Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8c41d59c by Salvatore Bonaccorso at 2024-11-12T21:44:41+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,31 +1,31 @@
CVE-2024-9999 (In WS_FTP Server versions before 8.8.9 (2022.0.9), an Incorrect
Implem ...)
- TODO: check
+ NOT-FOR-US: Progress WS_FTP Server
CVE-2024-9998
REJECTED
CVE-2024-9843 (A buffer over-read in Ivanti Secure Access Client before 22.7R4
allows ...)
- TODO: check
+ NOT-FOR-US: Ivanti
CVE-2024-9842 (Incorrect permissions in Ivanti Secure Access Client before
version 22 ...)
- TODO: check
+ NOT-FOR-US: Ivanti
CVE-2024-9420 (A use-after-free in Ivanti Connect Secure before version
22.7R2.3 and ...)
- TODO: check
+ NOT-FOR-US: Ivanti
CVE-2024-8539 (Improper authorization in Ivanti Secure Access Client before
version 2 ...)
- TODO: check
+ NOT-FOR-US: Ivanti
CVE-2024-8535 (Authenticated user can access unintended user
capabilitiesinNetScaler ...)
- TODO: check
+ NOT-FOR-US: Citrix
CVE-2024-8534 (Memory safety vulnerability leading to memory corruption and
Denial of ...)
- TODO: check
+ NOT-FOR-US: Citrix
CVE-2024-8495 (A null pointer dereference in Ivanti Connect Secure before
version 22. ...)
- TODO: check
+ NOT-FOR-US: Ivanti
CVE-2024-8074 (Improper Privilege Management vulnerability in Nomysoft
Informatics No ...)
- TODO: check
+ NOT-FOR-US: Nomysoft Informatics Nomysem
CVE-2024-8069 (Limited remote code execution with privilege of a
NetworkService Accou ...)
- TODO: check
+ NOT-FOR-US: Citrix
CVE-2024-8068 (Privilege escalation to NetworkService Account accessin Citrix
Session ...)
- TODO: check
+ NOT-FOR-US: Citrix
CVE-2024-7571 (Incorrect permissions in Ivanti Secure Access Client before
22.7R4 all ...)
- TODO: check
+ NOT-FOR-US: Ivanti
CVE-2024-7516 (A vulnerability in Brocade Fabric OS versions before 9.2.2
could allow ...)
- TODO: check
+ NOT-FOR-US: Brocade Fabric OS
CVE-2024-52301 (Laravel is a web application framework. When the
register_argc_argv ph ...)
TODO: check
CVE-2024-52297 (Tolgee is an open-source localization platform. Tolgee 3.81.1
included ...)
@@ -39,11 +39,11 @@ CVE-2024-51750 (Element is a Matrix web client built using
the Matrix React SDK.
CVE-2024-51749 (Element is a Matrix web client built using the Matrix React
SDK. Versi ...)
TODO: check
CVE-2024-51722 (A local privilege escalation vulnerability in the SecuSUITE
Server (Sy ...)
- TODO: check
+ NOT-FOR-US: SecuSUITE
CVE-2024-51721 (A code injection vulnerability in the SecuSUITE Server Web
Administrat ...)
- TODO: check
+ NOT-FOR-US: SecuSUITE
CVE-2024-51720 (An insufficient entropy vulnerability in the SecuSUITE Secure
Client A ...)
- TODO: check
+ NOT-FOR-US: SecuSUITE
CVE-2024-51566 (The NVMe driver queue processing is vulernable to
guest-induced infini ...)
TODO: check
CVE-2024-51565 (The hda driver is vulnerable to a buffer over-read from a
guest-contro ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8c41d59c36398cfd667f40028d40e284eef90a61
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8c41d59c36398cfd667f40028d40e284eef90a61
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
