[Git][security-tracker-team/security-tracker][master] Process more NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Sep 26 09:34:49 BST 2024



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
555bfda1 by Salvatore Bonaccorso at 2024-09-26T10:34:40+02:00
Process more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -23,35 +23,35 @@ CVE-2024-47330 (Missing Authorization vulnerability in Supsystic Slider by Supsy
 CVE-2024-47083 (Power Platform Terraform Provider allows managing environments and oth ...)
 	TODO: check
 CVE-2024-47045 (Privilege chaining issue exists in the installer of e-Tax software(com ...)
-	TODO: check
+	NOT-FOR-US: installer of e-Tax software
 CVE-2024-45836 (Cross-site scripting vulnerability exists in the web management page o ...)
-	TODO: check
+	NOT-FOR-US: PLANEX COMMUNICATIONS network cameras
 CVE-2024-45372 (MZK-DP300N firmware versions 1.04 and earlier contains a cross-site re ...)
-	TODO: check
+	NOT-FOR-US: MZK-DP300N firmware
 CVE-2024-0133 (NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: NVIDIA Container Toolkit
 CVE-2024-0132 (NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Ti ...)
-	TODO: check
+	NOT-FOR-US: NVIDIA Container Toolkit
 CVE-2023-52950 (Missing encryption of sensitive data vulnerability in login component  ...)
-	TODO: check
+	NOT-FOR-US: Synology
 CVE-2023-52949 (Missing authentication for critical function vulnerability in proxy se ...)
-	TODO: check
+	NOT-FOR-US: Synology
 CVE-2023-52948 (Missing encryption of sensitive data vulnerability in settings functio ...)
-	TODO: check
+	NOT-FOR-US: Synology
 CVE-2023-52947 (Missing authentication for critical function vulnerability in logout f ...)
-	TODO: check
+	NOT-FOR-US: Synology
 CVE-2023-52946 (Buffer copy without checking size of input ('Classic Buffer Overflow') ...)
-	TODO: check
+	NOT-FOR-US: Synology
 CVE-2022-49041 (Buffer copy without checking size of input ('Classic Buffer Overflow') ...)
-	TODO: check
+	NOT-FOR-US: Synology
 CVE-2022-49040 (Buffer copy without checking size of input ('Classic Buffer Overflow') ...)
-	TODO: check
+	NOT-FOR-US: Synology
 CVE-2022-49039 (Out-of-bounds write vulnerability in backup task management functional ...)
-	TODO: check
+	NOT-FOR-US: Synology
 CVE-2022-49038 (Inclusion of functionality from untrusted control sphere vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Synology
 CVE-2022-49037 (Insertion of sensitive information into log file vulnerability in prox ...)
-	TODO: check
+	NOT-FOR-US: Synology
 CVE-2024-8805 [BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability]
 	- bluez <unfixed>
 	NOTE: https://www.zerodayinitiative.com/advisories/ZDI-24-1229/



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/555bfda12a02c40e6e1a9e65741d95dbaade6ad5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/555bfda12a02c40e6e1a9e65741d95dbaade6ad5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240926/b2542f3f/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list