Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2a186184 by Salvatore Bonaccorso at 2023-06-15T10:55:25+02:00
Process some NFUs
- - - - -
e502cd9e by Salvatore Bonaccorso at 2023-06-15T10:55:25+02:00
Add CVE-2023-34565/netbox
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,11 +1,11 @@
CVE-2023-3193 (Cross-site scripting (XSS) vulnerability in the Layout module's
SEO co ...)
- TODO: check
+ NOT-FOR-US: Liferay
CVE-2023-35030 (Cross-site request forgery (CSRF) vulnerability in the Layout
module's ...)
- TODO: check
+ NOT-FOR-US: Liferay
CVE-2023-35029 (Open redirect vulnerability in the Layout module's SEO
configuration i ...)
- TODO: check
+ NOT-FOR-US: Liferay
CVE-2023-34565 (Netbox 3.5.1 is vulnerable to Cross Site Scripting (XSS) in
the "Creat ...)
- TODO: check
+ - netbox <itp> (bug #1017079)
CVE-2023-34452 (Grav is a flat-file content management system. In versions
1.7.42 and ...)
TODO: check
CVE-2023-34449 (ink! is an embedded domain specific language to write smart
contracts ...)
@@ -19,9 +19,9 @@ CVE-2023-34252 (Grav is a flat-file content management
system. Prior to version
CVE-2023-34251 (Grav is a flat-file content management system. Versions prior
to 1.7.4 ...)
TODO: check
CVE-2023-33515 (SoftExpert Excellence Suite 2.1.9 is vulnerable to Cross Site
Scriptin ...)
- TODO: check
+ NOT-FOR-US: SoftExpert Excellence Suite
CVE-2023-31746 (There is a command injection vulnerability in the adslr VW2100
router ...)
- TODO: check
+ NOT-FOR-US: adslr VW2100 router
CVE-2023-2847 (During internal security analysis, a local privilege escalation
vulner ...)
TODO: check
CVE-2023-2820 (An information disclosure vulnerability in thefaye endpoint in
Proofpo ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/c06af6755359d58ba1267a0e8fe2f5213b7705f8...e502cd9ef373741742debda072539ceb28584950
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/c06af6755359d58ba1267a0e8fe2f5213b7705f8...e502cd9ef373741742debda072539ceb28584950
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
