[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c3ea7ee5 by Salvatore Bonaccorso at 2023-01-05T21:19:02+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -47,11 +47,11 @@ CVE-2023-22301
 CVE-2023-22291
 	RESERVED
 CVE-2023-0088 (The Swifty Page Manager plugin for WordPress is vulnerable to Cross-Si ...)
-	TODO: check
+	NOT-FOR-US: Swifty Page Manager plugin for WordPress
 CVE-2023-0087 (The Swifty Page Manager plugin for WordPress is vulnerable to Stored C ...)
-	TODO: check
+	NOT-FOR-US: Swifty Page Manager plugin for WordPress
 CVE-2023-0086 (The JetWidgets for Elementor plugin for WordPress is vulnerable to Cro ...)
-	TODO: check
+	NOT-FOR-US: JetWidgets for Elementor plugin for WordPress
 CVE-2023-0085
 	RESERVED
 CVE-2023-0084
@@ -8971,7 +8971,7 @@ CVE-2022-45997 (Tenda W20E V16.01.0.6(3392) is vulnerable to Buffer Overflow. ..
 CVE-2022-45996 (Tenda W20E V16.01.0.6(3392) is vulnerable to Command injection via cmd ...)
 	NOT-FOR-US: Tenda
 CVE-2022-45995 (There is an unauthorized buffer overflow vulnerability in Tenda AX12 v ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2022-45994
 	RESERVED
 CVE-2022-45993
@@ -17643,7 +17643,7 @@ CVE-2022-43846
 CVE-2022-43845
 	RESERVED
 CVE-2022-43844 (IBM Robotic Process Automation for Cloud Pak 20.12 through 21.0.3 is v ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2022-43843
 	RESERVED
 CVE-2022-43842
@@ -18391,7 +18391,7 @@ CVE-2022-43575
 CVE-2022-43574 ("IBM Robotic Process Automation 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21 ...)
 	NOT-FOR-US: IBM
 CVE-2022-43573 (IBM Robotic Process Automation 20.12 through 21.0.6 is vulnerable to e ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2022-43572 (In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, sending  ...)
 	NOT-FOR-US: Splunk Enterprise
 CVE-2022-43571 (In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authe ...)
@@ -23485,7 +23485,7 @@ CVE-2022-41741 (NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open
 	NOTE: https://github.com/nginx/nginx/commit/6b022a5556af22b6e18532e547a6ae46b0d8c6ea (release-1.22.1)
 	NOTE: Only affects the nginx-extras binary package
 CVE-2022-41740 (IBM Robotic Process Automation 20.12 through 21.0.6 could allow an att ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2022-41739
 	RESERVED
 CVE-2022-41738



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c3ea7ee550ee130da34bb7bb3b9e5ab631b320c9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c3ea7ee550ee130da34bb7bb3b9e5ab631b320c9
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230105/1cbd7337/attachment.htm>