[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
570215af by Salvatore Bonaccorso at 2022-11-15T09:46:23+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4009,13 +4009,13 @@ CVE-2022-44392
 CVE-2022-44391
 	RESERVED
 CVE-2022-44390 (A cross-site scripting (XSS) vulnerability in EyouCMS V1.5.9-UTF8-SP1  ...)
-	TODO: check
+	NOT-FOR-US: EyouCMS
 CVE-2022-44389 (EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request ...)
-	TODO: check
+	NOT-FOR-US: EyouCMS
 CVE-2022-44388
 	RESERVED
 CVE-2022-44387 (EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request ...)
-	TODO: check
+	NOT-FOR-US: EyouCMS
 CVE-2022-44386
 	RESERVED
 CVE-2022-44385
@@ -5411,9 +5411,9 @@ CVE-2022-43970
 CVE-2022-43969
 	RESERVED
 CVE-2022-43968 (Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9 ...)
-	TODO: check
+	NOT-FOR-US: Concrete CMS
 CVE-2022-43967 (Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9 ...)
-	TODO: check
+	NOT-FOR-US: Concrete CMS
 CVE-2022-43966
 	RESERVED
 CVE-2022-43965
@@ -7321,7 +7321,7 @@ CVE-2022-43697
 CVE-2022-43696
 	RESERVED
 CVE-2022-43695 (Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9 ...)
-	TODO: check
+	NOT-FOR-US: Concrete CMS
 CVE-2022-43694 (Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9 ...)
 	NOT-FOR-US: Concrete CMS
 CVE-2022-43693 (Concrete CMS is vulnerable to CSRF due to the lack of "State" paramete ...)
@@ -7329,17 +7329,17 @@ CVE-2022-43693 (Concrete CMS is vulnerable to CSRF due to the lack of "State" pa
 CVE-2022-43692 (Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9 ...)
 	NOT-FOR-US: Concrete CMS
 CVE-2022-43691 (Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9 ...)
-	TODO: check
+	NOT-FOR-US: Concrete CMS
 CVE-2022-43690 (Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9 ...)
-	TODO: check
+	NOT-FOR-US: Concrete CMS
 CVE-2022-43689 (Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9 ...)
-	TODO: check
+	NOT-FOR-US: Concrete CMS
 CVE-2022-43688 (Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9 ...)
-	TODO: check
+	NOT-FOR-US: Concrete CMS
 CVE-2022-43687 (Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9 ...)
-	TODO: check
+	NOT-FOR-US: Concrete CMS
 CVE-2022-43686 (In Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 an ...)
-	TODO: check
+	NOT-FOR-US: Concrete CMS
 CVE-2022-43685
 	RESERVED
 CVE-2022-43684
@@ -8440,7 +8440,7 @@ CVE-2022-43325
 CVE-2022-43324
 	RESERVED
 CVE-2022-43323 (EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request ...)
-	TODO: check
+	NOT-FOR-US: EyouCMS
 CVE-2022-43322
 	RESERVED
 CVE-2022-43321 (Shopwind v3.4.3 was discovered to contain a reflected cross-site scrip ...)
@@ -8827,7 +8827,7 @@ CVE-2022-43148 (rtf2html v0.2.0 was discovered to contain a heap overflow in the
 CVE-2022-43147
 	RESERVED
 CVE-2022-43146 (An arbitrary file upload vulnerability in the image upload function of ...)
-	TODO: check
+	NOT-FOR-US: Canteen Management System
 CVE-2022-43145
 	RESERVED
 CVE-2022-43144 (A cross-site scripting (XSS) vulnerability in Canteen Management Syste ...)
@@ -9083,7 +9083,7 @@ CVE-2022-43032 (An issue was discovered in Bento4 v1.6.0-639. There is a memory
 CVE-2022-43031 (DedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery  ...)
 	NOT-FOR-US: DedeCMS
 CVE-2022-43030 (Siyucms v6.1.7 was discovered to contain a remote code execution (RCE) ...)
-	TODO: check
+	NOT-FOR-US: Siyucms
 CVE-2022-43029 (Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to cont ...)
 	NOT-FOR-US: Tenda
 CVE-2022-43028 (Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to cont ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/570215af63dd1115e8ca896f0eb861238c04f5c5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/570215af63dd1115e8ca896f0eb861238c04f5c5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221115/43c84473/attachment.htm>