[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d0ad8a38 by Salvatore Bonaccorso at 2022-10-19T16:03:06+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2999,7 +2999,7 @@ CVE-2022-42220
 CVE-2022-42219
 	RESERVED
 CVE-2022-42218 (Open Source SACCO Management System v1.0 vulnerable to SQL Injection v ...)
-	TODO: check
+	NOT-FOR-US: Open Source SACCO Management System
 CVE-2022-42217
 	RESERVED
 CVE-2022-42216
@@ -3059,7 +3059,7 @@ CVE-2022-42190
 CVE-2022-42189
 	RESERVED
 CVE-2022-42188 (In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path travers ...)
-	TODO: check
+	NOT-FOR-US: Lavalite CMS
 CVE-2022-42187
 	RESERVED
 CVE-2022-42186
@@ -3201,17 +3201,17 @@ CVE-2022-42119
 CVE-2022-42118
 	RESERVED
 CVE-2022-42117 (A Cross-site scripting (XSS) vulnerability in the Frontend Taglib modu ...)
-	TODO: check
+	NOT-FOR-US: Frontend Taglib module in Liferay
 CVE-2022-42116 (A Cross-site scripting (XSS) vulnerability in the Frontend Editor modu ...)
-	TODO: check
+	NOT-FOR-US: Frontend Editor module's integration with CKEditor in Liferay
 CVE-2022-42115 (Cross-site scripting (XSS) vulnerability in the Object module's edit o ...)
-	TODO: check
+	NOT-FOR-US: module in Liferay
 CVE-2022-42114 (A Cross-site scripting (XSS) vulnerability in the Role module's edit r ...)
-	TODO: check
+	NOT-FOR-US: module in Liferay
 CVE-2022-42113 (A Cross-site scripting (XSS) vulnerability in Document Library module  ...)
-	TODO: check
+	NOT-FOR-US: module in Liferay
 CVE-2022-42112 (A Cross-site scripting (XSS) vulnerability in the Portal Search module ...)
-	TODO: check
+	NOT-FOR-US: module in Liferay
 CVE-2022-42111
 	RESERVED
 CVE-2022-42110
@@ -4750,7 +4750,7 @@ CVE-2022-41502
 CVE-2022-41501
 	RESERVED
 CVE-2022-41500 (EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request F ...)
-	TODO: check
+	NOT-FOR-US: Eyoucms
 CVE-2022-41499
 	RESERVED
 CVE-2022-41498 (Billing System Project v1.0 was discovered to contain a SQL injection  ...)
@@ -9592,7 +9592,7 @@ CVE-2022-39430
 CVE-2022-39429
 	RESERVED
 CVE-2022-39428 (Vulnerability in the Oracle Web Applications Desktop Integrator produc ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2022-39427 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza ...)
 	TODO: check
 CVE-2022-39426 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d0ad8a380d2d54c264028c12d4a9843f0184c9be

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d0ad8a380d2d54c264028c12d4a9843f0184c9be
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221019/bb3534a4/attachment-0001.htm>