[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Sep 11 21:38:21 BST 2024



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f7a49d0e by Salvatore Bonaccorso at 2024-09-11T22:37:59+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -31,13 +31,13 @@ CVE-2024-7609 (Improper Limitation of a Pathname to a Restricted Directory ('Pat
 CVE-2024-7312 (URL Redirection to Untrusted Site ('Open Redirect') vulnerability in P ...)
 	NOT-FOR-US: Payara Platform Payara Server
 CVE-2024-6091 (A vulnerability in significant-gravitas/autogpt version 0.5.1 allows a ...)
-	TODO: check
+	NOT-FOR-US: significant-gravitas/autogpt
 CVE-2024-5760 (The Samsung Universal Print Driver for Windows is potentially vulnerab ...)
 	NOT-FOR-US: Samsung
 CVE-2024-5416 (The Elementor Website Builder \u2013 More than Just a Page Builder plu ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-4465 (An access control vulnerability was discovered in the Reports section  ...)
-	TODO: check
+	NOT-FOR-US: Guardian/CMC
 CVE-2024-45790 (This vulnerability exists in Reedos aiM-Star version 2.0.1 due to miss ...)
 	NOT-FOR-US: Reedos aiM-Star
 CVE-2024-45789 (This vulnerability exists in Reedos aiM-Star version 2.0.1 due to impr ...)
@@ -49,29 +49,29 @@ CVE-2024-45787 (This vulnerability exists in Reedos aiM-Star version 2.0.1 due t
 CVE-2024-45786 (This vulnerability exists in Reedos aiM-Star version 2.0.1 due to impr ...)
 	NOT-FOR-US: Reedos aiM-Star
 CVE-2024-45327 (An improper authorization vulnerability [CWE-285] in FortiSOAR version ...)
-	TODO: check
+	NOT-FOR-US: FortiGuard
 CVE-2024-44851 (A stored cross-site scripting (XSS) vulnerability in the Discussion se ...)
-	TODO: check
+	NOT-FOR-US: Perfex CRM
 CVE-2024-44577 (RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injec ...)
-	TODO: check
+	NOT-FOR-US: Relyum RELY-PCIe
 CVE-2024-44575 (RELY-PCIe v22.2.1 to v23.1.0 does not set the Secure attribute for sen ...)
-	TODO: check
+	NOT-FOR-US: Relyum RELY-PCIe
 CVE-2024-44574 (RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injec ...)
-	TODO: check
+	NOT-FOR-US: Relyum RELY-PCIe
 CVE-2024-44573 (A stored cross-site scripting (XSS) vulnerability in the VLAN configur ...)
-	TODO: check
+	NOT-FOR-US: Relyum RELY-PCIe
 CVE-2024-44572 (RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injec ...)
-	TODO: check
+	NOT-FOR-US: Relyum RELY-PCIe
 CVE-2024-44571 (RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain incorrect acces ...)
-	TODO: check
+	NOT-FOR-US: Relyum RELY-PCIe
 CVE-2024-44570 (RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a code injectio ...)
-	TODO: check
+	NOT-FOR-US: Relyum RELY-PCIe
 CVE-2024-44541 (evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL I ...)
-	TODO: check
+	NOT-FOR-US: evilnapsis Inventio Lite
 CVE-2024-44466 (COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in functi ...)
-	TODO: check
+	NOT-FOR-US: COMFAST CF-XR11
 CVE-2024-43793 (Halo is an open source website building tool. A security vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Halo
 CVE-2024-42760 (SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote at ...)
 	TODO: check
 CVE-2024-41868 (Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f7a49d0e581d4b67cc13c386d80d58848be79237

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f7a49d0e581d4b67cc13c386d80d58848be79237
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240911/355ca62d/attachment.htm>


More information about the debian-security-tracker-commits mailing list