Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d0874a41 by Salvatore Bonaccorso at 2023-04-14T23:05:08+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -482,13 +482,13 @@ CVE-2023-2040 (A vulnerability classified as critical has
been found in novel-pl
CVE-2023-2039 (A vulnerability was found in novel-plus 3.6.2. It has been
rated as cr ...)
TODO: check
CVE-2023-2038 (A vulnerability was found in Campcodes Video Sharing Website
1.0. It h ...)
- TODO: check
+ NOT-FOR-US: Campcodes Video Sharing Website
CVE-2023-2037 (A vulnerability was found in Campcodes Video Sharing Website
1.0. It h ...)
- TODO: check
+ NOT-FOR-US: Campcodes Video Sharing Website
CVE-2023-2036 (A vulnerability was found in Campcodes Video Sharing Website
1.0 and c ...)
- TODO: check
+ NOT-FOR-US: Campcodes Video Sharing Website
CVE-2023-2035 (A vulnerability has been found in Campcodes Video Sharing
Website 1.0 ...)
- TODO: check
+ NOT-FOR-US: Campcodes Video Sharing Website
CVE-2023-2034 (Unrestricted Upload of File with Dangerous Type in GitHub
repository f ...)
- froxlor <itp> (bug #581792)
CVE-2023-2033 (Type confusion in V8 in Google Chrome prior to 112.0.5615.121
allowed ...)
@@ -531,7 +531,7 @@ CVE-2023-2016
CVE-2023-2015
RESERVED
CVE-2023-2014 (Cross-site Scripting (XSS) - Generic in GitHub repository
microweber/m ...)
- TODO: check
+ NOT-FOR-US: microweber
CVE-2023-2013
RESERVED
CVE-2023-2012
@@ -933,7 +933,7 @@ CVE-2023-30461
CVE-2023-30460
RESERVED
CVE-2023-30459 (SmartPTT SCADA 1.1.0.0 allows remote code execution (when the
attacker ...)
- TODO: check
+ NOT-FOR-US: SmartPTT SCADA
CVE-2023-30458
RESERVED
CVE-2023-30457
@@ -2168,13 +2168,13 @@ CVE-2023-29852
CVE-2023-29851
RESERVED
CVE-2023-29850 (SENAYAN Library Management System (SLiMS) Bulian v9.5.2 does
not strip ...)
- TODO: check
+ NOT-FOR-US: SENAYAN Library Management System (SLiMS) Bulia
CVE-2023-29849
RESERVED
CVE-2023-29848
RESERVED
CVE-2023-29847 (AeroCMS v0.0.1 was discovered to contain multiple stored
cross-site sc ...)
- TODO: check
+ NOT-FOR-US: AeroCMS
CVE-2023-29846
RESERVED
CVE-2023-29845
@@ -2258,9 +2258,9 @@ CVE-2023-29807
CVE-2023-29806
RESERVED
CVE-2023-29805 (WFS-SR03 v1.0.3 was discovered to contain a command injection
vulnerab ...)
- TODO: check
+ NOT-FOR-US: WFS-SR03
CVE-2023-29804 (WFS-SR03 v1.0.3 was discovered to contain a command injection
vulnerab ...)
- TODO: check
+ NOT-FOR-US: WFS-SR03
CVE-2023-29803 (TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain
a comma ...)
NOT-FOR-US: TOTOLINK
CVE-2023-29802 (TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain
a comma ...)
@@ -2614,19 +2614,19 @@ CVE-2023-29629
CVE-2023-29628
RESERVED
CVE-2023-29627 (Online Pizza Ordering v1.0 was discovered to contain an
arbitrary file ...)
- TODO: check
+ NOT-FOR-US: Online Pizza Ordering
CVE-2023-29626 (Yoga Class Registration System 1.0 was discovered to contain a
SQL inj ...)
- TODO: check
+ NOT-FOR-US: Yoga Class Registration System
CVE-2023-29625 (Employee Performance Evaluation System v1.0 was discovered to
contain ...)
- TODO: check
+ NOT-FOR-US: Employee Performance Evaluation System
CVE-2023-29624
RESERVED
CVE-2023-29623 (Purchase Order Management v1.0 was discovered to contain a
reflected c ...)
- TODO: check
+ NOT-FOR-US: Purchase Order Management
CVE-2023-29622 (Purchase Order Management v1.0 was discovered to contain a SQL
injecti ...)
- TODO: check
+ NOT-FOR-US: Purchase Order Management
CVE-2023-29621 (Purchase Order Management v1.0 was discovered to contain an
arbitrary ...)
- TODO: check
+ NOT-FOR-US: Purchase Order Management
CVE-2023-29620
RESERVED
CVE-2023-29619
@@ -2726,7 +2726,7 @@ CVE-2023-29575
CVE-2023-29574 (Bento4 v1.6.0-639 was discovered to contain an out-of-memory
bug in th ...)
NOT-FOR-US: Bento4
CVE-2023-29573 (Bento4 v1.6.0-639 was discovered to contain an out-of-memory
bug in th ...)
- TODO: check
+ NOT-FOR-US: Bento4
CVE-2023-29572
RESERVED
CVE-2023-29571 (Cesanta MJS v2.20.0 was discovered to contain a SEGV
vulnerability via ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d0874a411a8c8d1ab78f5a8ee45402cc9e19fd8a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d0874a411a8c8d1ab78f5a8ee45402cc9e19fd8a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
