerability was intro ...)
-	TODO: check
+	NOT-FOR-US: Atlassian
 CVE-2024-11862 (Non constant time cryptographic operation in Devolutions.XTS.NET 2024. ...)
-	TODO: check
+	NOT-FOR-US: Devolutions
 CVE-2024-11860 (A vulnerability classified as critical has been found in SourceCodeste ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Best House Rental Management System
 CVE-2024-11667 (A directory traversal vulnerability in the web management interface of ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2024-11160
 	REJECTED
 CVE-2024-11025 (An authenticated attacker with low privileges may use a SQL Injection  ...)
 	TODO: check
 CVE-2024-11009 (The Internal Linking for SEO traffic & Ranking \u2013 Auto internal li ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-10521 (The WordPress Contact Forms by Cimatti plugin for WordPress is vulnera ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-54003 (Jenkins Simple Queue Plugin 1.4.4 and earlier does not escape the view ...)
 	NOT-FOR-US: Jenkins plugin
 CVE-2024-54004 (Jenkins Filesystem List Parameter Plugin 0.0.14 and earlier does not r ...)
@@ -133546,7 +133546,7 @@ CVE-2023-29003 (SvelteKit is a web development framework. The SvelteKit framewor
 CVE-2023-29002 (Cilium is a networking, observability, and security solution with an e ...)
 	- cilium <itp> (bug #858303)
 CVE-2023-29001 (Contiki-NG is an open-source, cross-platform operating system for IoT  ...)
-	TODO: check
+	NOT-FOR-US: Contiki-NG
 CVE-2023-29000 (The Nextcloud Desktop Client is a tool to synchronize files from Nextc ...)
 	- nextcloud-desktop 3.7.0-1
 	[bullseye] - nextcloud-desktop <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a211a493878d179d9ea96a07337ca00dc86e479c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a211a493878d179d9ea96a07337ca00dc86e479c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241127/347eb3c5/attachment.htm>