[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
30213428 by Salvatore Bonaccorso at 2022-03-26T09:56:29+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -43,7 +43,7 @@ CVE-2022-27908
 CVE-2022-27907
 	RESERVED
 CVE-2022-27906 (Mendelson OFTP2 before 1.1 b43 is affected by directory traversal. To  ...)
-	TODO: check
+	NOT-FOR-US: Mendelson OFTP2
 CVE-2022-27905
 	RESERVED
 CVE-2022-27904
@@ -97,13 +97,13 @@ CVE-2021-46741
 CVE-2021-46740
 	RESERVED
 CVE-2022-27887 (Maccms v10 was discovered to contain a reflected cross-site scripting  ...)
-	TODO: check
+	NOT-FOR-US: Maccms
 CVE-2022-27886 (Maccms v10 was discovered to contain a reflected cross-site scripting  ...)
-	TODO: check
+	NOT-FOR-US: Maccms
 CVE-2022-27885 (Maccms v10 was discovered to contain multiple reflected cross-site scr ...)
-	TODO: check
+	NOT-FOR-US: Maccms
 CVE-2022-27884 (Maccms v10 was discovered to contain a reflected cross-site scripting  ...)
-	TODO: check
+	NOT-FOR-US: Maccms
 CVE-2022-27883
 	RESERVED
 CVE-2022-27882 (slaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedn ...)
@@ -3229,7 +3229,7 @@ CVE-2022-26661 (An XXE issue was discovered in Tryton Application Platform (Serv
 CVE-2022-26660 (RunAsSpc 4.0 uses a universal and recoverable encryption key. In posse ...)
 	NOT-FOR-US: RunAsSpc
 CVE-2022-26659 (Docker Desktop installer on Windows in versions before 4.6.0 allows an ...)
-	TODO: check
+	NOT-FOR-US: Docker Desktop installer on Windows
 CVE-2022-26658
 	RESERVED
 CVE-2022-26657
@@ -3405,7 +3405,7 @@ CVE-2022-26575
 CVE-2022-26574
 	RESERVED
 CVE-2022-26573 (Maccms v10 was discovered to contain multiple reflected cross-site scr ...)
-	TODO: check
+	NOT-FOR-US: Maccms
 CVE-2022-26572
 	RESERVED
 CVE-2022-26571
@@ -4393,7 +4393,7 @@ CVE-2022-26199
 CVE-2022-26198
 	RESERVED
 CVE-2022-26197 (Joget DX 7 was discovered to contain a cross-site scripting (XSS) vuln ...)
-	TODO: check
+	NOT-FOR-US: Joget
 CVE-2022-26196
 	RESERVED
 CVE-2022-26195
@@ -6064,7 +6064,7 @@ CVE-2022-25592
 CVE-2022-25591
 	RESERVED
 CVE-2022-25590 (SurveyKing v0.2.0 was discovered to retain users' session cookies afte ...)
-	TODO: check
+	NOT-FOR-US: SurveyKing
 CVE-2022-25589
 	RESERVED
 CVE-2022-25588
@@ -6198,7 +6198,7 @@ CVE-2022-25525
 CVE-2022-25524
 	RESERVED
 CVE-2022-25523 (TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forg ...)
-	TODO: check
+	NOT-FOR-US: TypesetterCMS
 CVE-2022-25522
 	RESERVED
 CVE-2022-25521



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/30213428f0816410e2c3df7696adcff934d49785

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/30213428f0816410e2c3df7696adcff934d49785
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220326/ef3c7be7/attachment.htm>