[Git][security-tracker-team/security-tracker][master] Process more NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ec18bad2 by Salvatore Bonaccorso at 2025-02-20T10:05:36+01:00
Process more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -41,15 +41,15 @@ CVE-2025-1223 (An attacker can gain application privileges in order to perform l
 CVE-2025-1222 (An attacker can gain application privileges in order to perform limite ...)
 	NOT-FOR-US: Citrix
 CVE-2025-0112 (A problem with a detection mechanism in the Palo Alto Networks Cortex  ...)
-	TODO: check
+	NOT-FOR-US: Palo Alto Networks
 CVE-2024-6697 (The product does not handle or incorrectly handles when it has insuffi ...)
-	TODO: check
+	NOT-FOR-US: Hitachi
 CVE-2024-6696 (The product implements access controls via a policy or other feature w ...)
-	TODO: check
+	NOT-FOR-US: Hitachi
 CVE-2024-5706 (The product receives input from an upstream component, but it does not ...)
-	TODO: check
+	NOT-FOR-US: Hitachi
 CVE-2024-5705 (The product performs an authorization check when an actor attempts to  ...)
-	TODO: check
+	NOT-FOR-US: Hitachi
 CVE-2024-49782 (IBM OpenPages with Watson 8.3 and 9.0    could allow a remote attacker ...)
 	NOT-FOR-US: IBM
 CVE-2024-49780 (IBM OpenPages with Watson 8.3 and 9.0  IBM OpenPages could allow a rem ...)
@@ -59,15 +59,15 @@ CVE-2024-49355 (IBM OpenPages with Watson 8.3 and 9.0may write improperly neutra
 CVE-2024-43196 (IBM OpenPages with Watson 8.3 and 9.0  application could allow an auth ...)
 	NOT-FOR-US: IBM
 CVE-2024-37363 (The product does not perform an authorization check when an actor atte ...)
-	TODO: check
+	NOT-FOR-US: Hitachi
 CVE-2024-37362 (The product transmits or stores authentication credentials, but it use ...)
-	TODO: check
+	NOT-FOR-US: Hitachi
 CVE-2024-37361 (The application deserializes untrusted data without sufficiently verif ...)
-	TODO: check
+	NOT-FOR-US: Hitachi
 CVE-2024-37360 (Hitachi Vantara Pentaho Business Analytics Server - Improper Neutraliz ...)
-	TODO: check
+	NOT-FOR-US: Hitachi
 CVE-2024-37359 (The web server receives a URL or similar request from an upstream comp ...)
-	TODO: check
+	NOT-FOR-US: Hitachi
 CVE-2024-13445 (The Elementor Website Builder \u2013 More Than Just a Page Builder plu ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-13155 (The Unlimited Elements For Elementor plugin for WordPress is vulnerabl ...)
@@ -77,15 +77,15 @@ CVE-2024-12284 (Authenticated privilege escalation inNetScaler Console and NetSc
 CVE-2024-10339
 	REJECTED
 CVE-2023-51305 (PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple Stor ...)
-	TODO: check
+	NOT-FOR-US: PHPJabbers Car Park Booking System
 CVE-2023-51303 (PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML  ...)
-	TODO: check
+	NOT-FOR-US: PHPJabbers Event Ticketing System
 CVE-2023-51302 (PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vu ...)
-	TODO: check
+	NOT-FOR-US: PHPJabbers Hotel Booking System
 CVE-2023-51301 (A lack of rate limiting in the "Login Section, Forgot Email" feature o ...)
-	TODO: check
+	NOT-FOR-US: PHPJabbers Hotel Booking System
 CVE-2023-51300 (PHPJabbers Hotel Booking System v4.0 is vulnerable to Cross-Site Scrip ...)
-	TODO: check
+	NOT-FOR-US: PHPJabbers Hotel Booking System
 CVE-2025-27089 (Directus is a real-time API and App dashboard for managing SQL databas ...)
 	NOT-FOR-US: Directus
 CVE-2025-24965 (crun is an open source OCI Container Runtime fully written in C. In af ...)
@@ -120,7 +120,7 @@ CVE-2025-1075 (Insertion of Sensitive Information into Log File in Checkmk GmbH'
 CVE-2025-1024 (A vulnerability exists in ChurchCRM 5.13.0that allows an attacker to e ...)
 	NOT-FOR-US: ChurchCRM
 CVE-2025-1007 (In OpenVSX version v0.9.0 to v0.20.0, the  /user/namespace/{namespace} ...)
-	TODO: check
+	NOT-FOR-US: OpenVSX
 CVE-2025-1006 (Use after free in Network in Google Chrome prior to 133.0.6943.126 all ...)
 	- chromium <unfixed>
 	[bullseye] - chromium <end-of-life> (see #1061268)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ec18bad2e421b1b33d8d01b13494f78e0b3780a5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ec18bad2e421b1b33d8d01b13494f78e0b3780a5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250220/91fc2a49/attachment.htm>