Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
8914180a by Salvatore Bonaccorso at 2022-08-05T10:24:12+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
 CVE-2022-37431 (A Reflected Cross-site scripting (XSS) issue was discovered in 
dotCMS  ...)
-       TODO: check
+       NOT-FOR-US: dotCMS
 CVE-2022-37430
        RESERVED
 CVE-2022-37429
@@ -31,7 +31,7 @@ CVE-2022-37417
 CVE-2022-37416 (Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping 
memory  ...)
        TODO: check
 CVE-2022-37415 (The Uniwill SparkIO.sys driver 1.0 is vulnerable to a 
stack-based buff ...)
-       TODO: check
+       NOT-FOR-US: Uniwill SparkIO.sys driver
 CVE-2022-37414
        RESERVED
 CVE-2022-37413
@@ -2960,7 +2960,7 @@ CVE-2022-35245 (In BIG-IP Versions 16.1.x before 
16.1.3.1, 15.1.x before 15.1.6.
 CVE-2022-35243 (In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 
15.1.5.1, 14.1. ...)
        NOT-FOR-US: F5 BIG-IP
 CVE-2022-35241 (In versions 2.x before 2.3.1 and all versions of 1.x, when 
NGINX Insta ...)
-       TODO: check
+       NOT-FOR-US: F5
 CVE-2022-35240 (In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 
15.1.6.1, and ...)
        NOT-FOR-US: F5 BIG-IP
 CVE-2022-35236 (In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 
15.1.6.1, and ...)
@@ -2990,7 +2990,7 @@ CVE-2022-32455 (In BIG-IP Versions 16.1.x before 
16.1.2.2, 15.1.x before 15.1.6.
 CVE-2022-31473 (In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 
15.1.4, when ...)
        NOT-FOR-US: F5 BIG-IP
 CVE-2022-30535 (In versions 2.x before 2.3.0 and all versions of 1.x, An 
attacker auth ...)
-       TODO: check
+       NOT-FOR-US: F5
 CVE-2022-2466
        RESERVED
 CVE-2022-2465
@@ -5972,7 +5972,7 @@ CVE-2022-34995
 CVE-2022-34994
        RESERVED
 CVE-2022-34993 (Totolink A3600R_Firmware V4.1.2cu.5182_B20201102 contains a 
hard code  ...)
-       TODO: check
+       NOT-FOR-US: Totolink
 CVE-2022-34992 (Luadec v0.9.9 was discovered to contain a heap-buffer overflow 
via the ...)
        TODO: check
 CVE-2022-34991 (Paymoney v3.3 was discovered to contain multiple reflected 
cross-site  ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8914180a4117e99a069164219e8c6fb72cd1266f

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8914180a4117e99a069164219e8c6fb72cd1266f
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to