Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
e665b2bc by Salvatore Bonaccorso at 2022-06-01T05:03:53+02:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -850,7 +850,7 @@ CVE-2022-1927 (Buffer Over-read in GitHub repository 
vim/vim prior to 8.2. ...)
        NOTE: 
https://github.com/vim/vim/commit/4d97a565ae8be0d4debba04ebd2ac3e75a0c8010 
(v8.2.5037)
        NOTE: Crash in CLI tool, no security impact
 CVE-2022-1926 (Integer Overflow or Wraparound in GitHub repository 
polonel/trudesk pr ...)
-       TODO: check
+       NOT-FOR-US: Trudesk
 CVE-2022-31793
        RESERVED
 CVE-2022-31792
@@ -1861,7 +1861,7 @@ CVE-2022-31502
 CVE-2022-31501
        RESERVED
 CVE-2022-31500 (In KNIME Analytics Platform below 4.6.0, the Windows installer 
sets im ...)
-       TODO: check
+       NOT-FOR-US: KNIME Analytics Platform
 CVE-2022-31499
        RESERVED
 CVE-2022-31498
@@ -2181,13 +2181,13 @@ CVE-2022-31340
 CVE-2022-31339
        RESERVED
 CVE-2022-31338 (Online Ordering System 2.3.2 is vulnerable to SQL Injection 
via /order ...)
-       TODO: check
+       NOT-FOR-US: Online Ordering System
 CVE-2022-31337 (Online Ordering System 2.3.2 is vulnerable to SQL Injection 
via /order ...)
-       TODO: check
+       NOT-FOR-US: Online Ordering System
 CVE-2022-31336 (Online Ordering System 2.3.2 is vulnerable to SQL Injection 
via /order ...)
-       TODO: check
+       NOT-FOR-US: Online Ordering System
 CVE-2022-31335 (Online Ordering System 2.3.2 is vulnerable to SQL Injection 
via /order ...)
-       TODO: check
+       NOT-FOR-US: Online Ordering System
 CVE-2022-31334
        RESERVED
 CVE-2022-31333
@@ -2199,11 +2199,11 @@ CVE-2022-31331
 CVE-2022-31330
        RESERVED
 CVE-2022-31329 (Online Ordering System By janobe 2.3.2 is vulnerable to SQL 
Injection  ...)
-       TODO: check
+       NOT-FOR-US: Online Ordering System
 CVE-2022-31328 (Online Ordering System By janobe 2.3.2 has SQL Injection via 
/ordering ...)
-       TODO: check
+       NOT-FOR-US: Online Ordering System
 CVE-2022-31327 (Online Ordering System By janobe 2.3.2 is vulneranle to SQL 
Injection  ...)
-       TODO: check
+       NOT-FOR-US: Online Ordering System
 CVE-2022-31326
        RESERVED
 CVE-2022-31325
@@ -3621,63 +3621,63 @@ CVE-2022-30838 (Covid-19 Travel Pass Management System 
v1.0 is vulnerable to SQL
 CVE-2022-30837 (Toll-tax-management-system v1.0 is vulnerable to Cross Site 
Scripting  ...)
        NOT-FOR-US: Toll-tax-management-system
 CVE-2022-30836 (Wedding Management System v1.0 is vulnerable to SQL Injection. 
via Wed ...)
-       TODO: check
+       NOT-FOR-US: Wedding Management System
 CVE-2022-30835 (Wedding Management System v1.0 is vulnerable to SQL Injection. 
via /We ...)
-       TODO: check
+       NOT-FOR-US: Wedding Management System
 CVE-2022-30834 (Wedding Management System v1.0 is vulnerable to SQL Injection 
via /Wed ...)
-       TODO: check
+       NOT-FOR-US: Wedding Management System
 CVE-2022-30833 (Wedding Management System v1.0 is vulnerable to SQL Injection 
via /Wed ...)
-       TODO: check
+       NOT-FOR-US: Wedding Management System
 CVE-2022-30832 (Wedding Management System v1.0 is vulnerable to SQL Injection 
via /Wed ...)
-       TODO: check
+       NOT-FOR-US: Wedding Management System
 CVE-2022-30831 (Wedding Management System v1.0 is vulnerable to SQL Injection 
via Wedd ...)
-       TODO: check
+       NOT-FOR-US: Wedding Management System
 CVE-2022-30830 (Wedding Management System v1.0 is vulnerable to SQL Injection 
via \adm ...)
-       TODO: check
+       NOT-FOR-US: Wedding Management System
 CVE-2022-30829 (Wedding Management System v1.0 is vulnerable to SQL Injection 
via \adm ...)
-       TODO: check
+       NOT-FOR-US: Wedding Management System
 CVE-2022-30828 (Wedding Management System v1.0 is vulnerable to SQL Injection 
via \adm ...)
-       TODO: check
+       NOT-FOR-US: Wedding Management System
 CVE-2022-30827 (Wedding Management System v1.0 is vulnerable to SQL Injection 
via \adm ...)
-       TODO: check
+       NOT-FOR-US: Wedding Management System
 CVE-2022-30826 (Wedding Management System v1.0 is vulnerable to SQL Injection 
via admi ...)
-       TODO: check
+       NOT-FOR-US: Wedding Management System
 CVE-2022-30825 (Wedding Management System v1.0 is vulnerable to SQL Injection 
via \adm ...)
-       TODO: check
+       NOT-FOR-US: Wedding Management System
 CVE-2022-30824
        RESERVED
 CVE-2022-30823 (Wedding Management System v1.0 is vulnerable to SQL Injection 
via \adm ...)
-       TODO: check
+       NOT-FOR-US: Wedding Management System
 CVE-2022-30822 (In Wedding Management System v1.0, there is an arbitrary file 
upload v ...)
-       TODO: check
+       NOT-FOR-US: Wedding Management System
 CVE-2022-30821 (In Wedding Management System v1.0, the editing function of the 
"Servic ...)
-       TODO: check
+       NOT-FOR-US: Wedding Management System
 CVE-2022-30820 (In Wedding Management v1.0, there is an arbitrary file upload 
vulnerab ...)
-       TODO: check
+       NOT-FOR-US: Wedding Management System
 CVE-2022-30819 (In Wedding Management System v1.0, there is an arbitrary file 
upload v ...)
-       TODO: check
+       NOT-FOR-US: Wedding Management System
 CVE-2022-30818 (Wedding Management System v1.0 is vulnerable to SQL injection 
via /Wed ...)
-       TODO: check
+       NOT-FOR-US: Wedding Management System
 CVE-2022-30817 (Simple Bus Ticket Booking System 1.0 is vulnerable to SQL 
Injection vi ...)
-       TODO: check
+       NOT-FOR-US: Simple Bus Ticket Booking System 
 CVE-2022-30816 (elitecms 1.01 is vulnerable to SQL Injection via 
/admin/edit_sidebar.p ...)
-       TODO: check
+       NOT-FOR-US: elitecms
 CVE-2022-30815 (elitecms 1.01 is vulnerable to SQL Injection via 
admin/edit_sidebar.ph ...)
-       TODO: check
+       NOT-FOR-US: elitecms
 CVE-2022-30814 (elitecms v1.01 is vulnerable to SQL Injection via 
/admin/add_sidebar.p ...)
-       TODO: check
+       NOT-FOR-US: elitecms
 CVE-2022-30813 (elitecms 1.01 is vulnerable to SQL Injection via 
/admin/add_post.php. ...)
-       TODO: check
+       NOT-FOR-US: elitecms
 CVE-2022-30812
        RESERVED
 CVE-2022-30811
        RESERVED
 CVE-2022-30810 (elitecms v1.01 is vulnerable to SQL Injection via 
admin/edit_post.php. ...)
-       TODO: check
+       NOT-FOR-US: elitecms
 CVE-2022-30809 (elitecms 1.01 is vulnerable to SQL Injection via 
/admin/edit_page.php? ...)
-       TODO: check
+       NOT-FOR-US: elitecms
 CVE-2022-30808 (elitecms 1.0.1 is vulnerable to Arbitrary code execution via 
admin/man ...)
-       TODO: check
+       NOT-FOR-US: elitecms
 CVE-2022-30807
        RESERVED
 CVE-2022-30806
@@ -3685,7 +3685,7 @@ CVE-2022-30806
 CVE-2022-30805
        RESERVED
 CVE-2022-30804 (elitecms v1.01 is vulnerable to Delete any file via 
/admin/delete_imag ...)
-       TODO: check
+       NOT-FOR-US: elitecms
 CVE-2022-30803
        RESERVED
 CVE-2022-30802
@@ -3695,17 +3695,17 @@ CVE-2022-30801
 CVE-2022-30800
        RESERVED
 CVE-2022-30799 (Online Ordering System v1.0 by oretnom23 has SQL injection via 
store/o ...)
-       TODO: check
+       NOT-FOR-US: Online Ordering System
 CVE-2022-30798 (Online Ordering System v1.0 by oretnom23 is vulnerable to SQL 
Injectio ...)
-       TODO: check
+       NOT-FOR-US: Online Ordering System
 CVE-2022-30797 (Online Ordering System 1.0 by oretnom23 is vulnerable to SQL 
Injection ...)
-       TODO: check
+       NOT-FOR-US: Online Ordering System
 CVE-2022-30796
        RESERVED
 CVE-2022-30795 (Online Ordering System v1.0 by oretnom23 is vulnerable to SQL 
Injectio ...)
-       TODO: check
+       NOT-FOR-US: Online Ordering System
 CVE-2022-30794 (Online Ordering System v1.0 by oretnom23 is vulnerable to SQL 
Injectio ...)
-       TODO: check
+       NOT-FOR-US: Online Ordering System
 CVE-2022-30793
        RESERVED
 CVE-2022-30790



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e665b2bc27c2010019bbeabab66d7d620697f87d

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e665b2bc27c2010019bbeabab66d7d620697f87d
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to