Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
59ae2463 by Moritz Muehlenhoff at 2022-07-28T12:46:45+02:00
NFUs
fossil n/a
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -15,39 +15,39 @@ CVE-2022-37002
CVE-2022-37001
RESERVED
CVE-2022-37000 (An issue was discovered in Veritas NetBackup 8.1.x through
8.1.2, 8.2, ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36999 (An issue was discovered in Veritas NetBackup 8.1.x through
8.1.2, 8.2, ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36998 (An issue was discovered in Veritas NetBackup 8.1.x through
8.1.2, 8.2, ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36997 (An issue was discovered in Veritas NetBackup 8.1.x through
8.1.2, 8.2, ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36996 (An issue was discovered in Veritas NetBackup 8.1.x through
8.1.2, 8.2, ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36995 (An issue was discovered in Veritas NetBackup 8.1.x through
8.1.2, 8.2, ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36994 (An issue was discovered in Veritas NetBackup 8.1.x through
8.1.2, 8.2, ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36993 (An issue was discovered in Veritas NetBackup 8.1.x through
8.1.2, 8.2, ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36992 (An issue was discovered in Veritas NetBackup 8.1.x through
8.1.2, 8.2, ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36991 (An issue was discovered in Veritas NetBackup 8.1.x through
8.1.2, 8.2, ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36990 (An issue was discovered in Veritas NetBackup 8.1.x through
8.1.2, 8.2, ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36989 (An issue was discovered in Veritas NetBackup 8.1.x through
8.1.2, 8.2, ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36988 (An issue was discovered in Veritas NetBackup 8.1.x through
8.1.2, 8.2, ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36987 (An issue was discovered in Veritas NetBackup 8.1.x through
8.1.2, 8.2, ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36986 (An issue was discovered in Veritas NetBackup 8.1.x through
8.1.2, 8.2, ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36985 (An issue was discovered in Veritas NetBackup 8.1.x through
8.1.2, 8.2, ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36984 (An issue was discovered in Veritas NetBackup 8.1.x through
8.1.2, 8.2, ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36983
RESERVED
CVE-2022-36982
@@ -103,23 +103,23 @@ CVE-2022-36958
CVE-2022-36957
RESERVED
CVE-2022-36956 (In Veritas NetBackup, the NetBackup Client allows arbitrary
command ex ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36955 (In Veritas NetBackup, an attacker with unprivileged local
access to a ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36954 (In Veritas NetBackup OpsCenter, under specific conditions, an
authenti ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36953 (In Veritas NetBackup OpsCenter, certain endpoints could allow
an unaut ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36952 (In Veritas NetBackup OpsCenter, a hard-coded credential exists
that co ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36951 (In Veritas NetBackup OpsCenter, an unauthenticated remote
attacker may ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36950 (In Veritas NetBackup OpsCenter, an unauthenticated remote
attacker may ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36949 (In Veritas NetBackup OpsCenter, an attacker with local access
to a Net ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36948 (In Veritas NetBackup OpsCenter, a DOM XSS attack can occur.
This affec ...)
- TODO: check
+ NOT-FOR-US: Veritas
CVE-2022-36947
RESERVED
CVE-2022-36946 (nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux
kernel th ...)
@@ -161,7 +161,7 @@ CVE-2022-2558
CVE-2022-2557
RESERVED
CVE-2021-46830 (A path traversal vulnerability exists within GoAnywhere MFT
before 6.8 ...)
- TODO: check
+ NOT-FOR-US: GoAnywhere MFT
CVE-2022-36943
RESERVED
CVE-2022-36942
@@ -2550,7 +2550,7 @@ CVE-2022-35913
CVE-2022-35912 (In grails-databinding in Grails before 3.3.15, 4.x before
4.1.1, 5.x b ...)
- grails <itp> (bug #473213)
CVE-2022-35911 (On Patlite NH-FB series devices through 1.46, remote attackers
can cau ...)
- TODO: check
+ NOT-FOR-US: Patlite NH-FB
CVE-2022-35910
RESERVED
CVE-2022-35909
@@ -7161,7 +7161,7 @@ CVE-2022-34142
CVE-2022-34141
RESERVED
CVE-2022-34140 (A stored cross-site scripting (XSS) vulnerability in
/index.php?r=site ...)
- TODO: check
+ NOT-FOR-US: Feehi CMS
CVE-2022-34139
RESERVED
CVE-2022-34138
@@ -7428,7 +7428,7 @@ CVE-2022-34011 (OneBlog v2.3.4 was discovered to contain
a Server-Side Request F
CVE-2022-34010
RESERVED
CVE-2022-34009 (Fossil 2.18 on Windows allows attackers to cause a denial of
service ( ...)
- TODO: check
+ - fossil <not-affected> (Windows-specific)
CVE-2022-34008 (Comodo Antivirus 12.2.2.8012 has a quarantine flaw that allows
privile ...)
NOT-FOR-US: Comodo Antivirus
CVE-2022-34007 (EQS Integrity Line through 2022-07-01 allows a stored XSS via
a crafte ...)
@@ -25507,7 +25507,7 @@ CVE-2022-27617
CVE-2022-27616
RESERVED
CVE-2022-27615 (Improper limitation of a pathname to a restricted directory
('Path Tra ...)
- TODO: check
+ NOT-FOR-US: Synology
CVE-2022-27614
RESERVED
CVE-2022-27613
@@ -56191,11 +56191,11 @@ CVE-2021-42539 (The affected product is vulnerable to
a missing permission valid
CVE-2021-42538 (The affected product is vulnerable to a parameter injection
via passph ...)
NOT-FOR-US: Emerson
CVE-2021-42537 (VISAM VBASE version 11.6.0.6 processes an XML document that
can contai ...)
- TODO: check
+ NOT-FOR-US: VISAM
CVE-2021-42536 (The affected product is vulnerable to a disclosure of peer
username an ...)
NOT-FOR-US: Emerson
CVE-2021-42535 (VISAM VBASE version 11.6.0.6 does not neutralize or
incorrectly neutra ...)
- TODO: check
+ NOT-FOR-US: VISAM
CVE-2021-42534 (The affected product’s web application does not properly
neutral ...)
NOT-FOR-US: Trane
CVE-2021-42533 (Adobe Bridge version 11.1.1 (and earlier) is affected by a
double free ...)
@@ -67843,7 +67843,7 @@ CVE-2021-38419 (Fuji Electric V-Server Lite and Tellus
Lite V-Simulator prior to
CVE-2021-38418 (Delta Electronics DIALink versions 1.2.4.0 and prior runs by
default o ...)
NOT-FOR-US: Delta Electronics DIALink
CVE-2021-38417 (VISAM VBASE version 11.6.0.6 is vulnerable to improper access
control ...)
- TODO: check
+ NOT-FOR-US: VISAM
CVE-2021-38416 (Delta Electronics DIALink versions 1.2.4.0 and prior
insecurely loads ...)
NOT-FOR-US: Delta Electronics DIALink
CVE-2021-38415 (Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior
to v4.0. ...)
@@ -67857,7 +67857,7 @@ CVE-2021-38412 (Properly formatted POST requests to
multiple resources on the HT
CVE-2021-38411 (Delta Electronics DIALink versions 1.2.4.0 and prior is
vulnerable to ...)
NOT-FOR-US: Delta Electronics DIALink
CVE-2021-38410 (AVEVA Software Platform Common Services (PCS) Portal versions
4.5.2, 4 ...)
- TODO: check
+ NOT-FOR-US: AVEVA
CVE-2021-38409 (Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior
to v4.0. ...)
NOT-FOR-US: Fuji Electric
CVE-2021-38408 (A stack-based buffer overflow vulnerability in Advantech
WebAccess Ver ...)
@@ -80292,7 +80292,7 @@ CVE-2021-33373
CVE-2021-33372
RESERVED
CVE-2021-33371 (A stored cross-site scripting (XSS) vulnerability in
/nav_bar_action.p ...)
- TODO: check
+ NOT-FOR-US: Student Management System
CVE-2021-33370
RESERVED
CVE-2021-33369
@@ -178363,7 +178363,7 @@ CVE-2020-7000 (VISAM VBASE Editor version 11.5.0.2
and VBASE Web-Remote Module m
CVE-2020-6999 (In Moxa EDS-G516E Series firmware, Version 5.2 or lower, some
of the p ...)
NOT-FOR-US: Moxa
CVE-2020-6998 (The connection establishment algorithm found in Rockwell
Automation Co ...)
- TODO: check
+ NOT-FOR-US: Rockwell
CVE-2020-6997 (In Moxa EDS-G516E Series firmware, Version 5.2 or lower,
sensitive inf ...)
NOT-FOR-US: Moxa
CVE-2020-6996 (Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation
.NET Prot ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/59ae24637acb40dff1b03f2f3639b0c84ee3cd68
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/59ae24637acb40dff1b03f2f3639b0c84ee3cd68
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
