Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
93f05c72 by Salvatore Bonaccorso at 2024-09-03T10:29:50+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,27 +1,27 @@
CVE-2024-8380 (A vulnerability was found in SourceCodester Contact Manager
with Expor ...)
- TODO: check
+ NOT-FOR-US: SourceCodester Contact Manager with Export to VCF
CVE-2024-7261 (The improper neutralization of special elements in the
parameter "host ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2024-7203 (A post-authentication command injection vulnerability in Zyxel
ATP ser ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2024-6343 (A buffer overflow vulnerability in the CGI program of Zyxel ATP
series ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2024-5412 (A buffer overflow vulnerability in the library "libclinkc" of
the Zyxe ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2024-45623 (D-Link DAP-2310 Hardware A Firmware 1.16RC028 allows remote
attackers ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2024-42061 (A reflected cross-site scripting (XSS) vulnerability in the
CGI progra ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2024-42060 (A post-authentication command injection vulnerability in Zyxel
ATP ser ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2024-42059 (A post-authentication command injection vulnerability in Zyxel
ATP ser ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2024-42058 (A null pointer dereference vulnerability in Zyxel ATP series
firmware ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2024-42057 (A command injection vulnerability in the IPSec VPN feature of
Zyxel AT ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2024-37136 (Dell Path to PowerProtect, versions 1.1, 1.2, contains an
Exposure of ...)
- TODO: check
+ NOT-FOR-US: Dell
CVE-2024-45620
- opensc <unfixed>
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2309289
@@ -87,7 +87,7 @@ CVE-2024-43797 (audiobookshelf is a self-hosted audiobook and
podcast server. A
CVE-2024-43792 (Halo is an open source website building tool. A security
vulnerability ...)
NOT-FOR-US: Halo
CVE-2024-42471 (actions/artifact is the GitHub ToolKit for developing GitHub
Actions. ...)
- TODO: check
+ NOT-FOR-US: actions/artifact GitHub ToolKit
CVE-2024-38858 (Improper neutralization of input in Checkmk before version
2.3.0p14 al ...)
- check-mk <removed>
CVE-2024-38402 (Memory corruption while processing IOCTL call for getting
group info.)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/93f05c726c1b69af587b5a932d5ee6baaaff695f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/93f05c726c1b69af587b5a932d5ee6baaaff695f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
