[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
93f05c72 by Salvatore Bonaccorso at 2024-09-03T10:29:50+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,27 +1,27 @@
 CVE-2024-8380 (A vulnerability was found in SourceCodester Contact Manager with Expor ...)
-	TODO: check
+	NOT-FOR-US: SourceCodester Contact Manager with Export to VCF
 CVE-2024-7261 (The improper neutralization of special elements in the parameter "host ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2024-7203 (A post-authentication command injection vulnerability in Zyxel ATP ser ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2024-6343 (A buffer overflow vulnerability in the CGI program of Zyxel ATP series ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2024-5412 (A buffer overflow vulnerability in the library "libclinkc" of the Zyxe ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2024-45623 (D-Link DAP-2310 Hardware A Firmware 1.16RC028 allows remote attackers  ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2024-42061 (A reflected cross-site scripting (XSS) vulnerability in the CGI progra ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2024-42060 (A post-authentication command injection vulnerability in Zyxel ATP ser ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2024-42059 (A post-authentication command injection vulnerability in Zyxel ATP ser ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2024-42058 (A null pointer dereference vulnerability in Zyxel ATP series firmware  ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2024-42057 (A command injection vulnerability in the IPSec VPN feature of Zyxel AT ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2024-37136 (Dell Path to PowerProtect, versions 1.1, 1.2, contains an Exposure of  ...)
-	TODO: check
+	NOT-FOR-US: Dell
 CVE-2024-45620
 	- opensc <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2309289
@@ -87,7 +87,7 @@ CVE-2024-43797 (audiobookshelf is a self-hosted audiobook and podcast server. A
 CVE-2024-43792 (Halo is an open source website building tool. A security vulnerability ...)
 	NOT-FOR-US: Halo
 CVE-2024-42471 (actions/artifact is the GitHub ToolKit for developing GitHub Actions.  ...)
-	TODO: check
+	NOT-FOR-US: actions/artifact GitHub ToolKit
 CVE-2024-38858 (Improper neutralization of input in Checkmk before version 2.3.0p14 al ...)
 	- check-mk <removed>
 CVE-2024-38402 (Memory corruption while processing IOCTL call for getting group info.)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/93f05c726c1b69af587b5a932d5ee6baaaff695f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/93f05c726c1b69af587b5a932d5ee6baaaff695f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240903/7849e716/attachment.htm>