[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Jun 1 04:04:22 BST 2022 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e665b2bc by Salvatore Bonaccorso at 2022-06-01T05:03:53+02:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -850,7 +850,7 @@ CVE-2022-1927 (Buffer Over-read in GitHub repository vim/vim prior to 8.2. ...)
 	NOTE: https://github.com/vim/vim/commit/4d97a565ae8be0d4debba04ebd2ac3e75a0c8010 (v8.2.5037)
 	NOTE: Crash in CLI tool, no security impact
 CVE-2022-1926 (Integer Overflow or Wraparound in GitHub repository polonel/trudesk pr ...)
-	TODO: check
+	NOT-FOR-US: Trudesk
 CVE-2022-31793
 	RESERVED
 CVE-2022-31792
@@ -1861,7 +1861,7 @@ CVE-2022-31502
 CVE-2022-31501
 	RESERVED
 CVE-2022-31500 (In KNIME Analytics Platform below 4.6.0, the Windows installer sets im ...)
-	TODO: check
+	NOT-FOR-US: KNIME Analytics Platform
 CVE-2022-31499
 	RESERVED
 CVE-2022-31498
@@ -2181,13 +2181,13 @@ CVE-2022-31340
 CVE-2022-31339
 	RESERVED
 CVE-2022-31338 (Online Ordering System 2.3.2 is vulnerable to SQL Injection via /order ...)
-	TODO: check
+	NOT-FOR-US: Online Ordering System
 CVE-2022-31337 (Online Ordering System 2.3.2 is vulnerable to SQL Injection via /order ...)
-	TODO: check
+	NOT-FOR-US: Online Ordering System
 CVE-2022-31336 (Online Ordering System 2.3.2 is vulnerable to SQL Injection via /order ...)
-	TODO: check
+	NOT-FOR-US: Online Ordering System
 CVE-2022-31335 (Online Ordering System 2.3.2 is vulnerable to SQL Injection via /order ...)
-	TODO: check
+	NOT-FOR-US: Online Ordering System
 CVE-2022-31334
 	RESERVED
 CVE-2022-31333
@@ -2199,11 +2199,11 @@ CVE-2022-31331
 CVE-2022-31330
 	RESERVED
 CVE-2022-31329 (Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection  ...)
-	TODO: check
+	NOT-FOR-US: Online Ordering System
 CVE-2022-31328 (Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering ...)
-	TODO: check
+	NOT-FOR-US: Online Ordering System
 CVE-2022-31327 (Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection  ...)
-	TODO: check
+	NOT-FOR-US: Online Ordering System
 CVE-2022-31326
 	RESERVED
 CVE-2022-31325
@@ -3621,63 +3621,63 @@ CVE-2022-30838 (Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL
 CVE-2022-30837 (Toll-tax-management-system v1.0 is vulnerable to Cross Site Scripting  ...)
 	NOT-FOR-US: Toll-tax-management-system
 CVE-2022-30836 (Wedding Management System v1.0 is vulnerable to SQL Injection. via Wed ...)
-	TODO: check
+	NOT-FOR-US: Wedding Management System
 CVE-2022-30835 (Wedding Management System v1.0 is vulnerable to SQL Injection. via /We ...)
-	TODO: check
+	NOT-FOR-US: Wedding Management System
 CVE-2022-30834 (Wedding Management System v1.0 is vulnerable to SQL Injection via /Wed ...)
-	TODO: check
+	NOT-FOR-US: Wedding Management System
 CVE-2022-30833 (Wedding Management System v1.0 is vulnerable to SQL Injection via /Wed ...)
-	TODO: check
+	NOT-FOR-US: Wedding Management System
 CVE-2022-30832 (Wedding Management System v1.0 is vulnerable to SQL Injection via /Wed ...)
-	TODO: check
+	NOT-FOR-US: Wedding Management System
 CVE-2022-30831 (Wedding Management System v1.0 is vulnerable to SQL Injection via Wedd ...)
-	TODO: check
+	NOT-FOR-US: Wedding Management System
 CVE-2022-30830 (Wedding Management System v1.0 is vulnerable to SQL Injection via \adm ...)
-	TODO: check
+	NOT-FOR-US: Wedding Management System
 CVE-2022-30829 (Wedding Management System v1.0 is vulnerable to SQL Injection via \adm ...)
-	TODO: check
+	NOT-FOR-US: Wedding Management System
 CVE-2022-30828 (Wedding Management System v1.0 is vulnerable to SQL Injection via \adm ...)
-	TODO: check
+	NOT-FOR-US: Wedding Management System
 CVE-2022-30827 (Wedding Management System v1.0 is vulnerable to SQL Injection via \adm ...)
-	TODO: check
+	NOT-FOR-US: Wedding Management System
 CVE-2022-30826 (Wedding Management System v1.0 is vulnerable to SQL Injection via admi ...)
-	TODO: check
+	NOT-FOR-US: Wedding Management System
 CVE-2022-30825 (Wedding Management System v1.0 is vulnerable to SQL Injection via \adm ...)
-	TODO: check
+	NOT-FOR-US: Wedding Management System
 CVE-2022-30824
 	RESERVED
 CVE-2022-30823 (Wedding Management System v1.0 is vulnerable to SQL Injection via \adm ...)
-	TODO: check
+	NOT-FOR-US: Wedding Management System
 CVE-2022-30822 (In Wedding Management System v1.0, there is an arbitrary file upload v ...)
-	TODO: check
+	NOT-FOR-US: Wedding Management System
 CVE-2022-30821 (In Wedding Management System v1.0, the editing function of the "Servic ...)
-	TODO: check
+	NOT-FOR-US: Wedding Management System
 CVE-2022-30820 (In Wedding Management v1.0, there is an arbitrary file upload vulnerab ...)
-	TODO: check
+	NOT-FOR-US: Wedding Management System
 CVE-2022-30819 (In Wedding Management System v1.0, there is an arbitrary file upload v ...)
-	TODO: check
+	NOT-FOR-US: Wedding Management System
 CVE-2022-30818 (Wedding Management System v1.0 is vulnerable to SQL injection via /Wed ...)
-	TODO: check
+	NOT-FOR-US: Wedding Management System
 CVE-2022-30817 (Simple Bus Ticket Booking System 1.0 is vulnerable to SQL Injection vi ...)
-	TODO: check
+	NOT-FOR-US: Simple Bus Ticket Booking System 
 CVE-2022-30816 (elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_sidebar.p ...)
-	TODO: check
+	NOT-FOR-US: elitecms
 CVE-2022-30815 (elitecms 1.01 is vulnerable to SQL Injection via admin/edit_sidebar.ph ...)
-	TODO: check
+	NOT-FOR-US: elitecms
 CVE-2022-30814 (elitecms v1.01 is vulnerable to SQL Injection via /admin/add_sidebar.p ...)
-	TODO: check
+	NOT-FOR-US: elitecms
 CVE-2022-30813 (elitecms 1.01 is vulnerable to SQL Injection via /admin/add_post.php. ...)
-	TODO: check
+	NOT-FOR-US: elitecms
 CVE-2022-30812
 	RESERVED
 CVE-2022-30811
 	RESERVED
 CVE-2022-30810 (elitecms v1.01 is vulnerable to SQL Injection via admin/edit_post.php. ...)
-	TODO: check
+	NOT-FOR-US: elitecms
 CVE-2022-30809 (elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_page.php? ...)
-	TODO: check
+	NOT-FOR-US: elitecms
 CVE-2022-30808 (elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/man ...)
-	TODO: check
+	NOT-FOR-US: elitecms
 CVE-2022-30807
 	RESERVED
 CVE-2022-30806
@@ -3685,7 +3685,7 @@ CVE-2022-30806
 CVE-2022-30805
 	RESERVED
 CVE-2022-30804 (elitecms v1.01 is vulnerable to Delete any file via /admin/delete_imag ...)
-	TODO: check
+	NOT-FOR-US: elitecms
 CVE-2022-30803
 	RESERVED
 CVE-2022-30802
@@ -3695,17 +3695,17 @@ CVE-2022-30801
 CVE-2022-30800
 	RESERVED
 CVE-2022-30799 (Online Ordering System v1.0 by oretnom23 has SQL injection via store/o ...)
-	TODO: check
+	NOT-FOR-US: Online Ordering System
 CVE-2022-30798 (Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injectio ...)
-	TODO: check
+	NOT-FOR-US: Online Ordering System
 CVE-2022-30797 (Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection ...)
-	TODO: check
+	NOT-FOR-US: Online Ordering System
 CVE-2022-30796
 	RESERVED
 CVE-2022-30795 (Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injectio ...)
-	TODO: check
+	NOT-FOR-US: Online Ordering System
 CVE-2022-30794 (Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injectio ...)
-	TODO: check
+	NOT-FOR-US: Online Ordering System
 CVE-2022-30793
 	RESERVED
 CVE-2022-30790



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e665b2bc27c2010019bbeabab66d7d620697f87d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e665b2bc27c2010019bbeabab66d7d620697f87d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220601/24fcb7a7/attachment.htm>

More information about the debian-security-tracker-commits mailing list