Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
13cc4d6f by Salvatore Bonaccorso at 2024-01-10T21:23:07+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,73 +1,73 @@
CVE-2024-20715 (Adobe Substance 3D Stager versions 2.1.3 and earlier are
affected by a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2024-20714 (Adobe Substance 3D Stager versions 2.1.3 and earlier are
affected by a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2024-20713 (Adobe Substance 3D Stager versions 2.1.3 and earlier are
affected by a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2024-20712 (Adobe Substance 3D Stager versions 2.1.3 and earlier are
affected by a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2024-20711 (Adobe Substance 3D Stager versions 2.1.3 and earlier are
affected by a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2024-20710 (Adobe Substance 3D Stager versions 2.1.3 and earlier are
affected by a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2024-0395
REJECTED
CVE-2024-0389 (A vulnerability, which was classified as critical, was found in
Source ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Student Attendance System
CVE-2024-0310 (A content-security-policy vulnerability in ENS Control browser
extensi ...)
- TODO: check
+ NOT-FOR-US: ENS Control browser extension
CVE-2023-6158 (The EventON - WordPress Virtual Event Calendar Plugin plugin
for WordP ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2023-5455 (A Cross-site request forgery vulnerability exists in
ipa/session/login ...)
TODO: check
CVE-2023-51972 (Tenda AX1803 v1.0.0.1 was discovered to contain a command
injection vu ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51971 (Tenda AX1803 v1.0.0.1 contains a stack overflow via the
adv.iptv.stbpv ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51970 (Tenda AX1803 v1.0.0.1 contains a stack overflow via the
iptv.stb.mode ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51969 (Tenda AX1803 v1.0.0.1 contains a stack overflow via the
iptv.city.vlan ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51968 (Tenda AX1803 v1.0.0.1 contains a stack overflow via the
adv.iptv.stbal ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51967 (Tenda AX1803 v1.0.0.1 contains a stack overflow via the
iptv.stb.port ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51966 (Tenda AX1803 v1.0.0.1 contains a stack overflow via the
adv.iptv.stbal ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51965 (Tenda AX1803 v1.0.0.1 contains a stack overflow via the
adv.iptv.stbpv ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51964 (Tenda AX1803 v1.0.0.1 contains a stack overflow via the
iptv.stb.port ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51963 (Tenda AX1803 v1.0.0.1 contains a stack overflow via the
iptv.city.vlan ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51962 (Tenda AX1803 v1.0.0.1 contains a stack overflow via the
iptv.stb.mode ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51961 (Tenda AX1803 v1.0.0.1 contains a stack overflow via the
adv.iptv.stbal ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51960 (Tenda AX1803 v1.0.0.1 contains a stack overflow via the
iptv.city.vlan ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51959 (Tenda AX1803 v1.0.0.1 contains a stack overflow via the
adv.iptv.stbpv ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51958 (Tenda AX1803 v1.0.0.1 contains a stack overflow via the
iptv.stb.port ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51957 (Tenda AX1803 v1.0.0.1 contains a stack overflow via the
iptv.stb.mode ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51956 (Tenda AX1803 v1.0.0.1 contains a stack overflow via the
iptv.city.vlan ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51955 (Tenda AX1803 v1.0.0.1 contains a stack overflow via the
adv.iptv.stbal ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51954 (Tenda AX1803 v1.0.0.1 contains a stack overflow via the
iptv.stb.port ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51953 (Tenda AX1803 v1.0.0.1 contains a stack overflow via the
iptv.stb.mode ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51952 (Tenda AX1803 v1.0.0.1 contains a stack overflow via the
adv.iptv.stbpv ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-51252 (PublicCMS 4.0 is vulnerable to Cross Site Scripting (XSS).
Because fil ...)
- TODO: check
+ NOT-FOR-US: PublicCMS
CVE-2023-51195
REJECTED
CVE-2023-50916 (Kyocera Device Manager before 3.1.1213.0 allows NTLM
credential exposu ...)
- TODO: check
+ NOT-FOR-US: Kyocera Device Manager
CVE-2023-50172 (A recovery notification bypass vulnerability exists in the
userRecover ...)
TODO: check
CVE-2023-50120 (MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was
discovered to ...)
@@ -91,67 +91,67 @@ CVE-2023-49599 (An insufficient entropy vulnerability
exists in the salt generat
CVE-2023-49589 (An insufficient entropy vulnerability exists in the
userRecoverPass.ph ...)
TODO: check
CVE-2023-49471 (Blind Server-Side Request Forgery (SSRF) vulnerability in
karlomikus B ...)
- TODO: check
+ NOT-FOR-US: karlomikus Bar Assistant
CVE-2023-49427 (Buffer Overflow vulnerability in Tenda AX12 V22.03.01.46,
allows remot ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2023-49394 (Zentao versions 4.1.3 and before has a URL redirect
vulnerability, whi ...)
- TODO: check
+ NOT-FOR-US: Zentao
CVE-2023-48783 (AnAuthorization Bypass Through User-Controlled Key
vulnerability [CWE- ...)
- TODO: check
+ NOT-FOR-US: PortiPortal
CVE-2023-48730 (A cross-site scripting (xss) vulnerability exists in the
navbarMenuAnd ...)
TODO: check
CVE-2023-48728 (A cross-site scripting (xss) vulnerability exists in the
functiongetOp ...)
TODO: check
CVE-2023-48266 (The vulnerability allows an unauthenticated remote attacker to
perform ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48265 (The vulnerability allows an unauthenticated remote attacker to
perform ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48264 (The vulnerability allows an unauthenticated remote attacker to
perform ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48263 (The vulnerability allows an unauthenticated remote attacker to
perform ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48262 (The vulnerability allows an unauthenticated remote attacker to
perform ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48261 (The vulnerability allows a remote unauthenticated attacker to
read arb ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48260 (The vulnerability allows a remote unauthenticated attacker to
read arb ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48259 (The vulnerability allows a remote unauthenticated attacker to
read arb ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48258 (The vulnerability allows a remote attacker to delete arbitrary
files o ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48257 (The vulnerability allows a remote attacker to access sensitive
data in ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48256 (The vulnerability allows a remote attacker to inject arbitrary
HTTP re ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48255 (The vulnerability allows an unauthenticated remote attacker to
send ma ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48254 (The vulnerability allows a remote attacker to inject and
execute arbit ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48253 (The vulnerability allows a remote authenticated attacker to
read or up ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48252 (The vulnerability allows an authenticated remote attacker to
perform a ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48251 (The vulnerability allows a remote attacker to authenticate to
the SSH ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48250 (The vulnerability allows a remote attacker to authenticate to
the web ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48249 (The vulnerability allows an authenticated remote attacker to
list arbi ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48248 (The vulnerability allows an authenticated remote attacker to
upload a ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48247 (The vulnerability allows an unauthenticated remote attacker to
read ar ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48246 (The vulnerability allows a remote attacker to download
arbitrary files ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48245 (The vulnerability allows an unauthenticated remote attacker to
upload ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48244 (The vulnerability allows a remote attacker to inject and
execute arbit ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48243 (The vulnerability allows a remote attacker to upload arbitrary
files i ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-48242 (The vulnerability allows an authenticated remote attacker to
download ...)
- TODO: check
+ NOT-FOR-US: Bosch
CVE-2023-47862 (A local file inclusion vulnerability exists in the
getLanguageFromBrow ...)
TODO: check
CVE-2023-47861 (A cross-site scripting (xss) vulnerability exists in the
channelBody.p ...)
@@ -159,17 +159,17 @@ CVE-2023-47861 (A cross-site scripting (xss)
vulnerability exists in the channel
CVE-2023-47171 (An information disclosure vulnerability exists in the
aVideoEncoder.js ...)
TODO: check
CVE-2023-46712 (A improper access control in Fortinet FortiPortal version
7.0.0 throug ...)
- TODO: check
+ NOT-FOR-US: FortiGuard
CVE-2023-45139 (fontTools is a library for manipulating fonts, written in
Python. The ...)
TODO: check
CVE-2023-44250 (An improper privilege management vulnerability [CWE-269] in a
Fortinet ...)
- TODO: check
+ NOT-FOR-US: FortiGuard
CVE-2023-41603 (D-Link R15 before v1.08.02 was discovered to contain no
firewall restr ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2023-37934 (An allocation of resources without limits or throttling
vulnerability ...)
- TODO: check
+ NOT-FOR-US: FortiGuard
CVE-2023-37932 (An improper limitation of a pathname to a restricted directory
('path ...)
- TODO: check
+ NOT-FOR-US: FortiGuard
CVE-2023-31488 (Hyland Perceptive Filters releases before 2023-12-08 (e.g.,
11.4.0.264 ...)
TODO: check
CVE-2023-49619 (Concurrent Execution using Shared Resource with Improper
Synchronizati ...)
@@ -233269,13 +233269,13 @@ CVE-2020-26632
CVE-2020-26631
RESERVED
CVE-2020-26630 (A Time-Based SQL Injection vulnerability was discovered in
Hospital Ma ...)
- TODO: check
+ NOT-FOR-US: Hospital Management System
CVE-2020-26629 (A JQuery Unrestricted Arbitrary File Upload vulnerability was
discover ...)
TODO: check
CVE-2020-26628 (A Cross-Site Scripting (XSS) vulnerability was discovered in
Hospital ...)
- TODO: check
+ NOT-FOR-US: Hospital Management System
CVE-2020-26627 (A Time-Based SQL Injection vulnerability was discovered in
Hospital Ma ...)
- TODO: check
+ NOT-FOR-US: Hospital Management System
CVE-2020-26626
RESERVED
CVE-2020-26625 (A SQL injection vulnerability was discovered in Gila CMS
1.15.4 and ea ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/13cc4d6fca1643d06e517680c99a1c44f58d1581
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/13cc4d6fca1643d06e517680c99a1c44f58d1581
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
