[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e164a6d7 by Salvatore Bonaccorso at 2025-01-01T07:49:55+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -31,11 +31,11 @@ CVE-2024-13043 (Panda Security Dome Link Following Local Privilege Escalation Vu
 CVE-2024-13042 (A vulnerability was found in Tsinghua Unigroup Electronic Archives Man ...)
 	NOT-FOR-US: Tsinghua Unigroup Electronic Archives Management System
 CVE-2024-13040 (The QOCA aim from Quanta Computer has an Authorization Bypass Through  ...)
-	TODO: check
+	NOT-FOR-US: OCA aim from Quanta Computer
 CVE-2024-12839 (The login mechanism via device authentication of CGFIDO from Changing  ...)
-	TODO: check
+	NOT-FOR-US: GFIDO from Changing Information Technology
 CVE-2024-12838 (The passwordless login mechanism in CGFIDO from Changing Information T ...)
-	TODO: check
+	NOT-FOR-US: GFIDO from Changing Information Technology
 CVE-2024-12753 (Foxit PDF Reader Link Following Local Privilege Escalation Vulnerabili ...)
 	NOT-FOR-US: Foxit
 CVE-2024-12752 (Foxit PDF Reader AcroForm Memory Corruption Remote Code Execution Vuln ...)
@@ -91,7 +91,7 @@ CVE-2024-47919 (Tiki Wiki CMS \u2013 CWE-78: Improper Neutralization of Special
 CVE-2024-47918 (Tiki Wiki CMS \u2013 CWE-80: Improper Neutralization of Script-Related ...)
 	- tikiwiki <removed>
 CVE-2024-47917 (CWE-79: Improper Neutralization of Input During Web Page Generation (' ...)
-	TODO: check
+	NOT-FOR-US: Mobotix
 CVE-2024-46542 (Veritas / Arctera Data Insight before 7.1.1 allows Application Adminis ...)
 	NOT-FOR-US: Veritas
 CVE-2024-22063 (The ZENIC ONE R58 products by ZTE Corporation have a command injection ...)
@@ -109,7 +109,7 @@ CVE-2024-12828 (Webmin CGI Command Injection Remote Code Execution Vulnerability
 CVE-2024-12754 (AnyDesk Link Following Information Disclosure Vulnerability. This vuln ...)
 	NOT-FOR-US: AnyDesk
 CVE-2024-10044 (A Server-Side Request Forgery (SSRF) vulnerability exists in the POST  ...)
-	TODO: check
+	NOT-FOR-US: lm-sys/fastchat
 CVE-2024-13039 (A vulnerability was found in code-projects Simple Chat System 1.0. It  ...)
 	NOT-FOR-US: code-projects Simple Chat System
 CVE-2024-13038 (A vulnerability was found in CodeAstro Simple Loan Management System 1 ...)
@@ -1420,7 +1420,7 @@ CVE-2024-56510 (@marp-team/marp-core is the core for Marp, which is the ecosyste
 CVE-2024-56361 (LGSL (Live Game Server List) provides online status for games. Before  ...)
 	NOT-FOR-US: LGSL (Live Game Server List)
 CVE-2024-55950 (Tabby (formerly Terminus) is a highly configurable terminal emulator.  ...)
-	TODO: check
+	NOT-FOR-US: Tabby (formerly Terminus, but not the same as src:terminus)
 CVE-2024-53850 (The Addressing GLPI plugin enables you to create IP reports for visual ...)
 	NOT-FOR-US: Addressing GLPI plugin
 CVE-2024-45805 (OpenCTI is an open-source cyber threat intelligence platform. Before 6 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e164a6d7c587b39bf37b0bfaf6533b84ae0beb6c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e164a6d7c587b39bf37b0bfaf6533b84ae0beb6c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250101/8858c459/attachment.htm>