[Git][security-tracker-team/security-tracker][master] Process NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0d5b3613 by Salvatore Bonaccorso at 2022-12-05T11:15:45+01:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -100,7 +100,7 @@ CVE-2022-4274 (A vulnerability, which was classified as critical, was found in H
 CVE-2022-4273 (A vulnerability, which was classified as critical, has been found in S ...)
 	NOT-FOR-US: SourceCodester Human Resource Management System
 CVE-2022-4272 (A vulnerability, which was classified as critical, has been found in F ...)
-	TODO: check
+	NOT-FOR-US: FeMiner wms
 CVE-2022-45124
 	RESERVED
 CVE-2022-45115
@@ -10468,9 +10468,9 @@ CVE-2022-43500 (Cross-site scripting vulnerability in WordPress versions prior t
 CVE-2022-43497 (Cross-site scripting vulnerability in WordPress versions prior to 6.0. ...)
 	TODO: check
 CVE-2022-43487 (Cross-site scripting vulnerability in Salon booking system versions pr ...)
-	TODO: check
+	NOT-FOR-US: Salon booking system
 CVE-2022-43484 (TERASOLUNA Global Framework 1.0.0 (Public review version) and TERASOLU ...)
-	TODO: check
+	NOT-FOR-US: TERASOLUNA
 CVE-2022-43470 (Cross-site request forgery (CSRF) vulnerability in +F FS040U software  ...)
 	NOT-FOR-US: +F software
 CVE-2022-43442 (Plaintext storage of a password vulnerability exists in +F FS040U soft ...)
@@ -10480,11 +10480,11 @@ CVE-2022-42486
 CVE-2022-41994
 	RESERVED
 CVE-2022-41830 (Stored cross-site scripting vulnerability in Kyocera Document Solution ...)
-	TODO: check
+	NOT-FOR-US: Kyocera Document Solutions
 CVE-2022-41807 (Missing authorization vulnerability exists in Kyocera Document Solutio ...)
-	TODO: check
+	NOT-FOR-US: Kyocera Document Solutions
 CVE-2022-41798 (Session information easily guessable vulnerability exists in Kyocera D ...)
-	TODO: check
+	NOT-FOR-US: Kyocera Document Solutions
 CVE-2022-3680
 	RESERVED
 CVE-2022-3679
@@ -10881,7 +10881,7 @@ CVE-2022-43514
 CVE-2022-43513
 	RESERVED
 CVE-2022-43499 (Stored cross-site scripting vulnerability in SHIRASAGI versions prior  ...)
-	TODO: check
+	NOT-FOR-US: SHIRASAGI
 CVE-2022-43492 (Auth. (subscriber+) Insecure Direct Object References (IDOR) vulnerabi ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2022-43491 (Cross-Site Request Forgery (CSRF) vulnerability in Advanced Dynamic Pr ...)
@@ -10897,7 +10897,7 @@ CVE-2022-43481 (Cross-Site Request Forgery (CSRF) vulnerability in Advanced Coup
 CVE-2022-43480
 	RESERVED
 CVE-2022-43479 (Open redirect vulnerability in SHIRASAGI v1.14.4 to v1.15.0 allows a r ...)
-	TODO: check
+	NOT-FOR-US: SHIRASAGI
 CVE-2022-43476
 	RESERVED
 CVE-2022-43472
@@ -11011,7 +11011,7 @@ CVE-2022-41619
 CVE-2022-41554
 	RESERVED
 CVE-2022-40968 (Reflected Cross-Site Scripting (XSS) vulnerability in 2kb Amazon Affil ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2022-40963 (Multiple Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerabili ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2022-40698 (Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Quiz A ...)
@@ -11383,11 +11383,11 @@ CVE-2022-43380
 CVE-2022-43379
 	RESERVED
 CVE-2022-42496 (OS command injection vulnerability in Nako3edit, editor component of n ...)
-	TODO: check
+	NOT-FOR-US: Nako3edit
 CVE-2022-41777 (Improper check or handling of exceptional conditions vulnerability in  ...)
-	TODO: check
+	NOT-FOR-US: Nako3edit
 CVE-2022-41642 (OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 a ...)
-	TODO: check
+	NOT-FOR-US: Nako3edit
 CVE-2022-3575 (Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to ...)
 	NOT-FOR-US: Frauscher Sensortechnik
 CVE-2022-3574 (The WPForms Pro WordPress plugin before 1.7.7 does not validate its fo ...)
@@ -16110,7 +16110,7 @@ CVE-2022-36418
 CVE-2022-36399
 	RESERVED
 CVE-2022-35730 (Cross-Site Request Forgery (CSRF) vulnerability in Oceanwp sticky head ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2022-34840
 	RESERVED
 CVE-2022-3347
@@ -22092,7 +22092,7 @@ CVE-2022-3088 (UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System
 CVE-2022-3087
 	RESERVED
 CVE-2022-3086 (An attacker with physical access to Moxa's bootloader versions of UC-8 ...)
-	TODO: check
+	NOT-FOR-US: Moxa
 CVE-2022-3085
 	RESERVED
 CVE-2022-3084
@@ -33145,7 +33145,7 @@ CVE-2022-35122 (An access control issue in Ecowitt GW1100 Series Weather Station
 CVE-2022-35121 (Novel-Plus v3.6.1 was discovered to contain a SQL injection vulnerabil ...)
 	NOT-FOR-US: Novel-Plus
 CVE-2022-35120 (IXPdata EasyInstall 6.6.14725 contains an access control issue. ...)
-	TODO: check
+	NOT-FOR-US: IXPdata EasyInstall
 CVE-2022-35119
 	RESERVED
 CVE-2022-35118 (PyroCMS v3.9 was discovered to contain multiple cross-site scripting ( ...)
@@ -114692,7 +114692,7 @@ CVE-2021-31695
 CVE-2021-31694
 	RESERVED
 CVE-2021-31693 (VMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and 10.x.y) c ...)
-	TODO: check
+	NOT-FOR-US: VMware Tools for Windows
 CVE-2021-31692
 	RESERVED
 CVE-2021-31691



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d5b3613b5b06687fbe51c0876c32f701885d07d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d5b3613b5b06687fbe51c0876c32f701885d07d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221205/3135a4c4/attachment.htm>