Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
bd86a2fa by Salvatore Bonaccorso at 2022-09-06T22:26:53+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3036,7 +3036,7 @@ CVE-2022-3028 (A race condition was found in the Linux
kernel's IP framework for
CVE-2022-3027
RESERVED
CVE-2022-3026 (The WP Users Exporter plugin for WordPress is vulnerable to CSV
Inject ...)
- TODO: check
+ NOT-FOR-US: WP Users Exporter plugin for WordPress
CVE-2022-3025
RESERVED
CVE-2022-3024
@@ -3579,19 +3579,19 @@ CVE-2022-2946 (Use After Free in GitHub repository
vim/vim prior to 9.0.0246. ..
NOTE: https://huntr.dev/bounties/5d389a18-5026-47df-a5d0-1548a9b555d5
NOTE:
https://github.com/vim/vim/commit/adce965162dd89bf29ee0e5baf53652e7515762c
(v9.0.0246)
CVE-2022-2945 (The WordPress Infinite Scroll – Ajax Load More plugin for
WordPr ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-2944
RESERVED
CVE-2022-2943 (The WordPress Infinite Scroll – Ajax Load More plugin for
Wordpr ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-2942
RESERVED
CVE-2022-2941 (The WP-UserOnline plugin for WordPress has multiple Stored
Cross-Site ...)
- TODO: check
+ NOT-FOR-US: WP-UserOnline plugin for WordPress
CVE-2022-2940
RESERVED
CVE-2022-2939 (The WP Cerber Security plugin for WordPress is vulnerable to
security ...)
- TODO: check
+ NOT-FOR-US: WP Cerber Security plugin for WordPress
CVE-2022-2938 (A flaw was found in the Linux kernel's implementation of
Pressure Stal ...)
- linux 5.16.7-1
[bullseye] - linux 5.10.103-1
@@ -3600,9 +3600,9 @@ CVE-2022-2938 (A flaw was found in the Linux kernel's
implementation of Pressure
CVE-2022-2937
RESERVED
CVE-2022-2936 (The Image Hover Effects Ultimate plugin for WordPress is
vulnerable to ...)
- TODO: check
+ NOT-FOR-US: Image Hover Effects Ultimate plugin for WordPress
CVE-2022-2935 (The Image Hover Effects Ultimate plugin for WordPress is
vulnerable to ...)
- TODO: check
+ NOT-FOR-US: Image Hover Effects Ultimate plugin for WordPress
CVE-2022-2934 (The Beaver Builder – WordPress Page Builder for WordPress
is vul ...)
TODO: check
CVE-2022-2933
@@ -5824,9 +5824,9 @@ CVE-2022-2719 (In ImageMagick, a crafted file could
trigger an assertion failure
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2116537
NOTE:
https://github.com/ImageMagick/ImageMagick/commit/716496e6df0add89e9679d6da9c0afca814cfe49
CVE-2022-2718 (The JoomSport – for Sports: Team & League, Football,
Hockey ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-2717 (The JoomSport – for Sports: Team & League, Football,
Hockey ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-2716 (The Beaver Builder – WordPress Page Builder for WordPress
is vul ...)
TODO: check
CVE-2022-2715 (A vulnerability has been found in SourceCodester Employee
Management S ...)
@@ -7112,7 +7112,7 @@ CVE-2022-37350
CVE-2022-37349
RESERVED
CVE-2022-2633 (The All-in-One Video Gallery plugin for WordPress is vulnerable
to arb ...)
- TODO: check
+ NOT-FOR-US: All-in-One Video Gallery plugin for WordPress
CVE-2022-2632
RESERVED
CVE-2022-2631 (Improper Access Control in GitHub repository tooljet/tooljet
prior to ...)
@@ -8603,11 +8603,11 @@ CVE-2022-2544 (The Ninja Job Board WordPress plugin
before 1.3.3 does not protec
CVE-2022-2543 (The Visual Portfolio, Photo Gallery & Post Grid WordPress
plugin b ...)
NOT-FOR-US: WordPress plugin
CVE-2022-2542 (The uContext for Clickbank plugin for WordPress is vulnerable
to Cross ...)
- TODO: check
+ NOT-FOR-US: uContext for Clickbank plugin for WordPress
CVE-2022-2541 (The uContext for Amazon plugin for WordPress is vulnerable to
Cross-Si ...)
- TODO: check
+ NOT-FOR-US: uContext for Amazon plugin for WordPress
CVE-2022-2540 (The Link Optimizer Lite plugin for WordPress is vulnerable to
Cross-Si ...)
- TODO: check
+ NOT-FOR-US: Link Optimizer Lite plugin for WordPress
CVE-2022-2539 (An issue has been discovered in GitLab CE/EE affecting all
versions st ...)
- gitlab <unfixed>
CVE-2022-2538 (The WP Hide & Security Enhancer WordPress plugin before 1.8
does n ...)
@@ -8988,7 +8988,7 @@ CVE-2022-36586
CVE-2022-36585
RESERVED
CVE-2022-36584 (In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the
getsinglepppuser ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2022-36583 (DedeCMS V5.7.97 was discovered to contain multiple cross-site
scriptin ...)
NOT-FOR-US: DedeCMS
CVE-2022-36582 (An arbitrary file upload vulnerability in the component
/php_action/cr ...)
@@ -9444,11 +9444,11 @@ CVE-2022-2519 (There is a double free or corruption in
rotateImage() at tiffcrop
NOTE:
https://gitlab.com/libtiff/libtiff/-/commit/bad48e90b410df32172006c7876da449ba62cdba
NOTE: Crash in CLI tool, no security impact
CVE-2022-2518 (The Stockists Manager for Woocommerce plugin for WordPress is
vulnerab ...)
- TODO: check
+ NOT-FOR-US: Stockists Manager for Woocommerce plugin for WordPress
CVE-2022-2517 (The Beaver Builder – WordPress Page Builder for WordPress
is vul ...)
TODO: check
CVE-2022-2516 (The Visual Composer Website Builder plugin for WordPress is
vulnerable ...)
- TODO: check
+ NOT-FOR-US: Visual Composer Website Builder plugin for WordPress
CVE-2018-25045 (Django REST framework (aka django-rest-framework) before 3.9.1
allows ...)
{DSA-5186-1}
- djangorestframework 3.10.2-1
@@ -9518,7 +9518,7 @@ CVE-2022-33201 (Cross-Site Request Forgery (CSRF)
vulnerability in MailerLite &#
CVE-2022-33142 (Authenticated (subscriber+) Denial Of Service (DoS)
vulnerability in W ...)
NOT-FOR-US: WordPress plugin
CVE-2022-2515 (The Simple Banner plugin for WordPress is vulnerable to Stored
Cross-S ...)
- TODO: check
+ NOT-FOR-US: Simple Banner plugin for WordPress
CVE-2022-2514 (The time and filter parameters in Fava prior to v1.22 are
vulnerable t ...)
- fava <unfixed> (bug #1016971)
[bullseye] - fava <no-dsa> (Minor issue)
@@ -9832,7 +9832,7 @@ CVE-2022-2475
CVE-2022-2474
RESERVED
CVE-2022-2473 (The WP-UserOnline plugin for WordPress is vulnerable to Stored
Cross-S ...)
- TODO: check
+ NOT-FOR-US: WP-UserOnline plugin for WordPress
CVE-2022-2472
RESERVED
CVE-2022-2471
@@ -9902,9 +9902,9 @@ CVE-2022-2464 (Rockwell Automation ISaGRAF Workbench
software versions 6.0 throu
CVE-2022-2463 (Rockwell Automation ISaGRAF Workbench software versions 6.0
through 6. ...)
NOT-FOR-US: Rockwell Automation
CVE-2022-2462 (The Transposh WordPress Translation plugin for WordPress is
vulnerable ...)
- TODO: check
+ NOT-FOR-US: Transposh WordPress Translation plugin for WordPress
CVE-2022-2461 (The Transposh WordPress Translation plugin for WordPress is
vulnerable ...)
- TODO: check
+ NOT-FOR-US: Transposh WordPress Translation plugin for WordPress
CVE-2022-36277
RESERVED
CVE-2022-36276
@@ -10832,7 +10832,7 @@ CVE-2022-2444 (The Visualizer: Tables and Charts
Manager for WordPress plugin fo
CVE-2022-2443 (The FreeMind WP Browser plugin for WordPress is vulnerable to
Cross-Si ...)
NOT-FOR-US: WordPress plugin
CVE-2022-2442 (The Migration, Backup, Staging – WPvivid plugin for
WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-2441
RESERVED
CVE-2022-2440
@@ -10840,25 +10840,25 @@ CVE-2022-2440
CVE-2022-2439
RESERVED
CVE-2022-2438 (The Broken Link Checker plugin for WordPress is vulnerable to
deserial ...)
- TODO: check
+ NOT-FOR-US: Broken Link Checker plugin for WordPress
CVE-2022-2437 (The Feed Them Social – for Twitter feed, Youtube and more
plugin ...)
NOT-FOR-US: WordPress plugin
CVE-2022-2436 (The Download Manager plugin for WordPress is vulnerable to
deserializa ...)
- TODO: check
+ NOT-FOR-US: Download Manager plugin for WordPress
CVE-2022-2435 (The AnyMind Widget plugin for WordPress is vulnerable to
Cross-Site Re ...)
NOT-FOR-US: WordPress plugin
CVE-2022-2434 (The String Locator plugin for WordPress is vulnerable to
deserializati ...)
- TODO: check
+ NOT-FOR-US: String Locator plugin for WordPress
CVE-2022-2433 (The WordPress Infinite Scroll – Ajax Load More plugin for
WordPr ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-2432 (The Ecwid Ecommerce Shopping Cart plugin for WordPress is
vulnerable t ...)
- TODO: check
+ NOT-FOR-US: Ecwid Ecommerce Shopping Cart plugin for WordPress
CVE-2022-2431 (The Download Manager plugin for WordPress is vulnerable to
arbitrary f ...)
- TODO: check
+ NOT-FOR-US: Download Manager plugin for WordPress
CVE-2022-2430 (The Visual Composer Website Builder plugin for WordPress is
vulnerable ...)
- TODO: check
+ NOT-FOR-US: Visual Composer Website Builder plugin for WordPress
CVE-2022-2429 (The Ultimate SMS Notifications for WooCommerce plugin for
WordPress is ...)
- TODO: check
+ NOT-FOR-US: Ultimate SMS Notifications for WooCommerce plugin for
WordPress
CVE-2022-2428
RESERVED
[experimental] - gitlab 15.2.3+ds1-1
@@ -13901,7 +13901,7 @@ CVE-2022-34744
CVE-2022-2234 (An authenticated mySCADA myPRO 8.26.0 user may be able to
modify param ...)
NOT-FOR-US: mySCADA myPRO
CVE-2022-2233 (The Banner Cycler plugin for WordPress is vulnerable to
Cross-Site Req ...)
- TODO: check
+ NOT-FOR-US: Banner Cycler plugin for WordPress
CVE-2022-2232
RESERVED
CVE-2022-2231 (NULL Pointer Dereference in GitHub repository vim/vim prior to
8.2. ...)
@@ -25595,7 +25595,7 @@ CVE-2022-1629 (Buffer Over-read in function
find_next_quote in GitHub repository
NOTE:
https://github.com/vim/vim/commit/53a70289c2712808e6d4e88927e03cac01b470dd
(v8.2.4925)
NOTE: Crash in CLI tool, no security impact
CVE-2022-1628 (The Simple SEO plugin for WordPress is vulnerable to
attribute-based s ...)
- TODO: check
+ NOT-FOR-US: Simple SEO plugin for WordPress
CVE-2022-1627 (The My Private Site WordPress plugin before 3.0.8 does not have
CSRF c ...)
NOT-FOR-US: WordPress plugin
CVE-2022-1626 (The Sharebar WordPress plugin through 1.4.1 does not have CSRF
check i ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bd86a2fa8554d223073b02c5eb1ed97a94a231eb
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bd86a2fa8554d223073b02c5eb1ed97a94a231eb
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
