[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ead816e4 by Moritz Muehlenhoff at 2026-11-04T19:30:43+01:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -398,9 +398,9 @@ CVE-2026-63417 (Logging Redactor is a Python library designed to redact sensitiv
 CVE-2026-63395 (isomorphic-git is a pure JavaScript implementation of Git for Node.js  ...)
 	NOT-FOR-US: isomorphic-git
 CVE-2026-63198 (traQ is a messenger application built for Digital Creators Club traP.  ...)
-	TODO: check
+	NOT-FOR-US: traQ
 CVE-2026-63197 (traQ is a messenger application built for Digital Creators Club traP.  ...)
-	TODO: check
+	NOT-FOR-US: traQ
 CVE-2026-62000 (Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-m ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-61497 (TinyUSB before 0.20.1 contains an integer underflow vulnerability in t ...)
@@ -448,7 +448,7 @@ CVE-2026-38601 (A hardcoded session secret key in codeskyblue gohttpserver throu
 CVE-2026-38600 (A Zip Slip vulnerability in the /upload endpoint of codeskyblue gohttp ...)
 	TODO: check
 CVE-2026-38595 (An issue in im3x Scriptables through v2-dev branch allows attackers to ...)
-	TODO: check
+	NOT-FOR-US: im3x Scriptables
 CVE-2026-28531
 	REJECTED
 CVE-2026-28336 (SolarWinds Dameware was found to be affected by a command injection vu ...)
@@ -468,11 +468,11 @@ CVE-2026-16511 (Two RTIO syscall verifiers, in subsys/rtio/rtio_syscalls.c (subs
 CVE-2026-13594 (Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions  ...)
 	NOT-FOR-US: Zoho
 CVE-2026-121818 (Herowatch Mini developed by About Time Technologies has a system signi ...)
-	TODO: check
+	NOT-FOR-US: Herowatch
 CVE-2026-121817 (Herowatch Go Server developed by About Time Technologies has a Insecur ...)
-	TODO: check
+	NOT-FOR-US: Herowatch
 CVE-2026-121816 (Herowatch Mini developed by About Time Technologies has a Missing Auth ...)
-	TODO: check
+	NOT-FOR-US: Herowatch
 CVE-2026-121803
 	REJECTED
 CVE-2026-121802 (@better-auth/expo before 1.7.16 allows certain account-takeover outcom ...)
@@ -550550,7 +550550,7 @@ CVE-2023-22794 (A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1
 	NOTE: https://discuss.rubyonrails.org/t/cve-2023-22794-sql-injection-vulnerability-via-activerecord-comments/82117
 	NOTE: https://github.com/rails/rails/commit/048e9fc05e18c91838a44e60175e475de8b2aad5 (6-1-stable)
 CVE-2023-22793 (A vulnerability allowing an unauthenticated attacker to perform remote ...)
-	TODO: check
+	NOT-FOR-US: Veeam
 CVE-2023-22792 (A regular expression based DoS vulnerability in Action Dispatch <6.0.6 ...)
 	{DSA-5372-1}
 	- rails 2:6.1.7.3+dfsg-1 (bug #1030050)
@@ -607474,7 +607474,7 @@ CVE-2022-30269 (Motorola ACE1000 RTUs through 2022-05-02 mishandle application i
 CVE-2022-30268
 	RESERVED
 CVE-2022-30267 (Emerson Ovation was found to have no authentication of firmware signin ...)
-	TODO: check
+	NOT-FOR-US: Emerson
 CVE-2022-30266
 	RESERVED
 CVE-2022-30265
@@ -608307,7 +608307,7 @@ CVE-2022-29967 (static_compressed_inmemory_website_callback.c in Glewlwyd throug
 	[bullseye] - glewlwyd 2.5.2-2+deb11u3
 	NOTE: https://github.com/babelouest/glewlwyd/commit/e3f7245c33897bf9b3a75acfcdb8b7b93974bf11
 CVE-2022-29966 (Emerson Ovationhas several protocols that have no authentication, whic ...)
-	TODO: check
+	NOT-FOR-US: Emerson
 CVE-2022-29965 (The Emerson DeltaV Distributed Control System (DCS) controllers and IO ...)
 	NOT-FOR-US: Emerson
 CVE-2022-29964 (The Emerson DeltaV Distributed Control System (DCS) controllers and IO ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ead816e49969c3394fb2eb777c8040f953b52ee2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ead816e49969c3394fb2eb777c8040f953b52ee2
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/0b343605/attachment.htm>