[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff (@jmm) jmm at debian.org
Thu Jul 28 11:47:21 BST 2022 


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
59ae2463 by Moritz Muehlenhoff at 2022-07-28T12:46:45+02:00
NFUs
fossil n/a

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -15,39 +15,39 @@ CVE-2022-37002
 CVE-2022-37001
 	RESERVED
 CVE-2022-37000 (An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36999 (An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36998 (An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36997 (An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36996 (An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36995 (An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36994 (An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36993 (An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36992 (An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36991 (An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36990 (An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36989 (An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36988 (An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36987 (An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36986 (An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36985 (An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36984 (An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36983
 	RESERVED
 CVE-2022-36982
@@ -103,23 +103,23 @@ CVE-2022-36958
 CVE-2022-36957
 	RESERVED
 CVE-2022-36956 (In Veritas NetBackup, the NetBackup Client allows arbitrary command ex ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36955 (In Veritas NetBackup, an attacker with unprivileged local access to a  ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36954 (In Veritas NetBackup OpsCenter, under specific conditions, an authenti ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36953 (In Veritas NetBackup OpsCenter, certain endpoints could allow an unaut ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36952 (In Veritas NetBackup OpsCenter, a hard-coded credential exists that co ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36951 (In Veritas NetBackup OpsCenter, an unauthenticated remote attacker may ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36950 (In Veritas NetBackup OpsCenter, an unauthenticated remote attacker may ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36949 (In Veritas NetBackup OpsCenter, an attacker with local access to a Net ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36948 (In Veritas NetBackup OpsCenter, a DOM XSS attack can occur. This affec ...)
-	TODO: check
+	NOT-FOR-US: Veritas
 CVE-2022-36947
 	RESERVED
 CVE-2022-36946 (nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel th ...)
@@ -161,7 +161,7 @@ CVE-2022-2558
 CVE-2022-2557
 	RESERVED
 CVE-2021-46830 (A path traversal vulnerability exists within GoAnywhere MFT before 6.8 ...)
-	TODO: check
+	NOT-FOR-US: GoAnywhere MFT
 CVE-2022-36943
 	RESERVED
 CVE-2022-36942
@@ -2550,7 +2550,7 @@ CVE-2022-35913
 CVE-2022-35912 (In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x b ...)
 	- grails <itp> (bug #473213)
 CVE-2022-35911 (On Patlite NH-FB series devices through 1.46, remote attackers can cau ...)
-	TODO: check
+	NOT-FOR-US: Patlite NH-FB
 CVE-2022-35910
 	RESERVED
 CVE-2022-35909
@@ -7161,7 +7161,7 @@ CVE-2022-34142
 CVE-2022-34141
 	RESERVED
 CVE-2022-34140 (A stored cross-site scripting (XSS) vulnerability in /index.php?r=site ...)
-	TODO: check
+	NOT-FOR-US: Feehi CMS
 CVE-2022-34139
 	RESERVED
 CVE-2022-34138
@@ -7428,7 +7428,7 @@ CVE-2022-34011 (OneBlog v2.3.4 was discovered to contain a Server-Side Request F
 CVE-2022-34010
 	RESERVED
 CVE-2022-34009 (Fossil 2.18 on Windows allows attackers to cause a denial of service ( ...)
-	TODO: check
+	- fossil <not-affected> (Windows-specific)
 CVE-2022-34008 (Comodo Antivirus 12.2.2.8012 has a quarantine flaw that allows privile ...)
 	NOT-FOR-US: Comodo Antivirus
 CVE-2022-34007 (EQS Integrity Line through 2022-07-01 allows a stored XSS via a crafte ...)
@@ -25507,7 +25507,7 @@ CVE-2022-27617
 CVE-2022-27616
 	RESERVED
 CVE-2022-27615 (Improper limitation of a pathname to a restricted directory ('Path Tra ...)
-	TODO: check
+	NOT-FOR-US: Synology
 CVE-2022-27614
 	RESERVED
 CVE-2022-27613
@@ -56191,11 +56191,11 @@ CVE-2021-42539 (The affected product is vulnerable to a missing permission valid
 CVE-2021-42538 (The affected product is vulnerable to a parameter injection via passph ...)
 	NOT-FOR-US: Emerson
 CVE-2021-42537 (VISAM VBASE version 11.6.0.6 processes an XML document that can contai ...)
-	TODO: check
+	NOT-FOR-US: VISAM
 CVE-2021-42536 (The affected product is vulnerable to a disclosure of peer username an ...)
 	NOT-FOR-US: Emerson
 CVE-2021-42535 (VISAM VBASE version 11.6.0.6 does not neutralize or incorrectly neutra ...)
-	TODO: check
+	NOT-FOR-US: VISAM
 CVE-2021-42534 (The affected product’s web application does not properly neutral ...)
 	NOT-FOR-US: Trane
 CVE-2021-42533 (Adobe Bridge version 11.1.1 (and earlier) is affected by a double free ...)
@@ -67843,7 +67843,7 @@ CVE-2021-38419 (Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to
 CVE-2021-38418 (Delta Electronics DIALink versions 1.2.4.0 and prior runs by default o ...)
 	NOT-FOR-US: Delta Electronics DIALink
 CVE-2021-38417 (VISAM VBASE version 11.6.0.6 is vulnerable to improper access control  ...)
-	TODO: check
+	NOT-FOR-US: VISAM
 CVE-2021-38416 (Delta Electronics DIALink versions 1.2.4.0 and prior insecurely loads  ...)
 	NOT-FOR-US: Delta Electronics DIALink
 CVE-2021-38415 (Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0. ...)
@@ -67857,7 +67857,7 @@ CVE-2021-38412 (Properly formatted POST requests to multiple resources on the HT
 CVE-2021-38411 (Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to  ...)
 	NOT-FOR-US: Delta Electronics DIALink
 CVE-2021-38410 (AVEVA Software Platform Common Services (PCS) Portal versions 4.5.2, 4 ...)
-	TODO: check
+	NOT-FOR-US: AVEVA
 CVE-2021-38409 (Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0. ...)
 	NOT-FOR-US: Fuji Electric
 CVE-2021-38408 (A stack-based buffer overflow vulnerability in Advantech WebAccess Ver ...)
@@ -80292,7 +80292,7 @@ CVE-2021-33373
 CVE-2021-33372
 	RESERVED
 CVE-2021-33371 (A stored cross-site scripting (XSS) vulnerability in /nav_bar_action.p ...)
-	TODO: check
+	NOT-FOR-US: Student Management System
 CVE-2021-33370
 	RESERVED
 CVE-2021-33369
@@ -178363,7 +178363,7 @@ CVE-2020-7000 (VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module m
 CVE-2020-6999 (In Moxa EDS-G516E Series firmware, Version 5.2 or lower, some of the p ...)
 	NOT-FOR-US: Moxa
 CVE-2020-6998 (The connection establishment algorithm found in Rockwell Automation Co ...)
-	TODO: check
+	NOT-FOR-US: Rockwell
 CVE-2020-6997 (In Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive inf ...)
 	NOT-FOR-US: Moxa
 CVE-2020-6996 (Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Prot ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/59ae24637acb40dff1b03f2f3639b0c84ee3cd68

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/59ae24637acb40dff1b03f2f3639b0c84ee3cd68
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220728/f27903ab/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list