Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0d5b3613 by Salvatore Bonaccorso at 2022-12-05T11:15:45+01:00
Process NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -100,7 +100,7 @@ CVE-2022-4274 (A vulnerability, which was classified as
critical, was found in H
CVE-2022-4273 (A vulnerability, which was classified as critical, has been
found in S ...)
NOT-FOR-US: SourceCodester Human Resource Management System
CVE-2022-4272 (A vulnerability, which was classified as critical, has been
found in F ...)
- TODO: check
+ NOT-FOR-US: FeMiner wms
CVE-2022-45124
RESERVED
CVE-2022-45115
@@ -10468,9 +10468,9 @@ CVE-2022-43500 (Cross-site scripting vulnerability in
WordPress versions prior t
CVE-2022-43497 (Cross-site scripting vulnerability in WordPress versions prior
to 6.0. ...)
TODO: check
CVE-2022-43487 (Cross-site scripting vulnerability in Salon booking system
versions pr ...)
- TODO: check
+ NOT-FOR-US: Salon booking system
CVE-2022-43484 (TERASOLUNA Global Framework 1.0.0 (Public review version) and
TERASOLU ...)
- TODO: check
+ NOT-FOR-US: TERASOLUNA
CVE-2022-43470 (Cross-site request forgery (CSRF) vulnerability in +F FS040U
software ...)
NOT-FOR-US: +F software
CVE-2022-43442 (Plaintext storage of a password vulnerability exists in +F
FS040U soft ...)
@@ -10480,11 +10480,11 @@ CVE-2022-42486
CVE-2022-41994
RESERVED
CVE-2022-41830 (Stored cross-site scripting vulnerability in Kyocera Document
Solution ...)
- TODO: check
+ NOT-FOR-US: Kyocera Document Solutions
CVE-2022-41807 (Missing authorization vulnerability exists in Kyocera Document
Solutio ...)
- TODO: check
+ NOT-FOR-US: Kyocera Document Solutions
CVE-2022-41798 (Session information easily guessable vulnerability exists in
Kyocera D ...)
- TODO: check
+ NOT-FOR-US: Kyocera Document Solutions
CVE-2022-3680
RESERVED
CVE-2022-3679
@@ -10881,7 +10881,7 @@ CVE-2022-43514
CVE-2022-43513
RESERVED
CVE-2022-43499 (Stored cross-site scripting vulnerability in SHIRASAGI
versions prior ...)
- TODO: check
+ NOT-FOR-US: SHIRASAGI
CVE-2022-43492 (Auth. (subscriber+) Insecure Direct Object References (IDOR)
vulnerabi ...)
NOT-FOR-US: WordPress plugin
CVE-2022-43491 (Cross-Site Request Forgery (CSRF) vulnerability in Advanced
Dynamic Pr ...)
@@ -10897,7 +10897,7 @@ CVE-2022-43481 (Cross-Site Request Forgery (CSRF)
vulnerability in Advanced Coup
CVE-2022-43480
RESERVED
CVE-2022-43479 (Open redirect vulnerability in SHIRASAGI v1.14.4 to v1.15.0
allows a r ...)
- TODO: check
+ NOT-FOR-US: SHIRASAGI
CVE-2022-43476
RESERVED
CVE-2022-43472
@@ -11011,7 +11011,7 @@ CVE-2022-41619
CVE-2022-41554
RESERVED
CVE-2022-40968 (Reflected Cross-Site Scripting (XSS) vulnerability in 2kb
Amazon Affil ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-40963 (Multiple Auth. (author+) Stored Cross-Site Scripting (XSS)
vulnerabili ...)
NOT-FOR-US: WordPress plugin
CVE-2022-40698 (Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability
in Quiz A ...)
@@ -11383,11 +11383,11 @@ CVE-2022-43380
CVE-2022-43379
RESERVED
CVE-2022-42496 (OS command injection vulnerability in Nako3edit, editor
component of n ...)
- TODO: check
+ NOT-FOR-US: Nako3edit
CVE-2022-41777 (Improper check or handling of exceptional conditions
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Nako3edit
CVE-2022-41642 (OS command injection vulnerability in Nadesiko3 (PC Version)
v3.3.61 a ...)
- TODO: check
+ NOT-FOR-US: Nako3edit
CVE-2022-3575 (Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2
v2.8.0 to ...)
NOT-FOR-US: Frauscher Sensortechnik
CVE-2022-3574 (The WPForms Pro WordPress plugin before 1.7.7 does not validate
its fo ...)
@@ -16110,7 +16110,7 @@ CVE-2022-36418
CVE-2022-36399
RESERVED
CVE-2022-35730 (Cross-Site Request Forgery (CSRF) vulnerability in Oceanwp
sticky head ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2022-34840
RESERVED
CVE-2022-3347
@@ -22092,7 +22092,7 @@ CVE-2022-3088 (UC-8100A-ME-T System Image: Versions
v1.0 to v1.6, UC-2100 System
CVE-2022-3087
RESERVED
CVE-2022-3086 (An attacker with physical access to Moxa's bootloader versions
of UC-8 ...)
- TODO: check
+ NOT-FOR-US: Moxa
CVE-2022-3085
RESERVED
CVE-2022-3084
@@ -33145,7 +33145,7 @@ CVE-2022-35122 (An access control issue in Ecowitt
GW1100 Series Weather Station
CVE-2022-35121 (Novel-Plus v3.6.1 was discovered to contain a SQL injection
vulnerabil ...)
NOT-FOR-US: Novel-Plus
CVE-2022-35120 (IXPdata EasyInstall 6.6.14725 contains an access control
issue. ...)
- TODO: check
+ NOT-FOR-US: IXPdata EasyInstall
CVE-2022-35119
RESERVED
CVE-2022-35118 (PyroCMS v3.9 was discovered to contain multiple cross-site
scripting ( ...)
@@ -114692,7 +114692,7 @@ CVE-2021-31695
CVE-2021-31694
RESERVED
CVE-2021-31693 (VMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and
10.x.y) c ...)
- TODO: check
+ NOT-FOR-US: VMware Tools for Windows
CVE-2021-31692
RESERVED
CVE-2021-31691
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d5b3613b5b06687fbe51c0876c32f701885d07d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d5b3613b5b06687fbe51c0876c32f701885d07d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
