Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d0ad8a38 by Salvatore Bonaccorso at 2022-10-19T16:03:06+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2999,7 +2999,7 @@ CVE-2022-42220
CVE-2022-42219
RESERVED
CVE-2022-42218 (Open Source SACCO Management System v1.0 vulnerable to SQL
Injection v ...)
- TODO: check
+ NOT-FOR-US: Open Source SACCO Management System
CVE-2022-42217
RESERVED
CVE-2022-42216
@@ -3059,7 +3059,7 @@ CVE-2022-42190
CVE-2022-42189
RESERVED
CVE-2022-42188 (In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path
travers ...)
- TODO: check
+ NOT-FOR-US: Lavalite CMS
CVE-2022-42187
RESERVED
CVE-2022-42186
@@ -3201,17 +3201,17 @@ CVE-2022-42119
CVE-2022-42118
RESERVED
CVE-2022-42117 (A Cross-site scripting (XSS) vulnerability in the Frontend
Taglib modu ...)
- TODO: check
+ NOT-FOR-US: Frontend Taglib module in Liferay
CVE-2022-42116 (A Cross-site scripting (XSS) vulnerability in the Frontend
Editor modu ...)
- TODO: check
+ NOT-FOR-US: Frontend Editor module's integration with CKEditor in
Liferay
CVE-2022-42115 (Cross-site scripting (XSS) vulnerability in the Object
module's edit o ...)
- TODO: check
+ NOT-FOR-US: module in Liferay
CVE-2022-42114 (A Cross-site scripting (XSS) vulnerability in the Role
module's edit r ...)
- TODO: check
+ NOT-FOR-US: module in Liferay
CVE-2022-42113 (A Cross-site scripting (XSS) vulnerability in Document Library
module ...)
- TODO: check
+ NOT-FOR-US: module in Liferay
CVE-2022-42112 (A Cross-site scripting (XSS) vulnerability in the Portal
Search module ...)
- TODO: check
+ NOT-FOR-US: module in Liferay
CVE-2022-42111
RESERVED
CVE-2022-42110
@@ -4750,7 +4750,7 @@ CVE-2022-41502
CVE-2022-41501
RESERVED
CVE-2022-41500 (EyouCMS V1.5.9 was discovered to contain multiple Cross-Site
Request F ...)
- TODO: check
+ NOT-FOR-US: Eyoucms
CVE-2022-41499
RESERVED
CVE-2022-41498 (Billing System Project v1.0 was discovered to contain a SQL
injection ...)
@@ -9592,7 +9592,7 @@ CVE-2022-39430
CVE-2022-39429
RESERVED
CVE-2022-39428 (Vulnerability in the Oracle Web Applications Desktop
Integrator produc ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2022-39427 (Vulnerability in the Oracle VM VirtualBox product of Oracle
Virtualiza ...)
TODO: check
CVE-2022-39426 (Vulnerability in the Oracle VM VirtualBox product of Oracle
Virtualiza ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d0ad8a380d2d54c264028c12d4a9843f0184c9be
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d0ad8a380d2d54c264028c12d4a9843f0184c9be
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
