Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ff60b87c by Salvatore Bonaccorso at 2024-03-19T21:34:16+01:00
Process some more NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,19 +1,19 @@
CVE-2024-2639 (A vulnerability was found in Bdtask Wholesale Inventory
Management Sys ...)
- TODO: check
+ NOT-FOR-US: Bdtask Wholesale Inventory Management System
CVE-2024-2636 (An Unrestricted Upload of File vulnerability has been found on
Cegid M ...)
- TODO: check
+ NOT-FOR-US: Meta4 HR
CVE-2024-2635 (The configuration pages available are not intended to be placed
on an ...)
- TODO: check
+ NOT-FOR-US: Meta4 HR
CVE-2024-2634 (A Cross-Site Scripting Vulnerability has been found on Meta4 HR
affect ...)
- TODO: check
+ NOT-FOR-US: Meta4 HR
CVE-2024-2633 (A Cross-Site Scripting Vulnerability has been found on Meta4 HR
affect ...)
- TODO: check
+ NOT-FOR-US: Meta4 HR
CVE-2024-2632 (A Information Exposure Vulnerability has been found on Meta4
HR. This ...)
- TODO: check
+ NOT-FOR-US: Meta4 HR
CVE-2024-2545
REJECTED
CVE-2024-2442 (Franklin Fueling System EVO 550 and EVO 5000 are vulnerable to
a Path ...)
- TODO: check
+ NOT-FOR-US: Franklin Fueling System
CVE-2024-2307 (A flaw was found in osbuild-composer. A condition can be
triggered tha ...)
TODO: check
CVE-2024-2169 (Implementations of UDP application protocol are vulnerable to
network ...)
@@ -115,31 +115,31 @@ CVE-2024-29091 (Improper Neutralization of Input During
Web Page Generation ('Cr
CVE-2024-29089 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
NOT-FOR-US: WordPress plugin
CVE-2024-29027 (Parse Server is an open source backend that can be deployed to
any inf ...)
- TODO: check
+ NOT-FOR-US: Parse Server
CVE-2024-28734 (Cross Site Scripting vulnerability in Unit4 Financials by Coda
v.2024Q ...)
- TODO: check
+ NOT-FOR-US: Unit4 Financials by Coda
CVE-2024-28595 (SQL Injection vulnerability in Employee Management System v1.0
allows ...)
- TODO: check
+ NOT-FOR-US: Employee Management System
CVE-2024-28394 (An issue in Advanced Plugins reportsstatistics v1.3.20 and
before allo ...)
- TODO: check
+ NOT-FOR-US: PrestaShop module
CVE-2024-28303 (Open Source Medicine Ordering System v1.0 was discovered to
contain a ...)
- TODO: check
+ NOT-FOR-US: Open Source Medicine Ordering System
CVE-2024-27998 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-27997 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-27996 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-21677 (This High severity Path Traversal vulnerability was introduced
in vers ...)
- TODO: check
+ NOT-FOR-US: Confluence Data Center
CVE-2024-1401 (The Profile Box Shortcode And Widget WordPress plugin before
1.2.1 doe ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-1146 (Cross-Site Scripting vulnerability in Devklan's Alma Blog that
affects ...)
- TODO: check
+ NOT-FOR-US: Devklan's Alma Blog
CVE-2024-1145 (User enumeration vulnerability in Devklan's Alma Blog that
affects ver ...)
- TODO: check
+ NOT-FOR-US: Devklan's Alma Blog
CVE-2024-1144 (Improper access control vulnerability in Devklan's Alma Blog
that affe ...)
- TODO: check
+ NOT-FOR-US: Devklan's Alma Blog
CVE-2024-0450 (An issue was found in the CPython `zipfile` module affecting
versions ...)
TODO: check
CVE-2023-6597 (An issue was found in the CPython `tempfile.TemporaryDirectory`
class ...)
@@ -149,23 +149,23 @@ CVE-2023-50966 (erlang-jose (aka JOSE for Erlang and
Elixir) through 1.11.6 allo
CVE-2023-4426
REJECTED
CVE-2023-44092 (Improper Neutralization of Special Elements used in an OS
Command ('OS ...)
- TODO: check
+ NOT-FOR-US: Pandora FMS
CVE-2023-44091 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: Pandora FMS
CVE-2023-44090 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: Pandora FMS
CVE-2023-42920 (Claris International has fixed a dylib hijacking vulnerability
in the ...)
- TODO: check
+ NOT-FOR-US: Claris International
CVE-2023-41793 (: Path Traversal vulnerability in Pandora FMS on all allows
Path Trave ...)
- TODO: check
+ NOT-FOR-US: Pandora FMS
CVE-2023-40279 (An issue was discovered in OpenClinic GA 5.247.01. An attacker
can per ...)
- TODO: check
+ NOT-FOR-US: OpenClinic GA
CVE-2023-40278 (An issue was discovered in OpenClinic GA 5.247.01. An
Information Disc ...)
- TODO: check
+ NOT-FOR-US: OpenClinic GA
CVE-2023-32260 (Misinterpretation of Input vulnerability in OpenText\u2122
Service Man ...)
- TODO: check
+ NOT-FOR-US: OpenText
CVE-2023-32259 (Insufficient Granularity of Access Control vulnerability in
OpenText\u ...)
- TODO: check
+ NOT-FOR-US: OpenText
CVE-2024-27439 (An error in the evaluation of the fetch metadata headers could
allow a ...)
NOT-FOR-US: Apache Wicket
CVE-2024-24683 (Improper Input Validation vulnerability in Apache Hop
Engine.This issu ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ff60b87c5bdbec4087cb18f2706aeb404cf8ea52
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ff60b87c5bdbec4087cb18f2706aeb404cf8ea52
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
