Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
c619b2d0 by Moritz Muehlenhoff at 2024-04-02T10:39:37+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,85 +1,85 @@
 CVE-2024-3165 (System->Maintenance-> Log Files in dotCMS dashboard is 
providing the u ...)
-       TODO: check
+       NOT-FOR-US: dotCMS
 CVE-2024-3164 (In dotCMS dashboard, the Tools and Log Files tabs under System 
\u2192  ...)
-       TODO: check
+       NOT-FOR-US: dotCMS
 CVE-2024-3160 (** DISPUTED ** A vulnerability, which was classified as 
problematic, w ...)
-       TODO: check
+       NOT-FOR-US: IntelBras
 CVE-2024-3148 (A vulnerability, which was classified as critical, has been 
found in D ...)
-       TODO: check
+       NOT-FOR-US: DedeCMS
 CVE-2024-3147 (A vulnerability classified as problematic was found in DedeCMS 
5.7. Th ...)
-       TODO: check
+       NOT-FOR-US: DedeCMS
 CVE-2024-3146 (A vulnerability classified as problematic has been found in 
DedeCMS 5. ...)
-       TODO: check
+       NOT-FOR-US: DedeCMS
 CVE-2024-3145 (A vulnerability was found in DedeCMS 5.7. It has been rated as 
problem ...)
-       TODO: check
+       NOT-FOR-US: DedeCMS
 CVE-2024-3144 (A vulnerability was found in DedeCMS 5.7. It has been declared 
as prob ...)
-       TODO: check
+       NOT-FOR-US: DedeCMS
 CVE-2024-3143 (A vulnerability was found in DedeCMS 5.7. It has been 
classified as pr ...)
-       TODO: check
+       NOT-FOR-US: DedeCMS
 CVE-2024-3142 (A vulnerability was found in Clavister E10 and E80 up to 
20240323 and  ...)
-       TODO: check
+       NOT-FOR-US: Clavister
 CVE-2024-3141 (A vulnerability has been found in Clavister E10 and E80 up to 
20240323 ...)
-       TODO: check
+       NOT-FOR-US: Clavister
 CVE-2024-3140 (A vulnerability, which was classified as problematic, was found 
in Sou ...)
-       TODO: check
+       NOT-FOR-US: SourceCodester
 CVE-2024-3139 (A vulnerability, which was classified as critical, has been 
found in S ...)
-       TODO: check
+       NOT-FOR-US: SourceCodester
 CVE-2024-3138 (** DISPUTED ** A vulnerability was found in francoisjacquet 
RosarioSIS ...)
-       TODO: check
+       NOT-FOR-US: RosarioSISster
 CVE-2024-3137 (Improper Privilege Management in uvdesk/community-skeleton)
        TODO: check
 CVE-2024-31005 (An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker 
to execu ...)
-       TODO: check
+       NOT-FOR-US: Bento4
 CVE-2024-31004 (An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker 
to execu ...)
-       TODO: check
+       NOT-FOR-US: Bento4
 CVE-2024-31003 (Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 
allows a rem ...)
-       TODO: check
+       NOT-FOR-US: Bento4
 CVE-2024-31002 (Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 
allows a rem ...)
-       TODO: check
+       NOT-FOR-US: Bento4
 CVE-2024-2925 (The Beaver Builder \u2013 WordPress Page Builder plugin for 
WordPress  ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-2924 (The Creative Addons for Elementor plugin for WordPress is 
vulnerable t ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-2839 (The Colibri Page Builder plugin for WordPress is vulnerable to 
Stored  ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-2791 (The Metform Elementor Contact Form Builder plugin for WordPress 
is vul ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-2369 (The Page Builder Gutenberg Blocks  WordPress plugin before 
3.1.7 does  ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-29276 (An issue was discovered in seeyonOA version 8, allows remote 
attackers ...)
-       TODO: check
+       NOT-FOR-US: seeyonOA
 CVE-2024-29086 (in OpenHarmony v3.2.4 and prior versions allow a local 
attacker cause  ...)
-       TODO: check
+       NOT-FOR-US: OpenHarmony
 CVE-2024-29074 (in OpenHarmony v3.2.4 and prior versions allow a local 
attacker arbitr ...)
-       TODO: check
+       NOT-FOR-US: OpenHarmony
 CVE-2024-28951 (in OpenHarmony v4.0.0 and prior versions allow a local 
attacker arbitr ...)
-       TODO: check
+       NOT-FOR-US: OpenHarmony
 CVE-2024-28226 (in OpenHarmony v4.0.0 and prior versions allow a remote 
attacker cause ...)
-       TODO: check
+       NOT-FOR-US: OpenHarmony
 CVE-2024-27334 (Kofax Power PDF JPG File Parsing Out-Of-Bounds Read 
Information Disclo ...)
-       TODO: check
+       NOT-FOR-US: KOfax Power PDF
 CVE-2024-27333 (Kofax Power PDF GIF File Parsing Out-Of-Bounds Read 
Information Disclo ...)
-       TODO: check
+       NOT-FOR-US: KOfax Power PDF
 CVE-2024-27332 (PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read 
Information Dis ...)
-       TODO: check
+       NOT-FOR-US: PDF-XChange Editor
 CVE-2024-27331 (PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read 
Information Dis ...)
-       TODO: check
+       NOT-FOR-US: PDF-XChange Editor
 CVE-2024-27330 (PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read 
Information Dis ...)
-       TODO: check
+       NOT-FOR-US: PDF-XChange Editor
 CVE-2024-27329 (PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read 
Information Dis ...)
-       TODO: check
+       NOT-FOR-US: PDF-XChange Editor
 CVE-2024-27328 (PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read 
Information Dis ...)
-       TODO: check
+       NOT-FOR-US: PDF-XChange Editor
 CVE-2024-27327 (PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote 
Code Ex ...)
-       TODO: check
+       NOT-FOR-US: PDF-XChange Editor
 CVE-2024-27326 (PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read 
Information Dis ...)
-       TODO: check
+       NOT-FOR-US: PDF-XChange Editor
 CVE-2024-27325 (PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read 
Information Dis ...)
-       TODO: check
+       NOT-FOR-US: PDF-XChange Editor
 CVE-2024-27324 (PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read 
Information Dis ...)
-       TODO: check
+       NOT-FOR-US: PDF-XChange Editor
 CVE-2024-27323 (PDF-XChange Editor Updater Improper Certificate Validation 
Remote Code ...)
-       TODO: check
+       NOT-FOR-US: PDF-XChange Editor
 CVE-2024-26684 (In the Linux kernel, the following vulnerability has been 
resolved:  n ...)
        TODO: check
 CVE-2024-26683 (In the Linux kernel, the following vulnerability has been 
resolved:  w ...)
@@ -139,9 +139,9 @@ CVE-2024-26657 (In the Linux kernel, the following 
vulnerability has been resolv
 CVE-2024-26656 (In the Linux kernel, the following vulnerability has been 
resolved:  d ...)
        TODO: check
 CVE-2024-25187 (Server Side Request Forgery (SSRF) vulnerability in 71cms 
v1.0.0, allo ...)
-       TODO: check
+       NOT-FOR-US: 71cms
 CVE-2024-24581 (in OpenHarmony v4.0.0 and prior versions allow a local 
attacker arbitr ...)
-       TODO: check
+       NOT-FOR-US: OpenHarmony
 CVE-2024-23119 (Centreon insertGraphTemplate SQL Injection Remote Code 
Execution Vulne ...)
        TODO: check
 CVE-2024-23118 (Centreon updateContactHostCommands SQL Injection Remote Code 
Execution ...)
@@ -153,51 +153,51 @@ CVE-2024-23116 (Centreon updateLCARelation SQL Injection 
Remote Code Execution V
 CVE-2024-23115 (Centreon updateGroups SQL Injection Remote Code Execution 
Vulnerabilit ...)
        TODO: check
 CVE-2024-22180 (in OpenHarmony v4.0.0 and prior versions allow a local 
attacker cause  ...)
-       TODO: check
+       NOT-FOR-US: OpenHarmony
 CVE-2024-22177 (in OpenHarmony v3.2.4 and prior versions allow a local 
attacker cause  ...)
-       TODO: check
+       NOT-FOR-US: OpenHarmony
 CVE-2024-22098 (in OpenHarmony v3.2.4 and prior versions allow a local 
attacker arbitr ...)
-       TODO: check
+       NOT-FOR-US: OpenHarmony
 CVE-2024-22092 (in OpenHarmony v3.2.4 and prior versions allow a remote 
attacker bypas ...)
-       TODO: check
+       NOT-FOR-US: OpenHarmony
 CVE-2024-21834 (in OpenHarmony v3.2.4 and prior versions allow a local 
attacker cause  ...)
-       TODO: check
+       NOT-FOR-US: OpenHarmony
 CVE-2024-20854 (Improper handling of insufficient privileges vulnerability in 
Samsung  ...)
-       TODO: check
+       NOT-FOR-US: Samsung
 CVE-2024-20853 (Improper verification of intent by broadcast receiver 
vulnerability in ...)
-       TODO: check
+       NOT-FOR-US: Samsung
 CVE-2024-20852 (Improper verification of intent by broadcast receiver 
vulnerability in ...)
-       TODO: check
+       NOT-FOR-US: Samsung
 CVE-2024-20851 (Improper access control vulnerability in Samsung Data Store 
prior to v ...)
-       TODO: check
+       NOT-FOR-US: Samsung
 CVE-2024-20850 (Use of Implicit Intent for Sensitive Communication in Samsung 
Pay prio ...)
-       TODO: check
+       NOT-FOR-US: Samsung
 CVE-2024-20849 (Out-of-bound Write vulnerability in chunk parsing 
implementation of li ...)
-       TODO: check
+       NOT-FOR-US: Samsung
 CVE-2024-20848 (Out-of-bound Write vulnerability in text parsing 
implementation of lib ...)
-       TODO: check
+       NOT-FOR-US: Samsung
 CVE-2024-20847 (Improper Access Control vulnerability in StorageManagerService 
prior t ...)
-       TODO: check
+       NOT-FOR-US: Samsung
 CVE-2024-20846 (Out-of-bounds write vulnerability while decoding hcr of 
libsavsac.so p ...)
-       TODO: check
+       NOT-FOR-US: Samsung
 CVE-2024-20845 (Out-of-bounds write vulnerability while releasing memory in 
libsavsac. ...)
-       TODO: check
+       NOT-FOR-US: Samsung
 CVE-2024-20844 (Out-of-bounds write vulnerability while parsing remaining 
codewords in ...)
-       TODO: check
+       NOT-FOR-US: Samsung
 CVE-2024-20843 (Out-of-bound write vulnerability in command parsing 
implementation of  ...)
-       TODO: check
+       NOT-FOR-US: Samsung
 CVE-2024-20842 (Improper Input Validation vulnerability in handling apdu of 
libsec-ril ...)
-       TODO: check
+       NOT-FOR-US: Samsung
 CVE-2024-20799 (Adobe Experience Manager versions 6.5.19 and earlier are 
affected by a ...)
-       TODO: check
+       NOT-FOR-US: Adobe
 CVE-2024-1863 (Sante PACS Server Token Endpoint SQL Injection Remote Code 
Execution V ...)
-       TODO: check
+       NOT-FOR-US: Sante PACS Server
 CVE-2024-1504 (The SecuPress Free \u2014 WordPress Security plugin for 
WordPress is v ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-1274 (The My Calendar WordPress plugin before 3.4.24 does not 
sanitise and e ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-1179 (TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer 
Overflow  ...)
-       TODO: check
+       NOT-FOR-US: TP-Link
 CVE-2024-0637 (Centreon updateDirectory SQL Injection Remote Code Execution 
Vulnerabi ...)
        TODO: check
 CVE-2023-52636 (In the Linux kernel, the following vulnerability has been 
resolved:  l ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c619b2d0451cec16f10ac310610da7c062b8286d

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c619b2d0451cec16f10ac310610da7c062b8286d
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to