[Git][security-tracker-team/security-tracker][master] Process some NFUs and piwigo (removed)

[Neil Williams (@codehelp)]

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2da760b0 by Neil Williams at 2022-05-09T08:54:39+01:00
Process some NFUs and piwigo (removed)

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -86585,7 +86585,7 @@ CVE-2021-23594 (All versions of package realms-shim are vulnerable to Sandbox By
 CVE-2021-23593
 	RESERVED
 CVE-2021-23592 (The package topthink/framework before 6.0.12 are vulnerable to Deseria ...)
-	TODO: check
+	NOT-FOR-US: ThinkPHP Framework
 CVE-2021-23591
 	RESERVED
 CVE-2021-23590
@@ -127582,17 +127582,17 @@ CVE-2020-19219
 CVE-2020-19218
 	RESERVED
 CVE-2020-19217 (SQL Injection vulnerability in admin/batch_manager.php in piwigo v2.9. ...)
-	TODO: check
+	- piwigo <removed>
 CVE-2020-19216 (SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, v ...)
-	TODO: check
+	- piwigo <removed>
 CVE-2020-19215 (SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, v ...)
-	TODO: check
+	- piwigo <removed>
 CVE-2020-19214
 	RESERVED
 CVE-2020-19213 (SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the  ...)
 	TODO: check
 CVE-2020-19212 (SQL Injection vulnerability in admin/group_list.php in piwigo v2.9.5,  ...)
-	TODO: check
+	- piwigo <removed>
 CVE-2020-19211
 	RESERVED
 CVE-2020-19210
@@ -200129,7 +200129,7 @@ CVE-2019-12256 (Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4
 CVE-2019-12255 (Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 ...)
 	NOT-FOR-US: Wind River VxWorks
 CVE-2019-12254 (In multiple Tecson Tankspion and GOKs SmartBox 4 products the affected ...)
-	TODO: check
+	NOT-FOR-US: Tecson
 CVE-2019-12253 (my little forum before 2.4.20 allows CSRF to delete posts, as demonstr ...)
 	NOT-FOR-US: my little forum
 CVE-2019-12252 (In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the low ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2da760b04fc9fcba16b0c002762bf67ab706a002

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2da760b04fc9fcba16b0c002762bf67ab706a002
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220509/65418a97/attachment.htm>