[Git][security-tracker-team/security-tracker][master] Process some NFUs
Neil Williams (@codehelp)
codehelp at debian.org
Thu May 26 10:09:49 BST 2022
Neil Williams pushed to branch master at Debian Security Tracker / security-tracker
Commits:
d7743914 by Neil Williams at 2022-05-26T10:09:32+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -7651,7 +7651,7 @@ CVE-2022-29001 (In SpringBootMovie <=1.2, the uploaded file suffix parameter
CVE-2022-29000
RESERVED
CVE-2022-28999 (Insecure permissions in the install directories and binaries of Dev-CP ...)
- TODO: check
+ NOT-FOR-US: Bloodshed Dev-C++
CVE-2022-28998 (Xlight FTP v3.9.3.2 was discovered to contain a stack-based buffer ove ...)
NOT-FOR-US: Xlight FTP
CVE-2022-28997 (CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forger ...)
@@ -7944,7 +7944,7 @@ CVE-2022-28877
CVE-2022-28876
RESERVED
CVE-2022-28875 (A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atl ...)
- TODO: check
+ NOT-FOR-US: F-Secure
CVE-2022-28874 (Multiple Denial-of-Service vulnerabilities was discovered in the F-Sec ...)
NOT-FOR-US: F-Secure
CVE-2022-28873 (A vulnerability affecting F-Secure SAFE browser was discovered. An att ...)
@@ -7970,7 +7970,7 @@ CVE-2022-28864
CVE-2022-28863
RESERVED
CVE-2022-28862 (In Archibus Web Central before 26.2, multiple SQL Injection vulnerabil ...)
- TODO: check
+ NOT-FOR-US: ARCHIBUS Web Central
CVE-2022-28861
RESERVED
CVE-2022-28860
@@ -25881,7 +25881,7 @@ CVE-2022-23052 (PeteReport Version 0.5 contains a Cross Site Request Forgery (CS
CVE-2022-23051 (PeteReport Version 0.5 allows an authenticated admin user to inject pe ...)
NOT-FOR-US: PeteReport
CVE-2022-23050 (ManageEngine AppManager15 (Build No:15510) allows an authenticated adm ...)
- TODO: check
+ NOT-FOR-US: ManageEngine Applications Manager
CVE-2022-23049 (Exponent CMS 2.6.0patch2 allows an authenticated user to inject persis ...)
NOT-FOR-US: Exponent CMS
CVE-2022-23048 (Exponent CMS 2.6.0patch2 allows an authenticated admin user to upload ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d7743914651369f942a40bdf50820da7e08f739c
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d7743914651369f942a40bdf50820da7e08f739c
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220526/c824ff7a/attachment.htm>
More information about the debian-security-tracker-commits
mailing list