Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
721bd0d4 by Moritz Muehlenhoff at 2023-12-01T15:57:07+01:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,19 +1,19 @@
CVE-2023-6396
- gitlab <not-affected> (Specific to EE)
CVE-2023-6442 (A vulnerability was found in PHPGurukul Nipah Virus Testing
Management ...)
- TODO: check
+ NOT-FOR-US: PHPGurukul
CVE-2023-6440 (A vulnerability was found in SourceCodester Book Borrower
System 1.0 a ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2023-6033 (Improper neutralization of input in Jira integration
configuration in ...)
- gitlab <unfixed>
CVE-2023-5995 (An issue has been discovered in GitLab EE affecting all
versions start ...)
- gitlab <not-affected> (Specific to EE)
CVE-2023-5915 (A vulnerability of Uncontrolled Resource Consumption has been
identifi ...)
- TODO: check
+ NOT-FOR-US: Yokogawa Electric Corporation STARDOM
CVE-2023-5909 (KEPServerEX does not properly validate certificates from
clients which ...)
- TODO: check
+ NOT-FOR-US: KEPServerEX
CVE-2023-5908 (KEPServerEX is vulnerable to a buffer overflow which may allow
an atta ...)
- TODO: check
+ NOT-FOR-US: KEPServerEX
CVE-2023-5226 (An issue has been discovered in GitLab affecting all versions
before 1 ...)
- gitlab <unfixed>
CVE-2023-4912 (An issue has been discovered in GitLab EE affecting all
versions start ...)
@@ -25,57 +25,57 @@ CVE-2023-4317 (An issue has been discovered in GitLab
affecting all versions sta
CVE-2023-49735 (** UNSUPPORTED WHEN ASSIGNED ** The value set as the
DefaultLocaleRes ...)
TODO: check
CVE-2023-48894 (Incorrect Access Control vulnerability in jshERP V3.3 allows
attackers ...)
- TODO: check
+ NOT-FOR-US: jshERP
CVE-2023-48016 (Restaurant Table Booking System V1.0 is vulnerable to SQL
Injection in ...)
- TODO: check
+ NOT-FOR-US: Restaurant Table Booking System
CVE-2023-47454 (An Untrusted search path vulnerability in NetEase CloudMusic
2.10.4 fo ...)
- TODO: check
+ NOT-FOR-US: NetEase CloudMusic
CVE-2023-47453 (An Untrusted search path vulnerability in Sohu Video Player
7.0.15.0 a ...)
- TODO: check
+ NOT-FOR-US: Sohu Video Player
CVE-2023-47452 (An Untrusted search path vulnerability in notepad++ 6.5 allows
local u ...)
- TODO: check
+ NOT-FOR-US: notepad++
CVE-2023-47307 (Buffer Overflow vulnerability in /apply.cgi in Shenzhen
Libituo Techno ...)
- TODO: check
+ NOT-FOR-US: Shenzhen Libituo
CVE-2023-47279 (In Delta Electronics InfraSuite Device Master v.1.0.7, A
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Delta Electronics
CVE-2023-47207 (In Delta Electronics InfraSuite Device Master v.1.0.7, a
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Delta Electronics
CVE-2023-46956 (SQL injection vulnerability in Packers and Movers Management
System v. ...)
- TODO: check
+ NOT-FOR-US: Packers and Movers Management System
CVE-2023-46690 (In Delta Electronics InfraSuite Device Master v.1.0.7, a
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Delta Electronics
CVE-2023-46389 (LOYTEC electronics GmbH LINX-212 firmware 6.2.4 and LINX-151
Firmware ...)
- TODO: check
+ NOT-FOR-US: LOYTEC
CVE-2023-46388 (LOYTEC electronics GmbH LINX-212 6.2.4 and LINX-151 7.2.4 are
vulnerab ...)
- TODO: check
+ NOT-FOR-US: LOYTEC
CVE-2023-46387 (LOYTEC electronics GmbH LINX-212 firmware 6.2.4 and LINX-151
firmware ...)
- TODO: check
+ NOT-FOR-US: LOYTEC
CVE-2023-46386 (LOYTEC electronics GmbH LINX-212 firmware 6.2.4 and LINX-151
firmware ...)
- TODO: check
+ NOT-FOR-US: LOYTEC
CVE-2023-46385 (LOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable
to Inse ...)
- TODO: check
+ NOT-FOR-US: LOYTEC
CVE-2023-46384 (LOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable
to Inse ...)
- TODO: check
+ NOT-FOR-US: LOYTEC
CVE-2023-46383 (LOYTEC electronics GmbH LINX Configurator 7.4.10 uses HTTP
Basic Authe ...)
- TODO: check
+ NOT-FOR-US: LOYTEC
CVE-2023-46326 (ZStack Cloud version 3.10.38 and before allows unauthenticated
API acc ...)
- TODO: check
+ NOT-FOR-US: ZStack Cloud
CVE-2023-45253 (An issue was discovered in Huddly HuddlyCameraService before
version 8 ...)
- TODO: check
+ NOT-FOR-US: Huddly HuddlyCameraService
CVE-2023-45252 (DLL Hijacking vulnerability in Huddly HuddlyCameraService
before versi ...)
- TODO: check
+ NOT-FOR-US: Huddly HuddlyCameraService
CVE-2023-43455 (An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and
V9.4.0cu.852_B2 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2023-43454 (An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and
V9.4.0cu.852_B2 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2023-43453 (An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and
V9.4.0cu.852_B2 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2023-43089 (Dell Rugged Control Center, version prior to 4.7, contains
insufficien ...)
- TODO: check
+ NOT-FOR-US: Dell
CVE-2023-42917 (A memory corruption vulnerability was addressed with improved
locking. ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2023-42916 (An out-of-bounds read was addressed with improved input
validation. Th ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2023-3964 (An issue has been discovered in GitLab affecting all versions
starting ...)
- gitlab <unfixed>
CVE-2023-3949 (An issue has been discovered in GitLab affecting all versions
starting ...)
@@ -83,7 +83,7 @@ CVE-2023-3949 (An issue has been discovered in GitLab
affecting all versions sta
CVE-2023-3443 (An issue has been discovered in GitLab affecting all versions
starting ...)
- gitlab <unfixed>
CVE-2023-39226 (In Delta Electronics InfraSuite Device Master v.1.0.7, a
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Delta Electronics
CVE-2023-6439 (A vulnerability classified as problematic was found in ZenTao
PMS 18.8 ...)
NOT-FOR-US: ZenTao PMS
CVE-2023-6438 (A vulnerability classified as problematic has been found in
IceCMS 2.0 ...)
@@ -169522,7 +169522,7 @@ CVE-2021-35977 (An issue was discovered in Digi
RealPort for Windows through 4.8
CVE-2021-35976 (The feature to preview a website in Plesk Obsidian 18.0.0
through 18.0 ...)
NOT-FOR-US: Plesk Obsidian
CVE-2021-35975 (Absolute path traversal vulnerability in the Systematica SMTP
Adapter ...)
- TODO: check
+ NOT-FOR-US: Systematica SMTP Adapter component
CVE-2021-35974
RESERVED
CVE-2021-35973 (NETGEAR WAC104 devices before 1.0.4.15 are affected by an
authenticati ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/721bd0d40fdc23664125e6132bc2d1b26a3feafb
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/721bd0d40fdc23664125e6132bc2d1b26a3feafb
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
