Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d14b103f by Moritz Muehlenhoff at 2023-01-19T18:16:45+01:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -49,9 +49,9 @@ CVE-2023-23837
CVE-2023-23836
RESERVED
CVE-2023-0397 (A malicious / defect bluetooth controller can cause a Denial of
Servic ...)
- TODO: check
+ NOT-FOR-US: Zephyr
CVE-2023-0396 (A malicious / defective bluetooth controller can cause buffer
overread ...)
- TODO: check
+ NOT-FOR-US: Zephyr
CVE-2023-0395
RESERVED
CVE-2023-0393
@@ -286,7 +286,7 @@ CVE-2022-46302
CVE-2022-43440
RESERVED
CVE-2021-4314 (It is possible to manipulate the JWT token without the
knowledge of th ...)
- TODO: check
+ NOT-FOR-US: Zowe
CVE-2017-20174
RESERVED
CVE-2015-10070
@@ -392,7 +392,7 @@ CVE-2023-0344
CVE-2023-0343
RESERVED
CVE-2010-10009 (A vulnerability was found in frioux ptome. It has been rated
as critic ...)
- TODO: check
+ NOT-FOR-US: frioux ptome
CVE-2023-23753
RESERVED
CVE-2023-23752
@@ -512,9 +512,9 @@ CVE-2023-0340
CVE-2023-0339
RESERVED
CVE-2023-0338 (Cross-site Scripting (XSS) - Reflected in GitHub repository
lirantal/d ...)
- TODO: check
+ NOT-FOR-US: lirantal/daloradius
CVE-2023-0337 (Cross-site Scripting (XSS) - Reflected in GitHub repository
lirantal/d ...)
- TODO: check
+ NOT-FOR-US: lirantal/daloradius
CVE-2023-0336
RESERVED
CVE-2023-0335
@@ -532,11 +532,11 @@ CVE-2020-36653 (A vulnerability was found in GENI Portal.
It has been rated as p
CVE-2017-20173 (A vulnerability was found in AlexRed contentmap. It has been
rated as ...)
NOT-FOR-US: AlexRed contentmap
CVE-2017-20172 (A vulnerability was found in ridhoq soundslike. It has been
classified ...)
- TODO: check
+ NOT-FOR-US: ridhoq soundslike
CVE-2015-10068 (A vulnerability classified as critical was found in danynab
movify-j. ...)
- TODO: check
+ NOT-FOR-US: danynab movify-j
CVE-2012-10006 (A vulnerability classified as critical has been found in
ale7714 sigep ...)
- TODO: check
+ NOT-FOR-US: ale7714
CVE-2011-10001 (A vulnerability was found in iamdroppy phoenixcf. It has been
declared ...)
NOT-FOR-US: iamdroppy phoenixcf
CVE-2010-10008 (** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in
simplesam ...)
@@ -686,25 +686,25 @@ CVE-2022-48261
CVE-2020-36652
RESERVED
CVE-2020-36651 (A vulnerability has been found in youngerheart nodeserver and
classifi ...)
- TODO: check
+ NOT-FOR-US: youngerheart nodeserver
CVE-2018-25077 (A vulnerability was found in melnaron mel-spintax. It has been
rated a ...)
- TODO: check
+ NOT-FOR-US: melnaron mel-spintax
CVE-2017-20171 (A vulnerability classified as critical has been found in
PrivateSky ap ...)
- TODO: check
+ NOT-FOR-US: PrivateSky
CVE-2015-10067 (A vulnerability was found in oznetmaster
SSharpSmartThreadPool. It has ...)
- TODO: check
+ NOT-FOR-US: oznetmaster SSharpSmartThreadPool
CVE-2015-10066 (A vulnerability was found in tynx wuersch and classified as
critical. ...)
- TODO: check
+ NOT-FOR-US: tynx wuersch
CVE-2015-10065 (A vulnerability classified as critical was found in AenBleidd
FiND. Th ...)
- TODO: check
+ NOT-FOR-US: AenBleidd FiND
CVE-2014-125082 (A vulnerability was found in nivit redports. It has been
declared as c ...)
- TODO: check
+ NOT-FOR-US: nivit redports
CVE-2014-125081 (A vulnerability, which was classified as critical, has been
found in r ...)
- TODO: check
+ NOT-FOR-US: risheesh debutsav
CVE-2010-10007 (** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in
lierdakil ...)
- TODO: check
+ NOT-FOR-US: lierdakil click-reminder
CVE-2010-10006 (A vulnerability, which was classified as problematic, was
found in mic ...)
- TODO: check
+ NOT-FOR-US: michaelliao jopenid
CVE-2023-23637 (IMPatienT before 1.5.2 allows stored XSS via onmouseover in
certain te ...)
NOT-FOR-US: IMPatienT
CVE-2023-23636
@@ -849,27 +849,27 @@ CVE-2023-0318
CVE-2023-0317
RESERVED
CVE-2022-4891 (A vulnerability has been found in Sisimai up to 4.25.14p11 and
classif ...)
- TODO: check
+ NOT-FOR-US: Sisimai
CVE-2017-20170 (A vulnerability was found in ollpu parontalli. It has been
classified ...)
NOT-FOR-US: ollpu parontalli
CVE-2016-15021 (A vulnerability was found in nickzren alsdb. It has been rated
as crit ...)
NOT-FOR-US: nickzren alsdb
CVE-2015-10064 (A vulnerability was found in VictorFerraresi
pokemon-database-php. It ...)
- TODO: check
+ NOT-FOR-US: pokemon-database-php
CVE-2015-10063 (A vulnerability was found in saemorris TheRadSystem and
classified as ...)
NOT-FOR-US: saemorris TheRadSystem
CVE-2015-10062 (A vulnerability, which was classified as problematic, was
found in gal ...)
- TODO: check
+ NOT-FOR-US: galaxy-data-resource
CVE-2015-10061 (A vulnerability was found in evandro-machado Trabalho-Web2. It
has bee ...)
- TODO: check
+ NOT-FOR-US: Trabalho-Web2.
CVE-2015-10060 (A vulnerability was found in MNBikeways database and
classified as cri ...)
- TODO: check
+ NOT-FOR-US: MNBikeways
CVE-2015-10059 (A vulnerability has been found in s134328
Webapplication-Veganguide an ...)
- TODO: check
+ NOT-FOR-US: Webapplication-Veganguide
CVE-2015-10058 (A vulnerability, which was classified as problematic, was
found in Wik ...)
- TODO: check
+ NOT-FOR-US: Wikisource Category Browser
CVE-2013-10013 (A vulnerability was found in Bricco Authenticator Plugin. It
has been ...)
- TODO: check
+ NOT-FOR-US: Bricco Authenticator Plugin
CVE-2023-0316 (Path Traversal: '\..\filename' in GitHub repository
froxlor/froxlor pr ...)
- froxlor <itp> (bug #581792)
CVE-2023-0315 (Command Injection in GitHub repository froxlor/froxlor prior to
2.0.8. ...)
@@ -1014,7 +1014,7 @@ CVE-2023-0292
CVE-2023-0291
RESERVED
CVE-2023-0290 (Rapid7 Velociraptor did not properly sanitize the client ID
parameter ...)
- TODO: check
+ NOT-FOR-US: Rapid7
CVE-2023-0289 (Cross-site Scripting (XSS) - Stored in GitHub repository
craigk5n/webc ...)
NOT-FOR-US: craigk5n/webcalendar
CVE-2023-0288 (Heap-based Buffer Overflow in GitHub repository vim/vim prior
to 9.0.1 ...)
@@ -1391,7 +1391,7 @@ CVE-2023-0244 (A vulnerability classified as critical was
found in TuziCMS 2.0.6
CVE-2023-0243 (A vulnerability classified as critical has been found in
TuziCMS 2.0.6 ...)
NOT-FOR-US: TuziCMS
CVE-2023-0242 (Rapid7 Velociraptor allows users to be created with different
privileg ...)
- TODO: check
+ NOT-FOR-US: Rapid7
CVE-2023-0241
RESERVED
CVE-2023-0240
@@ -2196,7 +2196,7 @@ CVE-2023-0216
CVE-2023-0215
RESERVED
CVE-2023-0214 (A cross-site scripting vulnerability in Skyhigh SWG in main
releases 1 ...)
- TODO: check
+ NOT-FOR-US: Skyhigh SWG
CVE-2023-0213
RESERVED
CVE-2023-0212
@@ -2670,7 +2670,7 @@ CVE-2023-0166
CVE-2023-0165
RESERVED
CVE-2023-0164 (OrangeScrum version 2.0.11 allows an authenticated external
attacker t ...)
- TODO: check
+ NOT-FOR-US: OrangeScrum
CVE-2022-48253 (nhttpd in Nostromo before 2.1 is vulnerable to a path
traversal that m ...)
NOT-FOR-US: Nostromo webserver
CVE-2022-48252 (The jokob-sk/Pi.Alert fork (before 22.12.20) of Pi.Alert
allows Remote ...)
@@ -2735,7 +2735,7 @@ CVE-2023-0160
CVE-2023-0159
RESERVED
CVE-2023-0158 (NLnet Labs Krill supports direct access to the RRDP repository
content ...)
- TODO: check
+ NOT-FOR-US: NLnet Labs Krill
CVE-2023-0157
RESERVED
CVE-2023-0156
@@ -3459,21 +3459,21 @@ CVE-2023-22736
CVE-2023-22735
RESERVED
CVE-2023-22734 (Shopware is an open source commerce platform based on Symfony
Framewor ...)
- TODO: check
+ NOT-FOR-US: Shopware
CVE-2023-22733 (Shopware is an open source commerce platform based on Symfony
Framewor ...)
- TODO: check
+ NOT-FOR-US: Shopware
CVE-2023-22732 (Shopware is an open source commerce platform based on Symfony
Framewor ...)
- TODO: check
+ NOT-FOR-US: Shopware
CVE-2023-22731 (Shopware is an open source commerce platform based on Symfony
Framewor ...)
- TODO: check
+ NOT-FOR-US: Shopware
CVE-2023-22730 (Shopware is an open source commerce platform based on Symfony
Framewor ...)
- TODO: check
+ NOT-FOR-US: Shopware
CVE-2023-22729
RESERVED
CVE-2023-22728
RESERVED
CVE-2023-22727 (CakePHP is a development framework for PHP web apps. In
affected versi ...)
- TODO: check
+ NOT-FOR-US: CakePHP
CVE-2023-22726
RESERVED
CVE-2023-22725
@@ -3825,7 +3825,7 @@ CVE-2023-22626 (PgHero before 3.1.0 allows Information
Disclosure via EXPLAIN be
CVE-2023-22625
RESERVED
CVE-2023-22624 (Zoho ManageEngine Exchange Reporter Plus before 5708 allows
attackers ...)
- TODO: check
+ NOT-FOR-US: Zoho
CVE-2023-22623
RESERVED
CVE-2023-22622 (WordPress through 6.1.1 depends on unpredictable client visits
to caus ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d14b103fc2f90764e1ef4a807fa643888dad3e22
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d14b103fc2f90764e1ef4a807fa643888dad3e22
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
