Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
49861358 by Salvatore Bonaccorso at 2024-12-02T21:53:58+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -109,123 +109,123 @@ CVE-2024-53708 (Missing Authorization vulnerability in 
AutoQuiz AI Quiz allows A
 CVE-2024-53707 (Cross-Site Request Forgery (CSRF) vulnerability in Ahmet 
\u0130mamo\u0 ...)
        NOT-FOR-US: WordPress plugin
 CVE-2024-53617 (A Cross Site Scripting vulnerability in LibrePhotos before 
commit 3223 ...)
-       TODO: check
+       NOT-FOR-US: LibrePhotos
 CVE-2024-53566 (An issue in the action_listcategories() function of Sangoma 
Asterisk v ...)
        TODO: check
 CVE-2024-53564 (An authenticated arbitrary file upload vulnerability in the 
component  ...)
-       TODO: check
+       NOT-FOR-US: FreePBX
 CVE-2024-53484 (Ever Traduora 0.20.0 and below is vulnerable to Privilege 
Escalation d ...)
        TODO: check
 CVE-2024-53459 (Sysax Multi Server 6.99 is vulnerable to Cross Site Scripting 
(XSS) vi ...)
        TODO: check
 CVE-2024-53364 (A SQL injection vulnerability was found in PHPGURUKUL Vehicle 
Parking  ...)
-       TODO: check
+       NOT-FOR-US: PHPGURUKUL Vehicle Parking Management System
 CVE-2024-53259 (quic-go is an implementation of the QUIC protocol in Go. An 
off-path a ...)
        TODO: check
 CVE-2024-52806 (SimpleSAMLphp SAML2 library is a PHP library for SAML2 related 
functio ...)
        TODO: check
 CVE-2024-52732 (Incorrect access control in wms-Warehouse management 
system-zeqp v2.20 ...)
-       TODO: check
+       NOT-FOR-US: wms-Warehouse management system-zeqp
 CVE-2024-52724 (ZZCMS 2023 was discovered to contain a SQL injection 
vulnerability in  ...)
-       TODO: check
+       NOT-FOR-US: ZZCMS
 CVE-2024-52503 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52502 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: Imbasynergy ImbaChat
 CVE-2024-52494 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52493 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52492 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52491 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52489 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52487 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52486 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52484 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52483 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52482 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52479 (Cross-Site Request Forgery (CSRF) vulnerability in Ben 
Marshall Jobify ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52478 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52477 (Cross-Site Request Forgery (CSRF) vulnerability in No-nonsense 
Labs Do ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52476 (Unrestricted Upload of File with Dangerous Type vulnerability 
in stefa ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52469 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52468 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52467 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52466 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52465 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52464 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52463 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52462 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52461 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52460 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52459 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52458 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52457 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52456 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52455 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52454 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52453 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-52452 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-51900 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-50381 (A vulnerability exists in Snap One OVRC cloud where an 
attacker can im ...)
-       TODO: check
+       NOT-FOR-US: Snap One OVRC cloud
 CVE-2024-50380 (Snap One OVRC cloud uses the MAC address as an identifier to 
provide i ...)
-       TODO: check
+       NOT-FOR-US: Snap One OVRC cloud
 CVE-2024-49763 (PlexRipper is a cross-platform media downloader for Plex. 
PlexRipper\u ...)
-       TODO: check
+       NOT-FOR-US: PlexRipper
 CVE-2024-46909 (In WhatsUp Gold versions released before 2024.0.1, aremote 
unauthentic ...)
-       TODO: check
+       NOT-FOR-US: WhatsUp
 CVE-2024-46908 (In WhatsUp Gold versions released before 2024.0.1, a SQL 
Injection vul ...)
-       TODO: check
+       NOT-FOR-US: WhatsUp
 CVE-2024-46907 (In WhatsUp Gold versions released before 2024.0.1, a SQL 
Injection vul ...)
-       TODO: check
+       NOT-FOR-US: WhatsUp
 CVE-2024-46906 (In WhatsUp Gold versions released before 2024.0.1, a SQL 
Injection vul ...)
-       TODO: check
+       NOT-FOR-US: WhatsUp
 CVE-2024-46905 (In WhatsUp Gold versions released before 2024.0.1, a SQL 
Injection vul ...)
-       TODO: check
+       NOT-FOR-US: WhatsUp
 CVE-2024-43053 (Memory corruption while invoking IOCTL calls from user space 
to read W ...)
-       TODO: check
+       NOT-FOR-US: Qualcomm
 CVE-2024-43052 (Memory corruption while processing API calls to NPU with 
invalid input ...)
-       TODO: check
+       NOT-FOR-US: Qualcomm
 CVE-2024-43050 (Memory corruption while invoking IOCTL calls from user space 
to issue  ...)
-       TODO: check
+       NOT-FOR-US: Qualcomm
 CVE-2024-43049 (Memory corruption while invoking IOCTL calls from user space 
to set ge ...)
-       TODO: check
+       NOT-FOR-US: Qualcomm
 CVE-2024-43048 (Memory corruption when invalid input is passed to invoke GPU 
Headroom  ...)
-       TODO: check
+       NOT-FOR-US: Qualcomm
 CVE-2024-39343 (An issue was discovered in Samsung Mobile Processor and 
Wearable Proce ...)
-       TODO: check
+       NOT-FOR-US: Samsung
 CVE-2024-38827 (The usage of String.toLowerCase()and String.toUpperCase()has 
some Loca ...)
        TODO: check
 CVE-2024-33063 (Transient DOS while parsing the ML IE when a beacon with 
common info l ...)
@@ -374,7 +374,7 @@ CVE-2024-53103 (In the Linux kernel, the following 
vulnerability has been resolv
        [bookworm] - linux 6.1.119-1
        NOTE: 
https://git.kernel.org/linus/e629295bd60abf4da1db85b82819ca6a4f6c1e79 (6.13-rc1)
 CVE-2024-45520 (WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1 allows a 
remote  ...)
-       TODO: check
+       NOT-FOR-US: WithSecure
 CVE-2024-20139 (In Bluetooth firmware, there is a possible firmware asssert 
due to imp ...)
        TODO: check
 CVE-2024-20138 (In wlan driver, there is a possible out of bound read due to 
improper  ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/498613582771d88f9f05d6e0a8953cea2878f6e5

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/498613582771d88f9f05d6e0a8953cea2878f6e5
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to