Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b52c4676 by Salvatore Bonaccorso at 2024-10-30T08:21:20+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -192,9 +192,9 @@ CVE-2024-49634 (Improper Neutralization of Input During Web
Page Generation (XSS
CVE-2024-49632 (Improper Neutralization of Input During Web Page Generation
(XSS or 'C ...)
NOT-FOR-US: WordPress plugin
CVE-2024-48955 (In NetAdmin 4.0.30319, an attacker can steal a valid session
cookie an ...)
- TODO: check
+ NOT-FOR-US: NetAdmin
CVE-2024-48921 (Kyverno is a policy engine designed for Kubernetes. A kyverno
ClusterP ...)
- TODO: check
+ NOT-FOR-US: Kyverno
CVE-2024-47640 (Improper Neutralization of Input During Web Page Generation
(XSS or 'C ...)
NOT-FOR-US: WordPress plugin
CVE-2024-47401 (Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1 and
9.5.x <= 9. ...)
@@ -202,11 +202,11 @@ CVE-2024-47401 (Mattermost versions 9.10.x <= 9.10.2,
9.11.x <= 9.11.1 and 9.5.x
CVE-2024-46872 (Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1, 9.5.x
<= 9.5.9 ...)
- mattermost-server <itp> (bug #823556)
CVE-2024-41156 (Profile files from TRO600 series radios are extracted in
plain-text an ...)
- TODO: check
+ NOT-FOR-US: TRO600 series radios
CVE-2024-41153 (Command injection vulnerability in the Edge Computing UI for
the TRO60 ...)
- TODO: check
+ NOT-FOR-US: TRO600 series radios
CVE-2024-25566 (An Open-Redirect vulnerability exists in PingAM where
well-crafted req ...)
- TODO: check
+ NOT-FOR-US: PingAM
CVE-2024-22066 (There is a privilege escalation vulnerability in ZTE ZXR10 ZSR
V2 inte ...)
NOT-FOR-US: ZTE
CVE-2024-10491 (A vulnerability has been identified in the Express
response.linksfunct ...)
@@ -243,7 +243,7 @@ CVE-2019-25219 (Asio C++ Library before 1.13.0 lacks a
fallback error code in th
- asio 1:1.18.1-1
NOTE: Fixed by:
https://github.com/chriskohlhoff/asio/commit/93337cba7b013150f5aa6194393e1d94be2853ec
(asio-1-13-0)
CVE-2017-20195 (A vulnerability was found in LUNAD3v AreaLoad up to
1a1103182ed63a06dd ...)
- TODO: check
+ NOT-FOR-US: LUNAD3v
CVE-2024-10467 (Memory safety bugs present in Firefox 131, Firefox ESR 128.3,
and Thun ...)
- firefox <unfixed>
- firefox-esr 128.4.0esr-1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b52c46764c9208dd0afa37a7635a0b727f8b2499
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b52c46764c9208dd0afa37a7635a0b727f8b2499
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
