[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Jun 14 21:13:27 BST 2022



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
41eb181e by security tracker role at 2022-06-14T20:10:23+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,255 @@
+CVE-2022-33329
+	RESERVED
+CVE-2022-33328
+	RESERVED
+CVE-2022-33327
+	RESERVED
+CVE-2022-33326
+	RESERVED
+CVE-2022-33325
+	RESERVED
+CVE-2022-33324
+	RESERVED
+CVE-2022-33323
+	RESERVED
+CVE-2022-33322
+	RESERVED
+CVE-2022-33321
+	RESERVED
+CVE-2022-33320
+	RESERVED
+CVE-2022-33319
+	RESERVED
+CVE-2022-33318
+	RESERVED
+CVE-2022-33317
+	RESERVED
+CVE-2022-33316
+	RESERVED
+CVE-2022-33315
+	RESERVED
+CVE-2022-33314
+	RESERVED
+CVE-2022-33313
+	RESERVED
+CVE-2022-33312
+	RESERVED
+CVE-2022-33309
+	RESERVED
+CVE-2022-33308
+	RESERVED
+CVE-2022-33307
+	RESERVED
+CVE-2022-33306
+	RESERVED
+CVE-2022-33305
+	RESERVED
+CVE-2022-33304
+	RESERVED
+CVE-2022-33303
+	RESERVED
+CVE-2022-33302
+	RESERVED
+CVE-2022-33301
+	RESERVED
+CVE-2022-33300
+	RESERVED
+CVE-2022-33299
+	RESERVED
+CVE-2022-33298
+	RESERVED
+CVE-2022-33297
+	RESERVED
+CVE-2022-33296
+	RESERVED
+CVE-2022-33295
+	RESERVED
+CVE-2022-33294
+	RESERVED
+CVE-2022-33293
+	RESERVED
+CVE-2022-33292
+	RESERVED
+CVE-2022-33291
+	RESERVED
+CVE-2022-33290
+	RESERVED
+CVE-2022-33289
+	RESERVED
+CVE-2022-33288
+	RESERVED
+CVE-2022-33287
+	RESERVED
+CVE-2022-33286
+	RESERVED
+CVE-2022-33285
+	RESERVED
+CVE-2022-33284
+	RESERVED
+CVE-2022-33283
+	RESERVED
+CVE-2022-33282
+	RESERVED
+CVE-2022-33281
+	RESERVED
+CVE-2022-33280
+	RESERVED
+CVE-2022-33279
+	RESERVED
+CVE-2022-33278
+	RESERVED
+CVE-2022-33277
+	RESERVED
+CVE-2022-33276
+	RESERVED
+CVE-2022-33275
+	RESERVED
+CVE-2022-33274
+	RESERVED
+CVE-2022-33273
+	RESERVED
+CVE-2022-33272
+	RESERVED
+CVE-2022-33271
+	RESERVED
+CVE-2022-33270
+	RESERVED
+CVE-2022-33269
+	RESERVED
+CVE-2022-33268
+	RESERVED
+CVE-2022-33267
+	RESERVED
+CVE-2022-33266
+	RESERVED
+CVE-2022-33265
+	RESERVED
+CVE-2022-33264
+	RESERVED
+CVE-2022-33263
+	RESERVED
+CVE-2022-33262
+	RESERVED
+CVE-2022-33261
+	RESERVED
+CVE-2022-33260
+	RESERVED
+CVE-2022-33259
+	RESERVED
+CVE-2022-33258
+	RESERVED
+CVE-2022-33257
+	RESERVED
+CVE-2022-33256
+	RESERVED
+CVE-2022-33255
+	RESERVED
+CVE-2022-33254
+	RESERVED
+CVE-2022-33253
+	RESERVED
+CVE-2022-33252
+	RESERVED
+CVE-2022-33251
+	RESERVED
+CVE-2022-33250
+	RESERVED
+CVE-2022-33249
+	RESERVED
+CVE-2022-33248
+	RESERVED
+CVE-2022-33247
+	RESERVED
+CVE-2022-33246
+	RESERVED
+CVE-2022-33245
+	RESERVED
+CVE-2022-33244
+	RESERVED
+CVE-2022-33243
+	RESERVED
+CVE-2022-33242
+	RESERVED
+CVE-2022-33241
+	RESERVED
+CVE-2022-33240
+	RESERVED
+CVE-2022-33239
+	RESERVED
+CVE-2022-33238
+	RESERVED
+CVE-2022-33237
+	RESERVED
+CVE-2022-33236
+	RESERVED
+CVE-2022-33235
+	RESERVED
+CVE-2022-33234
+	RESERVED
+CVE-2022-33233
+	RESERVED
+CVE-2022-33232
+	RESERVED
+CVE-2022-33231
+	RESERVED
+CVE-2022-33230
+	RESERVED
+CVE-2022-33229
+	RESERVED
+CVE-2022-33228
+	RESERVED
+CVE-2022-33227
+	RESERVED
+CVE-2022-33226
+	RESERVED
+CVE-2022-33225
+	RESERVED
+CVE-2022-33224
+	RESERVED
+CVE-2022-33223
+	RESERVED
+CVE-2022-33222
+	RESERVED
+CVE-2022-33221
+	RESERVED
+CVE-2022-33220
+	RESERVED
+CVE-2022-33219
+	RESERVED
+CVE-2022-33218
+	RESERVED
+CVE-2022-33217
+	RESERVED
+CVE-2022-33216
+	RESERVED
+CVE-2022-33215
+	RESERVED
+CVE-2022-33214
+	RESERVED
+CVE-2022-33213
+	RESERVED
+CVE-2022-33212
+	RESERVED
+CVE-2022-33211
+	RESERVED
+CVE-2022-33210
+	RESERVED
+CVE-2022-33146
+	RESERVED
+CVE-2022-32585
+	RESERVED
+CVE-2022-28127
+	RESERVED
+CVE-2022-2082
+	RESERVED
+CVE-2022-2081
+	RESERVED
+CVE-2022-2080
+	RESERVED
+CVE-2022-2079 (Cross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb ...)
+	TODO: check
+CVE-2022-2078
+	RESERVED
 CVE-2022-33207
 	RESERVED
 CVE-2022-33206
@@ -38,10 +290,10 @@ CVE-2022-29472
 	RESERVED
 CVE-2022-27804
 	RESERVED
-CVE-2022-2077
-	RESERVED
-CVE-2022-2076
-	RESERVED
+CVE-2022-2077 (** DISPUTED ** A vulnerability was found in Microsoft O365 and classif ...)
+	TODO: check
+CVE-2022-2076 (** DISPUTED ** A vulnerability has been found in Microsoft O365 and cl ...)
+	TODO: check
 CVE-2022-2075
 	RESERVED
 CVE-2022-2074
@@ -1380,16 +1632,16 @@ CVE-2022-32563 (An issue was discovered in Couchbase Sync Gateway 3.x before 3.0
 	NOT-FOR-US: Couchbase Sync Gateway
 CVE-2022-32562 (An issue was discovered in Couchbase Server before 7.0.4. Operations m ...)
 	NOT-FOR-US: Couchbase Server
-CVE-2022-32561
-	RESERVED
+CVE-2022-32561 (An issue was discovered in Couchbase Server before 6.6.5 and 7.x befor ...)
+	TODO: check
 CVE-2022-32560 (An issue was discovered in Couchbase Server before 7.0.4. XDCR lacks r ...)
 	NOT-FOR-US: Couchbase Server
-CVE-2022-32559
-	RESERVED
+CVE-2022-32559 (An issue was discovered in Couchbase Server before 7.0.4. Random HTTP  ...)
+	TODO: check
 CVE-2022-32558 (An issue was discovered in Couchbase Server before 7.0.4. Sample bucke ...)
 	NOT-FOR-US: Couchbase Server
-CVE-2022-32557
-	RESERVED
+CVE-2022-32557 (An issue was discovered in Couchbase Server before 7.0.4. The Index Se ...)
+	TODO: check
 CVE-2022-32556
 	RESERVED
 CVE-2022-32555
@@ -1942,14 +2194,14 @@ CVE-2022-32369
 	RESERVED
 CVE-2022-32368
 	RESERVED
-CVE-2022-32367
-	RESERVED
-CVE-2022-32366
-	RESERVED
-CVE-2022-32365
-	RESERVED
-CVE-2022-32364
-	RESERVED
+CVE-2022-32367 (Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/a ...)
+	TODO: check
+CVE-2022-32366 (Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/a ...)
+	TODO: check
+CVE-2022-32365 (Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/a ...)
+	TODO: check
+CVE-2022-32364 (Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/a ...)
+	TODO: check
 CVE-2022-32363
 	RESERVED
 CVE-2022-32362
@@ -1972,56 +2224,56 @@ CVE-2022-32354
 	RESERVED
 CVE-2022-32353
 	RESERVED
-CVE-2022-32352
-	RESERVED
-CVE-2022-32351
-	RESERVED
-CVE-2022-32350
-	RESERVED
-CVE-2022-32349
-	RESERVED
-CVE-2022-32348
-	RESERVED
-CVE-2022-32347
-	RESERVED
-CVE-2022-32346
-	RESERVED
-CVE-2022-32345
-	RESERVED
-CVE-2022-32344
-	RESERVED
-CVE-2022-32343
-	RESERVED
-CVE-2022-32342
-	RESERVED
-CVE-2022-32341
-	RESERVED
-CVE-2022-32340
-	RESERVED
-CVE-2022-32339
-	RESERVED
-CVE-2022-32338
-	RESERVED
-CVE-2022-32337
-	RESERVED
-CVE-2022-32336
-	RESERVED
-CVE-2022-32335
-	RESERVED
-CVE-2022-32334
-	RESERVED
-CVE-2022-32333
-	RESERVED
-CVE-2022-32332
-	RESERVED
-CVE-2022-32331
-	RESERVED
-CVE-2022-32330
-	RESERVED
+CVE-2022-32352 (Hospital's Patient Records Management System v1.0 is vulnerable to SQL ...)
+	TODO: check
+CVE-2022-32351 (Hospital's Patient Records Management System v1.0 is vulnerable to SQL ...)
+	TODO: check
+CVE-2022-32350 (Hospital's Patient Records Management System v1.0 is vulnerable to SQL ...)
+	TODO: check
+CVE-2022-32349 (Hospital's Patient Records Management System v1.0 is vulnerable to SQL ...)
+	TODO: check
+CVE-2022-32348 (Hospital's Patient Records Management System v1.0 is vulnerable to SQL ...)
+	TODO: check
+CVE-2022-32347 (Hospital's Patient Records Management System v1.0 is vulnerable to SQL ...)
+	TODO: check
+CVE-2022-32346 (Hospital's Patient Records Management System v1.0 is vulnerable to SQL ...)
+	TODO: check
+CVE-2022-32345 (Hospital's Patient Records Management System v1.0 is vulnerable to SQL ...)
+	TODO: check
+CVE-2022-32344 (Hospital's Patient Records Management System v1.0 is vulnerable to SQL ...)
+	TODO: check
+CVE-2022-32343 (Hospital's Patient Records Management System v1.0 is vulnerable to SQL ...)
+	TODO: check
+CVE-2022-32342 (Hospital's Patient Records Management System v1.0 is vulnerable to SQL ...)
+	TODO: check
+CVE-2022-32341 (Hospital's Patient Records Management System v1.0 is vulnerable to SQL ...)
+	TODO: check
+CVE-2022-32340 (Hospital's Patient Records Management System v1.0 is vulnerable to SQL ...)
+	TODO: check
+CVE-2022-32339 (Hospital's Patient Records Management System v1.0 is vulnerable to SQL ...)
+	TODO: check
+CVE-2022-32338 (Hospital's Patient Records Management System v1.0 is vulnerable to SQL ...)
+	TODO: check
+CVE-2022-32337 (Hospital's Patient Records Management System v1.0 is vulnerable to SQL ...)
+	TODO: check
+CVE-2022-32336 (Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffo ...)
+	TODO: check
+CVE-2022-32335 (Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffo ...)
+	TODO: check
+CVE-2022-32334 (Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffo ...)
+	TODO: check
+CVE-2022-32333 (Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffo ...)
+	TODO: check
+CVE-2022-32332 (Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffo ...)
+	TODO: check
+CVE-2022-32331 (Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffo ...)
+	TODO: check
+CVE-2022-32330 (Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffo ...)
+	TODO: check
 CVE-2022-32329
 	RESERVED
-CVE-2022-32328
-	RESERVED
+CVE-2022-32328 (Fast Food Ordering System v1.0 is vulnerable to Delete any file. via / ...)
+	TODO: check
 CVE-2022-32327
 	RESERVED
 CVE-2022-32326
@@ -2228,10 +2480,10 @@ CVE-2022-32296 (The Linux kernel before 5.17.9 allows TCP servers to identify cl
 	NOTE: https://git.kernel.org/linus/4c2c8f03a5ab7cb04ec64724d7d176d00bcc91e5 (5.18-rc6)
 CVE-2022-32287
 	RESERVED
-CVE-2022-32286
-	RESERVED
-CVE-2022-32285
-	RESERVED
+CVE-2022-32286 (A vulnerability has been identified in Mendix SAML Module (Mendix 7 co ...)
+	TODO: check
+CVE-2022-32285 (A vulnerability has been identified in Mendix SAML Module (Mendix 7 co ...)
+	TODO: check
 CVE-2022-32279
 	RESERVED
 CVE-2022-32278 (XFCE 4.16 allows attackers to execute arbitrary code because xdg-open  ...)
@@ -2287,30 +2539,30 @@ CVE-2022-32264
 	RESERVED
 CVE-2022-32263
 	RESERVED
-CVE-2022-32262
-	RESERVED
-CVE-2022-32261
-	RESERVED
-CVE-2022-32260
-	RESERVED
-CVE-2022-32259
-	RESERVED
-CVE-2022-32258
-	RESERVED
+CVE-2022-32262 (A vulnerability has been identified in SINEMA Remote Connect Server (A ...)
+	TODO: check
+CVE-2022-32261 (A vulnerability has been identified in SINEMA Remote Connect Server (A ...)
+	TODO: check
+CVE-2022-32260 (A vulnerability has been identified in SINEMA Remote Connect Server (A ...)
+	TODO: check
+CVE-2022-32259 (A vulnerability has been identified in SINEMA Remote Connect Server (A ...)
+	TODO: check
+CVE-2022-32258 (A vulnerability has been identified in SINEMA Remote Connect Server (A ...)
+	TODO: check
 CVE-2022-32257
 	RESERVED
-CVE-2022-32256
-	RESERVED
-CVE-2022-32255
-	RESERVED
-CVE-2022-32254
-	RESERVED
-CVE-2022-32253
-	RESERVED
-CVE-2022-32252
-	RESERVED
-CVE-2022-32251
-	RESERVED
+CVE-2022-32256 (A vulnerability has been identified in SINEMA Remote Connect Server (A ...)
+	TODO: check
+CVE-2022-32255 (A vulnerability has been identified in SINEMA Remote Connect Server (A ...)
+	TODO: check
+CVE-2022-32254 (A vulnerability has been identified in SINEMA Remote Connect Server (A ...)
+	TODO: check
+CVE-2022-32253 (A vulnerability has been identified in SINEMA Remote Connect Server (A ...)
+	TODO: check
+CVE-2022-32252 (A vulnerability has been identified in SINEMA Remote Connect Server (A ...)
+	TODO: check
+CVE-2022-32251 (A vulnerability has been identified in SINEMA Remote Connect Server (A ...)
+	TODO: check
 CVE-2022-32250 (net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allow ...)
 	TODO: check with MITRE, duplicate of now as well assigned CVE-2022-1966
 CVE-2022-32249
@@ -2619,8 +2871,8 @@ CVE-2022-32147
 	RESERVED
 CVE-2022-32146
 	RESERVED
-CVE-2022-32145
-	RESERVED
+CVE-2022-32145 (A vulnerability has been identified in Teamcenter Active Workspace V5. ...)
+	TODO: check
 CVE-2022-32144
 	RESERVED
 CVE-2022-32143
@@ -3249,12 +3501,12 @@ CVE-2022-31849
 	RESERVED
 CVE-2022-31848
 	RESERVED
-CVE-2022-31847
-	RESERVED
-CVE-2022-31846
-	RESERVED
-CVE-2022-31845
-	RESERVED
+CVE-2022-31847 (A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN579 X3 M ...)
+	TODO: check
+CVE-2022-31846 (A vulnerability in live_mfg.shtml of WAVLINK WN535 G3 M35G3R.V5030.180 ...)
+	TODO: check
+CVE-2022-31845 (A vulnerability in live_check.shtml of WAVLINK WN535 G3 M35G3R.V5030.1 ...)
+	TODO: check
 CVE-2022-31844
 	RESERVED
 CVE-2022-31843
@@ -4054,8 +4306,8 @@ CVE-2022-1888
 CVE-2021-4231 (A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It ha ...)
 	NOT-FOR-US: angular/angular - replacement for deprecated angularjs
 	NOTE: AngularJS upstream support has officially ended as of January 2022
-CVE-2022-31619
-	RESERVED
+CVE-2022-31619 (A vulnerability has been identified in Teamcenter V12.4 (All versions  ...)
+	TODO: check
 CVE-2022-1887
 	RESERVED
 CVE-2022-1886 (Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. ...)
@@ -4580,8 +4832,8 @@ CVE-2022-31467 (A DLL hijacking vulnerability in the installed for Quick Heal To
 	NOT-FOR-US: Quick Heal Total Security
 CVE-2022-31466 (Time of Check - Time of Use (TOCTOU) vulnerability in Quick Heal Total ...)
 	NOT-FOR-US: Quick Heal Total Security
-CVE-2022-31465
-	RESERVED
+CVE-2022-31465 (A vulnerability has been identified in Xpedition Designer (All version ...)
+	TODO: check
 CVE-2022-31464
 	RESERVED
 CVE-2022-31463 (Owl Labs Meeting Owl 5.2.0.15 does not require a password for Bluetoot ...)
@@ -4704,8 +4956,8 @@ CVE-2022-31405
 	RESERVED
 CVE-2022-31404
 	RESERVED
-CVE-2022-31403
-	RESERVED
+CVE-2022-31403 (ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vul ...)
+	TODO: check
 CVE-2022-31402 (ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vul ...)
 	NOT-FOR-US: ITOP
 CVE-2022-31401
@@ -4888,14 +5140,14 @@ CVE-2022-31313 (api-res-py package in PyPI 0.1 is vulnerable to a code execution
 	TODO: check
 CVE-2022-31312
 	RESERVED
-CVE-2022-31311
-	RESERVED
+CVE-2022-31311 (An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allow ...)
+	TODO: check
 CVE-2022-31310
 	RESERVED
-CVE-2022-31309
-	RESERVED
-CVE-2022-31308
-	RESERVED
+CVE-2022-31309 (A vulnerability in live_check.shtml of WAVLINK AERIAL X 1200M M79X3.V5 ...)
+	TODO: check
+CVE-2022-31308 (A vulnerability in live_mfg.shtml of WAVLINK AERIAL X 1200M M79X3.V503 ...)
+	TODO: check
 CVE-2022-31307
 	RESERVED
 CVE-2022-31306
@@ -4932,8 +5184,8 @@ CVE-2022-31291
 	RESERVED
 CVE-2022-31290
 	RESERVED
-CVE-2022-31289
-	RESERVED
+CVE-2022-31289 (https://ossindex.sonatype.org/ Sonatype Nexus Repository Manager OSS 3 ...)
+	TODO: check
 CVE-2022-31288
 	RESERVED
 CVE-2022-31287 (An issue was discovered in Bento4 v1.2. There is an allocation size re ...)
@@ -4964,8 +5216,8 @@ CVE-2022-31275
 	RESERVED
 CVE-2022-31274
 	RESERVED
-CVE-2022-31273
-	RESERVED
+CVE-2022-31273 (An issue in TopIDP3000 Topsec Operating System tos_3.3.005.665b.15_smp ...)
+	TODO: check
 CVE-2022-31272
 	RESERVED
 CVE-2022-31271
@@ -5936,8 +6188,8 @@ CVE-2022-30939
 	RESERVED
 CVE-2022-30938
 	RESERVED
-CVE-2022-30937
-	RESERVED
+CVE-2022-30937 (A vulnerability has been identified in EN100 Ethernet module DNP3 IP v ...)
+	TODO: check
 CVE-2022-30792
 	RESERVED
 CVE-2022-30791
@@ -6126,10 +6378,10 @@ CVE-2022-30933
 	RESERVED
 CVE-2022-30932
 	RESERVED
-CVE-2022-30931
-	RESERVED
-CVE-2022-30930
-	RESERVED
+CVE-2022-30931 (Employee Leaves Management System (ELMS) V 2.1 is vulnerable to Cross  ...)
+	TODO: check
+CVE-2022-30930 (Tourism Management System Version: V 3.2 is affected by: Cross Site Re ...)
+	TODO: check
 CVE-2022-30929
 	RESERVED
 CVE-2022-30928
@@ -6182,8 +6434,8 @@ CVE-2022-30905
 	RESERVED
 CVE-2022-30904
 	RESERVED
-CVE-2022-30903
-	RESERVED
+CVE-2022-30903 (Nokia "G-2425G-A" Bharti Airtel Routers Hardware version "3FE48299DEAA ...)
+	TODO: check
 CVE-2022-30902
 	RESERVED
 CVE-2022-30901
@@ -7994,14 +8246,14 @@ CVE-2022-30233 (A CWE-20: Improper Input Validation vulnerability exists that co
 	NOT-FOR-US: Schneider Electric
 CVE-2022-30232 (A CWE-20: Improper Input Validation vulnerability exists that could ca ...)
 	NOT-FOR-US: Schneider Electric
-CVE-2022-30231
-	RESERVED
-CVE-2022-30230
-	RESERVED
-CVE-2022-30229
-	RESERVED
-CVE-2022-30228
-	RESERVED
+CVE-2022-30231 (A vulnerability has been identified in SICAM GridEdge Essential ARM (A ...)
+	TODO: check
+CVE-2022-30230 (A vulnerability has been identified in SICAM GridEdge Essential ARM (A ...)
+	TODO: check
+CVE-2022-30229 (A vulnerability has been identified in SICAM GridEdge Essential ARM (A ...)
+	TODO: check
+CVE-2022-30228 (A vulnerability has been identified in SICAM GridEdge Essential ARM (A ...)
+	TODO: check
 CVE-2022-1584 (Reflected XSS in GitHub repository microweber/microweber prior to 1.2. ...)
 	NOT-FOR-US: microweber
 CVE-2022-1583 (The External Links in New Window / New Tab WordPress plugin before 1.4 ...)
@@ -9822,8 +10074,8 @@ CVE-2022-29614
 	RESERVED
 CVE-2022-29613 (Due to insufficient input validation, SAP Employee Self Service allows ...)
 	NOT-FOR-US: SAP
-CVE-2022-29612
-	RESERVED
+CVE-2022-29612 (SAP NetWeaver, ABAP Platform and SAP Host Agent - versions KERNEL 7.22 ...)
+	TODO: check
 CVE-2022-29611 (SAP NetWeaver Application Server for ABAP and ABAP Platform do not per ...)
 	NOT-FOR-US: SAP
 CVE-2022-29610 (SAP NetWeaver Application Server ABAP allows an authenticated attacker ...)
@@ -10948,8 +11200,8 @@ CVE-2022-29240
 	RESERVED
 CVE-2022-29239
 	RESERVED
-CVE-2022-29238
-	RESERVED
+CVE-2022-29238 (Jupyter Notebook is a web-based notebook environment for interactive c ...)
+	TODO: check
 CVE-2022-29237 (Opencast is a free and open source solution for automated video captur ...)
 	NOT-FOR-US: Opencast
 CVE-2022-29236 (BigBlueButton is an open source web conferencing system. Starting in v ...)
@@ -11494,8 +11746,8 @@ CVE-2022-29036 (Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, exce
 	NOT-FOR-US: Jenkins plugin
 CVE-2022-29035 (In JetBrains Ktor Native before version 2.0.0 random values used for n ...)
 	NOT-FOR-US: JetBrains Ktor
-CVE-2022-29034
-	RESERVED
+CVE-2022-29034 (A vulnerability has been identified in SINEMA Remote Connect Server (A ...)
+	TODO: check
 CVE-2022-29033 (A vulnerability has been identified in JT2Go (All versions < V13.3. ...)
 	NOT-FOR-US: JT2Go / Siemens
 CVE-2022-29032 (A vulnerability has been identified in JT2Go (All versions < V13.3. ...)
@@ -14918,8 +15170,8 @@ CVE-2022-27891
 	RESERVED
 CVE-2022-27890
 	RESERVED
-CVE-2022-27889
-	RESERVED
+CVE-2022-27889 (The Multipass service was found to have code paths that could be abuse ...)
+	TODO: check
 CVE-2022-27888 (Foundry Issues service versions 2.244.0 to 2.249.0 was found to be log ...)
 	NOT-FOR-US: Foundry Issues service
 CVE-2022-1102
@@ -15527,8 +15779,8 @@ CVE-2022-27670 (SAP SQL Anywhere - version 17.0, allows an authenticated attacke
 	NOT-FOR-US: SAP
 CVE-2022-27669 (An unauthenticated user can use functions of XML Data Archiving Servic ...)
 	NOT-FOR-US: SAP
-CVE-2022-27668
-	RESERVED
+CVE-2022-27668 (Depending on the configuration of the route permission table in file ' ...)
+	TODO: check
 CVE-2022-27667 (Under certain conditions, SAP BusinessObjects Business Intelligence pl ...)
 	NOT-FOR-US: SAP
 CVE-2022-1059
@@ -16120,7 +16372,7 @@ CVE-2022-27440
 	RESERVED
 CVE-2022-27439
 	RESERVED
-CVE-2022-27438 (Caphyon Ltd Advanced Installer 19.2 was discovered to contain a remote ...)
+CVE-2022-27438 (Caphyon Ltd Advanced Installer 19.3 and earlier and many products that ...)
 	NOT-FOR-US: Caphyon Ltd Advanced Installer
 CVE-2022-27437
 	RESERVED
@@ -16812,12 +17064,12 @@ CVE-2022-0990 (Server-Side Request Forgery (SSRF) in GitHub repository janeczku/
 	NOT-FOR-US: calibre-web
 CVE-2020-36519 (Mimecast Email Security before 2020-01-10 allows any admin to spoof an ...)
 	NOT-FOR-US: Mimecast Email Security
-CVE-2022-27221
-	RESERVED
-CVE-2022-27220
-	RESERVED
-CVE-2022-27219
-	RESERVED
+CVE-2022-27221 (A vulnerability has been identified in SINEMA Remote Connect Server (A ...)
+	TODO: check
+CVE-2022-27220 (A vulnerability has been identified in SINEMA Remote Connect Server (A ...)
+	TODO: check
+CVE-2022-27219 (A vulnerability has been identified in SINEMA Remote Connect Server (A ...)
+	TODO: check
 CVE-2022-27194 (A vulnerability has been identified in SIMATIC PCS neo (Administration ...)
 	NOT-FOR-US: Siemens
 CVE-2022-0989 (An unprivileged user could use the functionality of the NS WooCommerce ...)
@@ -18856,8 +19108,8 @@ CVE-2022-0865 (Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers t
 	NOTE: https://gitlab.com/libtiff/libtiff/-/issues/385
 	NOTE: https://gitlab.com/libtiff/libtiff/-/merge_requests/306
 	NOTE: https://gitlab.com/libtiff/libtiff/-/commit/a1c933dabd0e1c54a412f3f84ae0aa58115c6067
-CVE-2022-26476
-	RESERVED
+CVE-2022-26476 (A vulnerability has been identified in Spectrum Power 4 (All versions  ...)
+	TODO: check
 CVE-2022-26475
 	RESERVED
 CVE-2022-26474
@@ -21089,8 +21341,8 @@ CVE-2022-25653
 	RESERVED
 CVE-2022-25652
 	RESERVED
-CVE-2022-25651
-	RESERVED
+CVE-2022-25651 (Memory corruption in bluetooth host due to integer overflow while proc ...)
+	TODO: check
 CVE-2022-25650 (A vulnerability has been identified in Mendix Applications using Mendi ...)
 	NOT-FOR-US: Siemens
 CVE-2022-25172 (An information disclosure vulnerability exists in the web interface se ...)
@@ -22467,8 +22719,7 @@ CVE-2022-25169 (The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.
 	NOTE: https://www.openwall.com/lists/oss-security/2022/05/16/4
 CVE-2022-25168
 	RESERVED
-CVE-2022-25167 [Apache Flume JMSSource does not protect from malicious JNDI urls]
-	RESERVED
+CVE-2022-25167 (Apache Flume versions 1.4.0 through 1.9.0 are vulnerable to a remote c ...)
 	NOT-FOR-US: Apache Flume
 CVE-2022-24435 (Cross-site scripting vulnerability in phpUploader v1.2 and earlier all ...)
 	NOT-FOR-US: phpUploader
@@ -34993,8 +35244,8 @@ CVE-2022-22105
 	RESERVED
 CVE-2022-22104
 	RESERVED
-CVE-2022-22103
-	RESERVED
+CVE-2022-22103 (Memory corruption in multimedia driver due to double free while proces ...)
+	TODO: check
 CVE-2022-22102
 	RESERVED
 CVE-2022-22101
@@ -35019,24 +35270,24 @@ CVE-2022-22092
 	RESERVED
 CVE-2022-22091
 	RESERVED
-CVE-2022-22090
-	RESERVED
+CVE-2022-22090 (Memory corruption in audio due to use after free while managing buffer ...)
+	TODO: check
 CVE-2022-22089
 	RESERVED
 CVE-2022-22088
 	RESERVED
-CVE-2022-22087
-	RESERVED
-CVE-2022-22086
-	RESERVED
-CVE-2022-22085
-	RESERVED
-CVE-2022-22084
-	RESERVED
-CVE-2022-22083
-	RESERVED
-CVE-2022-22082
-	RESERVED
+CVE-2022-22087 (memory corruption in video due to buffer overflow while parsing mkv cl ...)
+	TODO: check
+CVE-2022-22086 (Memory corruption in video due to double free while parsing 3gp clip w ...)
+	TODO: check
+CVE-2022-22085 (Memory corruption in video due to buffer overflow while reading the dt ...)
+	TODO: check
+CVE-2022-22084 (Memory corruption when extracting qcp audio file due to lack of check  ...)
+	TODO: check
+CVE-2022-22083 (Denial of service due to memory corruption while extracting ape header ...)
+	TODO: check
+CVE-2022-22082 (Memory corruption due to possible buffer overflow while parsing DSF he ...)
+	TODO: check
 CVE-2022-22081
 	RESERVED
 CVE-2022-22080
@@ -35055,24 +35306,24 @@ CVE-2022-22074
 	RESERVED
 CVE-2022-22073
 	RESERVED
-CVE-2022-22072
-	RESERVED
-CVE-2022-22071
-	RESERVED
+CVE-2022-22072 (Buffer overflow can occur due to improper validation of NDP applicatio ...)
+	TODO: check
+CVE-2022-22071 (Possible use after free when process shell memory is freed using IOCTL ...)
+	TODO: check
 CVE-2022-22070
 	RESERVED
 CVE-2022-22069
 	RESERVED
-CVE-2022-22068
-	RESERVED
+CVE-2022-22068 (kernel event may contain unexpected content which is not generated by  ...)
+	TODO: check
 CVE-2022-22067
 	RESERVED
 CVE-2022-22066
 	RESERVED
-CVE-2022-22065
-	RESERVED
-CVE-2022-22064
-	RESERVED
+CVE-2022-22065 (Out of bound read in WLAN HOST due to improper length check can lead t ...)
+	TODO: check
+CVE-2022-22064 (Possible buffer over read due to lack of size validation while unpacki ...)
+	TODO: check
 CVE-2022-22063
 	RESERVED
 CVE-2022-22062
@@ -35085,8 +35336,8 @@ CVE-2022-22059
 	RESERVED
 CVE-2022-22058
 	RESERVED
-CVE-2022-22057
-	RESERVED
+CVE-2022-22057 (Use after free in graphics fence due to a race condition while closing ...)
+	TODO: check
 CVE-2022-22056 (The Le-yan dental management system contains a hard-coded credentials  ...)
 	NOT-FOR-US: Le-yan dental management system
 CVE-2022-22055 (The Le-yan dental management system contains an SQL-injection vulnerab ...)
@@ -41239,8 +41490,8 @@ CVE-2022-21506
 	RESERVED
 CVE-2022-21505
 	RESERVED
-CVE-2022-21504
-	RESERVED
+CVE-2022-21504 (The code in UEK6 U3 was missing an appropiate file descriptor count to ...)
+	TODO: check
 CVE-2022-21503
 	RESERVED
 CVE-2022-21502
@@ -45808,8 +46059,8 @@ CVE-2021-42677
 	RESERVED
 CVE-2021-42676
 	RESERVED
-CVE-2021-42675
-	RESERVED
+CVE-2021-42675 (Kreado Kreasfero 1.5 does not properly sanitize uploaded files to the  ...)
+	TODO: check
 CVE-2021-42674
 	RESERVED
 CVE-2021-42673
@@ -52116,8 +52367,8 @@ CVE-2021-40680 (There is a Directory Traversal vulnerability in Artica Proxy (4.
 	NOT-FOR-US: ArticaTech
 CVE-2021-40679
 	RESERVED
-CVE-2021-40678
-	RESERVED
+CVE-2021-40678 (In Piwigo 11.5.0, there exists a persistent cross-site scripting in th ...)
+	TODO: check
 CVE-2021-40677
 	RESERVED
 CVE-2021-40676
@@ -52152,12 +52403,12 @@ CVE-2021-40662 (A Cross-Site Request Forgery (CSRF) in Chamilo LMS 1.11.14 allow
 	NOT-FOR-US: Chamilo LMS
 CVE-2021-40661
 	RESERVED
-CVE-2021-40660
-	RESERVED
+CVE-2021-40660 (An issue was discovered in Delight Nashorn Sandbox 0.2.0. There is an  ...)
+	TODO: check
 CVE-2021-40659
 	RESERVED
-CVE-2021-40658
-	RESERVED
+CVE-2021-40658 (Textpattern 4.8.7 is affected by a HTML injection vulnerability throug ...)
+	TODO: check
 CVE-2021-40657
 	RESERVED
 CVE-2021-40656 (libsixel before 1.10 is vulnerable to Buffer Overflow in libsixel/src/ ...)
@@ -52178,10 +52429,10 @@ CVE-2021-40652
 	RESERVED
 CVE-2021-40651 (OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vu ...)
 	NOT-FOR-US: OS4Ed OpenSIS Community
-CVE-2021-40650
-	RESERVED
-CVE-2021-40649
-	RESERVED
+CVE-2021-40650 (In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the  ...)
+	TODO: check
+CVE-2021-40649 (In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the  ...)
+	TODO: check
 CVE-2021-40648
 	RESERVED
 CVE-2021-40647
@@ -52212,8 +52463,8 @@ CVE-2021-40635 (OS4ED openSIS 8.0 is affected by SQL injection in ChooseCpSearch
 	NOT-FOR-US: openSIS
 CVE-2021-40634
 	RESERVED
-CVE-2021-40633
-	RESERVED
+CVE-2021-40633 (A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5 ...)
+	TODO: check
 CVE-2021-40632
 	RESERVED
 CVE-2021-40631
@@ -52246,8 +52497,8 @@ CVE-2021-40618 (An SQL Injection vulnerability exists in openSIS Classic 8.0 via
 	NOT-FOR-US: openSIS
 CVE-2021-40617 (An SQL Injection vulnerability exists in openSIS Community Edition ver ...)
 	NOT-FOR-US: openSIS
-CVE-2021-40616
-	RESERVED
+CVE-2021-40616 (thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can mo ...)
+	TODO: check
 CVE-2021-40615
 	RESERVED
 CVE-2021-40614
@@ -60981,8 +61232,8 @@ CVE-2021-37184 (A vulnerability has been identified in Industrial Edge Managemen
 	NOT-FOR-US: Siemens
 CVE-2021-37183 (A vulnerability has been identified in SINEMA Remote Connect Server (A ...)
 	NOT-FOR-US: Siemens
-CVE-2021-37182
-	RESERVED
+CVE-2021-37182 (A vulnerability has been identified in SCALANCE XM408-4C (All versions ...)
+	TODO: check
 CVE-2021-37181 (A vulnerability has been identified in Cerberus DMS V4.0 (All versions ...)
 	NOT-FOR-US: Siemens
 CVE-2021-37180 (A vulnerability has been identified in Solid Edge SE2021 (All Versions ...)
@@ -65952,46 +66203,46 @@ CVE-2021-35132
 	RESERVED
 CVE-2021-35131
 	RESERVED
-CVE-2021-35130
-	RESERVED
-CVE-2021-35129
-	RESERVED
+CVE-2021-35130 (Memory corruption in graphics support layer due to use after free cond ...)
+	TODO: check
+CVE-2021-35129 (Memory corruption in BT controller due to improper length check while  ...)
+	TODO: check
 CVE-2021-35128
 	RESERVED
 CVE-2021-35127
 	RESERVED
-CVE-2021-35126
-	RESERVED
+CVE-2021-35126 (Memory corruption in DSP service due to improper validation of input p ...)
+	TODO: check
 CVE-2021-35125
 	RESERVED
 CVE-2021-35124
 	RESERVED
-CVE-2021-35123
-	RESERVED
+CVE-2021-35123 (Buffer copy in GATT multi notification due to improper length check fo ...)
+	TODO: check
 CVE-2021-35122
 	RESERVED
-CVE-2021-35121
-	RESERVED
-CVE-2021-35120
-	RESERVED
-CVE-2021-35119
-	RESERVED
-CVE-2021-35118
-	RESERVED
+CVE-2021-35121 (An array index is improperly used to lock and unlock a mutex which can ...)
+	TODO: check
+CVE-2021-35120 (Improper handling between export and release functions on the same han ...)
+	TODO: check
+CVE-2021-35119 (Potential out of Bounds read in FIPS event processing due to improper  ...)
+	TODO: check
+CVE-2021-35118 (An out-of-bounds write can occur due to an incorrect input check in th ...)
+	TODO: check
 CVE-2021-35117 (An Out of Bounds read may potentially occur while processing an IBSS b ...)
 	NOT-FOR-US: Qualcomm components for Android
-CVE-2021-35116
-	RESERVED
+CVE-2021-35116 (APK can load a crafted model into the CDSP which can lead to a comprom ...)
+	TODO: check
 CVE-2021-35115 (Improper handling of multiple session supported by PVM backend can lea ...)
 	NOT-FOR-US: Qualcomm
-CVE-2021-35114
-	RESERVED
+CVE-2021-35114 (Improper buffer initialization on the backend driver can lead to buffe ...)
+	TODO: check
 CVE-2021-35113
 	RESERVED
-CVE-2021-35112
-	RESERVED
-CVE-2021-35111
-	RESERVED
+CVE-2021-35112 (A user with user level permission can access graphics protected region ...)
+	TODO: check
+CVE-2021-35111 (Improper validation of tag id while RRC sending tag id to MAC can lead ...)
+	TODO: check
 CVE-2021-35110 (Possible buffer overflow to improper validation of hash segment of fil ...)
 	NOT-FOR-US: Qualcomm
 CVE-2021-35109
@@ -66004,76 +66255,76 @@ CVE-2021-35106 (Possible out of bound read due to improper length calculation of
 	NOT-FOR-US: Qualcomm components for Android
 CVE-2021-35105 (Possible out of bounds access due to improper input validation during  ...)
 	NOT-FOR-US: Qualcomm components for Android
-CVE-2021-35104
-	RESERVED
+CVE-2021-35104 (Possible buffer overflow due to improper parsing of headers while play ...)
+	TODO: check
 CVE-2021-35103 (Possible out of bound write due to improper validation of number of ti ...)
 	NOT-FOR-US: Qualcomm QCA-WiFi for Android
-CVE-2021-35102
-	RESERVED
-CVE-2021-35101
-	RESERVED
-CVE-2021-35100
-	RESERVED
+CVE-2021-35102 (Possible buffer overflow due to lack of validation for the length of N ...)
+	TODO: check
+CVE-2021-35101 (Improper handling of writes to virtual GICR control can lead to assert ...)
+	TODO: check
+CVE-2021-35100 (Possible buffer over read due to improper calculation of string length ...)
+	TODO: check
 CVE-2021-35099
 	RESERVED
-CVE-2021-35098
-	RESERVED
+CVE-2021-35098 (Improper validation of session id in PCM routing process can lead to m ...)
+	TODO: check
 CVE-2021-35097
 	RESERVED
-CVE-2021-35096
-	RESERVED
-CVE-2021-35095
-	RESERVED
-CVE-2021-35094
-	RESERVED
+CVE-2021-35096 (Improper memory allocation during counter check DLM handling can lead  ...)
+	TODO: check
+CVE-2021-35095 (Improper serialization of message queue client registration can lead t ...)
+	TODO: check
+CVE-2021-35094 (Improper verification of timeout-based authentication in identity cred ...)
+	TODO: check
 CVE-2021-35093 (Possible memory corruption in BT controller when it receives an oversi ...)
 	NOT-FOR-US: Qualcomm
-CVE-2021-35092
-	RESERVED
-CVE-2021-35091
-	RESERVED
-CVE-2021-35090
-	RESERVED
+CVE-2021-35092 (Processing DCB/AVB algorithm with an invalid queue index from IOCTL re ...)
+	TODO: check
+CVE-2021-35091 (Possible out of bounds read due to improper typecasting while handling ...)
+	TODO: check
+CVE-2021-35090 (Possible hypervisor memory corruption due to TOC TOU race condition wh ...)
+	TODO: check
 CVE-2021-35089 (Possible buffer overflow due to lack of input IB amount validation whi ...)
 	NOT-FOR-US: Qualcomm
 CVE-2021-35088 (Possible out of bound read due to improper validation of IE length dur ...)
 	NOT-FOR-US: Qualcomm QCA-WiFi for Android
-CVE-2021-35087
-	RESERVED
-CVE-2021-35086
-	RESERVED
-CVE-2021-35085
-	RESERVED
-CVE-2021-35084
-	RESERVED
-CVE-2021-35083
-	RESERVED
-CVE-2021-35082
-	RESERVED
-CVE-2021-35081
-	RESERVED
-CVE-2021-35080
-	RESERVED
-CVE-2021-35079
-	RESERVED
-CVE-2021-35078
-	RESERVED
+CVE-2021-35087 (Possible null pointer access due to improper validation of system info ...)
+	TODO: check
+CVE-2021-35086 (Possible buffer over read due to improper validation of SIB type when  ...)
+	TODO: check
+CVE-2021-35085 (Possible buffer overflow due to lack of buffer length check during man ...)
+	TODO: check
+CVE-2021-35084 (Possible out of bound read due to lack of length check of data length  ...)
+	TODO: check
+CVE-2021-35083 (Possible out of bound read due to improper validation of certificate c ...)
+	TODO: check
+CVE-2021-35082 (Improper integrity check can lead to race condition between tasks PDCP ...)
+	TODO: check
+CVE-2021-35081 (Possible buffer overflow due to improper validation of SSID length rec ...)
+	TODO: check
+CVE-2021-35080 (Disabled SMMU from secure side while RPM is assigned a secure stream c ...)
+	TODO: check
+CVE-2021-35079 (Improper validation of permissions for third party application accessi ...)
+	TODO: check
+CVE-2021-35078 (Possible memory leak due to improper validation of certificate chain l ...)
+	TODO: check
 CVE-2021-35077 (Possible use after free scenario in compute offloads to DSP while mult ...)
 	NOT-FOR-US: Qualcomm
-CVE-2021-35076
-	RESERVED
+CVE-2021-35076 (Possible null pointer dereference due to improper validation of RRC co ...)
+	TODO: check
 CVE-2021-35075 (Possible null pointer dereference due to lack of WDOG structure valida ...)
 	NOT-FOR-US: Qualcomm
 CVE-2021-35074 (Possible integer overflow due to improper fragment datatype while calc ...)
 	NOT-FOR-US: Qualcomm
-CVE-2021-35073
-	RESERVED
-CVE-2021-35072
-	RESERVED
-CVE-2021-35071
-	RESERVED
-CVE-2021-35070
-	RESERVED
+CVE-2021-35073 (Possible assertion due to improper validation of rank restriction fiel ...)
+	TODO: check
+CVE-2021-35072 (Possible buffer overflow due to improper validation of array index whi ...)
+	TODO: check
+CVE-2021-35071 (Possible buffer over read due to lack of size validation while copying ...)
+	TODO: check
+CVE-2021-35070 (RPM secure Stream can access any secure resource due to improper SMMU  ...)
+	TODO: check
 CVE-2021-35069 (Improper validation of data length received from DMA buffer can lead t ...)
 	NOT-FOR-US: Qualcomm
 CVE-2021-35068 (Lack of null check while freeing the device information buffer in the  ...)
@@ -78347,40 +78598,40 @@ CVE-2021-30352
 	RESERVED
 CVE-2021-30351 (An out of bound memory access can occur due to improper validation of  ...)
 	NOT-FOR-US: Qualcomm components for Android
-CVE-2021-30350
-	RESERVED
-CVE-2021-30349
-	RESERVED
+CVE-2021-30350 (Lack of MBN header size verification against input buffer can lead to  ...)
+	TODO: check
+CVE-2021-30349 (Improper access control sequence for AC database after memory allocati ...)
+	TODO: check
 CVE-2021-30348 (Improper validation of LLM utility timers availability can lead to den ...)
 	NOT-FOR-US: Qualcomm
-CVE-2021-30347
-	RESERVED
-CVE-2021-30346
-	RESERVED
-CVE-2021-30345
-	RESERVED
-CVE-2021-30344
-	RESERVED
-CVE-2021-30343
-	RESERVED
-CVE-2021-30342
-	RESERVED
-CVE-2021-30341
-	RESERVED
-CVE-2021-30340
-	RESERVED
-CVE-2021-30339
-	RESERVED
-CVE-2021-30338
-	RESERVED
+CVE-2021-30347 (Improper integrity check can lead to race condition between tasks PDCP ...)
+	TODO: check
+CVE-2021-30346 (RPM secure Stream can access any secure resource due to improper SMMU  ...)
+	TODO: check
+CVE-2021-30345 (RPM secure Stream can access any secure resource due to improper SMMU  ...)
+	TODO: check
+CVE-2021-30344 (Improper authorization of a replayed LTE security mode command can lea ...)
+	TODO: check
+CVE-2021-30343 (Improper integrity check can lead to race condition between tasks PDCP ...)
+	TODO: check
+CVE-2021-30342 (Improper integrity check can lead to race condition between tasks PDCP ...)
+	TODO: check
+CVE-2021-30341 (Improper buffer size validation of DSM packet received can lead to mem ...)
+	TODO: check
+CVE-2021-30340 (Reachable assertion due to improper validation of coreset in PDCCH con ...)
+	TODO: check
+CVE-2021-30339 (Reading PRNG output may lead to improper key generation due to lack of ...)
+	TODO: check
+CVE-2021-30338 (Improper input validation in TrustZone memory transfer interface can l ...)
+	TODO: check
 CVE-2021-30337 (Possible use after free when process shell memory is freed using IOCTL ...)
 	NOT-FOR-US: Qualcomm components for Android
 CVE-2021-30336 (Possible out of bound read due to lack of domain input validation whil ...)
 	NOT-FOR-US: Qualcomm components for Android
 CVE-2021-30335 (Possible assertion in QOS request due to improper validation when mult ...)
 	NOT-FOR-US: Qualcomm components for Android
-CVE-2021-30334
-	RESERVED
+CVE-2021-30334 (Possible use after free due to lack of null check of DRM file status a ...)
+	TODO: check
 CVE-2021-30333 (Improper validation of buffer size input to the EFS file can lead to m ...)
 	NOT-FOR-US: Qualcomm
 CVE-2021-30332 (Possible assertion due to improper validation of OTA configuration in  ...)
@@ -78393,8 +78644,8 @@ CVE-2021-30329 (Possible assertion due to improper validation of TCI configurati
 	NOT-FOR-US: Qualcomm
 CVE-2021-30328 (Possible assertion due to improper validation of invalid NR CSI-IM res ...)
 	NOT-FOR-US: Qualcomm
-CVE-2021-30327
-	RESERVED
+CVE-2021-30327 (Buffer overflow in sahara protocol while processing commands leads to  ...)
+	TODO: check
 CVE-2021-30326 (Possible assertion due to improper size validation while processing th ...)
 	NOT-FOR-US: Qualcomm
 CVE-2021-30325 (Possible out of bound access of DCI resources due to lack of validatio ...)
@@ -78485,8 +78736,8 @@ CVE-2021-30283 (Possible denial of service due to improper handling of debug reg
 	NOT-FOR-US: Qualcomm components for Android
 CVE-2021-30282 (Possible out of bound write in RAM partition table due to improper val ...)
 	NOT-FOR-US: Qualcomm components for Android
-CVE-2021-30281
-	RESERVED
+CVE-2021-30281 (XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX in Snapdragon Auto, Snapdragon Co ...)
+	TODO: check
 CVE-2021-30280
 	RESERVED
 CVE-2021-30279 (Possible access control violation while setting current permission for ...)
@@ -284339,7 +284590,7 @@ CVE-2018-4845 (A vulnerability has been identified in RAPIDLab 1200 systems / RA
 	NOT-FOR-US: RAPIDLab
 CVE-2018-4844 (A vulnerability has been identified in SIMATIC WinCC OA UI for Android ...)
 	NOT-FOR-US: SIMATIC
-CVE-2018-4843 (A vulnerability has been identified in SIMATIC CP 343-1 Advanced (All  ...)
+CVE-2018-4843 (A vulnerability has been identified in SIMATIC CP 343-1 (incl. SIPLUS  ...)
 	NOT-FOR-US: SIMATIC
 CVE-2018-4842 (A vulnerability has been identified in SCALANCE X-200IRT switch family ...)
 	NOT-FOR-US: Siemens SCALANCE X switches



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/41eb181ea20ad276cafead709ea5632f55064a35

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/41eb181ea20ad276cafead709ea5632f55064a35
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220614/407004be/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list