Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7cd3078c by Salvatore Bonaccorso at 2022-08-31T22:24:37+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -635,7 +635,7 @@ CVE-2022-38814
CVE-2022-38813
RESERVED
CVE-2022-38812 (AeroCMS 0.1.1 is vulnerable to SQL Injection via the author
parameter. ...)
- TODO: check
+ NOT-FOR-US: AeroCMS
CVE-2022-38811
RESERVED
CVE-2022-38810
@@ -2037,7 +2037,7 @@ CVE-2022-2867 (libtiff's tiffcrop utility has a uint32_t
underflow that can lead
NOTE: https://gitlab.com/libtiff/libtiff/-/issues/351
NOTE:
https://gitlab.com/libtiff/libtiff/-/commit/07d79fcac2ead271b60e32aeb80f7b4f3be9ac8c
(v4.4.0rc1)
CVE-2022-2866 (FATEK FvDesigner version 1.5.103 and prior is vulnerable to an
out-of- ...)
- TODO: check
+ NOT-FOR-US: FATEK FvDesigner
CVE-2022-2865
RESERVED
[experimental] - gitlab 15.2.3+ds1-1
@@ -2855,9 +2855,9 @@ CVE-2022-36351
CVE-2022-33893
RESERVED
CVE-2022-2759 (Delta Electronics Delta Robot Automation Studio (DRAS) versions
prior ...)
- TODO: check
+ NOT-FOR-US: Delta Electronics
CVE-2022-2758 (All versions of LS Industrial Systems (LSIS) Co. Ltd LS
Electric PLCs ...)
- TODO: check
+ NOT-FOR-US: LS Industrial Systems (LSIS) Co. Ltd
CVE-2022-2757
RESERVED
CVE-2022-2756 (Server-Side Request Forgery (SSRF) in GitHub repository
kareadita/kavi ...)
@@ -5193,7 +5193,7 @@ CVE-2022-37186
CVE-2022-37185
RESERVED
CVE-2022-37184 (The application manage_website.php on Garage Management System
1.0 is ...)
- TODO: check
+ NOT-FOR-US: Garage Management System
CVE-2022-37183 (Piwigo 12.3.0 is vulnerable to Cross Site Scripting (XSS) via
/search/ ...)
- piwigo <removed>
CVE-2022-37182
@@ -5317,7 +5317,7 @@ CVE-2022-37124
CVE-2022-37123
RESERVED
CVE-2022-37122 (Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 -
B2.1.0, App ...)
- TODO: check
+ NOT-FOR-US: Carel pCOWeb HVAC BACnet Gateway
CVE-2022-37121
RESERVED
CVE-2022-37120
@@ -7391,7 +7391,7 @@ CVE-2022-33949
CVE-2022-32575
RESERVED
CVE-2022-2485 (Any attempt (good or bad) to log into AutomationDirect Stride
Field I/ ...)
- TODO: check
+ NOT-FOR-US: AutomationDirect
CVE-2022-2484
RESERVED
CVE-2022-2483
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7cd3078cb13770a97d4a2658db7593f9db3692bd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7cd3078cb13770a97d4a2658db7593f9db3692bd
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
