Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8f88f0f1 by Moritz Mühlenhoff at 2023-08-01T12:49:22+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -27,7 +27,7 @@ CVE-2023-4010 (A flaw was found in the USB Host Controller
Driver framework in t
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2227726
NOTE: https://github.com/wanrenmi/a-usb-kernel-bug
CVE-2023-3997 (Splunk SOAR versions 6.0.2 and earlier are indirectly affected
by a po ...)
- TODO: check
+ NOT-FOR-US: Splunk SOAR
CVE-2023-3983 (An authenticated SQL injection vulnerability exists in
Advantech iView ...)
NOT-FOR-US: Advantech iView
CVE-2023-3817 (Issue summary: Checking excessively long DH keys or parameters
may be ...)
@@ -53,7 +53,7 @@ CVE-2023-3134 (The Forminator WordPress plugin before 1.24.4
does not properly e
CVE-2023-3130 (The Short URL WordPress plugin before 1.6.5 does not sanitise
and esca ...)
NOT-FOR-US: WordPress plugin
CVE-2023-38989 (An issue in the delete function in the UserController class of
jeesite ...)
- TODO: check
+ NOT-FOR-US: jeesite
CVE-2023-38750 (In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9
before 9.0.0 ...)
NOT-FOR-US: Zimbra
CVE-2023-38311 (An issue was discovered in Webmin 2.021. A Stored Cross-Site
Scripting ...)
@@ -89,7 +89,7 @@ CVE-2023-36090 (Authentication Bypass vulnerability in D-Link
DIR-885L FW102b01
CVE-2023-36089 (Authentication Bypass vulnerability in D-Link DIR-645 firmware
version ...)
NOT-FOR-US: D-Link
CVE-2023-35861 (A shell-injection vulnerability in email notifications on
Supermicro m ...)
- TODO: check
+ NOT-FOR-US: Supermicro
CVE-2023-35792 (Vound Intella Connect 2.6.0.3 is vulnerable to stored
Cross-site Scrip ...)
NOT-FOR-US: Vound Intella Connect
CVE-2023-35791 (Vound Intella Connect 2.6.0.3 has an Open Redirect
vulnerability.)
@@ -109,7 +109,7 @@ CVE-2023-34644 (Remote code execution vulnerability in
Ruijie Networks Product:
CVE-2023-34635 (Wifi Soft Unibox Administration 3.0 and 3.1 is vulnerable to
SQL Injec ...)
NOT-FOR-US: Wifi Soft Unibox Administration
CVE-2023-33534 (A Cross-Site Request Forgery (CSRF) in Guanzhou Tozed Kangwei
Intellig ...)
- TODO: check
+ NOT-FOR-US: Guanzhou Tozed Kangwei
CVE-2020-36763 (Cross Site Scripting (XSS) vulnerability in DuxCMS 2.1 allows
remote a ...)
NOT-FOR-US: DuxCMS
CVE-2023-4007 (Cross-site Scripting (XSS) - Stored in GitHub repository
thorsten/phpm ...)
@@ -25199,7 +25199,7 @@ CVE-2023-26141
CVE-2023-26140
RESERVED
CVE-2023-26139 (Versions of the package underscore-keypath from 0.0.11 are
vulnerable ...)
- TODO: check
+ NOT-FOR-US: Node underscore-keypath
CVE-2023-26138 (All versions of the package drogonframework/drogon are
vulnerable to C ...)
NOT-FOR-US: Drogon
CVE-2023-26137 (All versions of the package drogonframework/drogon are
vulnerable to H ...)
@@ -59279,9 +59279,9 @@ CVE-2022-42185
CVE-2022-42184
RESERVED
CVE-2022-42183 (Precisely Spectrum Spatial Analyst 20.01 is vulnerable to
Server-Side ...)
- TODO: check
+ NOT-FOR-US: Precisely Spectrum Spatial Analyst
CVE-2022-42182 (Precisely Spectrum Spatial Analyst 20.01 is vulnerable to
Directory Tr ...)
- TODO: check
+ NOT-FOR-US: Precisely Spectrum Spatial Analyst
CVE-2022-42181
RESERVED
CVE-2022-42180
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f88f0f1b5e337487c661b181364d1986ecb51df
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f88f0f1b5e337487c661b181364d1986ecb51df
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
