Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a7223ae0 by Salvatore Bonaccorso at 2022-11-18T21:20:05+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,11 +1,11 @@
CVE-2022-45474 (drachtio-server 0.8.18 has a request-handler.cpp event_cb
use-after-fr ...)
- TODO: check
+ NOT-FOR-US: drachtio-server
CVE-2022-45473 (In drachtio-server 0.8.18, /var/log/drachtio has mode 0777 and
drachti ...)
- TODO: check
+ NOT-FOR-US: drachtio-server
CVE-2022-45472
RESERVED
CVE-2022-45471 (In JetBrains Hub before 2022.3.15181 Throttling was missed
when sendin ...)
- TODO: check
+ NOT-FOR-US: JetBrains Hub
CVE-2022-45470
RESERVED
CVE-2022-44456
@@ -2059,7 +2059,7 @@ CVE-2022-44822
CVE-2022-44821
RESERVED
CVE-2022-44820 (Automotive Shop Management System v1.0 is vulnerable to SQL
Injection ...)
- TODO: check
+ NOT-FOR-US: Automotive Shop Management System
CVE-2022-44819
RESERVED
CVE-2022-44818
@@ -4289,11 +4289,11 @@ CVE-2022-44417
CVE-2022-44416
RESERVED
CVE-2022-44415 (Automotive Shop Management System v1.0 is vulnerable to SQL
Injection ...)
- TODO: check
+ NOT-FOR-US: Automotive Shop Management System
CVE-2022-44414 (Automotive Shop Management System v1.0 is vulnerable to SQL
Injection ...)
- TODO: check
+ NOT-FOR-US: Automotive Shop Management System
CVE-2022-44413 (Automotive Shop Management System v1.0 is vulnerable to SQL
Injection ...)
- TODO: check
+ NOT-FOR-US: Automotive Shop Management System
CVE-2022-44412
RESERVED
CVE-2022-44411
@@ -4361,9 +4361,9 @@ CVE-2022-44381
CVE-2022-44380
RESERVED
CVE-2022-44379 (Automotive Shop Management System v1.0 is vulnerable to SQL
Injection ...)
- TODO: check
+ NOT-FOR-US: Automotive Shop Management System
CVE-2022-44378 (Automotive Shop Management System v1.0 is vulnerable to SQL
via /asms/ ...)
- TODO: check
+ NOT-FOR-US: Automotive Shop Management System
CVE-2022-44377
RESERVED
CVE-2022-44376
@@ -4711,7 +4711,7 @@ CVE-2022-44206
CVE-2022-44205
RESERVED
CVE-2022-44204 (D-Link DIR3060 DIR3060A1_FW111B04.bin is vulnerable to Buffer
Overflow ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2022-44203
RESERVED
CVE-2022-44202
@@ -8156,7 +8156,7 @@ CVE-2022-43490
CVE-2022-43488 (Cross-Site Request Forgery (CSRF) vulnerability in Advanced
Dynamic Pr ...)
NOT-FOR-US: WordPress plugin
CVE-2022-43482 (Missing Authorization vulnerability in Appointment Booking
Calendar pl ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-43481 (Cross-Site Request Forgery (CSRF) vulnerability in Advanced
Coupons fo ...)
NOT-FOR-US: WordPress plugin
CVE-2022-43480
@@ -8172,7 +8172,7 @@ CVE-2022-43471
CVE-2022-43469
RESERVED
CVE-2022-43463 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability
in Cust ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-43462
RESERVED
CVE-2022-43461
@@ -8222,7 +8222,7 @@ CVE-2022-42479
CVE-2022-42462
RESERVED
CVE-2022-42461 (Broken Access Control vulnerability in miniOrange's Google
Authenticat ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-42460 (Broken Access Control vulnerability leading to Stored
Cross-Site Scrip ...)
NOT-FOR-US: WordPress plugin
CVE-2022-42459
@@ -8242,13 +8242,13 @@ CVE-2022-41980 (Auth. (admin+) Cross-Site Scripting
(XSS) vulnerability in Mante
CVE-2022-41978 (Auth. (subscriber+) Arbitrary Options Update vulnerability in
Zoho CRM ...)
NOT-FOR-US: WordPress plugin
CVE-2022-41840 (Unauth. Directory Traversal vulnerability in Welcart eCommerce
plugin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-41839
RESERVED
CVE-2022-41831
RESERVED
CVE-2022-41805 (Cross-Site Request Forgery (CSRF) vulnerability in Booster for
WooComm ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-41791 (Auth. (subscriber+) CSV Injection vulnerability in ProfileGrid
plugin ...)
NOT-FOR-US: WordPress plugin
CVE-2022-41790
@@ -8260,17 +8260,17 @@ CVE-2022-41786
CVE-2022-41785
RESERVED
CVE-2022-41781 (Broken Access Control vulnerability in Permalink Manager Lite
plugin & ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-41698
RESERVED
CVE-2022-41695
RESERVED
CVE-2022-41692 (Missing Authorization vulnerability in Appointment Hour
Booking plugin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-41685
RESERVED
CVE-2022-41652 (Bypass vulnerability in Quiz And Survey Master plugin <=
7.3.10 on ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-41619
RESERVED
CVE-2022-41554
@@ -8286,9 +8286,9 @@ CVE-2022-40695
CVE-2022-40692
RESERVED
CVE-2022-40687 (Cross-Site Request Forgery (CSRF) vulnerability in Creative
Mail plugi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-40686 (Cross-Site Request Forgery (CSRF) vulnerability in Creative
Mail plugi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-38971
RESERVED
CVE-2022-38716
@@ -8298,7 +8298,7 @@ CVE-2022-38702
CVE-2022-38356
RESERVED
CVE-2022-38075 (Cross-Site Request Forgery (CSRF) vulnerability leading to
Stored Cros ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-3648
RESERVED
CVE-2022-3647 (A vulnerability, which was classified as problematic, was found
in Red ...)
@@ -15449,7 +15449,7 @@ CVE-2022-40193 (Unauthenticated Stored Cross-Site
Scripting (XSS) vulnerability
CVE-2022-40131 (Cross-Site Request Forgery (CSRF) vulnerability in a3rev
Software Page ...)
NOT-FOR-US: WordPress plugin
CVE-2022-38974 (Broken Access Control vulnerability in WPML Multilingual CMS
premium p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-38468
RESERVED
CVE-2022-38461 (Broken Access Control vulnerability in WPML Multilingual CMS
premium p ...)
@@ -62441,9 +62441,9 @@ CVE-2022-24040 (A vulnerability has been identified in
Desigo DXR2 (All versions
CVE-2022-24039 (A vulnerability has been identified in Desigo PXC4 (All
versions < ...)
NOT-FOR-US: Siemens
CVE-2022-24038 (Karmasis informatics solutions Infraskope Security Event
Manager produ ...)
- TODO: check
+ NOT-FOR-US: Karmasis informatics solutions
CVE-2022-24037 (Karmasis informatics solutions Infraskope Security Event
Manager produ ...)
- TODO: check
+ NOT-FOR-US: Karmasis informatics solutions
CVE-2022-24036 (Karmasis informatics solutions Infraskope Security Event
Manager produ ...)
NOT-FOR-US: Karmasis
CVE-2022-23921 (Exploitation of this vulnerability may result in local
privilege escal ...)
@@ -63986,7 +63986,7 @@ CVE-2022-23750
CVE-2022-23749
RESERVED
CVE-2022-23748 (mDNSResponder.exe is vulnerable to DLL Sideloading attack.
Executable ...)
- TODO: check
+ NOT-FOR-US: Zoom
CVE-2022-23747 (In Sony Xperia series 1, 5, and Pro, an out of bound memory
access can ...)
NOT-FOR-US: Sony
CVE-2022-23746
@@ -80210,9 +80210,9 @@ CVE-2022-20949 (A vulnerability in the management web
server of Cisco Firepower
CVE-2022-20948
RESERVED
CVE-2022-20947 (A vulnerability in dynamic access policies (DAP) functionality
of Cisc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2022-20946 (A vulnerability in the generic routing encapsulation (GRE)
tunnel deca ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2022-20945 (A vulnerability in the 802.11 association frame validation of
Cisco Ca ...)
NOT-FOR-US: Cisco
CVE-2022-20944 (A vulnerability in the software image verification
functionality of Ci ...)
@@ -80222,7 +80222,7 @@ CVE-2022-20943 (Multiple vulnerabilities in the Server
Message Block Version 2 (
CVE-2022-20942 (A vulnerability in the web-based management interface of Cisco
Email S ...)
NOT-FOR-US: Cisco
CVE-2022-20941 (A vulnerability in the web-based management interface of Cisco
Firepow ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2022-20940 (A vulnerability in the TLS handler of Cisco Firepower Threat
Defense ( ...)
TODO: check
CVE-2022-20939
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a7223ae0e1a1210ebefb44ea939d06fdc4114069
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a7223ae0e1a1210ebefb44ea939d06fdc4114069
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
