Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b9ebda90 by Salvatore Bonaccorso at 2022-02-22T21:35:18+01:00
Process several NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1097,7 +1097,7 @@ CVE-2022-0667
CVE-2022-0666 (CRLF Injection leads to Stack Trace Exposure due to lack of
filtering ...)
NOT-FOR-US: microweber
CVE-2022-0665 (Path Traversal in GitHub repository pimcore/pimcore prior to
10.3.2. ...)
- TODO: check
+ NOT-FOR-US: pimcore
CVE-2022-0664 (Use of Hard-coded Cryptographic Key in Go
github.com/gravitl/netmaker ...)
NOT-FOR-US: Go github.com/gravitl/netmaker
CVE-2022-0663
@@ -1220,7 +1220,7 @@ CVE-2022-0650
CVE-2022-0649
RESERVED
CVE-2021-46699 (A vulnerability has been identified in Simcenter Femap (All
versions & ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2022-25257
RESERVED
CVE-2022-25256 (SAS Web Report Studio 4.4 allows XSS.
/SASWebReportStudio/logonAndRend ...)
@@ -3076,7 +3076,7 @@ CVE-2022-24584
CVE-2022-24583
RESERVED
CVE-2022-24582 (Accounting Journal Management 1.0 is vulnerable to
XSS-PHPSESSID-Hijac ...)
- TODO: check
+ NOT-FOR-US: Accounting Journal Management
CVE-2022-24581
RESERVED
CVE-2022-24580
@@ -9679,7 +9679,7 @@ CVE-2022-0146
CVE-2022-0145
RESERVED
CVE-2021-46162 (A vulnerability has been identified in Simcenter Femap (All
versions & ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2021-46161 (A vulnerability has been identified in Simcenter Femap V2020.2
(All ve ...)
NOT-FOR-US: Siemens
CVE-2021-46160 (A vulnerability has been identified in Simcenter Femap V2020.2
(All ve ...)
@@ -17265,9 +17265,9 @@ CVE-2021-4032 (A vulnerability was found in the Linux
kernel's KVM subsystem in
CVE-2021-4031
RESERVED
CVE-2021-4030 (A cross-site request forgery vulnerability in the HTTP daemon
of the Z ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2021-4029 (A command injection vulnerability in the CGI program of the
Zyxel ARMO ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2021-4028 [use-after-free in RDMA listen()]
RESERVED
- linux 5.14.12-1
@@ -69604,7 +69604,7 @@ CVE-2021-24869
CVE-2021-24868 (The Document Embedder WordPress plugin before 1.7.9 contains a
AJAX ac ...)
NOT-FOR-US: WordPress plugin
CVE-2021-24867 (Numerous Plugins and Themes from the AccessPress Themes (aka
Access Ke ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-24866 (The WP Data Access WordPress plugin before 5.0.0 does not
properly san ...)
NOT-FOR-US: WordPress plugin
CVE-2021-24865 (The Advanced Custom Fields: Extended WordPress plugin before
0.8.8.7 d ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b9ebda9002f3c0f0eb199b8c3a5c4fd2008befd7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b9ebda9002f3c0f0eb199b8c3a5c4fd2008befd7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
