Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
96760d79 by Moritz Muehlenhoff at 2022-05-12T14:57:15+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -929,7 +929,7 @@ CVE-2022-30280
CVE-2022-30279
RESERVED
CVE-2022-30278 (A vulnerability in Black Duck Hub’s embedded MadCap
Flare docume ...)
- TODO: check
+ NOT-FOR-US: Black Duck Hub
CVE-2022-30277
RESERVED
CVE-2022-30276
@@ -1311,7 +1311,7 @@ CVE-2022-30132
CVE-2022-30131
RESERVED
CVE-2022-30130 (.NET Framework Denial of Service Vulnerability. ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-30129 (Visual Studio Code Remote Code Execution Vulnerability. ...)
NOT-FOR-US: Microsoft
CVE-2022-30128
@@ -1688,7 +1688,7 @@ CVE-2022-29973 (relan exFAT 1.3.0 allows local users to
obtain sensitive informa
CVE-2022-29972 (An argument injection vulnerability in the browser-based
authenticatio ...)
NOT-FOR-US: Magnitude Simba Amazon Redshift ODBC Driver
CVE-2022-29971 (An argument injection vulnerability in the browser-based
authenticatio ...)
- TODO: check
+ NOT-FOR-US: Magnitude Simba Amazon Athena ODBC Driver
CVE-2022-29970 (Sinatra before 2.2.0 does not validate that the expanded path
matches ...)
- ruby-sinatra <unfixed>
NOTE:
https://github.com/sinatra/sinatra/commit/462c3ca1db53ed3cfc394cf5948e9c948ad1c10e
(v2.2.0)
@@ -1782,7 +1782,7 @@ CVE-2022-29934 (USU Oracle Optimization before 5.17.5
lacks Polkit authenticatio
CVE-2022-29933 (Craft CMS through 3.7.36 allows a remote unauthenticated
attacker, who ...)
NOT-FOR-US: Craft CMS
CVE-2022-29932 (The HTTP Server in PRIMEUR SPAZIO 2.5.1.954 (File Transfer)
allows an ...)
- TODO: check
+ NOT-FOR-US: PRIMEUR
CVE-2022-29931
RESERVED
CVE-2022-29930
@@ -1934,9 +1934,9 @@ CVE-2022-29900
CVE-2022-29899
RESERVED
CVE-2022-29898 (On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an
admin user c ...)
- TODO: check
+ NOT-FOR-US: RAD-ISM-900-EN
CVE-2022-29897 (On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an
admin user c ...)
- TODO: check
+ NOT-FOR-US: RAD-ISM-900-EN
CVE-2022-29892
RESERVED
CVE-2022-29885
@@ -2079,13 +2079,13 @@ CVE-2022-29850
CVE-2022-29849 (In Progress OpenEdge before 11.7.14 and 12.x before 12.2.9,
certain SU ...)
NOT-FOR-US: Progress OpenEdge
CVE-2022-29848 (In Progress Ipswitch WhatsUp Gold 17.0.0 through 21.1.1, and
22.0.0, i ...)
- TODO: check
+ NOT-FOR-US: Progress Ipswitch WhatsUp Gold
CVE-2022-29847 (In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and
22.0.0, i ...)
- TODO: check
+ NOT-FOR-US: Progress Ipswitch WhatsUp Gold
CVE-2022-29846 (In Progress Ipswitch WhatsUp Gold 16.1 through 21.1.1, and
22.0.0, it ...)
- TODO: check
+ NOT-FOR-US: Progress Ipswitch WhatsUp Gold
CVE-2022-29845 (In Progress Ipswitch WhatsUp Gold 21.1.0 through 21.1.1, and
22.0.0, i ...)
- TODO: check
+ NOT-FOR-US: Progress Ipswitch WhatsUp Gold
CVE-2022-29844
RESERVED
CVE-2022-29843
@@ -2570,9 +2570,9 @@ CVE-2022-29730
CVE-2022-29729
RESERVED
CVE-2022-29728 (Survey Sparrow Enterprise Survey Software 2022 has a Reflected
cross-s ...)
- TODO: check
+ NOT-FOR-US: Survey Sparrow Enterprise Survey Software
CVE-2022-29727 (Survey Sparrow Enterprise Survey Software 2022 has a Stored
cross-site ...)
- TODO: check
+ NOT-FOR-US: Survey Sparrow Enterprise Survey Software
CVE-2022-29726
RESERVED
CVE-2022-29725
@@ -2714,9 +2714,9 @@ CVE-2022-29658
CVE-2022-29657
RESERVED
CVE-2022-29656 (Wedding Management System v1.0 was discovered to contain a SQL
injecti ...)
- TODO: check
+ NOT-FOR-US: Wedding Management System
CVE-2022-29655 (An arbitrary file upload vulnerability in the Upload Photos
module of ...)
- TODO: check
+ NOT-FOR-US: Wedding Management System
CVE-2022-29654
RESERVED
CVE-2022-29653
@@ -2873,7 +2873,7 @@ CVE-2022-29598
CVE-2022-29597
RESERVED
CVE-2022-29596 (MicroStrategy Enterprise Manager 2022 allows authentication
bypass by ...)
- TODO: check
+ NOT-FOR-US: MicroStrategy Enterprise Manager
CVE-2022-29595
RESERVED
CVE-2022-29594
@@ -3636,9 +3636,9 @@ CVE-2022-29319
CVE-2022-29318 (An arbitrary file upload vulnerability in the New Entry module
of Car ...)
TODO: check
CVE-2022-29317 (Simple Bus Ticket Booking System v1.0 was discovered to
contain multip ...)
- TODO: check
+ NOT-FOR-US: Simple Bus Ticket Booking System
CVE-2022-29316 (Complete Online Job Search System v1.0 was discovered to
contain a SQL ...)
- TODO: check
+ NOT-FOR-US: Complete Online Job Search System
CVE-2022-29315 (Invicti Acunetix before 14 allows CSV injection via the
Description fi ...)
NOT-FOR-US: Invicti Acunetix
CVE-2022-29314
@@ -4142,15 +4142,15 @@ CVE-2022-29143
CVE-2022-29142 (Windows Kernel Elevation of Privilege Vulnerability. This CVE
ID is un ...)
NOT-FOR-US: Microsoft
CVE-2022-29141 (Windows LDAP Remote Code Execution Vulnerability. This CVE ID
is uniqu ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-29140 (Windows Print Spooler Information Disclosure Vulnerability.
This CVE I ...)
NOT-FOR-US: Microsoft
CVE-2022-29139 (Windows LDAP Remote Code Execution Vulnerability. This CVE ID
is uniqu ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-29138 (Windows Clustered Shared Volume Elevation of Privilege
Vulnerability. ...)
NOT-FOR-US: Microsoft
CVE-2022-29137 (Windows LDAP Remote Code Execution Vulnerability. This CVE ID
is uniqu ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-29136
RESERVED
CVE-2022-29135 (Windows Cluster Shared Volume (CSV) Elevation of Privilege
Vulnerabili ...)
@@ -4162,13 +4162,13 @@ CVE-2022-29133 (Windows Kernel Elevation of Privilege
Vulnerability. This CVE ID
CVE-2022-29132 (Windows Print Spooler Elevation of Privilege Vulnerability.
This CVE I ...)
NOT-FOR-US: Microsoft
CVE-2022-29131 (Windows LDAP Remote Code Execution Vulnerability. This CVE ID
is uniqu ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-29130 (Windows LDAP Remote Code Execution Vulnerability. This CVE ID
is uniqu ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-29129 (Windows LDAP Remote Code Execution Vulnerability. This CVE ID
is uniqu ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-29128 (Windows LDAP Remote Code Execution Vulnerability. This CVE ID
is uniqu ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-29127 (BitLocker Security Feature Bypass Vulnerability. ...)
NOT-FOR-US: Microsoft
CVE-2022-29126 (Tablet Windows User Interface Application Core Elevation of
Privilege ...)
@@ -4556,9 +4556,9 @@ CVE-2022-29011
CVE-2022-29010
RESERVED
CVE-2022-29009 (Multiple SQL injection vulnerabilities via the username and
password p ...)
- TODO: check
+ NOT-FOR-US: Cyber Cafe Management System Project
CVE-2022-29008 (An insecure direct object reference (IDOR) vulnerability in
the viewid ...)
- TODO: check
+ NOT-FOR-US: Bus Pass Management System
CVE-2022-29007 (Multiple SQL injection vulnerabilities via the username and
password p ...)
TODO: check
CVE-2022-29006 (Multiple SQL injection vulnerabilities via the username and
password p ...)
@@ -4922,9 +4922,9 @@ CVE-2022-28840
CVE-2022-28839
RESERVED
CVE-2022-28838 (Acrobat Acrobat Pro DC version 22.001.2011x (and earlier),
20.005.3033 ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28837 (Acrobat Pro DC version 22.001.2011x (and earlier),
20.005.3033x (and e ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28836
RESERVED
CVE-2022-28835
@@ -6554,85 +6554,85 @@ CVE-2022-28271 (Adobe Photoshop versions 22.5.6 (and
earlier)and 23.2.2 (and ear
CVE-2022-28270 (Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and
earlier) ...)
NOT-FOR-US: Adobe
CVE-2022-28269 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28268 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28267 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28266 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28265 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28264 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28263 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28262 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28261 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28260 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28259 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28258 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28257 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28256 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28255 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28254 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28253 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28252 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28251 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28250 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28249 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28248 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28247 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28246 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28245 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28244 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28243 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28242 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28241 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28240 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28239 (Acrobat Reader DC version 22.001.2011x (and earlier),
20.005.3033x (an ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28238 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28237 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28236 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28235 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28234 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28233 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28232 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28231 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28230 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-28229
RESERVED
CVE-2022-28228
@@ -7250,9 +7250,9 @@ CVE-2022-28080 (Royal Event Management System v1.0 was
discovered to contain a S
CVE-2022-28079 (College Management System v1.0 was discovered to contain a SQL
injecti ...)
NOT-FOR-US: College Management System
CVE-2022-28078 (Home Owners Collection Management v1 was discovered to contain
a refle ...)
- TODO: check
+ NOT-FOR-US: Home Owners Collection Management
CVE-2022-28077 (Home Owners Collection Management v1 was discovered to contain
a refle ...)
- TODO: check
+ NOT-FOR-US: Home Owners Collection Management
CVE-2022-28076 (Seacms v11.6 was discovered to contain a remote command
execution (RCE ...)
NOT-FOR-US: Seacms
CVE-2022-28075
@@ -7966,41 +7966,41 @@ CVE-2022-27810
CVE-2022-27809
RESERVED
CVE-2022-27802 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-27801 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-27800 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-27799 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-27798 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-27797 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-27796 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-27795 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-27794 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-27793 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-27792 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-27791 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-27790 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-27789 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-27788 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-27787 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-27786 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-27785 (Acrobat Reader DC versions 22.001.20085 (and earlier),
20.005.3031x (a ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2022-27784 (Adobe After Effects versions 22.2.1 (and earlier) and 18.4.5
(and earl ...)
NOT-FOR-US: Adobe
CVE-2022-27783 (Adobe After Effects versions 22.2.1 (and earlier) and 18.4.5
(and earl ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/96760d795530baae452cff0068f2ee56de7358b9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/96760d795530baae452cff0068f2ee56de7358b9
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
