[Git][security-tracker-team/security-tracker][master] Process more NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Sep 25 09:26:37 BST 2024



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
016e3a66 by Salvatore Bonaccorso at 2024-09-25T10:26:19+02:00
Process more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -81,23 +81,23 @@ CVE-2024-6590 (The Spreadsheet Integration \u2013 Automate Google Sheets With Wo
 CVE-2024-47303 (Improper Neutralization of Input During Web Page Generation (XSS or 'C ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-46612 (IceCMS v3.4.7 and before was discovered to contain a hardcoded JWT key ...)
-	TODO: check
+	NOT-FOR-US: IceCMS
 CVE-2024-45373 (Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can chang ...)
-	TODO: check
+	NOT-FOR-US: ProGauge MAGLINK LX4 CONSOLE
 CVE-2024-45066 (A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP ...)
-	TODO: check
+	NOT-FOR-US: ProGauge MAGLINK LX CONSOLE
 CVE-2024-43693 (A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE  U ...)
-	TODO: check
+	NOT-FOR-US: ProGauge MAGLINK LX CONSOLE
 CVE-2024-43692 (An attacker can directly request the ProGauge MAGLINK LX CONSOLE  reso ...)
-	TODO: check
+	NOT-FOR-US: ProGauge MAGLINK LX CONSOLE
 CVE-2024-43423 (The web application for ProGauge MAGLINK LX4 CONSOLE contains an  admi ...)
-	TODO: check
+	NOT-FOR-US: ProGauge MAGLINK LX CONSOLE
 CVE-2024-41725 (ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on inpu ...)
-	TODO: check
+	NOT-FOR-US: ProGauge MAGLINK LX CONSOLE
 CVE-2024-40761 (Inadequate Encryption Strength vulnerability in Apache Answer.  This i ...)
-	TODO: check
+	NOT-FOR-US: Apache Answer
 CVE-2024-3866 (The Ninja Forms Contact Form plugin for WordPress is vulnerable to Ref ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-38809
 	- libspring-java <unfixed> (unimportant)
 	NOTE: https://spring.io/security/cve-2024-38809



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/016e3a66db6946664f2e799270be7e1749a03f19

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/016e3a66db6946664f2e799270be7e1749a03f19
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240925/53006f85/attachment.htm>


More information about the debian-security-tracker-commits mailing list