[Git][security-tracker-team/security-tracker][master] new gitlab issues

Moritz Muehlenhoff (@jmm) jmm at debian.org
Thu Nov 3 10:32:15 GMT 2022



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3bf23c09 by Moritz Muehlenhoff at 2022-11-03T11:31:51+01:00
new gitlab issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -128,8 +128,10 @@ CVE-2022-3820
 	RESERVED
 CVE-2022-3819
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-3818
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-3817 (A vulnerability has been found in Axiomatic Bento4 and classified as p ...)
 	NOT-FOR-US: Bento4
 CVE-2022-3816 (A vulnerability, which was classified as problematic, was found in Axi ...)
@@ -366,6 +368,7 @@ CVE-2022-3794
 	RESERVED
 CVE-2022-3793
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-3792
 	RESERVED
 CVE-2022-3791 (A vulnerability was found in PDF & Print Plugin. It has been class ...)
@@ -657,6 +660,7 @@ CVE-2022-3768
 	RESERVED
 CVE-2022-3767
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-3766 (Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/p ...)
 	NOT-FOR-US: phpmyfaq
 CVE-2022-3765 (Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpm ...)
@@ -3485,6 +3489,7 @@ CVE-2022-3727
 	RESERVED
 CVE-2022-3726
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-3725 (Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allow ...)
 	- wireshark 4.0.0-1
 	[bullseye] - wireshark <not-affected> (Vulnerable code not present)
@@ -3568,6 +3573,7 @@ CVE-2022-3707
 	NOTE: https://lore.kernel.org/all/20221007013708.1946061-1-zyytlz.wz@163.com/
 CVE-2022-3706
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-43932
 	RESERVED
 CVE-2022-43931
@@ -6382,12 +6388,14 @@ CVE-2022-3487
 	RESERVED
 CVE-2022-3486
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-3485
 	RESERVED
 CVE-2022-3484
 	RESERVED
 CVE-2022-3483
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-3482
 	RESERVED
 CVE-2022-3481
@@ -7509,6 +7517,7 @@ CVE-2022-3414 (A vulnerability was found in SourceCodester Web-Based Student Cle
 	NOT-FOR-US: SourceCodester Web-Based Student Clearance System
 CVE-2022-3413
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-3412
 	RESERVED
 CVE-2022-3411
@@ -10267,6 +10276,7 @@ CVE-2022-3281 (WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Contro
 	NOT-FOR-US: WAGO
 CVE-2022-3280
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-3279 (An unhandled exception in job log parsing in GitLab CE/EE affecting al ...)
 	- gitlab <unfixed>
 CVE-2022-3278 (NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.055 ...)
@@ -10346,6 +10356,7 @@ CVE-2022-40214
 	RESERVED
 CVE-2022-3265
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-3264
 	RESERVED
 CVE-2022-41310 (A malicious crafted .dwf or .pct file when consumed through DesignRevi ...)
@@ -18549,6 +18560,7 @@ CVE-2022-2762 (The AdminPad WordPress plugin before 2.2 does not have CSRF check
 	NOT-FOR-US: WordPress plugin
 CVE-2022-2761
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-2760 (In affected versions of Octopus Deploy it is possible to reveal the Sp ...)
 	NOT-FOR-US: Octopus Deploy
 CVE-2022-38169
@@ -27502,6 +27514,7 @@ CVE-2022-2252 (Open Redirect in GitHub repository microweber/microweber prior to
 	NOT-FOR-US: microweber
 CVE-2022-2251
 	RESERVED
+	- gitlab <unfixed>
 CVE-2022-2250 (An open redirect vulnerability in GitLab EE/CE affecting all versions  ...)
 	- gitlab <unfixed>
 CVE-2021-46826



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3bf23c0947778648770e556039c3b4feb55a1f95

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3bf23c0947778648770e556039c3b4feb55a1f95
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221103/f7955fc6/attachment.htm>


More information about the debian-security-tracker-commits mailing list