Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9c78ad01 by Salvatore Bonaccorso at 2024-06-28T22:29:41+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,57 +1,57 @@
CVE-2024-6403 (A vulnerability, which was classified as critical, has been
found in T ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2024-6402 (A vulnerability classified as critical was found in Tenda A301
15.13.0 ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2024-5972
REJECTED
CVE-2024-5925 (The Theron Lite theme for WordPress is vulnerable to Stored
Cross-Site ...)
- TODO: check
+ NOT-FOR-US: WordPress theme
CVE-2024-5922 (The Scylla lite theme for WordPress is vulnerable to Stored
Cross-Site ...)
- TODO: check
+ NOT-FOR-US: WordPress theme
CVE-2024-5827 (Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB
integration ...)
- TODO: check
+ NOT-FOR-US: Vanna
CVE-2024-5737 (Script afGdStream.php inAdmirorFrames Joomla! extension
doesn\u2019t s ...)
- TODO: check
+ NOT-FOR-US: AdmirorFrames Joomla! extension
CVE-2024-5736 (Server Side Request Forgery (SSRF) vulnerability in
AdmirorFrames Joom ...)
- TODO: check
+ NOT-FOR-US: AdmirorFrames Joomla! extension
CVE-2024-5735 (Full Path Disclosure vulnerability in AdmirorFrames Joomla!
extension ...)
- TODO: check
+ NOT-FOR-US: AdmirorFrames Joomla! extension
CVE-2024-5712 (Cross-Site Request Forgery (CSRF) in stitionai/devika)
- TODO: check
+ NOT-FOR-US: stitionai/devika
CVE-2024-5662 (The Ultimate Post Kit Addons For Elementor \u2013 (Post Grid,
Post Car ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-5424 (The Gallery Blocks with Lightbox. Image Gallery, (HTML5 video ,
YouTub ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-3995 (In Helix ALM versions prior to 2024.2.0, a local command
injection was ...)
- TODO: check
+ NOT-FOR-US: Helix ALM
CVE-2024-3816 (Sites managed in S@M CMS (Concept Intermedia) might be
vulnerable to a ...)
- TODO: check
+ NOT-FOR-US: S@M CMS
CVE-2024-3801 (Sites managed in S@M CMS (Concept Intermedia) might be
vulnerable to R ...)
- TODO: check
+ NOT-FOR-US: S@M CMS
CVE-2024-3800 (Sites managed in S@M CMS (Concept Intermedia) might be
vulnerable to R ...)
- TODO: check
+ NOT-FOR-US: S@M CMS
CVE-2024-39704 (Soft Circle French-Bread Melty Blood: Actress Again: Current
Code thro ...)
- TODO: check
+ NOT-FOR-US: Soft Circle French-Bread Melty Blood: Actress Again
CVE-2024-38531 (Nix is a package manager for Linux and other Unix systems that
makes p ...)
TODO: check
CVE-2024-38528 (nptd-rs is a tool for synchronizing your computer's clock,
implementin ...)
TODO: check
CVE-2024-38522 (Hush Line is a free and open-source,
anonymous-tip-line-as-a-service f ...)
- TODO: check
+ NOT-FOR-US: Hush Line
CVE-2024-38521 (Hush Line is a free and open-source,
anonymous-tip-line-as-a-service f ...)
- TODO: check
+ NOT-FOR-US: Hush Line
CVE-2024-38514 (NextChat is a cross-platform ChatGPT/Gemini UI. There is a
Server-Side ...)
- TODO: check
+ NOT-FOR-US: NextChat cross-platform ChatGPT/Gemini UI
CVE-2024-38374 (The CycloneDX core module provides a model representation of
the SBOM ...)
- TODO: check
+ NOT-FOR-US: CycloneDX
CVE-2024-38371 (authentik is an open-source Identity Provider. Access
restrictions ass ...)
- TODO: check
+ NOT-FOR-US: authentik
CVE-2024-38322 (IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.4
agent us ...)
NOT-FOR-US: IBM
CVE-2024-37905 (authentik is an open-source Identity Provider that emphasizes
flexibil ...)
- TODO: check
+ NOT-FOR-US: authentik
CVE-2024-37741 (OpenPLC 3 through 9cd8f1b allows XSS via an SVG document as a
profile ...)
- TODO: check
+ NOT-FOR-US: OpenPLC
CVE-2024-35156 (IBM MQ 9.3 LTS and 9.3 CD could allow a remote attacker to
obtain sens ...)
NOT-FOR-US: IBM
CVE-2024-35155 (IBM MQ Console 9.3 LTS and 9.3 CD could disclose could allow a
remote ...)
@@ -179012,7 +179012,7 @@ CVE-2022-27542
CVE-2022-27541 (Potential Time-of-Check to Time-of Use (TOCTOU)
vulnerabilities have b ...)
NOT-FOR-US: HP
CVE-2022-27540 (A potential Time-of-Check to Time-of Use (TOCTOU)
vulnerability has be ...)
- TODO: check
+ NOT-FOR-US: HP
CVE-2022-27539 (Potential Time-of-Check to Time-of Use (TOCTOU)
vulnerabilities have b ...)
NOT-FOR-US: HP
CVE-2022-27538 (A potential Time-of-Check to Time-of-Use (TOCTOU)
vulnerability has be ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9c78ad012eb849a7b70cf3b0c27ea25dcb68704c
--
This project does not include diff previews in email notifications.
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9c78ad012eb849a7b70cf3b0c27ea25dcb68704c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
