[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Sep 25 21:20:46 BST 2024



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1d653f3f by Salvatore Bonaccorso at 2024-09-25T22:20:24+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,41 +1,41 @@
 CVE-2024-9169 (The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-8996 (Unquoted Search Path or Element vulnerability in Grafana Agent (Flow m ...)
 	TODO: check
 CVE-2024-8975 (Unquoted Search Path or Element vulnerability in Grafana Alloy on Wind ...)
 	TODO: check
 CVE-2024-8858 (The Elementor Addons by Livemesh plugin for WordPress is vulnerable to ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-8546 (The ElementsKit Elementor addons plugin for WordPress is vulnerable to ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-8316 (In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), ...)
-	TODO: check
+	NOT-FOR-US: Telerik
 CVE-2024-7679 (In Progress Telerik UI for WinForms versions prior to 2024 Q3 (2024.3. ...)
-	TODO: check
+	NOT-FOR-US: Telerik
 CVE-2024-7576 (In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), ...)
-	TODO: check
+	NOT-FOR-US: Telerik
 CVE-2024-7575 (In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), ...)
-	TODO: check
+	NOT-FOR-US: Telerik
 CVE-2024-7481 (Improper verification of cryptographic signature during installation o ...)
-	TODO: check
+	NOT-FOR-US: TeamViewer
 CVE-2024-7479 (Improper verification of cryptographic signature during installation o ...)
-	TODO: check
+	NOT-FOR-US: TeamViewer
 CVE-2024-7421 (An information exposure in Devolutions Remote Desktop Manager 2024.2.2 ...)
-	TODO: check
+	NOT-FOR-US: Devolutions Remote Desktop Manager
 CVE-2024-6594 (Improper Handling of Exceptional Conditions vulnerability in the Watch ...)
-	TODO: check
+	NOT-FOR-US: WatchGuard Single Sign-On Client on Windows
 CVE-2024-6593 (Incorrect Authorization vulnerability in WatchGuard Authentication Gat ...)
-	TODO: check
+	NOT-FOR-US: WatchGuard
 CVE-2024-6592 (Incorrect Authorization vulnerability in the protocol communication be ...)
-	TODO: check
+	NOT-FOR-US: WatchGuard
 CVE-2024-6512 (Authorization bypass in thePAM access request approval mechanism in De ...)
-	TODO: check
+	NOT-FOR-US: Devolutions Server
 CVE-2024-4657 (Improper Neutralization of Input During Web Page Generation (XSS or 'C ...)
 	TODO: check
 CVE-2024-47315 (Cross-Site Request Forgery (CSRF) vulnerability in GiveWP.This issue a ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-47305 (Cross-Site Request Forgery (CSRF) vulnerability in Dnesscarkey Use Any ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2024-47082 (Strawberry GraphQL is a library for creating GraphQL APIs. Prior to ve ...)
 	TODO: check
 CVE-2024-47078 (Meshtastic is an open source, off-grid, decentralized, mesh network. M ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d653f3fc3eec4c477363261a2b6862d66de925b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d653f3fc3eec4c477363261a2b6862d66de925b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240925/36bd536c/attachment.htm>


More information about the debian-security-tracker-commits mailing list