[Git][security-tracker-team/security-tracker][master] Process more NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dd6e4e14 by Salvatore Bonaccorso at 2022-06-16T08:04:33+02:00
Process more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6649,7 +6649,7 @@ CVE-2022-31062
 CVE-2022-31061
 	RESERVED
 CVE-2022-31060 (Discourse is an open-source discussion platform. Prior to version 2.8. ...)
-	TODO: check
+	NOT-FOR-US: Discourse
 CVE-2022-31059 (Discourse Calendar is a calendar plugin for Discourse, an open-source  ...)
 	NOT-FOR-US: Discourse Calendar is a calendar plugin for Discourse
 CVE-2022-31058
@@ -11528,17 +11528,17 @@ CVE-2022-29444 (Plugin Settings Change leading to Cross-Site Scripting (XSS) vul
 CVE-2022-29443
 	RESERVED
 CVE-2022-29442 (Authenticated (subscriber or higher user role) Stored Cross-Site Scrip ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2022-29441 (Cross-Site Request Forgery (CSRF) vulnerability in Private Messages Fo ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2022-29440 (Multiple Authenticated (contributor or higher user role) Stored Cross- ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2022-29439 (Cross-Site Request Forgery (CSRF) vulnerability in Image Slider by Nex ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2022-29438 (Authenticated (author or higher user role) Persistent Cross-Site Scrip ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2022-29437 (Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Image Sl ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2022-29436 (Persistent Cross-Site Scripting (XSS) vulnerability in Alexander Stokm ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2022-29435 (Cross-Site Request Forgery (CSRF) vulnerability in Alexander Stokmann' ...)
@@ -11600,7 +11600,7 @@ CVE-2022-29408 (Persistent Cross-Site Scripting (XSS) vulnerability in Vsourz Di
 CVE-2022-29407
 	RESERVED
 CVE-2022-29406 (Multiple Authenticated (contributor or higher user role) Stored Cross- ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2022-28717 (Cross-site scripting vulnerability in Rebooter(WATCH BOOT nino RPC-M2C ...)
 	NOT-FOR-US: Rebooter
 CVE-2022-27632 (Cross-site request forgery (CSRF) vulnerability in Rebooter(WATCH BOOT ...)
@@ -12293,7 +12293,7 @@ CVE-2022-1343 (The function `OCSP_basic_verify` verifies the signer certificate
 	NOTE: https://www.openssl.org/news/secadv/20220503.txt
 	NOTE: https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=2eda98790c5c2741d76d23cc1e74b0dc4f4b391a (openssl-3.0.3)
 CVE-2022-1342 (A lack of password masking in Devolutions Remote Desktop Manager allow ...)
-	TODO: check
+	NOT-FOR-US: Devolutions Remote Desktop Manager
 CVE-2022-1341 (An issue was discovered in in bwm-ng v0.6.2. An arbitrary null write e ...)
 	- bwm-ng 0.6.3-1 (unimportant)
 	NOTE: https://github.com/vgropp/bwm-ng/issues/26



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd6e4e1403e0b9245f3eac7b278a6fd5abc3d406

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd6e4e1403e0b9245f3eac7b278a6fd5abc3d406
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220616/977f3d1c/attachment.htm>