Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
570215af by Salvatore Bonaccorso at 2022-11-15T09:46:23+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4009,13 +4009,13 @@ CVE-2022-44392
CVE-2022-44391
RESERVED
CVE-2022-44390 (A cross-site scripting (XSS) vulnerability in EyouCMS
V1.5.9-UTF8-SP1 ...)
- TODO: check
+ NOT-FOR-US: EyouCMS
CVE-2022-44389 (EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site
Request ...)
- TODO: check
+ NOT-FOR-US: EyouCMS
CVE-2022-44388
RESERVED
CVE-2022-44387 (EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site
Request ...)
- TODO: check
+ NOT-FOR-US: EyouCMS
CVE-2022-44386
RESERVED
CVE-2022-44385
@@ -5411,9 +5411,9 @@ CVE-2022-43970
CVE-2022-43969
RESERVED
CVE-2022-43968 (Concrete CMS (formerly concrete5) below 8.5.10 and between
9.0.0 and 9 ...)
- TODO: check
+ NOT-FOR-US: Concrete CMS
CVE-2022-43967 (Concrete CMS (formerly concrete5) below 8.5.10 and between
9.0.0 and 9 ...)
- TODO: check
+ NOT-FOR-US: Concrete CMS
CVE-2022-43966
RESERVED
CVE-2022-43965
@@ -7321,7 +7321,7 @@ CVE-2022-43697
CVE-2022-43696
RESERVED
CVE-2022-43695 (Concrete CMS (formerly concrete5) below 8.5.10 and between
9.0.0 and 9 ...)
- TODO: check
+ NOT-FOR-US: Concrete CMS
CVE-2022-43694 (Concrete CMS (formerly concrete5) below 8.5.10 and between
9.0.0 and 9 ...)
NOT-FOR-US: Concrete CMS
CVE-2022-43693 (Concrete CMS is vulnerable to CSRF due to the lack of "State"
paramete ...)
@@ -7329,17 +7329,17 @@ CVE-2022-43693 (Concrete CMS is vulnerable to CSRF due
to the lack of "State" pa
CVE-2022-43692 (Concrete CMS (formerly concrete5) below 8.5.10 and between
9.0.0 and 9 ...)
NOT-FOR-US: Concrete CMS
CVE-2022-43691 (Concrete CMS (formerly concrete5) below 8.5.10 and between
9.0.0 and 9 ...)
- TODO: check
+ NOT-FOR-US: Concrete CMS
CVE-2022-43690 (Concrete CMS (formerly concrete5) below 8.5.10 and between
9.0.0 and 9 ...)
- TODO: check
+ NOT-FOR-US: Concrete CMS
CVE-2022-43689 (Concrete CMS (formerly concrete5) below 8.5.10 and between
9.0.0 and 9 ...)
- TODO: check
+ NOT-FOR-US: Concrete CMS
CVE-2022-43688 (Concrete CMS (formerly concrete5) below 8.5.10 and between
9.0.0 and 9 ...)
- TODO: check
+ NOT-FOR-US: Concrete CMS
CVE-2022-43687 (Concrete CMS (formerly concrete5) below 8.5.10 and between
9.0.0 and 9 ...)
- TODO: check
+ NOT-FOR-US: Concrete CMS
CVE-2022-43686 (In Concrete CMS (formerly concrete5) below 8.5.10 and between
9.0.0 an ...)
- TODO: check
+ NOT-FOR-US: Concrete CMS
CVE-2022-43685
RESERVED
CVE-2022-43684
@@ -8440,7 +8440,7 @@ CVE-2022-43325
CVE-2022-43324
RESERVED
CVE-2022-43323 (EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site
Request ...)
- TODO: check
+ NOT-FOR-US: EyouCMS
CVE-2022-43322
RESERVED
CVE-2022-43321 (Shopwind v3.4.3 was discovered to contain a reflected
cross-site scrip ...)
@@ -8827,7 +8827,7 @@ CVE-2022-43148 (rtf2html v0.2.0 was discovered to contain
a heap overflow in the
CVE-2022-43147
RESERVED
CVE-2022-43146 (An arbitrary file upload vulnerability in the image upload
function of ...)
- TODO: check
+ NOT-FOR-US: Canteen Management System
CVE-2022-43145
RESERVED
CVE-2022-43144 (A cross-site scripting (XSS) vulnerability in Canteen
Management Syste ...)
@@ -9083,7 +9083,7 @@ CVE-2022-43032 (An issue was discovered in Bento4
v1.6.0-639. There is a memory
CVE-2022-43031 (DedeCMS v6.1.9 was discovered to contain a Cross-Site Request
Forgery ...)
NOT-FOR-US: DedeCMS
CVE-2022-43030 (Siyucms v6.1.7 was discovered to contain a remote code
execution (RCE) ...)
- TODO: check
+ NOT-FOR-US: Siyucms
CVE-2022-43029 (Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered
to cont ...)
NOT-FOR-US: Tenda
CVE-2022-43028 (Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered
to cont ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/570215af63dd1115e8ca896f0eb861238c04f5c5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/570215af63dd1115e8ca896f0eb861238c04f5c5
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
