Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
fae4d72c by Salvatore Bonaccorso at 2023-12-13T22:50:39+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -99,91 +99,91 @@ CVE-2023-50764 (Jenkins Scriptler Plugin 342.v6a_89fd40f466 
and earlier does not
 CVE-2023-50441 (Encrypted folders created by PRIMX ZONECENTRAL for Windows 
before Q.20 ...)
        NOT-FOR-US: PRIMX ZONECENTRAL
 CVE-2023-49363 (Rockoa <2.3.3 is vulnerable to SQL Injection. The problem 
exists in th ...)
-       TODO: check
+       NOT-FOR-US: Rockoa
 CVE-2023-49296 (The Arduino Create Agent allows users to use the Arduino 
Create applic ...)
-       TODO: check
+       NOT-FOR-US: Arduino Create Agent
 CVE-2023-48639 (Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 
13.1.0 ( ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-48638 (Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 
13.1.0 ( ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-48637 (Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 
13.1.0 ( ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-48636 (Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 
13.1.0 ( ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-48635 (Adobe After Effects versions 24.0.3 (and earlier) and 23.6.0 
(and earl ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-48634 (Adobe After Effects versions 24.0.3 (and earlier) and 23.6.0 
(and earl ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-48633 (Adobe After Effects versions 24.0.3 (and earlier) and 23.6.0 
(and earl ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-48632 (Adobe After Effects versions 24.0.3 (and earlier) and 23.6.0 
(and earl ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-48630 (Adobe Substance 3D Sampler versions 4.2.1 and earlier are 
affected by  ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-48629 (Adobe Substance 3D Sampler versions 4.2.1 and earlier are 
affected by  ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-48628 (Adobe Substance 3D Sampler versions 4.2.1 and earlier are 
affected by  ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-48627 (Adobe Substance 3D Sampler versions 4.2.1 and earlier are 
affected by  ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-48626 (Adobe Substance 3D Sampler versions 4.2.1 and earlier are 
affected by  ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-48625 (Adobe Substance 3D Sampler versions 4.2.1 and earlier are 
affected by  ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-47327 (The "Create a Space" feature in Silverpeas Core 6.3.1 is 
reserved for  ...)
-       TODO: check
+       NOT-FOR-US: Silverpeas Core
 CVE-2023-47326 (Silverpeas Core 6.3.1 is vulnerable to Cross Site Request 
Forgery (CSR ...)
-       TODO: check
+       NOT-FOR-US: Silverpeas Core
 CVE-2023-47325 (Silverpeas Core 6.3.1 administrative "Bin" feature is affected 
by brok ...)
-       TODO: check
+       NOT-FOR-US: Silverpeas Core
 CVE-2023-47324 (Silverpeas Core 6.3.1 is vulnerable to Cross Site Scripting 
(XSS) via  ...)
-       TODO: check
+       NOT-FOR-US: Silverpeas Core
 CVE-2023-47323 (The notification/messaging feature of Silverpeas Core 6.3.1 
does not e ...)
-       TODO: check
+       NOT-FOR-US: Silverpeas Core
 CVE-2023-47322 (The "userModify" feature of Silverpeas Core 6.3.1 is 
vulnerable to Cro ...)
-       TODO: check
+       NOT-FOR-US: Silverpeas Core
 CVE-2023-47321 (Silverpeas Core 6.3.1 is vulnerable to Incorrect Access 
Control via th ...)
-       TODO: check
+       NOT-FOR-US: Silverpeas Core
 CVE-2023-47320 (Silverpeas Core 6.3.1 is vulnerable to Incorrect Access 
Control. An at ...)
-       TODO: check
+       NOT-FOR-US: Silverpeas Core
 CVE-2023-47081 (Adobe Substance 3D Stager versions 2.1.1 and earlier are 
affected by a ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-47080 (Adobe Substance 3D Stager versions 2.1.1 and earlier are 
affected by a ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-47079 (Adobe Dimension versions 3.4.10 and earlier are affected by an 
out-of- ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-47078 (Adobe Dimension versions 3.4.10 and earlier are affected by an 
out-of- ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-47077 (Adobe InDesign versions 19.0 (and earlier) and 17.4.2 (and 
earlier) ar ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-47076 (Adobe InDesign versions 19.0 (and earlier) and 17.4.2 (and 
earlier) ar ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-47075 (Adobe Illustrator versions 28.0 (and earlier) and 27.9 (and 
earlier) a ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-47074 (Adobe Illustrator versions 28.0 (and earlier) and 27.9 (and 
earlier) a ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-47063 (Adobe Illustrator versions 28.0 (and earlier) and 27.9 (and 
earlier) a ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-47062 (Adobe Dimension versions 3.4.10 and earlier are affected by an 
out-of- ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-47061 (Adobe Dimension versions 3.4.10 and earlier are affected by an 
out-of- ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-46727 (GLPI is a free asset and IT management software package. 
Starting in v ...)
        TODO: check
 CVE-2023-46726 (GLPI is a free asset and IT management software package. 
Starting in v ...)
        TODO: check
 CVE-2023-46247 (Vyper is a Pythonic Smart Contract Language for the Ethereum 
Virtual M ...)
-       TODO: check
+       NOT-FOR-US: Vyper
 CVE-2023-44362 (Adobe Prelude versions 22.6 and earlier are affected by an 
Access of U ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2023-44252 (** UNSUPPORTED WHEN ASSIGNED **An improper authentication 
vulnerabilit ...)
-       TODO: check
+       NOT-FOR-US: FortiGuard
 CVE-2023-44251 (** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a 
pathname to  ...)
-       TODO: check
+       NOT-FOR-US: FortiGuard
 CVE-2023-43813 (GLPI is a free asset and IT management software package. 
Starting in v ...)
        TODO: check
 CVE-2023-42495 (Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper 
Neutraliz ...)
-       TODO: check
+       NOT-FOR-US: Dasan Networks W-Web
 CVE-2023-34194 (StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in 
TinyXML ...)
        TODO: check
 CVE-2023-6707



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fae4d72c6bac370441ddddb545e5b06392efa82a

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fae4d72c6bac370441ddddb545e5b06392efa82a
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to