Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e20a98d0 by Salvatore Bonaccorso at 2024-07-19T22:17:48+02:00
Process NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,37 +1,37 @@
CVE-2024-6916 (A vulnerability in Zowe CLI allows local, privileged actors to
display ...)
- TODO: check
+ NOT-FOR-US: Zowe CLI
CVE-2024-6908 (Improper privilege management in Yugabyte Platform allows
authenticate ...)
TODO: check
CVE-2024-6907 (A vulnerability was found in SourceCodester Record Management
System 1 ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Record Management System
CVE-2024-6906 (A vulnerability was found in SourceCodester Record Management
System 1 ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Record Management System
CVE-2024-6905 (A vulnerability has been found in SourceCodester Record
Management Sys ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Record Management System
CVE-2024-6904 (A vulnerability, which was classified as critical, was found in
Source ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Record Management System
CVE-2024-6895 (Insufficient authentication in user account management in
Yugabyte Pla ...)
TODO: check
CVE-2024-5977 (The GiveWP \u2013 Donation Plugin and Fundraising Platform
plugin for ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2024-41603 (Spina CMS v2.18.0 was discovered to contain a Cross-Site
Request Forge ...)
- TODO: check
+ NOT-FOR-US: Spina CMS
CVE-2024-41602 (Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0
and bef ...)
- TODO: check
+ NOT-FOR-US: Spina CMS
CVE-2024-41601 (Insecure Permissions vulnerability in lin-CMS v.0.2.0 and
before allow ...)
- TODO: check
+ NOT-FOR-US: lin-CMS
CVE-2024-41600 (Insecure Permissions vulnerability in lin-CMS Springboot
v.0.2.1 and b ...)
- TODO: check
+ NOT-FOR-US: lin-CMS
CVE-2024-41599 (Cross Site Scripting vulnerability in RuoYi v.4.7.9 and before
allows ...)
- TODO: check
+ NOT-FOR-US: RuoYi
CVE-2024-41597 (Cross Site Request Forgery vulnerability in ProcessWire
v.3.0.229 allo ...)
- TODO: check
+ NOT-FOR-US: ProcessWire
CVE-2024-41492 (A stack overflow in Tenda AX1806 v1.0.0.1 allows attackers to
cause a ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2024-41281 (Linksys WRT54G v4.21.5 has a stack overflow vulnerability in
get_merge ...)
- TODO: check
+ NOT-FOR-US: Linksys
CVE-2024-41172 (In versions of Apache CXF before 3.6.4 and 4.0.5 (3.5.x and
lower vers ...)
- TODO: check
+ NOT-FOR-US: Apache CXF
CVE-2024-41124 (Puncia is the Official CLI utility for Subdomain Center &
Exploit Obse ...)
TODO: check
CVE-2024-41122 (Woodpecker is a simple yet powerful CI/CD engine with great
extensibil ...)
@@ -43,17 +43,17 @@ CVE-2024-41107 (The CloudStack SAML authentication
(disabled by default) does no
CVE-2024-40400 (An arbitrary file upload vulnerability in the image upload
function of ...)
TODO: check
CVE-2024-39963 (AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX9 V22.03.01.46 and
AX3000 Du ...)
- TODO: check
+ NOT-FOR-US: AX3000 Dual-Band Gigabit Wi-Fi 6 Router
CVE-2024-39962 (D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router
v21_D240126 w ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2024-39906 (A command injection vulnerability was found in the IndieAuth
functiona ...)
TODO: check
CVE-2024-39457 (Cybozu Garoon 6.0.0 to 6.0.1 contains a cross-site scripting
vulnerabi ...)
- TODO: check
+ NOT-FOR-US: Cybozu
CVE-2024-39123 (In janeczku Calibre-Web 0.6.0 to 0.6.21, the
edit_book_comments functi ...)
TODO: check
CVE-2024-37066 (A command injection vulnerability exists in Wyze V4 Pro
firmware versi ...)
- TODO: check
+ NOT-FOR-US: Wyze
CVE-2024-32007 (An improper input validation of thep2c parameter in the Apache
CXF JOS ...)
TODO: check
CVE-2024-29736 (A SSRF vulnerability in WADL service description in versions
of Apache ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e20a98d069c441f6265d2c950ecb0bcb9c146813
--
This project does not include diff previews in email notifications.
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e20a98d069c441f6265d2c950ecb0bcb9c146813
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
