Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
724450e2 by Salvatore Bonaccorso at 2022-11-08T21:33:12+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6525,9 +6525,9 @@ CVE-2022-43548 [DNS rebinding in --inspect via invalid
octal IP address]
CVE-2022-43547
RESERVED
CVE-2022-43546 (A vulnerability has been identified in POWER METER SICAM Q100
(All ver ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2022-43545 (A vulnerability has been identified in POWER METER SICAM Q100
(All ver ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2022-43542
RESERVED
CVE-2022-43541
@@ -6593,7 +6593,7 @@ CVE-2022-43499
CVE-2022-43492
RESERVED
CVE-2022-43491 (Cross-Site Request Forgery (CSRF) vulnerability in Advanced
Dynamic Pr ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-43490
RESERVED
CVE-2022-43488
@@ -6601,7 +6601,7 @@ CVE-2022-43488
CVE-2022-43482
RESERVED
CVE-2022-43481 (Cross-Site Request Forgery (CSRF) vulnerability in Advanced
Coupons fo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-43480
RESERVED
CVE-2022-43479
@@ -6633,7 +6633,7 @@ CVE-2022-43445
CVE-2022-43441
RESERVED
CVE-2022-43439 (A vulnerability has been identified in POWER METER SICAM Q100
(All ver ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2022-43438
RESERVED
CVE-2022-43437
@@ -6657,7 +6657,7 @@ CVE-2022-42698
CVE-2022-42497
RESERVED
CVE-2022-42494 (Server Side Request Forgery (SSRF) vulnerability in All in One
SEO Pro ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-42485
RESERVED
CVE-2022-42479
@@ -6681,7 +6681,7 @@ CVE-2022-41990
CVE-2022-41987
RESERVED
CVE-2022-41980 (Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in
Mantenimien ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-41978
RESERVED
CVE-2022-41840
@@ -7013,9 +7013,9 @@ CVE-2022-3592 [Wide links protection broken]
CVE-2022-43399
RESERVED
CVE-2022-43398 (A vulnerability has been identified in POWER METER SICAM Q100
(All ver ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2022-43397 (A vulnerability has been identified in Parasolid V34.0 (All
versions & ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2022-43396
RESERVED
CVE-2022-3591
@@ -7155,7 +7155,7 @@ CVE-2022-43361 (Senayan Library Management System v9.4.2
was discovered to conta
CVE-2022-43360
RESERVED
CVE-2022-43359 (Gifdec commit 1dcbae19363597314f6623010cc80abad4e47f7c was
discovered ...)
- TODO: check
+ NOT-FOR-US: Gifdec
CVE-2022-43358
RESERVED
CVE-2022-43357
@@ -7187,7 +7187,7 @@ CVE-2022-43345
CVE-2022-43344
RESERVED
CVE-2022-43343 (N-Prolog v1.91 was discovered to contain a global buffer
overflow vuln ...)
- TODO: check
+ NOT-FOR-US: N-Prolog
CVE-2022-43342
RESERVED
CVE-2022-43341
@@ -11184,7 +11184,7 @@ CVE-2022-41759
CVE-2022-41758
RESERVED
CVE-2022-41757 (An issue was discovered in the Arm Mali GPU Kernel Driver. A
non-privi ...)
- TODO: check
+ NOT-FOR-US: Arm Mali GPU Kernel Driver
CVE-2022-41756
RESERVED
CVE-2022-41755
@@ -11410,15 +11410,15 @@ CVE-2022-41666 (A CWE-347: Improper Verification of
Cryptographic Signature vuln
CVE-2022-41665 (A vulnerability has been identified in SICAM P850 (All
versions < V ...)
NOT-FOR-US: Siemens
CVE-2022-41664 (A vulnerability has been identified in JT2Go (All versions
< V14.1. ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2022-41663 (A vulnerability has been identified in JT2Go (All versions
< V14.1. ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2022-41662 (A vulnerability has been identified in JT2Go (All versions
< V14.1. ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2022-41661 (A vulnerability has been identified in JT2Go (All versions
< V14.1. ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2022-41660 (A vulnerability has been identified in JT2Go (All versions
< V14.1. ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2022-41656
RESERVED
CVE-2022-41655
@@ -11537,7 +11537,7 @@ CVE-2022-41315
CVE-2022-41155
RESERVED
CVE-2022-41136 (Cross-Site Request Forgery (CSRF) vulnerability leading to
Stored Cros ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-41135
RESERVED
CVE-2022-41134
@@ -11573,7 +11573,7 @@ CVE-2022-40192
CVE-2022-40130
RESERVED
CVE-2022-40128 (Cross-Site Request Forgery (CSRF) vulnerability in Advanced
Order Expo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-39044
RESERVED
CVE-2022-38467
@@ -12036,11 +12036,11 @@ CVE-2022-41436 (An issue in OXHOO TP50 OXH1.50 allows
unauthenticated attackers
CVE-2022-41435 (OpenWRT LuCI version git-22.140.66206-02913be was discovered
to contai ...)
NOT-FOR-US: OpenWRT LuCI
CVE-2022-41434 (EyesOfNetwork Web Interface v5.3 was discovered to contain a
reflected ...)
- TODO: check
+ NOT-FOR-US: EyesOfNetwork (EON)
CVE-2022-41433 (EyesOfNetwork Web Interface v5.3 was discovered to contain a
reflected ...)
- TODO: check
+ NOT-FOR-US: EyesOfNetwork (EON)
CVE-2022-41432 (EyesOfNetwork Web Interface v5.3 was discovered to contain a
reflected ...)
- TODO: check
+ NOT-FOR-US: EyesOfNetwork (EON)
CVE-2022-41431 (xzs v3.8.0 was discovered to contain a cross-site scripting
(XSS) vuln ...)
NOT-FOR-US: xzs
CVE-2022-41430 (Bento4 v1.6.0-639 was discovered to contain a heap overflow
via the AP ...)
@@ -13822,13 +13822,13 @@ CVE-2022-40672 (Authenticated (admin+) Stored
Cross-Site Scripting (XSS) vulnera
CVE-2022-40671 (Cross-Site Request Forgery (CSRF) vulnerability in Rate my
Post – ...)
NOT-FOR-US: WordPress plugin
CVE-2022-40632 (Cross-Site Request Forgery (CSRF) vulnerability in gVectors
Team wpFor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-40312
RESERVED
CVE-2022-40310 (Authenticated (subscriber+) Race Condition vulnerability in
Rate my Po ...)
NOT-FOR-US: WordPress plugin
CVE-2022-40223 (Nonce token leakage and missing authorization in SearchWP
premium plug ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-40219 (Cross-Site Request Forgery (CSRF) vulnerability in SedLex
FavIcon Swit ...)
NOT-FOR-US: WordPress plugin
CVE-2022-40217 (Authenticated (admin+) Arbitrary File Edit/Upload
vulnerability in Xpl ...)
@@ -13840,9 +13840,9 @@ CVE-2022-40213 (Multiple Authenticated (contributor+)
Stored Cross-Site Scriptin
CVE-2022-40211
RESERVED
CVE-2022-40206 (Insecure direct object references (IDOR) vulnerability in the
wpForo F ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-40205 (Insecure direct object references (IDOR) vulnerability in the
wpForo F ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-40193 (Unauthenticated Stored Cross-Site Scripting (XSS)
vulnerability in Awe ...)
NOT-FOR-US: WordPress plugin
CVE-2022-40131 (Cross-Site Request Forgery (CSRF) vulnerability in a3rev
Software Page ...)
@@ -13890,7 +13890,7 @@ CVE-2022-3212 (<bytes::Bytes as
axum_core::extract::FromRequest>::from_req
CVE-2022-3211 (Cross-site Scripting (XSS) - Stored in GitHub repository
pimcore/pimco ...)
NOT-FOR-US: pimcore
CVE-2022-30545 (Auth. Reflected Cross-Site Scripting (XSS) vulnerability in 5
Anker Co ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2020-36603 (The HoYoVerse (formerly miHoYo) Genshin Impact mhyprot2.sys
1.0.0.0 an ...)
NOT-FOR-US: HoYoVerse (formerly miHoYo) Genshin Impact
CVE-2022-40674 (libexpat before 2.4.9 has a use-after-free in the doContent
function i ...)
@@ -15003,7 +15003,7 @@ CVE-2022-38140
CVE-2022-38139 (Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in
RD Stati ...)
NOT-FOR-US: WordPress plugin
CVE-2022-38137 (Cross-Site Request Forgery (CSRF) vulnerability in Analytify
plugin &l ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-38135 (Broken Access Control vulnerability in Dean Oakley's
Photospace Galler ...)
NOT-FOR-US: WordPress plugin
CVE-2022-38134 (Authenticated (subscriber+) Broken Access Control
vulnerability in Cus ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/724450e2f66d1bbbab5684275aea3427ea195b34
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/724450e2f66d1bbbab5684275aea3427ea195b34
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
