Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
dfd22da5 by Salvatore Bonaccorso at 2022-09-06T22:36:19+02:00
Process NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -10973,7 +10973,7 @@ CVE-2022-35849
CVE-2022-35848
RESERVED
CVE-2022-35847 (An improper neutralization of special elements used in a
template engi ...)
- TODO: check
+ NOT-FOR-US: FortiGuard
CVE-2022-35846
RESERVED
CVE-2022-35845
@@ -21313,7 +21313,7 @@ CVE-2022-31862
CVE-2022-31861
RESERVED
CVE-2022-31860 (An issue was discovered in OpenRemote through 1.0.4 allows
attackers t ...)
- TODO: check
+ NOT-FOR-US: OpenRemote
CVE-2022-31859
RESERVED
CVE-2022-31858
@@ -21560,7 +21560,7 @@ CVE-2022-31792
CVE-2022-31791
RESERVED
CVE-2022-31790 (WatchGuard Firebox and XTM appliances allow an unauthenticated
remote ...)
- TODO: check
+ NOT-FOR-US: WatchGuard Firebox and XTM appliances
CVE-2022-31789
RESERVED
CVE-2022-31788 (IdeaLMS 2022 allows SQL injection via the
IdeaLMS/ChatRoom/ClassAccess ...)
@@ -26124,7 +26124,7 @@ CVE-2022-30300
CVE-2022-30299
RESERVED
CVE-2022-30298 (An improper privilege management vulnerability [CWE-269] in
Fortinet F ...)
- TODO: check
+ NOT-FOR-US: FortiGuard
CVE-2022-29509 (Directory traversal vulnerability in T&D Data Server
(Japanese Edi ...)
NOT-FOR-US: T&D Data Server
CVE-2022-29483 (Incorrect Default Permissions vulnerability in ABB e-Design
allows att ...)
@@ -29856,7 +29856,7 @@ CVE-2022-1316 (ZeroTierOne for windows local privilege
escalation because of inc
CVE-2022-29063 (The Solr plugin of Apache OFBiz is configured by default to
automatica ...)
NOT-FOR-US: Apache OFBiz
CVE-2022-29062 (Multiple relative path traversal vulnerabilities [CWE-23] in
Fortinet ...)
- TODO: check
+ NOT-FOR-US: FortiGuard
CVE-2022-29061
RESERVED
CVE-2022-29060 (A use of hard-coded cryptographic key vulnerability [CWE-321]
in Forti ...)
@@ -29864,7 +29864,7 @@ CVE-2022-29060 (A use of hard-coded cryptographic key
vulnerability [CWE-321] in
CVE-2022-29059
RESERVED
CVE-2022-29058 (An improper neutralization of special elements [CWE-89] used
in an OS ...)
- TODO: check
+ NOT-FOR-US: FortiGuard
CVE-2022-29057 (A improper neutralization of input during web page generation
('cross- ...)
NOT-FOR-US: Fortinet
CVE-2022-29056
@@ -29874,7 +29874,7 @@ CVE-2022-29055
CVE-2022-29054
RESERVED
CVE-2022-29053 (A missing cryptographic steps vulnerability [CWE-325] in the
functions ...)
- TODO: check
+ NOT-FOR-US: FortiGuard
CVE-2022-29052 (Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores
private ...)
NOT-FOR-US: Jenkins plugin
CVE-2022-29051 (Missing permission checks in Jenkins Publish Over FTP Plugin
1.16 and ...)
@@ -30359,9 +30359,9 @@ CVE-2022-28887
CVE-2022-28886
RESERVED
CVE-2022-28885 (A Denial-of-Service (DoS) vulnerability was discovered in the
fsicapd ...)
- TODO: check
+ NOT-FOR-US: WithSecure
CVE-2022-28884 (A Denial-of-Service vulnerability was discovered in the
F-Secure and W ...)
- TODO: check
+ NOT-FOR-US: WithSecure
CVE-2022-28883 (A Denial-of-Service (DoS) vulnerability was discovered in
F-Secure &am ...)
NOT-FOR-US: F-Secure & WithSecure products
CVE-2022-28882 (A Denial-of-Service (DoS) vulnerability was discovered in
F-Secure &am ...)
@@ -34384,7 +34384,7 @@ CVE-2022-1038
CVE-2022-27492
RESERVED
CVE-2022-27491 (A improper verification of source of a communication channel
in Fortin ...)
- TODO: check
+ NOT-FOR-US: FortiGuard
CVE-2022-27490
RESERVED
CVE-2022-27489
@@ -38480,7 +38480,7 @@ CVE-2022-26116 (Multiple improper neutralization of
special elements used in SQL
CVE-2022-26115
RESERVED
CVE-2022-26114 (An improper neutralization of input during web page generation
vulnera ...)
- TODO: check
+ NOT-FOR-US: FortiGuard
CVE-2022-26113 (An execution with unnecessary privileges vulnerability
[CWE-250] in Fo ...)
NOT-FOR-US: Fortinet
CVE-2022-26112
@@ -46385,33 +46385,33 @@ CVE-2022-23693
CVE-2022-23692
RESERVED
CVE-2022-23691 (A vulnerability exists in certain AOS-CX switch models which
could all ...)
- TODO: check
+ NOT-FOR-US: Aruba
CVE-2022-23690 (A vulnerability in the web-based management interface of
AOS-CX could ...)
- TODO: check
+ NOT-FOR-US: Aruba
CVE-2022-23689 (Multiple vulnerabilities exist in the processing of packet
data by the ...)
- TODO: check
+ NOT-FOR-US: Aruba
CVE-2022-23688 (Multiple vulnerabilities exist in the processing of packet
data by the ...)
- TODO: check
+ NOT-FOR-US: Aruba
CVE-2022-23687 (Multiple vulnerabilities exist in the processing of packet
data by the ...)
- TODO: check
+ NOT-FOR-US: Aruba
CVE-2022-23686 (Multiple vulnerabilities exist in the processing of packet
data by the ...)
- TODO: check
+ NOT-FOR-US: Aruba
CVE-2022-23685
RESERVED
CVE-2022-23684 (A vulnerability in the web-based management interface of
AOS-CX could ...)
- TODO: check
+ NOT-FOR-US: Aruba
CVE-2022-23683 (Authenticated command injection vulnerabilities exist in the
AOS-CX Ne ...)
- TODO: check
+ NOT-FOR-US: Aruba
CVE-2022-23682 (Multiple vulnerabilities exist in the AOS-CX command line
interface th ...)
- TODO: check
+ NOT-FOR-US: Aruba
CVE-2022-23681 (Multiple vulnerabilities exist in the AOS-CX command line
interface th ...)
- TODO: check
+ NOT-FOR-US: Aruba
CVE-2022-23680 (AOS-CX lacks Anti-CSRF protections in place for state-changing
operati ...)
- TODO: check
+ NOT-FOR-US: Aruba
CVE-2022-23679 (AOS-CX lacks Anti-CSRF protections in place for state-changing
operati ...)
- TODO: check
+ NOT-FOR-US: Aruba
CVE-2022-23678 (A vulnerability in the Aruba Virtual Intranet Access (VIA)
client for ...)
- TODO: check
+ NOT-FOR-US: Aruba
CVE-2022-23677 (A remote execution of arbitrary code vulnerability was
discovered in A ...)
NOT-FOR-US: Aruba
CVE-2022-23676 (A remote execution of arbitrary code vulnerability was
discovered in A ...)
@@ -63524,7 +63524,7 @@ CVE-2020-36504 (The WP-Pro-Quiz WordPress plugin
through 0.37 does not have CSRF
CVE-2021-43081 (An improper neutralization of input during web page generation
vulnera ...)
NOT-FOR-US: FortiGuard
CVE-2021-43080 (An improper neutralization of input during web page generation
vulnera ...)
- TODO: check
+ NOT-FOR-US: FortiGuard
CVE-2021-43079
RESERVED
CVE-2021-43078
@@ -63532,7 +63532,7 @@ CVE-2021-43078
CVE-2021-43077 (A improper neutralization of special elements used in an sql
command ( ...)
NOT-FOR-US: FortiGuard
CVE-2021-43076 (An improper privilege management vulnerability [CWE-269] in
FortiADC v ...)
- TODO: check
+ NOT-FOR-US: FortiGuard
CVE-2021-43075 (A improper neutralization of special elements used in an os
command (' ...)
NOT-FOR-US: FortiGuard
CVE-2021-43074
@@ -84862,7 +84862,7 @@ CVE-2021-35110 (Possible buffer overflow to improper
validation of hash segment
CVE-2021-35109 (Possible address manipulation from APP-NS while APP-S is
configuring a ...)
TODO: check
CVE-2021-35108 (Improper checking of AP-S lock bit while verifying the secure
resource ...)
- TODO: check
+ NOT-FOR-US: Snapdragon
CVE-2021-35107
RESERVED
CVE-2021-35106 (Possible out of bound read due to improper length calculation
of WMI m ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dfd22da5a2e48de3a860acef7ad45b484d72ceaa
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dfd22da5a2e48de3a860acef7ad45b484d72ceaa
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
