Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
7b7084c0 by Salvatore Bonaccorso at 2025-01-16T07:38:43+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,111 +1,111 @@
 CVE-2025-23040 (GitHub Desktop is an open-source Electron-based GitHub app 
designed fo ...)
        TODO: check
 CVE-2025-22968 (An issue in D-Link DWR-M972V 1.05SSG allows a remote attacker 
to execu ...)
-       TODO: check
+       NOT-FOR-US: D-Link
 CVE-2025-22799 (Improper Neutralization of Special Elements used in an SQL 
Command ('S ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22798 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22797 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22795 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22793 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22788 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22787 (Missing Authorization vulnerability in bPlugins LLC Button 
Block allow ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22786 (Path Traversal vulnerability in ElementInvader ElementInvader 
Addons f ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22785 (Improper Neutralization of Special Elements used in an SQL 
Command ('S ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22784 (Cross-Site Request Forgery (CSRF) vulnerability in Johan 
Str\xf6m Back ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22782 (Unrestricted Upload of File with Dangerous Type vulnerability 
in Web R ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22781 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22780 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22779 (Missing Authorization vulnerability in Ugur CELIK WP News 
Sliders allo ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22778 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22776 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22773 (Insertion of Sensitive Information into Externally-Accessible 
File or  ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22769 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22766 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22765 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22764 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22762 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22761 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22760 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22759 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22758 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22755 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22754 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22753 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22752 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22751 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22750 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22749 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22748 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22747 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22746 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22745 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22744 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22743 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22742 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22738 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22737 (Missing Authorization vulnerability in MagePeople Team 
WpTravelly allo ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22736 (Incorrect Privilege Assignment vulnerability in WPExperts User 
Managem ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22734 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22731 (Cross-Site Request Forgery (CSRF) vulnerability in 
silverplugins217 Bu ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22729 (Missing Authorization vulnerability in Infomaniak Staff VOD 
Infomaniak ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22724 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22587 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22346 (Server-Side Request Forgery (SSRF) vulnerability in Faizaan 
Gagan Cour ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22329 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22317 (Improper Neutralization of Input During Web Page Generation 
('Cross-si ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-22146 (Sentry is a developer-first error tracking and performance 
monitoring  ...)
-       TODO: check
+       NOT-FOR-US: Sentry
 CVE-2025-21630 (In the Linux kernel, the following vulnerability has been 
resolved:  i ...)
        - linux 6.12.9-1
        [bookworm] - linux <not-affected> (Vulnerable code not present)
@@ -118,41 +118,41 @@ CVE-2025-21629 (In the Linux kernel, the following 
vulnerability has been resolv
 CVE-2025-21088 (Mattermost versions 10.2.x <= 10.2.0, 9.11.x <= 9.11.5, 10.0.x 
<= 10.0 ...)
        - mattermost-server <itp> (bug #823556)
 CVE-2025-21083 (Mattermost Mobile Apps versions <=2.22.0 fail to properly 
validate pos ...)
-       TODO: check
+       NOT-FOR-US: Mattermost Mobile Apps
 CVE-2025-20088 (Mattermost versions 10.2.x <= 10.2.0, 9.11.x <= 9.11.5, 10.0.x 
<= 10.0 ...)
        - mattermost-server <itp> (bug #823556)
 CVE-2025-20086 (Mattermost versions 10.2.x <= 10.2.0, 9.11.x <= 9.11.5, 10.0.x 
<= 10.0 ...)
        - mattermost-server <itp> (bug #823556)
 CVE-2025-20036 (Mattermost Mobile Apps versions <=2.22.0 fail to properly 
validate pos ...)
-       TODO: check
+       NOT-FOR-US: Mattermost Mobile Apps
 CVE-2025-0502 (Transmission of Private Resources into a New Sphere ('Resource 
Leak')  ...)
-       TODO: check
+       NOT-FOR-US: CrafterCMS
 CVE-2025-0501 (An issue in the native clients for Amazon WorkSpaces Clients 
when runn ...)
        TODO: check
 CVE-2025-0500 (An issue in the native clients for Amazon WorkSpaces, Amazon 
AppStream ...)
        TODO: check
 CVE-2025-0485 (A vulnerability was found in Fanli2012 native-php-cms 1.0. It 
has been ...)
-       TODO: check
+       NOT-FOR-US: Fanli2012 native-php-cms
 CVE-2025-0484 (A vulnerability was found in Fanli2012 native-php-cms 1.0 and 
classifi ...)
-       TODO: check
+       NOT-FOR-US: Fanli2012 native-php-cms
 CVE-2025-0483 (A vulnerability has been found in Fanli2012 native-php-cms 1.0 
and cla ...)
-       TODO: check
+       NOT-FOR-US: Fanli2012 native-php-cms
 CVE-2025-0482 (A vulnerability, which was classified as critical, was found in 
Fanli2 ...)
-       TODO: check
+       NOT-FOR-US: Fanli2012 native-php-cms
 CVE-2025-0481 (A vulnerability classified as problematic has been found in 
D-Link DIR ...)
-       TODO: check
+       NOT-FOR-US: D-Link
 CVE-2025-0480 (A vulnerability classified as problematic has been found in 
wuzhicms 4 ...)
-       TODO: check
+       NOT-FOR-US: wuzhicms
 CVE-2025-0193 (A stored Cross-site Scripting (XSS) vulnerability exists in the 
MGate  ...)
-       TODO: check
+       NOT-FOR-US: Moxa
 CVE-2024-9636 (The Post Grid and Gutenberg Blocks plugin for WordPress is 
vulnerable  ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-8603 (A \u201cUse of a Broken or Risky Cryptographic Algorithm\u201d 
vulnera ...)
-       TODO: check
+       NOT-FOR-US: B&R Automation
 CVE-2024-7085 (Improper Neutralization of Input During Web Page Generation 
(XSS or 'C ...)
-       TODO: check
+       NOT-FOR-US: OpenText
 CVE-2024-5198 (OpenVPN ovpn-dco for Windows version 1.1.1 allows an 
unprivileged loca ...)
-       TODO: check
+       NOT-FOR-US: OpenVPN ovpn-dco for Windows
 CVE-2024-57903 (In the Linux kernel, the following vulnerability has been 
resolved:  n ...)
        - linux 6.12.9-1
        [bookworm] - linux 6.1.124-1
@@ -263,43 +263,43 @@ CVE-2024-57795 (In the Linux kernel, the following 
vulnerability has been resolv
        - linux 6.12.9-1
        NOTE: 
https://git.kernel.org/linus/2ac5415022d16d63d912a39a06f32f1f51140261 (6.13-rc6)
 CVE-2024-57025 (TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to 
contain an O ...)
-       TODO: check
+       NOT-FOR-US: TOTOLINK
 CVE-2024-57024 (TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to 
contain an O ...)
-       TODO: check
+       NOT-FOR-US: TOTOLINK
 CVE-2024-57023 (TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to 
contain an O ...)
-       TODO: check
+       NOT-FOR-US: TOTOLINK
 CVE-2024-57022 (TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to 
contain an O ...)
-       TODO: check
+       NOT-FOR-US: TOTOLINK
 CVE-2024-57021 (TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to 
contain an O ...)
-       TODO: check
+       NOT-FOR-US: TOTOLINK
 CVE-2024-57020 (TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to 
contain an O ...)
-       TODO: check
+       NOT-FOR-US: TOTOLINK
 CVE-2024-57019 (TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to 
contain an O ...)
-       TODO: check
+       NOT-FOR-US: TOTOLINK
 CVE-2024-57018 (TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to 
contain an O ...)
-       TODO: check
+       NOT-FOR-US: TOTOLINK
 CVE-2024-57017 (TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to 
contain an O ...)
-       TODO: check
+       NOT-FOR-US: TOTOLINK
 CVE-2024-57016 (TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to 
contain an O ...)
-       TODO: check
+       NOT-FOR-US: TOTOLINK
 CVE-2024-57015 (TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to 
contain an O ...)
-       TODO: check
+       NOT-FOR-US: TOTOLINK
 CVE-2024-57014 (TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to 
contain an O ...)
-       TODO: check
+       NOT-FOR-US: TOTOLINK
 CVE-2024-57013 (TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to 
contain an O ...)
-       TODO: check
+       NOT-FOR-US: TOTOLINK
 CVE-2024-57012 (TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to 
contain an O ...)
-       TODO: check
+       NOT-FOR-US: TOTOLINK
 CVE-2024-57011 (TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to 
contain an O ...)
-       TODO: check
+       NOT-FOR-US: TOTOLINK
 CVE-2024-56295 (Missing Authorization vulnerability in Poll Maker Team Poll 
Maker allo ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-54540 (The issue was addressed with improved input sanitization. This 
issue i ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2024-54535 (A path handling issue was addressed with improved logic. This 
issue is ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2024-54470 (A logic issue was addressed with improved checks. This issue 
is fixed  ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2024-54031 (In the Linux kernel, the following vulnerability has been 
resolved:  n ...)
        - linux 6.12.9-1
        [bookworm] - linux 6.1.124-1
@@ -310,27 +310,27 @@ CVE-2024-53681 (In the Linux kernel, the following 
vulnerability has been resolv
        [bullseye] - linux <not-affected> (Vulnerable code not present)
        NOTE: 
https://git.kernel.org/linus/4db3d750ac7e894278ef1cb1c53cc7d883060496 (6.13-rc6)
 CVE-2024-52783 (Insecure permissions in the XNetSocketClient component of 
XINJE XDPPro ...)
-       TODO: check
+       NOT-FOR-US: XINJE XDPPro.exe
 CVE-2024-52005 (Git is a source code management tool. When cloning from a 
server (or f ...)
        TODO: check
 CVE-2024-50954 (The XINJE XL5E-16T and XD5E-24R-E programmable logic 
controllers V3.5. ...)
-       TODO: check
+       NOT-FOR-US: XINJE
 CVE-2024-50953 (An issue in XINJE XL5E-16T V3.7.2a allows attackers to cause a 
Denial  ...)
-       TODO: check
+       NOT-FOR-US: XINJE
 CVE-2024-47140 (A cross-site scripting (xss) vulnerability exists in the 
add_alert_che ...)
-       TODO: check
+       NOT-FOR-US: Observium
 CVE-2024-47002 (A html code injection vulnerability exists in the vlan 
management part ...)
-       TODO: check
+       NOT-FOR-US: Observium
 CVE-2024-45061 (A cross-site scripting (xss) vulnerability exists in the 
weather map e ...)
-       TODO: check
+       NOT-FOR-US: Observium
 CVE-2024-44136 (This issue was addressed through improved state management. 
This issue ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2024-40854 (A memory initialization issue was addressed with improved 
memory handl ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2024-40839 (This issue was addressed through improved state management. 
This issue ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2024-40771 (The issue was addressed with improved memory handling. This 
issue is f ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2024-39282 (In the Linux kernel, the following vulnerability has been 
resolved:  n ...)
        - linux 6.12.9-1
        [bookworm] - linux 6.1.124-1
@@ -341,33 +341,33 @@ CVE-2024-36476 (In the Linux kernel, the following 
vulnerability has been resolv
        [bookworm] - linux 6.1.124-1
        NOTE: 
https://git.kernel.org/linus/fb514b31395946022f13a08e06a435f53cf9e8b3 (6.13-rc6)
 CVE-2024-35280 (A improper neutralization of input during web page generation 
('cross- ...)
-       TODO: check
+       NOT-FOR-US: FortiGuard
 CVE-2024-27856 (The issue was addressed with improved checks. This issue is 
fixed in m ...)
-       TODO: check
+       NOT-FOR-US: Apple
 CVE-2024-13351 (The Social proof testimonials and reviews by Repuso plugin for 
WordPre ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-13215 (The Elementor Addon Elements plugin for WordPress is 
vulnerable to Sen ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-12818 (The WP Smart TV plugin for WordPress is vulnerable to Stored 
Cross-Sit ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-12593 (The PDF for WPForms + Drag and Drop Template Builder plugin 
for WordPr ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-12423 (The Contact Form 7 Redirect & Thank You Page plugin for 
WordPress is v ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-12403 (The Image Gallery \u2013 Responsive Photo Gallery plugin for 
WordPress ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-12297 (Moxa\u2019s Ethernet switch EDS-508A Series, running firmware 
version  ...)
-       TODO: check
+       NOT-FOR-US: Moxa
 CVE-2024-11851 (The NitroPack plugin for WordPress is vulnerable to 
unauthorized arbit ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-11848 (The NitroPack plugin for WordPress is vulnerable to 
unauthorized modif ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-11322 (A denial-of-service vulnerability exists in CyberPower 
PowerPanel Busi ...)
        TODO: check
 CVE-2024-11029 (A flaw was found in the FreeIPA API audit, where it sends the 
whole Fr ...)
        TODO: check
 CVE-2024-10775 (The Piotnet Addons For Elementor plugin for WordPress is 
vulnerable to ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2025-23061 (Mongoose before 8.9.5 can improperly use a nested $where 
filter with a ...)
        NOT-FOR-US: Mongoose
 CVE-2025-23013 (In Yubico pam-u2f before 1.3.1, local privilege escalation can 
sometim ...)
@@ -1537,7 +1537,7 @@ CVE-2024-57616 (An issue in the vscanf component of 
MonetDB Server v11.47.11 all
 CVE-2024-57615 (An issue in the BATcalcbetween_intern component of MonetDB 
Server v11. ...)
        NOT-FOR-US: MonetDB Server
 CVE-2024-56323 (OpenFGA is an authorization/permission engine. IN OpenFGA 
v1.3.8 to v1 ...)
-       TODO: check
+       NOT-FOR-US: OpenFGA
 CVE-2024-56138 (notion-go is a collection of libraries for supporting sign and 
verify  ...)
        TODO: check
 CVE-2024-51491 (notion-go is a collection of libraries for supporting sign and 
verify  ...)
@@ -1551,7 +1551,7 @@ CVE-2024-13323 (The WP Booking Calendar plugin for 
WordPress is vulnerable to St
 CVE-2024-13154
        REJECTED
 CVE-2024-12398 (An improper privilege management vulnerability in the web 
management i ...)
-       TODO: check
+       NOT-FOR-US: Zyxel
 CVE-2024-12365 (The W3 Total Cache plugin for WordPress is vulnerable to 
unauthorized  ...)
        NOT-FOR-US: WordPress plugin
 CVE-2024-12298 (We found a vulnerability Improper Restriction of XML External 
Entity R ...)
@@ -1565,9 +1565,9 @@ CVE-2024-12006 (The W3 Total Cache plugin for WordPress 
is vulnerable to unautho
 CVE-2024-11637
        REJECTED
 CVE-2024-11396 (The Event Monster \u2013 Event Management, Tickets Booking, 
Upcoming E ...)
-       TODO: check
+       NOT-FOR-US: WordPress plugin
 CVE-2024-11128 (A vulnerability in the BitdefenderVirusScanner binary as used 
inBitdef ...)
-       TODO: check
+       NOT-FOR-US: Bitdefender
 CVE-2023-42250 (Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross 
Site Scr ...)
        NOT-FOR-US: Selesta Visual Access Manager
 CVE-2023-42249 (Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross 
Site Scr ...)
@@ -383915,7 +383915,7 @@ CVE-2020-8096 (Untrusted Search Path vulnerability in 
Bitdefender High-Level Ant
 CVE-2020-8095 (A vulnerability in the improper handling of junctions before 
deletion  ...)
        NOT-FOR-US: Bitdefender Total Security
 CVE-2020-8094 (An untrusted search path vulnerability in testinitsigs.exe as 
used in  ...)
-       TODO: check
+       NOT-FOR-US: Bitdefender
 CVE-2020-8093 (A vulnerability in the AntivirusforMac binary as used in 
Bitdefender A ...)
        NOT-FOR-US: Bitdefender Antivirus for Mac
 CVE-2020-8092 (A privilege escalation vulnerability in BDLDaemon as used in 
Bitdefend ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7b7084c0cf7941ac49b6cf8869572f1ee39751f3

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7b7084c0cf7941ac49b6cf8869572f1ee39751f3
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to