Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ac58c210 by Salvatore Bonaccorso at 2023-12-26T21:26:20+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,35 +1,35 @@
CVE-2023-6268 (The JSON Content Importer WordPress plugin before 1.5.4 does
not sanit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2023-6250 (The BestWebSoft's Like & Share WordPress plugin before 2.74
discloses ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2023-6166 (The Quiz Maker WordPress plugin before 6.4.9.5 does not escape
generat ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2023-6155 (The Quiz Maker WordPress plugin before 6.4.9.5 does not
adequately aut ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2023-6114 (The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro
WordPre ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2023-5991 (The Hotel Booking Lite WordPress plugin before 4.8.5 does not
validate ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2023-5980 (The BSK Forms Blacklist WordPress plugin before 3.7 does not
sanitise ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2023-5939 (The rtMedia for WordPress, BuddyPress and bbPress WordPress
plugin bef ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2023-5931 (The rtMedia for WordPress, BuddyPress and bbPress WordPress
plugin bef ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2023-5674 (The WP Mail Log WordPress plugin before 1.1.3 does not properly
saniti ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2023-5673 (The WP Mail Log WordPress plugin before 1.1.3 does not properly
valida ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2023-5672 (The WP Mail Log WordPress plugin before 1.1.3 does not properly
valida ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2023-5645 (The WP Mail Log WordPress plugin before 1.1.3 does not properly
saniti ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2023-5644 (The WP Mail Log WordPress plugin before 1.1.3 does not
correctly autho ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2023-5203 (The WP Sessions Time Monitoring Full Automatic WordPress plugin
before ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2023-5180 (An issue was discovered in Open Design Alliance Drawings SDK
before 20 ...)
- TODO: check
+ NOT-FOR-US: Open Design Alliance Drawings SDK
CVE-2023-52086 (resumable.php (aka PHP backend for resumable.js) 0.1.4 before
3c6dbf5 ...)
TODO: check
CVE-2023-51107 (A floating point exception (divide-by-zero) vulnerability was
discover ...)
@@ -43,29 +43,29 @@ CVE-2023-51104 (A floating point exception (divide-by-zero)
vulnerability was di
CVE-2023-51103 (A floating point exception (divide-by-zero) vulnerability was
discover ...)
TODO: check
CVE-2023-51102 (Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack
overflow ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51101 (Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack
overflow ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51100 (Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command
injecti ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51099 (Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command
injecti ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51098 (Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command
injecti ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51097 (Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack
overflow ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51095 (Tenda M3 V1.0.0.12(4856) was discovered to contain a stack
overflow vi ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51094 (Tenda M3 V1.0.0.12(4856) was discovered to contain a Command
Execution ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51093 (Tenda M3 V1.0.0.12(4856) was discovered to contain a stack
overflow vi ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51092 (Tenda M3 V1.0.0.12(4856) was discovered to contain a stack
overflow vi ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51091 (Tenda M3 V1.0.0.12(4856) was discovered to contain a stack
overflow vi ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51090 (Tenda M3 V1.0.0.12(4856) was discovered to contain a stack
overflow vi ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-49949 (Passwork before 6.2.0 allows remote authenticated users to
bypass 2FA ...)
TODO: check
CVE-2023-45251
@@ -73,11 +73,11 @@ CVE-2023-45251
CVE-2023-43851
REJECTED
CVE-2015-10127 (A vulnerability was found in PlusCaptcha Plugin up to 2.0.6 on
WordPre ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2014-125109 (A vulnerability was found in BestWebSoft Portfolio Plugin up
to 2.27. ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2012-10017 (A vulnerability was found in BestWebSoft Portfolio Plugin up
to 2.04 o ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2023-51467 (The vulnerability allows attackers to bypass authentication to
achieve ...)
NOT-FOR-US: Apache OFBiz
CVE-2023-50968 (Arbitrary file properties reading vulnerability in Apache
Software Fou ...)
@@ -117,41 +117,41 @@ CVE-2023-51363 (VR-S1000 firmware Ver. 2.37 and earlier
allows a network-adjacen
CVE-2023-50658 (The jose2go component before 1.6.0 for Go allows attackers to
cause a ...)
TODO: check
CVE-2023-50339 (Stored cross-site scripting vulnerability exists in the User
Managemen ...)
- TODO: check
+ NOT-FOR-US: GROWI
CVE-2023-50332 (Improper authorization vulnerability exists in the User
Management (/a ...)
- TODO: check
+ NOT-FOR-US: GROWI
CVE-2023-50297 (Open redirect vulnerability in PowerCMS (6 Series, 5 Series,
and 4 Ser ...)
NOT-FOR-US: PowerCMS
CVE-2023-50294 (The App Settings (/admin/app) page in GROWI versions prior to
v6.0.6 s ...)
- TODO: check
+ NOT-FOR-US: GROWI
CVE-2023-50175 (Stored cross-site scripting vulnerability exists in the App
Settings ( ...)
- TODO: check
+ NOT-FOR-US: GROWI
CVE-2023-49807 (Stored cross-site scripting vulnerability when processing the
MathJax ...)
- TODO: check
+ NOT-FOR-US: GROWI
CVE-2023-49779 (Stored cross-site scripting vulnerability exists in the anchor
tag of ...)
- TODO: check
+ NOT-FOR-US: GROWI
CVE-2023-49598 (Stored cross-site scripting vulnerability exists in the event
handlers ...)
- TODO: check
+ NOT-FOR-US: GROWI
CVE-2023-49119 (Stored cross-site scripting vulnerability via the img tags
exists in G ...)
- TODO: check
+ NOT-FOR-US: GROWI
CVE-2023-49117 (PowerCMS (6 Series, 5 Series, and 4 Series) contains a stored
cross-si ...)
NOT-FOR-US: PowerCMS
CVE-2023-47215 (Stored cross-site scripting vulnerability which is exploiting
a behavi ...)
- TODO: check
+ NOT-FOR-US: GROWI
CVE-2023-46711 (VR-S1000 firmware Ver. 2.37 and earlier uses a hard-coded
cryptographi ...)
NOT-FOR-US: VR-S1000 firmware
CVE-2023-46699 (Cross-site request forgery (CSRF) vulnerability exists in the
User set ...)
- TODO: check
+ NOT-FOR-US: GROWI
CVE-2023-46681 (Improper neutralization of argument delimiters in a command
('Argument ...)
NOT-FOR-US: VR-S1000 firmware
CVE-2023-45741 (VR-S1000 firmware Ver. 2.37 and earlier allows an attacker
with access ...)
NOT-FOR-US: VR-S1000 firmware
CVE-2023-45740 (Stored cross-site scripting vulnerability when processing
profile imag ...)
- TODO: check
+ NOT-FOR-US: GROWI
CVE-2023-45737 (Stored cross-site scripting vulnerability exists in the App
Settings ( ...)
- TODO: check
+ NOT-FOR-US: GROWI
CVE-2023-42436 (Stored cross-site scripting vulnerability exists in the
presentation f ...)
- TODO: check
+ NOT-FOR-US: GROWI
CVE-2023-51782 (An issue was discovered in the Linux kernel before 6.6.8.
rose_ioctl i ...)
- linux 6.6.8-1
NOTE:
https://git.kernel.org/linus/810c38a369a0a0ce625b5c12169abce1dd9ccd53 (6.7-rc6)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ac58c2106b3f9146b26071c106e86d84de7549b9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ac58c2106b3f9146b26071c106e86d84de7549b9
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
