Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
57d1c1c3 by Salvatore Bonaccorso at 2024-03-01T21:50:52+01:00
Process several NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,119 +1,119 @@
CVE-2024-2078 (A Cross-Site Scripting (XSS) vulnerability has been found in
HelpDeskZ ...)
- TODO: check
+ NOT-FOR-US: HelpDeskZ
CVE-2024-2077 (A vulnerability classified as critical has been found in
SourceCodeste ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Simple Online Bidding System
CVE-2024-2076 (A vulnerability was found in CodeAstro House Rental Management
System ...)
- TODO: check
+ NOT-FOR-US: CodeAstro House Rental Management System
CVE-2024-2075 (A vulnerability was found in SourceCodester Daily Habit Tracker
1.0. I ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Daily Habit Tracker
CVE-2024-2074 (A vulnerability was found in Mini-Tmall up to 20231017 and
classified ...)
- TODO: check
+ NOT-FOR-US: Mini-Tmall
CVE-2024-2073 (A vulnerability has been found in SourceCodester Block Inserter
for Dy ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Block Inserter for Dynamic Content
CVE-2024-2072 (A vulnerability, which was classified as problematic, was found
in Sou ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Flashcard Quiz App
CVE-2024-2071 (A vulnerability, which was classified as problematic, has been
found i ...)
- TODO: check
+ NOT-FOR-US: SourceCodester FAQ Management System
CVE-2024-2070 (A vulnerability classified as problematic was found in
SourceCodester ...)
- TODO: check
+ NOT-FOR-US: SourceCodester FAQ Management System
CVE-2024-2069 (A vulnerability classified as critical has been found in
SourceCodeste ...)
- TODO: check
+ NOT-FOR-US: SourceCodester FAQ Management System
CVE-2024-2068 (A vulnerability was found in SourceCodester Computer Inventory
System ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Computer Inventory System
CVE-2024-2067 (A vulnerability was found in SourceCodester Computer Inventory
System ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Computer Inventory System
CVE-2024-2066 (A vulnerability was found in SourceCodester Computer Inventory
System ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Computer Inventory System
CVE-2024-2065 (A vulnerability was found in SourceCodester Barangay Population
Monito ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Barangay Population Monitoring System
CVE-2024-2064 (A vulnerability has been found in rahman SelectCours 1.0 and
classifie ...)
- TODO: check
+ NOT-FOR-US: rahman SelectCours
CVE-2024-2063 (A vulnerability, which was classified as problematic, was found
in Sou ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Petrol Pump Management Software
CVE-2024-2062 (A vulnerability, which was classified as critical, has been
found in S ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Petrol Pump Management Software
CVE-2024-2061 (A vulnerability classified as critical was found in
SourceCodester Pet ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Petrol Pump Management Software
CVE-2024-2060 (A vulnerability classified as critical has been found in
SourceCodeste ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Petrol Pump Management Software
CVE-2024-2059 (A vulnerability was found in SourceCodester Petrol Pump
Management Sof ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Petrol Pump Management Software
CVE-2024-2058 (A vulnerability was found in SourceCodester Petrol Pump
Management Sof ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Petrol Pump Management Software
CVE-2024-2057 (A vulnerability was found in Harrison Chase LangChain 0.1.9. It
has be ...)
- TODO: check
+ NOT-FOR-US: Harrison Chase LangChain
CVE-2024-27734 (A Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows
an atta ...)
- TODO: check
+ NOT-FOR-US: CSZ CMS
CVE-2024-27692
REJECTED
CVE-2024-27689 (Stupid Simple CMS v1.2.4 was discovered to contain a
Cross-Site Reques ...)
- TODO: check
+ NOT-FOR-US: Stupid Simple CMS
CVE-2024-27572 (LBT T300-T390 v2.2.1.8 were discovered to contain a stack
overflow via ...)
- TODO: check
+ NOT-FOR-US: LBT T300-T390
CVE-2024-27571 (LBT T300-T390 v2.2.1.8 were discovered to contain a stack
overflow via ...)
- TODO: check
+ NOT-FOR-US: LBT T300-T390
CVE-2024-27570 (LBT T300-T390 v2.2.1.8 were discovered to contain a stack
overflow via ...)
- TODO: check
+ NOT-FOR-US: LBT T300-T390
CVE-2024-27569 (LBT T300-T390 v2.2.1.8 were discovered to contain a stack
overflow via ...)
- TODO: check
+ NOT-FOR-US: LBT T300-T390
CVE-2024-27568 (LBT T300-T390 v2.2.1.8 were discovered to contain a stack
overflow via ...)
- TODO: check
+ NOT-FOR-US: LBT T300-T390
CVE-2024-27567 (LBT T300- T390 v2.2.1.8 were discovered to contain a stack
overflow vi ...)
- TODO: check
+ NOT-FOR-US: LBT T300-T390
CVE-2024-27559 (Stupid Simple CMS v1.2.4 was discovered to contain a
Cross-Site Reques ...)
- TODO: check
+ NOT-FOR-US: Stupid Simple CMS
CVE-2024-27558 (Stupid Simple CMS 1.2.4 is vulnerable to Cross Site Scripting
(XSS) wi ...)
- TODO: check
+ NOT-FOR-US: Stupid Simple CMS
CVE-2024-27499 (Bagisto v1.5.1 is vulnerable for Cross site scripting(XSS) via
png fil ...)
- TODO: check
+ NOT-FOR-US: Bagisto
CVE-2024-27497 (Linksys E2000 Ver.1.0.06 build 1 is vulnerable to
authentication bypas ...)
- TODO: check
+ NOT-FOR-US: Linksys
CVE-2024-27298 (parse-server is a Parse Server for Node.js / Express. This
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: Parse Server
CVE-2024-27296 (Directus is a real-time API and App dashboard for managing SQL
databas ...)
- TODO: check
+ NOT-FOR-US: Directus
CVE-2024-27295 (Directus is a real-time API and App dashboard for managing SQL
databas ...)
- TODO: check
+ NOT-FOR-US: Directus
CVE-2024-27140 (** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of
Input Duri ...)
- TODO: check
+ NOT-FOR-US: Apache Archiva
CVE-2024-27139 (** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Apache Archiva
CVE-2024-27138 (** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Apache Archiva
CVE-2024-26280 (Apache Airflow, versions before 2.8.2, has a vulnerability
that allows ...)
- airflow <itp> (bug #819700)
CVE-2024-25972 (Initialization of a resource with an insecure default
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Atsumi
CVE-2024-25091 (Protection mechanism failure issue exists in RevoWorks SCVX
prior to s ...)
- TODO: check
+ NOT-FOR-US: RevoWorks
CVE-2024-24907 (Dell Secure Connect Gateway (SCG) Policy Manager, all
versions, contai ...)
- TODO: check
+ NOT-FOR-US: Dell
CVE-2024-24906 (Dell Secure Connect Gateway (SCG) Policy Manager, all
versions, contai ...)
- TODO: check
+ NOT-FOR-US: Dell
CVE-2024-24905 (Dell Secure Connect Gateway (SCG) Policy Manager, all
versions, contai ...)
- TODO: check
+ NOT-FOR-US: Dell
CVE-2024-24904 (Dell Secure Connect Gateway (SCG) Policy Manager, all
versions, contai ...)
- TODO: check
+ NOT-FOR-US: Dell
CVE-2024-24903 (Dell Secure Connect Gateway (SCG) Policy Manager, version
5.10+, conta ...)
- TODO: check
+ NOT-FOR-US: Dell
CVE-2024-24900 (Dell Secure Connect Gateway (SCG) Policy Manager, all
versions, contai ...)
- TODO: check
+ NOT-FOR-US: Dell
CVE-2024-22458 (Dell Secure Connect Gateway, 5.18, contains an Inadequate
Encryption S ...)
- TODO: check
+ NOT-FOR-US: Dell
CVE-2024-22457 (Dell Secure Connect Gateway 5.20 contains an improper
authentication v ...)
- TODO: check
+ NOT-FOR-US: Dell
CVE-2024-1624 (An OS Command Injection vulnerability affecting documentation
server o ...)
TODO: check
CVE-2024-1453 (In Sante DICOM Viewer Pro versions 14.0.3 and prior, a user
must open ...)
- TODO: check
+ NOT-FOR-US: Sante DICOM Viewer Pro
CVE-2024-1174 (Previous versions of HP ThinPro (prior to HP ThinPro 8.0 SP 8)
could p ...)
- TODO: check
+ NOT-FOR-US: HP
CVE-2024-1120 (The NextMove Lite \u2013 Thank You Page for WooCommerce and
Finale Lit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-0967 (A potential vulnerability has been identified in OpenText /
Micro Focu ...)
- TODO: check
+ NOT-FOR-US: OpenText
CVE-2024-0692 (The SolarWinds Security Event Manager was susceptible to Remote
Code E ...)
- TODO: check
+ NOT-FOR-US: SolarWinds
CVE-2023-52558 (In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata
019, an ...)
TODO: check
CVE-2023-52557 (In OpenBSD 7.3 before errata 016, npppd(8) could crash by a
l2tp messa ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/57d1c1c34bff0f925e2a1c2da2df72bbd9b31710
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/57d1c1c34bff0f925e2a1c2da2df72bbd9b31710
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
