Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
213405f8 by Salvatore Bonaccorso at 2023-12-18T09:28:32+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,19 +1,19 @@
CVE-2023-6909 (Path Traversal: '\..\filename' in GitHub repository
mlflow/mlflow prio ...)
- TODO: check
+ NOT-FOR-US: mlflow
CVE-2023-6908 (A vulnerability, which was classified as problematic, was found
in DFI ...)
- TODO: check
+ NOT-FOR-US: DFIRKuiper Kuiper
CVE-2023-6907 (A vulnerability has been found in codelyfe Stupid Simple CMS up
to 1.2 ...)
- TODO: check
+ NOT-FOR-US: codelyfe Stupid Simple CMS
CVE-2023-6906 (A vulnerability, which was classified as critical, was found in
Totoli ...)
- TODO: check
+ NOT-FOR-US: Totolink
CVE-2023-6905 (A vulnerability, which was classified as problematic, has been
found i ...)
- TODO: check
+ NOT-FOR-US: Jahastech NxFilter
CVE-2023-6904 (A vulnerability classified as problematic was found in
Jahastech NxFil ...)
- TODO: check
+ NOT-FOR-US: Jahastech NxFilter
CVE-2023-6903 (A vulnerability classified as critical has been found in
Netentsec NS- ...)
- TODO: check
+ NOT-FOR-US: Netentsec NS-ASG Application Security Gateway
CVE-2023-6483 (The vulnerability exists in ADiTaaS (Allied Digital Integrated
Tool-as ...)
- TODO: check
+ NOT-FOR-US: ADiTaaS (Allied Digital Integrated Tool-as-a-Service)
CVE-2023-50981 (ModularSquareRoot in Crypto++ (aka cryptopp) through 8.9.0
allows atta ...)
- libcrypto++ <unfixed>
NOTE: https://github.com/weidai11/cryptopp/issues/1249
@@ -25,7 +25,7 @@ CVE-2023-50979 (Crypto++ (aka cryptopp) through 8.9.0 has a
Marvin side channel
- libcrypto++ <unfixed>
NOTE: https://github.com/weidai11/cryptopp/issues/1247
CVE-2023-50976 (Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing
authoriz ...)
- TODO: check
+ NOT-FOR-US: Redpanda
CVE-2023-6902 (A vulnerability has been found in codelyfe Stupid Simple CMS up
to 1.2 ...)
NOT-FOR-US: Stupid Simple CMS
CVE-2023-6901 (A vulnerability, which was classified as critical, was found in
codely ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/213405f89eccac25fb566b95e066182790304243
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/213405f89eccac25fb566b95e066182790304243
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
