[Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Mar 29 10:12:46 BST 2022
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
1fbb7d9a by Salvatore Bonaccorso at 2022-03-29T11:12:24+02:00
Process NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4810,7 +4810,7 @@ CVE-2022-26271 (74cmsSE v3.4.1 was discovered to contain an arbitrary file read
CVE-2022-26270
RESERVED
CVE-2022-26269 (Suzuki Connect v1.0.15 allows attackers to tamper with displayed messa ...)
- TODO: check
+ NOT-FOR-US: Suzuki Connect
CVE-2022-26268 (Xiaohuanxiong v1.0 was discovered to contain a SQL injection vulnerabi ...)
NOT-FOR-US: Xiaohuanxiong
CVE-2022-26267 (Piwigo v12.2.0 was discovered to contain an information leak via the a ...)
@@ -6762,7 +6762,7 @@ CVE-2022-25523 (TypesetterCMS v5.1 was discovered to contain a Cross-Site Reques
CVE-2022-25522
RESERVED
CVE-2022-25521 (UNNO v03.11.00 was discovered to contain access control issue. ...)
- TODO: check
+ NOT-FOR-US: UNNO
CVE-2022-25520
RESERVED
CVE-2022-25519
@@ -6978,7 +6978,7 @@ CVE-2022-25422
CVE-2022-25421
RESERVED
CVE-2022-25420 (NTT Resonant Incorporated goo blog App Web Application 1.0 is vulnerab ...)
- TODO: check
+ NOT-FOR-US: NTT Resonant Incorporated goo blog App Web Application
CVE-2022-25419
RESERVED
CVE-2022-25418 (Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow vi ...)
@@ -8480,9 +8480,9 @@ CVE-2022-24958 (drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.
NOTE: Fixed by: https://git.kernel.org/linus/89f3594d0de58e8a57d92d497dea9fee3d4b9cda (5.17-rc1)
NOTE: Fixed by: https://git.kernel.org/linus/501e38a5531efbd77d5c73c0ba838a889bfc1d74 (5.17-rc1)
CVE-2022-24957 (DHC Vision eQMS through 5.4.8.322 has Persistent XSS due to insufficie ...)
- TODO: check
+ NOT-FOR-US: DHC Vision eQMS
CVE-2022-24956 (An issue was discovered in Shopware B2B-Suite through 4.4.1. The sort- ...)
- TODO: check
+ NOT-FOR-US: Shopware B2B-Suite
CVE-2022-24955 (Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have ...)
NOT-FOR-US: Foxit
CVE-2022-24954 (Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have ...)
@@ -8825,7 +8825,7 @@ CVE-2022-24791
CVE-2022-24790
RESERVED
CVE-2022-24789 (C1 CMS is an open-source, .NET based Content Management System (CMS). ...)
- TODO: check
+ NOT-FOR-US: C1 CMS
CVE-2022-24788
RESERVED
CVE-2022-24787
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1fbb7d9aeae0283cdef5caf18bf0537548f74918
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1fbb7d9aeae0283cdef5caf18bf0537548f74918
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220329/bac50ae9/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list