Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8af4c6e4 by Moritz Muehlenhoff at 2023-01-17T10:01:16+01:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -314,25 +314,25 @@ CVE-2022-4890 (A vulnerability, which was classified as
critical, has been found
CVE-2021-4313 (A vulnerability was found in NethServer phonenehome. It has
been rated ...)
NOT-FOR-US: NethServer phonenehome
CVE-2018-25076 (A vulnerability classified as critical was found in Events
Extension. ...)
- TODO: check
+ NOT-FOR-US: BigTree CMS addon
CVE-2016-15020 (A vulnerability was found in liftkit database up to 2.13.1. It
has bee ...)
- TODO: check
+ NOT-FOR-US: liftkit database
CVE-2015-10057 (A vulnerability was found in Little Apps Little Software
Stats. It has ...)
NOT-FOR-US: Little Apps Little Software Stats
CVE-2015-10056 (A vulnerability was found in 2071174A vinylmap. It has been
classified ...)
- TODO: check
+ NOT-FOR-US: 2071174A vinylmap
CVE-2015-10055 (A vulnerability was found in PictureThisWebServer and
classified as cr ...)
- TODO: check
+ NOT-FOR-US: PictureThisWebServer
CVE-2015-10054 (A vulnerability, which was classified as critical, was found
in githui ...)
- TODO: check
+ NOT-FOR-US: P2Manage
CVE-2015-10053 (A vulnerability classified as critical has been found in
prodigasistem ...)
- TODO: check
+ NOT-FOR-US: prodigasistemas curupira
CVE-2014-125080 (A vulnerability has been found in frontaccounting faplanet
and classif ...)
- TODO: check
+ NOT-FOR-US: frontaccounting faplanet
CVE-2013-10012 (A vulnerability, which was classified as critical, was found
in antonb ...)
- TODO: check
+ NOT-FOR-US: antonbolling clan7ups
CVE-2010-10005 (A vulnerability was found in msmania poodim. It has been
declared as c ...)
- TODO: check
+ NOT-FOR-US: msmania poodim
CVE-2023-23596
RESERVED
CVE-2023-23595 (BlueCat Device Registration Portal 2.2 allows XXE attacks that
exfiltr ...)
@@ -8562,7 +8562,7 @@ CVE-2022-43493
CVE-2022-41834
RESERVED
CVE-2020-36611 (Incorrect Default Permissions vulnerability in Hitachi Tuning
Manager ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2023-0011
RESERVED
CVE-2022-47193
@@ -10615,7 +10615,7 @@ CVE-2022-46440
CVE-2022-46439
RESERVED
CVE-2022-46438 (A cross-site scripting (XSS) vulnerability in the
/admin/article_categ ...)
- TODO: check
+ NOT-FOR-US: DouPHP
CVE-2022-46437
RESERVED
CVE-2022-46436
@@ -10917,31 +10917,31 @@ CVE-2023-21601
CVE-2023-21600
RESERVED
CVE-2023-21599 (Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier)
are affec ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2023-21598 (Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier)
are affec ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2023-21597 (Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier)
are affec ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2023-21596 (Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier)
are affec ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2023-21595 (Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier)
are affec ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2023-21594 (Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier)
are affec ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2023-21593
RESERVED
CVE-2023-21592 (Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier)
are affe ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2023-21591 (Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier)
are affe ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2023-21590 (Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier)
are affe ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2023-21589 (Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier)
are affe ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2023-21588 (Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier)
are affe ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2023-21587 (Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier)
are affe ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2023-21586
RESERVED
CVE-2023-21585
@@ -11079,7 +11079,7 @@ CVE-2022-4260 (The WP-Ban WordPress plugin before
1.69.1 does not sanitise and e
CVE-2022-4259
RESERVED
CVE-2022-4258 (In multiple versions of HIMA PC based Software an unquoted
Windows sea ...)
- TODO: check
+ NOT-FOR-US: HIMA
CVE-2022-4257 (A vulnerability was found in C-DATA Web Management System. It
has been ...)
NOT-FOR-US: C-DATA Web Management System
CVE-2022-4256 (The All-in-One Addons for Elementor WordPress plugin before
2.4.4 does ...)
@@ -11540,7 +11540,7 @@ CVE-2022-46260
CVE-2022-46259
RESERVED
CVE-2022-46258 (An incorrect authorization vulnerability was identified in
GitHub Ente ...)
- TODO: check
+ NOT-FOR-US: GitHub Enterprise Server
CVE-2022-46257
RESERVED
CVE-2022-46256 (A path traversal vulnerability was identified in GitHub
Enterprise Ser ...)
@@ -11743,7 +11743,7 @@ CVE-2022-46165
CVE-2022-46164 (NodeBB is an open source Node.js based forum software. Due to
a plain ...)
NOT-FOR-US: NodeBB
CVE-2022-46163 (Travel support program is a rails app to support the travel
support pr ...)
- TODO: check
+ NOT-FOR-US: Travel support program
CVE-2022-46162 (discourse-bbcode is the official BBCode plugin for Discourse.
Prior to ...)
NOT-FOR-US: BBCode plugin for Discourse
CVE-2022-46161 (pdfmake is an open source client/server side PDF printing in
pure Java ...)
@@ -11955,7 +11955,7 @@ CVE-2022-46095 (Sourcecodester Covid-19 Directory on
Vaccination System 1.0 was
CVE-2022-46094
RESERVED
CVE-2022-46093 (Hospital Management System v1.0 is vulnerable to SQL
Injection. Attack ...)
- TODO: check
+ NOT-FOR-US: Hospital Management System
CVE-2022-46092
RESERVED
CVE-2022-46091
@@ -12839,9 +12839,9 @@ CVE-2022-45731
CVE-2022-45730
RESERVED
CVE-2022-45729 (A cross-site scripting (XSS) vulnerability in Doctor
Appointment Manag ...)
- TODO: check
+ NOT-FOR-US: Doctor Appointment Management System
CVE-2022-45728 (Doctor Appointment Management System v1.0.0 was discovered to
contain ...)
- TODO: check
+ NOT-FOR-US: Doctor Appointment Management System
CVE-2022-45727
RESERVED
CVE-2022-45726
@@ -13656,9 +13656,9 @@ CVE-2022-45442 (Sinatra is a domain-specific language
for creating web applicati
CVE-2022-45441
RESERVED
CVE-2022-45440 (A vulnerability exists in the FTP server of the Zyxel
AX7501-B0 firmwa ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2022-45439 (A pair of spare WiFi credentials is stored in the
configuration file o ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2022-45438 (When explicitly enabling the feature flag DASHBOARD_CACHE
(disabled by ...)
NOT-FOR-US: Apache Superset
CVE-2022-45437
@@ -14147,7 +14147,7 @@ CVE-2022-45355
CVE-2022-45354
RESERVED
CVE-2022-45353 (Broken Access Control in Betheme theme <= 26.6.1 on
WordPress. ...)
- TODO: check
+ NOT-FOR-US: WordPress theme
CVE-2022-45352
RESERVED
CVE-2022-45351
@@ -17448,7 +17448,7 @@ CVE-2022-3794 (The Jeg Elementor Kit plugin for
WordPress is vulnerable to autho
CVE-2022-3793 (An improper authorization issue in GitLab CE/EE affecting all
versions ...)
- gitlab <unfixed>
CVE-2022-3792 (This issue affects: Terminal Operating System versions before
5.0.13 ...)
- TODO: check
+ NOT-FOR-US: GullsEye
CVE-2022-3791
REJECTED
CVE-2022-3790
@@ -19459,27 +19459,27 @@ CVE-2023-20534
CVE-2023-20533
RESERVED
CVE-2023-20532 (Insufficient input validation in the SMU may allow an attacker
to impr ...)
- TODO: check
+ NOT-FOR-US: AMD
CVE-2023-20531 (Insufficient bound checks in the SMU may allow an attacker to
update t ...)
- TODO: check
+ NOT-FOR-US: AMD
CVE-2023-20530 (Insufficient input validation of BIOS mailbox messages in SMU
may resu ...)
- TODO: check
+ NOT-FOR-US: AMD
CVE-2023-20529 (Insufficient bound checks in the SMU may allow an attacker to
update t ...)
- TODO: check
+ NOT-FOR-US: AMD
CVE-2023-20528 (Insufficient input validation in the SMU may allow a physical
attacker ...)
- TODO: check
+ NOT-FOR-US: AMD
CVE-2023-20527 (Improper syscall input validation in the ASP Bootloader may
allow a pr ...)
- TODO: check
+ NOT-FOR-US: AMD
CVE-2023-20526
RESERVED
CVE-2023-20525 (Insufficient syscall input validation in the ASP Bootloader
may allow ...)
- TODO: check
+ NOT-FOR-US: AMD
CVE-2023-20524
RESERVED
CVE-2023-20523 (TOCTOU in the ASP may allow a physical attacker to write
beyond the bu ...)
- TODO: check
+ NOT-FOR-US: AMD
CVE-2023-20522 (Insufficient input validation in ASP may allow an attacker
with a mali ...)
- TODO: check
+ NOT-FOR-US: AMD
CVE-2023-20521
RESERVED
CVE-2023-20520
@@ -21033,7 +21033,7 @@ CVE-2022-3695
CVE-2022-3694 (The Syncee WordPress plugin before 1.0.10 leaks the
administrator toke ...)
NOT-FOR-US: WordPress plugin
CVE-2022-3693 (The File Management System developed by FileOrbis before
version 10.6. ...)
- TODO: check
+ NOT-FOR-US: FileOrbis
CVE-2022-3692
REJECTED
CVE-2022-3691 (The DeepL Pro API translation plugin WordPress plugin before
1.7.5 dis ...)
@@ -21708,9 +21708,9 @@ CVE-2022-43515 (Zabbix Frontend provides a feature that
allows admins to maintai
[bullseye] - zabbix <ignored> (Minor issue)
NOTE: https://support.zabbix.com/browse/ZBX-22050
CVE-2022-43514 (A vulnerability has been identified in Automation License
Manager V5 ( ...)
- TODO: check
+ NOT-FOR-US: Automation License Manager
CVE-2022-43513 (A vulnerability has been identified in Automation License
Manager V5 ( ...)
- TODO: check
+ NOT-FOR-US: Automation License Manager
CVE-2022-43499 (Stored cross-site scripting vulnerability in SHIRASAGI
versions prior ...)
NOT-FOR-US: SHIRASAGI
CVE-2022-43492 (Auth. (subscriber+) Insecure Direct Object References (IDOR)
vulnerabi ...)
@@ -21740,7 +21740,7 @@ CVE-2022-43469
CVE-2022-43463 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability
in Cust ...)
NOT-FOR-US: WordPress plugin
CVE-2022-43462 (Auth. SQL Injection (SQLi) vulnerability in Adeel Ahmed's IP
Blacklist ...)
- TODO: check
+ NOT-FOR-US: Adeel Ahmed's IP Blacklist
CVE-2022-43461
RESERVED
CVE-2022-43459
@@ -21786,7 +21786,7 @@ CVE-2022-42485
CVE-2022-42479
RESERVED
CVE-2022-42462 (Auth. Stored Cross-Site Scripting (XSS) vulnerability in Adeel
Ahmed's ...)
- TODO: check
+ NOT-FOR-US: Adeel Ahmed's IP Blacklist
CVE-2022-42461 (Broken Access Control vulnerability in miniOrange's Google
Authenticat ...)
NOT-FOR-US: WordPress plugin
CVE-2022-42460 (Broken Access Control vulnerability leading to Stored
Cross-Site Scrip ...)
@@ -22195,15 +22195,15 @@ CVE-2022-43395
CVE-2022-43394
RESERVED
CVE-2022-43393 (An improper check for unusual or exceptional conditions in the
HTTP re ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2022-43392 (A buffer overflow vulnerability in the parameter of web server
in Zyxe ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2022-43391 (A buffer overflow vulnerability in the parameter of the CGI
program in ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2022-43390 (A command injection vulnerability in the CGI program of Zyxel
NR7101 f ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2022-43389 (A buffer overflow vulnerability in the library of the web
server in Zy ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2022-43388
RESERVED
CVE-2022-43387
@@ -23209,7 +23209,7 @@ CVE-2022-42981
CVE-2022-42980 (go-admin (aka GO Admin) 2.0.12 uses the string go-admin as a
productio ...)
NOT-FOR-US: go-admin (aka GO Admin)
CVE-2022-42979 (Information disclosure due to an insecure hostname validation
in the R ...)
- TODO: check
+ NOT-FOR-US: RYDE
CVE-2022-42978 (In the Netic User Export add-on before 1.3.5 for Atlassian
Confluence, ...)
NOT-FOR-US: Atlassian Confluence addon
CVE-2022-42977 (The Netic User Export add-on before 1.3.5 for Atlassian
Confluence has ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8af4c6e4fd6fd7f32511626d27e1562104dd18f0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8af4c6e4fd6fd7f32511626d27e1562104dd18f0
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
