Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
28f413a9 by Salvatore Bonaccorso at 2022-08-10T10:22:06+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6382,7 +6382,7 @@ CVE-2022-35493 (A Cross-site scripting (XSS)
vulnerability in json search parse
CVE-2022-35492
RESERVED
CVE-2022-35491 (TOTOLINK A3002RU V3.0.0-B20220304.1804 has a hardcoded
password for ro ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2022-35490 (Zammad 5.2.0 is vulnerable to privilege escalation. Zammad has
a preve ...)
- zammad <itp> (bug #841355)
CVE-2022-35489 (In Zammad 5.2.0, customers who have secondary organizations
assigned w ...)
@@ -6512,7 +6512,7 @@ CVE-2022-35428
CVE-2022-35427
RESERVED
CVE-2022-35426 (UCMS 1.6 is vulnerable to arbitrary file upload via
ucms/sadmin/file P ...)
- TODO: check
+ NOT-FOR-US: UCMS
CVE-2022-35425
RESERVED
CVE-2022-35424
@@ -8407,49 +8407,49 @@ CVE-2022-34719
CVE-2022-34718
RESERVED
CVE-2022-34717 (Microsoft Office Remote Code Execution Vulnerability. ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34716 (.NET Spoofing Vulnerability. ...)
TODO: check
CVE-2022-34715 (Windows Network File System Remote Code Execution
Vulnerability. ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34714 (Windows Secure Socket Tunneling Protocol (SSTP) Remote Code
Execution ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34713 (Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code
Execution ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34712 (Windows Defender Credential Guard Information Disclosure
Vulnerability ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34711
RESERVED
CVE-2022-34710 (Windows Defender Credential Guard Information Disclosure
Vulnerability ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34709 (Windows Defender Credential Guard Security Feature Bypass
Vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34708 (Windows Kernel Information Disclosure Vulnerability. This CVE
ID is un ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34707 (Windows Kernel Elevation of Privilege Vulnerability. This CVE
ID is un ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34706 (Windows Local Security Authority (LSA) Elevation of Privilege
Vulnerab ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34705 (Windows Defender Credential Guard Elevation of Privilege
Vulnerability ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34704 (Windows Defender Credential Guard Information Disclosure
Vulnerability ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34703 (Windows Partition Management Driver Elevation of Privilege
Vulnerabili ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34702 (Windows Secure Socket Tunneling Protocol (SSTP) Remote Code
Execution ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34701 (Windows Secure Socket Tunneling Protocol (SSTP) Denial of
Service Vuln ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34700
RESERVED
CVE-2022-34699 (Windows Win32k Elevation of Privilege Vulnerability. ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34698
RESERVED
CVE-2022-34697
RESERVED
CVE-2022-34696 (Windows Hyper-V Remote Code Execution Vulnerability. ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34695
RESERVED
CVE-2022-34694
@@ -8457,21 +8457,21 @@ CVE-2022-34694
CVE-2022-34693
RESERVED
CVE-2022-34692 (Microsoft Exchange Information Disclosure Vulnerability. This
CVE ID i ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34691 (Active Directory Domain Services Elevation of Privilege
Vulnerability. ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34690 (Windows Fax Service Elevation of Privilege Vulnerability. ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34689
RESERVED
CVE-2022-34688
RESERVED
CVE-2022-34687 (Azure RTOS GUIX Studio Remote Code Execution Vulnerability.
This CVE I ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34686 (Azure RTOS GUIX Studio Information Disclosure Vulnerability.
This CVE ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34685 (Azure RTOS GUIX Studio Information Disclosure Vulnerability.
This CVE ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-34684
RESERVED
CVE-2022-34683
@@ -11287,7 +11287,7 @@ CVE-2022-33672 (Azure Site Recovery Elevation of
Privilege Vulnerability. This C
CVE-2022-33671 (Azure Site Recovery Elevation of Privilege Vulnerability. This
CVE ID ...)
NOT-FOR-US: Microsoft
CVE-2022-33670 (Windows Partition Management Driver Elevation of Privilege
Vulnerabili ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-33669 (Azure Site Recovery Elevation of Privilege Vulnerability. This
CVE ID ...)
NOT-FOR-US: Microsoft
CVE-2022-33668 (Azure Site Recovery Elevation of Privilege Vulnerability. This
CVE ID ...)
@@ -11329,13 +11329,13 @@ CVE-2022-33651 (Azure Site Recovery Elevation of
Privilege Vulnerability. This C
CVE-2022-33650 (Azure Site Recovery Elevation of Privilege Vulnerability. This
CVE ID ...)
NOT-FOR-US: Microsoft
CVE-2022-33649 (Microsoft Edge (Chromium-based) Security Feature Bypass
Vulnerability. ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-33648 (Microsoft Excel Remote Code Execution Vulnerability. ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-33647
RESERVED
CVE-2022-33646 (Azure Batch Node Agent Elevation of Privilege Vulnerability.
...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-33645
RESERVED
CVE-2022-33644 (Xbox Live Save Service Elevation of Privilege Vulnerability.
...)
@@ -11347,7 +11347,7 @@ CVE-2022-33642 (Azure Site Recovery Elevation of
Privilege Vulnerability. This C
CVE-2022-33641 (Azure Site Recovery Elevation of Privilege Vulnerability. This
CVE ID ...)
NOT-FOR-US: Microsoft
CVE-2022-33640 (System Center Operations Manager: Open Management
Infrastructure (OMI) ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-33639 (Microsoft Edge (Chromium-based) Elevation of Privilege
Vulnerability. ...)
NOT-FOR-US: Microsoft
CVE-2022-33638 (Microsoft Edge (Chromium-based) Elevation of Privilege
Vulnerability. ...)
@@ -11355,7 +11355,7 @@ CVE-2022-33638 (Microsoft Edge (Chromium-based)
Elevation of Privilege Vulnerabi
CVE-2022-33637 (Microsoft Defender for Endpoint Tampering Vulnerability. ...)
NOT-FOR-US: Microsoft
CVE-2022-33636 (Microsoft Edge (Chromium-based) Remote Code Execution
Vulnerability. ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-33635
RESERVED
CVE-2022-33634
@@ -11365,7 +11365,7 @@ CVE-2022-33633 (Skype for Business and Lync Remote Code
Execution Vulnerability.
CVE-2022-33632 (Microsoft Office Security Feature Bypass Vulnerability. ...)
NOT-FOR-US: Microsoft
CVE-2022-33631 (Microsoft Excel Security Feature Bypass Vulnerability. ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-33630
RESERVED
CVE-2022-33629
@@ -16398,13 +16398,13 @@ CVE-2022-31677
CVE-2022-31676
RESERVED
CVE-2022-31675 (VMware vRealize Operations contains an authentication bypass
vulnerabi ...)
- TODO: check
+ NOT-FOR-US: VMware
CVE-2022-31674 (VMware vRealize Operations contains an information disclosure
vulnerab ...)
- TODO: check
+ NOT-FOR-US: VMware
CVE-2022-31673 (VMware vRealize Operations contains an information disclosure
vulnerab ...)
- TODO: check
+ NOT-FOR-US: VMware
CVE-2022-31672 (VMware vRealize Operations contains a privilege escalation
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: VMware
CVE-2022-31671
RESERVED
CVE-2022-31670
@@ -20859,13 +20859,13 @@ CVE-2022-30199
CVE-2022-30198
RESERVED
CVE-2022-30197 (Windows Kernel Information Disclosure Vulnerability. This CVE
ID is un ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-30196
RESERVED
CVE-2022-30195
RESERVED
CVE-2022-30194 (Windows WebBrowser Control Remote Code Execution
Vulnerability. ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-30193 (AV1 Video Extension Remote Code Execution Vulnerability. This
CVE ID i ...)
NOT-FOR-US: Microsoft
CVE-2022-30192 (Microsoft Edge (Chromium-based) Elevation of Privilege
Vulnerability. ...)
@@ -20901,9 +20901,9 @@ CVE-2022-30178 (Azure RTOS GUIX Studio Remote Code
Execution Vulnerability. This
CVE-2022-30177 (Azure RTOS GUIX Studio Remote Code Execution Vulnerability.
This CVE I ...)
NOT-FOR-US: Microsoft
CVE-2022-30176 (Azure RTOS GUIX Studio Remote Code Execution Vulnerability.
This CVE I ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-30175 (Azure RTOS GUIX Studio Remote Code Execution Vulnerability.
This CVE I ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-30174 (Microsoft Office Remote Code Execution Vulnerability. ...)
NOT-FOR-US: Microsoft
CVE-2022-30173 (Microsoft Excel Remote Code Execution Vulnerability. ...)
@@ -20965,7 +20965,7 @@ CVE-2022-30146 (Windows Lightweight Directory Access
Protocol (LDAP) Remote Code
CVE-2022-30145 (Windows Encrypting File System (EFS) Remote Code Execution
Vulnerabili ...)
NOT-FOR-US: Microsoft
CVE-2022-30144 (Windows Bluetooth Service Remote Code Execution Vulnerability.
...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-30143 (Windows Lightweight Directory Access Protocol (LDAP) Remote
Code Execu ...)
NOT-FOR-US: Microsoft
CVE-2022-30142 (Windows File History Remote Code Execution Vulnerability. ...)
@@ -20985,9 +20985,9 @@ CVE-2022-30136 (Windows Network File System Remote Code
Execution Vulnerability.
CVE-2022-30135 (Windows Media Center Elevation of Privilege Vulnerability. ...)
NOT-FOR-US: Microsoft
CVE-2022-30134 (Microsoft Exchange Information Disclosure Vulnerability. This
CVE ID i ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-30133 (Windows Point-to-Point Protocol (PPP) Remote Code Execution
Vulnerabil ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-30132 (Windows Container Manager Service Elevation of Privilege
Vulnerability ...)
NOT-FOR-US: Microsoft
CVE-2022-30131 (Windows Container Isolation FS Filter Driver Elevation of
Privilege Vu ...)
@@ -24117,7 +24117,7 @@ CVE-2022-29085 (Dell Unity, Dell UnityVSA, and Dell
Unity XT versions prior to 5
CVE-2022-29084 (Dell Unity, Dell UnityVSA, and Dell Unity XT versions before
5.2.0.0.5 ...)
NOT-FOR-US: Dell
CVE-2022-29083 (Prior Dell BIOS versions contain an Improper Authentication
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: Dell
CVE-2022-29082 (Dell EMC NetWorker versions 19.1.x, 19.1.0.x, 19.1.1.x,
19.2.x, 19.2.0 ...)
NOT-FOR-US: EMC
CVE-2022-1332 (One of the API in Mattermost version 6.4.1 and earlier fails to
proper ...)
@@ -37479,7 +37479,7 @@ CVE-2022-24518 (Azure Site Recovery Elevation of
Privilege Vulnerability. This C
CVE-2022-24517 (Azure Site Recovery Remote Code Execution Vulnerability. This
CVE ID i ...)
NOT-FOR-US: Microsoft
CVE-2022-24516 (Microsoft Exchange Server Elevation of Privilege
Vulnerability. This C ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-24515 (Azure Site Recovery Elevation of Privilege Vulnerability. This
CVE ID ...)
NOT-FOR-US: Microsoft
CVE-2022-24514
@@ -37557,7 +37557,7 @@ CVE-2022-24479 (Connected User Experiences and
Telemetry Elevation of Privilege
CVE-2022-24478
RESERVED
CVE-2022-24477 (Microsoft Exchange Server Elevation of Privilege
Vulnerability. This C ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-24476
RESERVED
CVE-2022-24475 (Microsoft Edge (Chromium-based) Elevation of Privilege
Vulnerability. ...)
@@ -43141,7 +43141,7 @@ CVE-2021-4204 [eBPF Improper Input Validation
Vulnerability]
[stretch] - linux <not-affected> (Vulnerable code introduced later)
NOTE: https://www.openwall.com/lists/oss-security/2022/01/11/4
CVE-2022-22983 (VMware Workstation (16.x prior to 16.2.4) contains an
unprotected stor ...)
- TODO: check
+ NOT-FOR-US: VMware
CVE-2022-22982 (The vCenter Server contains a server-side request forgery
(SSRF) vulne ...)
NOT-FOR-US: VMWare
CVE-2022-22981
@@ -48851,9 +48851,9 @@ CVE-2022-21982
CVE-2022-21981 (Windows Common Log File System Driver Elevation of Privilege
Vulnerabi ...)
NOT-FOR-US: Microsoft
CVE-2022-21980 (Microsoft Exchange Server Elevation of Privilege
Vulnerability. This C ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-21979 (Microsoft Exchange Information Disclosure Vulnerability. This
CVE ID i ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2022-21978 (Microsoft Exchange Server Elevation of Privilege
Vulnerability. ...)
NOT-FOR-US: Microsoft
CVE-2022-21977 (Media Foundation Information Disclosure Vulnerability. This
CVE ID is ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/28f413a9bc2c93ddd9ba215e11f130215510c797
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/28f413a9bc2c93ddd9ba215e11f130215510c797
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
