Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
212cff3e by Salvatore Bonaccorso at 2022-02-08T21:50:01+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -956,9 +956,9 @@ CVE-2022-24288
CVE-2022-24287
RESERVED
CVE-2022-21799 (Cross-site scripting vulnerability in ELECOM LAN router
WRC-300FEBK-R ...)
- TODO: check
+ NOT-FOR-US: ELECOM
CVE-2022-21173 (Hidden functionality vulnerability in ELECOM LAN routers
(WRH-300BK3 f ...)
- TODO: check
+ NOT-FOR-US: ELECOM
CVE-2022-0470
RESERVED
{DSA-5068-1}
@@ -3026,9 +3026,9 @@ CVE-2022-23814
CVE-2022-23813
RESERVED
CVE-2022-22146 (Cross-site scripting vulnerability in TransmitMail 2.5.0 to
2.6.1 allo ...)
- TODO: check
+ NOT-FOR-US: TransmitMail
CVE-2022-21193 (Directory traversal vulnerability in TransmitMail 2.5.0 to
2.6.1 allow ...)
- TODO: check
+ NOT-FOR-US: TransmitMail
CVE-2022-21176
RESERVED
CVE-2022-21143
@@ -3481,9 +3481,9 @@ CVE-2022-23626
CVE-2022-23625
RESERVED
CVE-2022-23624 (Frourio-express is a minimal full stack framework, for
TypeScript. Fro ...)
- TODO: check
+ NOT-FOR-US: Frourio-express
CVE-2022-23623 (Frourio is a full stack framework, for TypeScript. Frourio
users who u ...)
- TODO: check
+ NOT-FOR-US: Frourio
CVE-2022-23622
RESERVED
CVE-2022-23621
@@ -3513,11 +3513,11 @@ CVE-2022-23613 (xrdp is an open source remote desktop
protocol (RDP) server. In
CVE-2022-23612
RESERVED
CVE-2022-23611 (iTunesRPC-Remastered is a Discord Rich Presence for iTunes on
Windows ...)
- TODO: check
+ NOT-FOR-US: iTunesRPC-Remastered
CVE-2022-23610
RESERVED
CVE-2022-23609 (iTunesRPC-Remastered is a Discord Rich Presence for iTunes on
Windows ...)
- TODO: check
+ NOT-FOR-US: iTunesRPC-Remastered
CVE-2022-23608
RESERVED
CVE-2022-23607 (treq is an HTTP library inspired by requests but written on
top of Twi ...)
@@ -4246,7 +4246,7 @@ CVE-2022-23342
CVE-2022-23341
RESERVED
CVE-2022-23340 (Joplin 2.6.10 allows remote attackers to execute system
commands throu ...)
- TODO: check
+ NOT-FOR-US: Joplin
CVE-2022-23339
RESERVED
CVE-2022-23338
@@ -4264,7 +4264,7 @@ CVE-2022-23333
CVE-2022-23332
RESERVED
CVE-2022-23331 (In DataEase v1.6.1, an authenticated user can gain
unauthorized access ...)
- TODO: check
+ NOT-FOR-US: DataEase
CVE-2022-23330 (A remote code execution (RCE) vulnerability in
HelloWorldAddonControll ...)
NOT-FOR-US: jpress
CVE-2022-23329 (A vulnerability in
${"freemarker.template.utility.Execute"?new() of UJ ...)
@@ -10794,7 +10794,7 @@ CVE-2021-45283
CVE-2021-45282
RESERVED
CVE-2021-45281 (QuickBox Pro v2.4.8 contains a cross-site scripting (XSS)
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: QuickBox Pro
CVE-2021-45280
RESERVED
CVE-2021-45279
@@ -12337,7 +12337,7 @@ CVE-2021-44866 (An issue was discovered in
Online-Movie-Ticket-Booking-System 1.
CVE-2021-44865
RESERVED
CVE-2021-44864 (TP-Link WR886N 3.0 1.0.1 Build 150127 Rel.34123n is vulnerable
to Buff ...)
- TODO: check
+ NOT-FOR-US: TP-Link
CVE-2021-44863
RESERVED
CVE-2021-44862
@@ -12607,9 +12607,9 @@ CVE-2022-21818
CVE-2022-21817 (NVIDIA Omniverse Launcher contains a Cross-Origin Resource
Sharing (CO ...)
NOT-FOR-US: NVIDIA
CVE-2022-21816 (NVIDIA vGPU software contains a vulnerability in the Virtual
GPU Manag ...)
- TODO: check
+ NOT-FOR-US: NVIDIA vGPU software
CVE-2022-21815 (NVIDIA GPU Display Driver for Windows contains a vulnerability
in the ...)
- TODO: check
+ NOT-FOR-US: NVIDIA GPU Display Driver for Windows
CVE-2022-21814 (NVIDIA GPU Display Driver for Linux contains a vulnerability
in the ke ...)
- nvidia-graphics-drivers 470.103.01-1 (bug #1004847)
[bullseye] - nvidia-graphics-drivers <no-dsa> (Non-free not supported)
@@ -72336,15 +72336,15 @@ CVE-2021-22290
CVE-2021-22289
RESERVED
CVE-2021-22288 (Improper Input Validation vulnerability in the ABB SPIET800
and PNI800 ...)
- TODO: check
+ NOT-FOR-US: ABB
CVE-2021-22287
RESERVED
CVE-2021-22286 (Improper Input Validation vulnerability in the ABB SPIET800
and PNI800 ...)
- TODO: check
+ NOT-FOR-US: ABB
CVE-2021-22285 (Improper Handling of Exceptional Conditions, Improper Check
for Unusua ...)
- TODO: check
+ NOT-FOR-US: ABB
CVE-2021-22284 (Incorrect Permission Assignment for Critical Resource
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: ABB
CVE-2021-22283
RESERVED
CVE-2021-22282
@@ -73078,31 +73078,31 @@ CVE-2021-3009
CVE-2021-3008
RESERVED
CVE-2021-21971 (An out-of-bounds write vulnerability exists in the URL_decode
function ...)
- TODO: check
+ NOT-FOR-US: Sealevel Systems
CVE-2021-21970 (An out-of-bounds write vulnerability exists in the
HandleSeaCloudMessa ...)
- TODO: check
+ NOT-FOR-US: Sealevel Systems
CVE-2021-21969 (An out-of-bounds write vulnerability exists in the
HandleSeaCloudMessa ...)
- TODO: check
+ NOT-FOR-US: Sealevel Systems
CVE-2021-21968 (A file write vulnerability exists in the OTA update task
functionality ...)
- TODO: check
+ NOT-FOR-US: Sealevel Systems
CVE-2021-21967
RESERVED
CVE-2021-21966
RESERVED
CVE-2021-21965 (A denial of service vulnerability exists in the SeaMax remote
configur ...)
- TODO: check
+ NOT-FOR-US: Sealevel Systems
CVE-2021-21964 (A denial of service vulnerability exists in the Modbus
configuration f ...)
- TODO: check
+ NOT-FOR-US: Sealevel Systems
CVE-2021-21963 (An information disclosure vulnerability exists in the Web
Server funct ...)
- TODO: check
+ NOT-FOR-US: Sealevel Systems
CVE-2021-21962 (A heap-based buffer overflow vulnerability exists in the OTA
Update u- ...)
- TODO: check
+ NOT-FOR-US: Sealevel Systems
CVE-2021-21961 (A stack-based buffer overflow vulnerability exists in the NBNS
functio ...)
- TODO: check
+ NOT-FOR-US: Sealevel Systems
CVE-2021-21960 (A stack-based buffer overflow vulnerability exists in both the
LLMNR f ...)
- TODO: check
+ NOT-FOR-US: Sealevel Systems
CVE-2021-21959 (A misconfiguration exists in the MQTTS functionality of
Sealevel Syste ...)
- TODO: check
+ NOT-FOR-US: Sealevel Systems
CVE-2021-21958
RESERVED
CVE-2021-21957 (A privilege escalation vulnerability exists in the Remote
Server funct ...)
@@ -125347,7 +125347,7 @@ CVE-2020-12967 (The lack of nested page table
protection in the AMD SEV/SEV-ES f
CVE-2020-12966 (AMD EPYC™ Processors contain an information disclosure
vulnerabi ...)
TODO: check
CVE-2020-12965 (When combined with specific software sequences, AMD CPUs may
transient ...)
- TODO: check
+ NOT-FOR-US: AMD
CVE-2020-12964 (A potential privilege escalation/denial of service issue
exists in the ...)
NOT-FOR-US: Intel / AMD
CVE-2020-12963 (An insufficient pointer validation vulnerability in the AMD
Graphics D ...)
@@ -140886,7 +140886,7 @@ CVE-2020-7536 (A CWE-754:Improper Check for Unusual
or Exceptional Conditions vu
CVE-2020-7535 (A CWE-22: Improper Limitation of a Pathname to a Restricted
Directory ...)
NOT-FOR-US: Modicon
CVE-2020-7534 (A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability
exists on t ...)
- TODO: check
+ NOT-FOR-US: Schneider Electric
CVE-2020-7533 (A CWE-255: Credentials Management vulnerability exists in Web
Server o ...)
NOT-FOR-US: Modicon
CVE-2020-7532 (A CWE-502 Deserialization of Untrusted Data vulnerability
exists in SC ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/212cff3eee43188eeb07a314488a5ec8ba8ab9a8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/212cff3eee43188eeb07a314488a5ec8ba8ab9a8
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
