Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
222a8339 by Moritz Muehlenhoff at 2025-01-14T16:22:37+01:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -33,7 +33,7 @@ CVE-2025-22614 (WeGIA is an open source web manager with a 
focus on the Portugue
 CVE-2025-22613 (WeGIA is an open source web manager with a focus on the 
Portuguese lan ...)
        NOT-FOR-US: WeGIA
 CVE-2025-22138 (@codidact/qpixel is a Q&A-based community knowledge-sharing 
software.  ...)
-       TODO: check
+       NOT-FOR-US: @codidact/qpixel
 CVE-2025-22134 (When switching to other buffers using the :all command and 
visual mode ...)
        - vim <unfixed>
        NOTE: https://github.com/vim/vim/security/advisories/GHSA-5rgf-26wj-48v8
@@ -129,45 +129,45 @@ CVE-2024-57636 (An issue in the itc_sample_row_check 
component of openlink virtu
 CVE-2024-57635 (An issue in the chash_array component of openlink 
virtuoso-opensource  ...)
        TODO: check
 CVE-2024-57634 (An issue in the exp_copy component of MonetDB Server v11.49.1 
allows a ...)
-       TODO: check
+       NOT-FOR-US: MonetDB Server
 CVE-2024-57633 (An issue in the exps_bind_column component of MonetDB Server 
v11.49.1  ...)
-       TODO: check
+       NOT-FOR-US: MonetDB Server
 CVE-2024-57632 (An issue in the is_column_unique component of MonetDB Server 
v11.49.1  ...)
-       TODO: check
+       NOT-FOR-US: MonetDB Server
 CVE-2024-57631 (An issue in the exp_ref component of MonetDB Server v11.49.1 
allows at ...)
-       TODO: check
+       NOT-FOR-US: MonetDB Server
 CVE-2024-57630 (An issue in the exps_card component of MonetDB Server v11.49.1 
allows  ...)
-       TODO: check
+       NOT-FOR-US: MonetDB Server
 CVE-2024-57629 (An issue in the tail_type component of MonetDB Server v11.49.1 
allows  ...)
-       TODO: check
+       NOT-FOR-US: MonetDB Server
 CVE-2024-57628 (An issue in the exp_values_set_supertype component of MonetDB 
Server v ...)
-       TODO: check
+       NOT-FOR-US: MonetDB Server
 CVE-2024-57627 (An issue in the gc_col component of MonetDB Server v11.49.1 
allows att ...)
-       TODO: check
+       NOT-FOR-US: MonetDB Server
 CVE-2024-57626 (An issue in the mat_join2 component of MonetDB Server v11.49.1 
allows  ...)
-       TODO: check
+       NOT-FOR-US: MonetDB Server
 CVE-2024-57625 (An issue in the merge_table_prune_and_unionize component of 
MonetDB Se ...)
-       TODO: check
+       NOT-FOR-US: MonetDB Server
 CVE-2024-57624 (An issue in the exp_atom component of MonetDB Server v11.49.1 
allows a ...)
-       TODO: check
+       NOT-FOR-US: MonetDB Server
 CVE-2024-57623 (An issue in the HEAP_malloc component of MonetDB Server 
v11.49.1 allow ...)
-       TODO: check
+       NOT-FOR-US: MonetDB Server
 CVE-2024-57622 (An issue in the exp_bin component of MonetDB Server v11.49.1 
allows at ...)
-       TODO: check
+       NOT-FOR-US: MonetDB Server
 CVE-2024-57621 (An issue in the GDKanalytical_correlation component of MonetDB 
Server  ...)
-       TODO: check
+       NOT-FOR-US: MonetDB Server
 CVE-2024-57620 (An issue in the trimchars component of MonetDB Server 
v11.47.11 allows ...)
-       TODO: check
+       NOT-FOR-US: MonetDB Server
 CVE-2024-57619 (An issue in the atom_get_int component of MonetDB Server 
v11.47.11 all ...)
-       TODO: check
+       NOT-FOR-US: MonetDB Server
 CVE-2024-57618 (An issue in the bind_col_exp component of MonetDB Server 
v11.47.11 all ...)
-       TODO: check
+       NOT-FOR-US: MonetDB Server
 CVE-2024-57617 (An issue in the dameraulevenshtein component of MonetDB Server 
v11.49. ...)
-       TODO: check
+       NOT-FOR-US: MonetDB Server
 CVE-2024-57616 (An issue in the vscanf component of MonetDB Server v11.47.11 
allows at ...)
-       TODO: check
+       NOT-FOR-US: MonetDB Server
 CVE-2024-57615 (An issue in the BATcalcbetween_intern component of MonetDB 
Server v11. ...)
-       TODO: check
+       NOT-FOR-US: MonetDB Server
 CVE-2024-56323 (OpenFGA is an authorization/permission engine. IN OpenFGA 
v1.3.8 to v1 ...)
        TODO: check
 CVE-2024-56138 (notion-go is a collection of libraries for supporting sign and 
verify  ...)
@@ -175,25 +175,25 @@ CVE-2024-56138 (notion-go is a collection of libraries 
for supporting sign and v
 CVE-2024-51491 (notion-go is a collection of libraries for supporting sign and 
verify  ...)
        TODO: check
 CVE-2024-13348 (The Smart Agenda \u2013 Prise de rendez-vous en ligne plugin 
for WordP ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-13324
        REJECTED
 CVE-2024-13323 (The WP Booking Calendar plugin for WordPress is vulnerable to 
Stored C ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-13154
        REJECTED
 CVE-2024-12398 (An improper privilege management vulnerability in the web 
management i ...)
        TODO: check
 CVE-2024-12365 (The W3 Total Cache plugin for WordPress is vulnerable to 
unauthorized  ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-12298 (We found a vulnerability Improper Restriction of XML External 
Entity R ...)
        TODO: check
 CVE-2024-12083 (Path Traversal Vulnerabilities (CWE-22) exist in NJ/NX-series 
Machine  ...)
        TODO: check
 CVE-2024-12008 (The W3 Total Cache plugin for WordPress is vulnerable to 
Information E ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-12006 (The W3 Total Cache plugin for WordPress is vulnerable to 
unauthorized  ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-11637
        REJECTED
 CVE-2024-11396 (The Event Monster \u2013 Event Management, Tickets Booking, 
Upcoming E ...)
@@ -201,57 +201,57 @@ CVE-2024-11396 (The Event Monster \u2013 Event 
Management, Tickets Booking, Upco
 CVE-2024-11128 (A vulnerability in the BitdefenderVirusScanner binary as used 
inBitdef ...)
        TODO: check
 CVE-2023-42250 (Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross 
Site Scr ...)
-       TODO: check
+       NOT-FOR-US: Selesta Visual Access Manager
 CVE-2023-42249 (Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross 
Site Scr ...)
-       TODO: check
+       NOT-FOR-US: Selesta Visual Access Manager
 CVE-2023-42248 (An issue was discovered in Selesta Visual Access Manager (VAM) 
prior t ...)
-       TODO: check
+       NOT-FOR-US: Selesta Visual Access Manager
 CVE-2023-42247 (Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross 
Site Scr ...)
-       TODO: check
+       NOT-FOR-US: Selesta Visual Access Manager
 CVE-2023-42246 (Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross 
Site Scr ...)
-       TODO: check
+       NOT-FOR-US: Selesta Visual Access Manager
 CVE-2023-42245 (Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross 
Site Scr ...)
-       TODO: check
+       NOT-FOR-US: Selesta Visual Access Manager
 CVE-2023-42244 (An issue was discovered in Selesta Visual Access Manager (VAM) 
prior t ...)
-       TODO: check
+       NOT-FOR-US: Selesta Visual Access Manager
 CVE-2023-42243 (In Selesta Visual Access Manager < 4.42.2, an authenticated 
user can a ...)
-       TODO: check
+       NOT-FOR-US: Selesta Visual Access Manager
 CVE-2023-42242 (An issue was discovered in Selesta Visual Access Manager (VAM) 
prior t ...)
-       TODO: check
+       NOT-FOR-US: Selesta Visual Access Manager
 CVE-2023-42241 (An issue was discovered in Selesta Visual Access Manager (VAM) 
prior t ...)
-       TODO: check
+       NOT-FOR-US: Selesta Visual Access Manager
 CVE-2023-42240 (An issue was discovered in Selesta Visual Access Manager (VAM) 
prior t ...)
-       TODO: check
+       NOT-FOR-US: Selesta Visual Access Manager
 CVE-2023-42239 (An issue was discovered in Selesta Visual Access Manager (VAM) 
prior t ...)
-       TODO: check
+       NOT-FOR-US: Selesta Visual Access Manager
 CVE-2023-42238 (An issue was discovered in Selesta Visual Access Manager (VAM) 
prior t ...)
-       TODO: check
+       NOT-FOR-US: Selesta Visual Access Manager
 CVE-2023-42237 (An issue was discovered in Selesta Visual Access Manager (VAM) 
prior t ...)
-       TODO: check
+       NOT-FOR-US: Selesta Visual Access Manager
 CVE-2023-42236 (An issue was discovered in Selesta Visual Access Manager (VAM) 
prior t ...)
-       TODO: check
+       NOT-FOR-US: Selesta Visual Access Manager
 CVE-2023-42235 (An issue was discovered in Selesta Visual Access Manager (VAM) 
prior t ...)
-       TODO: check
+       NOT-FOR-US: Selesta Visual Access Manager
 CVE-2023-42234 (Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is 
vulnerable to Cr ...)
-       TODO: check
+       NOT-FOR-US: Pat Infinite Solutions HelpdeskAdvanced
 CVE-2023-42233 (Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is 
vulnerable to Cr ...)
-       TODO: check
+       NOT-FOR-US: Pat Infinite Solutions HelpdeskAdvanced
 CVE-2023-42232 (Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is 
vulnerable to Di ...)
-       TODO: check
+       NOT-FOR-US: Pat Infinite Solutions HelpdeskAdvanced
 CVE-2023-42231 (Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is 
vulnerable to In ...)
-       TODO: check
+       NOT-FOR-US: Pat Infinite Solutions HelpdeskAdvanced
 CVE-2023-42230 (Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is 
vulnerable to Cr ...)
-       TODO: check
+       NOT-FOR-US: Pat Infinite Solutions HelpdeskAdvanced
 CVE-2023-42229 (Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is 
vulnerable to Di ...)
-       TODO: check
+       NOT-FOR-US: Pat Infinite Solutions HelpdeskAdvanced
 CVE-2023-42228 (Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is 
vulnerable to In ...)
-       TODO: check
+       NOT-FOR-US: Pat Infinite Solutions HelpdeskAdvanced
 CVE-2023-42227 (Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is 
vulnerable to Di ...)
-       TODO: check
+       NOT-FOR-US: Pat Infinite Solutions HelpdeskAdvanced
 CVE-2023-42226 (Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is 
vulnerable to Di ...)
-       TODO: check
+       NOT-FOR-US: Pat Infinite Solutions HelpdeskAdvanced
 CVE-2023-42225 (Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is 
vulnerable to Di ...)
-       TODO: check
+       NOT-FOR-US: Pat Infinite Solutions HelpdeskAdvanced
 CVE-2025-23027 (next-forge is a Next.js project boilerplate for modern web 
application ...)
        NOT-FOR-US: next-forge Next.js project
 CVE-2025-23026 (jte (Java Template Engine) is a secure and lightweight 
template engine ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/222a83390d7f52849dab01023e8b3db68f5ba13b

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/222a83390d7f52849dab01023e8b3db68f5ba13b
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to