[Git][security-tracker-team/security-tracker][master] Process NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a477ce11 by Salvatore Bonaccorso at 2022-03-11T09:39:33+01:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1419,11 +1419,11 @@ CVE-2022-25870
 CVE-2022-25864
 	RESERVED
 CVE-2022-0822 (Cross-site Scripting (XSS) - Reflected in GitHub repository orchardcms ...)
-	TODO: check
+	NOT-FOR-US: Orchard CMS
 CVE-2022-0821 (Improper Authorization in GitHub repository orchardcms/orchardcore pri ...)
-	TODO: check
+	NOT-FOR-US: Orchard CMS
 CVE-2022-0820 (Cross-site Scripting (XSS) - Stored in GitHub repository orchardcms/or ...)
-	TODO: check
+	NOT-FOR-US: Orchard CMS
 CVE-2022-0819 (Code Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1. ...)
 	- dolibarr <removed>
 CVE-2022-0818
@@ -1433,7 +1433,7 @@ CVE-2022-0817
 CVE-2022-0816
 	RESERVED
 CVE-2022-0815 (Improper access control vulnerability in McAfee WebAdvisor Chrome and  ...)
-	TODO: check
+	NOT-FOR-US: McAfee
 CVE-2022-0814
 	RESERVED
 CVE-2022-0813 (PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially ...)
@@ -3493,19 +3493,19 @@ CVE-2022-25514
 CVE-2022-25513
 	RESERVED
 CVE-2022-25512 (FreeTAKServer-UI v1.9.8 was discovered to leak sensitive API and Webso ...)
-	TODO: check
+	NOT-FOR-US: FreeTAKServer
 CVE-2022-25511 (An issue in the ?filename= argument of the route /DataPackageTable in  ...)
-	TODO: check
+	NOT-FOR-US: FreeTAKServer
 CVE-2022-25510 (FreeTAKServer 1.9.8 contains a hardcoded Flask secret key which allows ...)
-	TODO: check
+	NOT-FOR-US: FreeTAKServer
 CVE-2022-25509
 	RESERVED
 CVE-2022-25508 (An access control issue in the component /ManageRoute/postRoute of Fre ...)
-	TODO: check
+	NOT-FOR-US: FreeTAKServer
 CVE-2022-25507 (FreeTAKServer-UI v1.9.8 was discovered to contain a stored cross-site  ...)
-	TODO: check
+	NOT-FOR-US: FreeTAKServer
 CVE-2022-25506 (FreeTAKServer-UI v1.9.8 was discovered to contain a SQL injection vuln ...)
-	TODO: check
+	NOT-FOR-US: FreeTAKServer
 CVE-2022-25505
 	RESERVED
 CVE-2022-25504



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a477ce11dc25505f5987b69f9306e17a145cf1dc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a477ce11dc25505f5987b69f9306e17a145cf1dc
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220311/6af4d759/attachment-0001.htm>