Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ef2b1cb0 by Salvatore Bonaccorso at 2022-07-07T10:31:26+02:00
Process some more NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -8691,7 +8691,7 @@ CVE-2022-31858
CVE-2022-31857
RESERVED
CVE-2022-31856 (Newsletter Module v3.x was discovered to contain a SQL
injection vulne ...)
- TODO: check
+ NOT-FOR-US: OpenCart Newsletter Module
CVE-2022-31855
RESERVED
CVE-2022-31854
@@ -8731,7 +8731,7 @@ CVE-2022-31838
CVE-2022-31837
RESERVED
CVE-2022-31836 (The leafInfo.match() function in Beego v2.0.3 and below uses
path.join ...)
- TODO: check
+ NOT-FOR-US: Beego
CVE-2022-31835
RESERVED
CVE-2022-31834
@@ -9581,9 +9581,9 @@ CVE-2022-31607
CVE-2022-31606
RESERVED
CVE-2022-31605 (NVFLARE, versions prior to 2.1.2, contains a vulnerability in
its util ...)
- TODO: check
+ NOT-FOR-US: NVFLARE
CVE-2022-31604 (NVFLARE, versions prior to 2.1.2, contains a vulnerability in
its PKI ...)
- TODO: check
+ NOT-FOR-US: NVFLARE
CVE-2022-31603 (NVIDIA DGX A100 contains a vulnerability in SBIOS in the
IpSecDxe, whe ...)
NOT-FOR-US: NVIDIA
CVE-2022-31602 (NVIDIA DGX A100 contains a vulnerability in SBIOS in the
IpSecDxe, whe ...)
@@ -10844,7 +10844,7 @@ CVE-2022-31133
CVE-2022-31132
RESERVED
CVE-2022-31131 (Nextcloud mail is a Mail app for the Nextcloud home server
product. Ve ...)
- TODO: check
+ NOT-FOR-US: Nextcloud Mail app
CVE-2022-31130
RESERVED
CVE-2022-31129 (moment is a JavaScript date library for parsing, validating,
manipulat ...)
@@ -17432,7 +17432,7 @@ CVE-2022-28937 (FISCO-BCOS release-3.0.0-rc2 was
discovered to contain an issue
CVE-2022-28936 (FISCO-BCOS release-3.0.0-rc2 was discovered to contain an
issue where ...)
NOT-FOR-US: FISCO-BCOS
CVE-2022-28935 (Totolink A830R V5.9c.4729_B20191112, Totolink A3100R
V4.1.2cu.5050_B20 ...)
- TODO: check
+ NOT-FOR-US: Totolink
CVE-2022-28934
RESERVED
CVE-2022-28933
@@ -21466,9 +21466,9 @@ CVE-2022-27551
CVE-2022-27550
RESERVED
CVE-2022-27549 (HCL Launch may store certain data for recurring activities in
a plain ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2022-27548 (HCL Launch stores user credentials in plain clear text which
can be re ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2022-27547
RESERVED
CVE-2022-27546
@@ -24617,7 +24617,7 @@ CVE-2022-26414 (A potential buffer overflow
vulnerability was identified in some
CVE-2022-26413 (A command injection vulnerability in the CGI program of Zyxel
VMG3312- ...)
NOT-FOR-US: Zyxel
CVE-2022-26348 (Command Centre Server is vulnerable to SQL Injection via
Windows Regis ...)
- TODO: check
+ NOT-FOR-US: gallagher
CVE-2022-26347
RESERVED
CVE-2022-26339
@@ -24627,7 +24627,7 @@ CVE-2022-26123
CVE-2022-26087
RESERVED
CVE-2022-26078 (Gallagher Controller 6000 is vulnerable to a Denial of Service
attack ...)
- TODO: check
+ NOT-FOR-US: Gallagher
CVE-2022-26058
RESERVED
CVE-2022-26055
@@ -31485,13 +31485,13 @@ CVE-2022-24143 (Tenda AX3 v16.03.12.10_CN and AX12
22.03.01.2_CN was discovered
CVE-2022-24142 (Tenda AX3 v16.03.12.10_CN was discovered to contain a stack
overflow i ...)
NOT-FOR-US: Tenda routers
CVE-2022-24141 (The iTopVPNmini.exe component of iTop VPN 3.2 will try to
connect to d ...)
- TODO: check
+ NOT-FOR-US: iTop VPN
CVE-2022-24140 (IOBit Advanced System Care 15, iTop Screen Recorder 2.1, iTop
VPN 3.2, ...)
TODO: check
CVE-2022-24139 (In IOBit Advanced System Care (AscService.exe) 15, an attacker
with SE ...)
- TODO: check
+ NOT-FOR-US: IOBit Advanced System Care
CVE-2022-24138 (IOBit Advanced System Care (Asc.exe) 15 and Action Download
Center bot ...)
- TODO: check
+ NOT-FOR-US: IOBit Advanced System Care
CVE-2022-24137
RESERVED
CVE-2022-24136 (Hospital Management System v1.0 is affected by an unrestricted
upload ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ef2b1cb0ec386c976d63dbe819549d1e45a36fc9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ef2b1cb0ec386c976d63dbe819549d1e45a36fc9
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
