Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
dd6e4e14 by Salvatore Bonaccorso at 2022-06-16T08:04:33+02:00
Process more NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6649,7 +6649,7 @@ CVE-2022-31062
CVE-2022-31061
RESERVED
CVE-2022-31060 (Discourse is an open-source discussion platform. Prior to
version 2.8. ...)
- TODO: check
+ NOT-FOR-US: Discourse
CVE-2022-31059 (Discourse Calendar is a calendar plugin for Discourse, an
open-source ...)
NOT-FOR-US: Discourse Calendar is a calendar plugin for Discourse
CVE-2022-31058
@@ -11528,17 +11528,17 @@ CVE-2022-29444 (Plugin Settings Change leading to
Cross-Site Scripting (XSS) vul
CVE-2022-29443
RESERVED
CVE-2022-29442 (Authenticated (subscriber or higher user role) Stored
Cross-Site Scrip ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-29441 (Cross-Site Request Forgery (CSRF) vulnerability in Private
Messages Fo ...)
NOT-FOR-US: WordPress plugin
CVE-2022-29440 (Multiple Authenticated (contributor or higher user role)
Stored Cross- ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-29439 (Cross-Site Request Forgery (CSRF) vulnerability in Image
Slider by Nex ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-29438 (Authenticated (author or higher user role) Persistent
Cross-Site Scrip ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-29437 (Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in
Image Sl ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-29436 (Persistent Cross-Site Scripting (XSS) vulnerability in
Alexander Stokm ...)
NOT-FOR-US: WordPress plugin
CVE-2022-29435 (Cross-Site Request Forgery (CSRF) vulnerability in Alexander
Stokmann' ...)
@@ -11600,7 +11600,7 @@ CVE-2022-29408 (Persistent Cross-Site Scripting (XSS)
vulnerability in Vsourz Di
CVE-2022-29407
RESERVED
CVE-2022-29406 (Multiple Authenticated (contributor or higher user role)
Stored Cross- ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-28717 (Cross-site scripting vulnerability in Rebooter(WATCH BOOT nino
RPC-M2C ...)
NOT-FOR-US: Rebooter
CVE-2022-27632 (Cross-site request forgery (CSRF) vulnerability in
Rebooter(WATCH BOOT ...)
@@ -12293,7 +12293,7 @@ CVE-2022-1343 (The function `OCSP_basic_verify`
verifies the signer certificate
NOTE: https://www.openssl.org/news/secadv/20220503.txt
NOTE:
https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=2eda98790c5c2741d76d23cc1e74b0dc4f4b391a
(openssl-3.0.3)
CVE-2022-1342 (A lack of password masking in Devolutions Remote Desktop
Manager allow ...)
- TODO: check
+ NOT-FOR-US: Devolutions Remote Desktop Manager
CVE-2022-1341 (An issue was discovered in in bwm-ng v0.6.2. An arbitrary null
write e ...)
- bwm-ng 0.6.3-1 (unimportant)
NOTE: https://github.com/vgropp/bwm-ng/issues/26
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd6e4e1403e0b9245f3eac7b278a6fd5abc3d406
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd6e4e1403e0b9245f3eac7b278a6fd5abc3d406
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
