Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
da6029f8 by Salvatore Bonaccorso at 2024-10-03T10:24:33+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,23 +1,23 @@
 CVE-2024-8352 (The Social Web Suite \u2013 Social Media Auto Post, Social 
Media Auto  ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-8159 (Deep Freeze 9.00.020.5760 is vulnerable to an out-of-bounds 
read vulne ...)
-       TODO: check
+       NOT-FOR-US: Deep Freeze
 CVE-2024-47616 (Pomerium is an identity and context-aware access proxy. The 
Pomerium d ...)
        TODO: check
 CVE-2024-47136 (Out-of-bounds read vulnerability exists in Kostac PLC 
Programming Soft ...)
-       TODO: check
+       NOT-FOR-US: Kostac PLC Programming Software
 CVE-2024-47135 (Stack-based buffer overflow vulnerability exists in Kostac PLC 
Program ...)
-       TODO: check
+       NOT-FOR-US: Kostac PLC Programming Software
 CVE-2024-47134 (Out-of-bounds write vulnerability exists in Kostac PLC 
Programming Sof ...)
-       TODO: check
+       NOT-FOR-US: Kostac PLC Programming Software
 CVE-2024-45519 (The postjournal service in Zimbra Collaboration (ZCS) before 
8.8.15 Pa ...)
-       TODO: check
+       NOT-FOR-US: Zimbra
 CVE-2024-42504 (A security vulnerability in HPE IceWall Agent products could 
be exploi ...)
-       TODO: check
+       NOT-FOR-US: HPE IceWall Agent products
 CVE-2024-28888 (A use-after-free vulnerability exists in the way Foxit Reade 
2024.1.0. ...)
-       TODO: check
+       NOT-FOR-US: Foxit Reader
 CVE-2024-24117 (Insecure Permissions vulnerability in Ruijie RG-NBS2009G-P 
RGOS v.10.4 ...)
-       TODO: check
+       NOT-FOR-US: Ruijie
 CVE-2024-9441 (The Linear eMerge e3-Series through version 1.00-07 is 
vulnerable to a ...)
        NOT-FOR-US: Linear eMerge e3-Series
 CVE-2024-9440 (Slim Select 2.0 versions through 2.9.0 are affected by a 
potential cro ...)
@@ -97,73 +97,73 @@ CVE-2024-33210 (A cross-site scripting (XSS) vulnerability 
has been identified i
 CVE-2024-33209 (FlatPress v1.3 is vulnerable to Cross Site Scripting (XSS). An 
attacke ...)
        NOT-FOR-US: FlatPress
 CVE-2024-24122 (A remote code execution vulnerability in the project 
management of Wan ...)
-       TODO: check
+       NOT-FOR-US: Wanxing Technology's Yitu project
 CVE-2024-24116 (An issue in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 
Release(9736) allows ...)
        NOT-FOR-US: Ruijie
 CVE-2024-20524 (A vulnerability in the web-based management interface of Cisco 
Small B ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20523 (A vulnerability in the web-based management interface of Cisco 
Small B ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20522 (A vulnerability in the web-based management interface of Cisco 
Small B ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20521 (A vulnerability in the web-based management interface of Cisco 
Small B ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20520 (A vulnerability in the web-based management interface of Cisco 
Small B ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20519 (A vulnerability in the web-based management interface of Cisco 
Small B ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20518 (A vulnerability in the web-based management interface of Cisco 
Small B ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20517 (A vulnerability in the web-based management interface of Cisco 
Small B ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20516 (A vulnerability in the web-based management interface of Cisco 
Small B ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20515 (A vulnerability in the web-based management interface of Cisco 
Identit ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20513 (A vulnerability in the Cisco AnyConnect VPN server of Cisco 
Meraki MX  ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20509 (A vulnerability in the Cisco AnyConnect VPN server of Cisco 
Meraki MX  ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20502 (A vulnerability in the Cisco AnyConnect VPN server of Cisco 
Meraki MX  ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20501 (Multiple vulnerabilities in the Cisco AnyConnect VPN server of 
Cisco M ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20500 (A vulnerability in the Cisco AnyConnect VPN server of Cisco 
Meraki MX  ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20499 (Multiple vulnerabilities in the Cisco AnyConnect VPN server of 
Cisco M ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20498 (Multiple vulnerabilities in the Cisco AnyConnect VPN server of 
Cisco M ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20492 (A vulnerability in the restricted shell of Cisco Expressway 
Series cou ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20491 (A vulnerability in a logging function of Cisco Nexus Dashboard 
Insight ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20490 (A vulnerability in a logging function of Cisco Nexus Dashboard 
Fabric  ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20477 (A vulnerability in a specific REST API endpoint of Cisco NDFC 
could al ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20470 (A vulnerability in the web-based management interface of Cisco 
Small B ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20449 (A vulnerability in Cisco Nexus Dashboard Fabric Controller 
(NDFC) coul ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20448 (A vulnerability in the Cisco Nexus Dashboard Fabric Controller 
(NDFC)  ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20444 (A vulnerability in Cisco Nexus Dashboard Fabric Controller 
(NDFC), for ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20442 (A vulnerability in the REST API endpoints of Cisco Nexus 
Dashboard cou ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20441 (A vulnerability in a specific REST API endpoint of Cisco NDFC 
could al ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20438 (A vulnerability in the REST API endpoints of Cisco NDFC could 
allow an ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20432 (A vulnerability in the REST API and web UI of Cisco Nexus 
Dashboard Fa ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20393 (A vulnerability in the web-based management interface of Cisco 
Small B ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20385 (A vulnerability in the SSL/TLS implementation of Cisco Nexus 
Dashboard ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-20365 (A vulnerability in the Redfish API of Cisco UCS B-Series, 
Cisco UCS Ma ...)
-       TODO: check
+       NOT-FOR-US: Cisco
 CVE-2024-XXXX [znuny zsa-2024-05]
        - znuny 6.5.11-1
        [bookworm] - znuny <no-dsa> (Non-free not supported)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/da6029f804b9c5e3cadb9a5e3e126f447d934713

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/da6029f804b9c5e3cadb9a5e3e126f447d934713
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to