[Git][security-tracker-team/security-tracker][master] Process several NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b9ebda90 by Salvatore Bonaccorso at 2022-02-22T21:35:18+01:00
Process several NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1097,7 +1097,7 @@ CVE-2022-0667
 CVE-2022-0666 (CRLF Injection leads to Stack Trace Exposure due to lack of filtering  ...)
 	NOT-FOR-US: microweber
 CVE-2022-0665 (Path Traversal in GitHub repository pimcore/pimcore prior to 10.3.2. ...)
-	TODO: check
+	NOT-FOR-US: pimcore
 CVE-2022-0664 (Use of Hard-coded Cryptographic Key in Go github.com/gravitl/netmaker  ...)
 	NOT-FOR-US: Go github.com/gravitl/netmaker
 CVE-2022-0663
@@ -1220,7 +1220,7 @@ CVE-2022-0650
 CVE-2022-0649
 	RESERVED
 CVE-2021-46699 (A vulnerability has been identified in Simcenter Femap (All versions & ...)
-	TODO: check
+	NOT-FOR-US: Siemens
 CVE-2022-25257
 	RESERVED
 CVE-2022-25256 (SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRend ...)
@@ -3076,7 +3076,7 @@ CVE-2022-24584
 CVE-2022-24583
 	RESERVED
 CVE-2022-24582 (Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijac ...)
-	TODO: check
+	NOT-FOR-US: Accounting Journal Management
 CVE-2022-24581
 	RESERVED
 CVE-2022-24580
@@ -9679,7 +9679,7 @@ CVE-2022-0146
 CVE-2022-0145
 	RESERVED
 CVE-2021-46162 (A vulnerability has been identified in Simcenter Femap (All versions & ...)
-	TODO: check
+	NOT-FOR-US: Siemens
 CVE-2021-46161 (A vulnerability has been identified in Simcenter Femap V2020.2 (All ve ...)
 	NOT-FOR-US: Siemens
 CVE-2021-46160 (A vulnerability has been identified in Simcenter Femap V2020.2 (All ve ...)
@@ -17265,9 +17265,9 @@ CVE-2021-4032 (A vulnerability was found in the Linux kernel's KVM subsystem in
 CVE-2021-4031
 	RESERVED
 CVE-2021-4030 (A cross-site request forgery vulnerability in the HTTP daemon of the Z ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2021-4029 (A command injection vulnerability in the CGI program of the Zyxel ARMO ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2021-4028 [use-after-free in RDMA listen()]
 	RESERVED
 	- linux 5.14.12-1
@@ -69604,7 +69604,7 @@ CVE-2021-24869
 CVE-2021-24868 (The Document Embedder WordPress plugin before 1.7.9 contains a AJAX ac ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2021-24867 (Numerous Plugins and Themes from the AccessPress Themes (aka Access Ke ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2021-24866 (The WP Data Access WordPress plugin before 5.0.0 does not properly san ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2021-24865 (The Advanced Custom Fields: Extended WordPress plugin before 0.8.8.7 d ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b9ebda9002f3c0f0eb199b8c3a5c4fd2008befd7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b9ebda9002f3c0f0eb199b8c3a5c4fd2008befd7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220222/dac9650e/attachment.htm>