Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: ca091fd2 by Salvatore Bonaccorso at 2022-11-04T09:27:34+01:00 Process some more NFUs - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1204,9 +1204,9 @@ CVE-2022-44630 CVE-2022-44629 RESERVED CVE-2022-44628 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jump ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2022-44627 (Cross-Site Request Forgery (CSRF) vulnerability in David Cole Simple S ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2022-44626 RESERVED CVE-2022-44625 @@ -1783,15 +1783,15 @@ CVE-2022-44457 CVE-2022-43506 RESERVED CVE-2022-43495 (OpenHarmony-v3.1.2 and prior versions had a DOS vulnerability in distr ...) - TODO: check + NOT-FOR-US: OpenHarmony CVE-2022-43457 RESERVED CVE-2022-43452 RESERVED CVE-2022-43451 (OpenHarmony-v3.1.2 and prior versions had an Multiple path traversal v ...) - TODO: check + NOT-FOR-US: OpenHarmony CVE-2022-43449 (OpenHarmony-v3.1.2 and prior versions had an Arbitrary file read vulne ...) - TODO: check + NOT-FOR-US: OpenHarmony CVE-2022-43447 RESERVED CVE-2022-41775 @@ -5633,7 +5633,7 @@ CVE-2022-43573 CVE-2022-43572 RESERVED CVE-2022-43571 (In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authe ...) - TODO: check + NOT-FOR-US: Splunk Enterprise CVE-2022-43570 RESERVED CVE-2022-43569 @@ -5653,7 +5653,7 @@ CVE-2022-43563 CVE-2022-43562 RESERVED CVE-2022-43561 (In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a remote ...) - TODO: check + NOT-FOR-US: Splunk Enterprise CVE-2022-43560 RESERVED CVE-2022-43559 @@ -6938,11 +6938,11 @@ CVE-2022-43065 CVE-2022-43064 RESERVED CVE-2022-43063 (Online Diagnostic Lab Management System v1.0 was discovered to contain ...) - TODO: check + NOT-FOR-US: Online Diagnostic Lab Management System CVE-2022-43062 (Online Diagnostic Lab Management System v1.0 was discovered to contain ...) - TODO: check + NOT-FOR-US: Online Diagnostic Lab Management System CVE-2022-43061 (Online Tours & Travels Management System v1.0 was discovered to co ...) - TODO: check + NOT-FOR-US: Online Tours & Travels Management System CVE-2022-43060 RESERVED CVE-2022-43059 @@ -7961,17 +7961,17 @@ CVE-2022-42751 (CandidATS version 3.0.0 allows an external attacker to elevate p CVE-2022-42750 (CandidATS version 3.0.0 allows an external attacker to steal the cooki ...) NOT-FOR-US: CandidATS CVE-2022-42749 (CandidATS version 3.0.0 on 'page' of the 'ajax.php' resource, allows a ...) - TODO: check + NOT-FOR-US: CandidATS CVE-2022-42748 (CandidATS version 3.0.0 on 'sortDirection' of the 'ajax.php' resource, ...) - TODO: check + NOT-FOR-US: CandidATS CVE-2022-42747 (CandidATS version 3.0.0 on 'sortBy' of the 'ajax.php' resource, allows ...) - TODO: check + NOT-FOR-US: CandidATS CVE-2022-42746 (CandidATS version 3.0.0 on 'indexFile' of the 'ajax.php' resource, all ...) - TODO: check + NOT-FOR-US: CandidATS CVE-2022-42745 (CandidATS version 3.0.0 allows an external attacker to read arbitrary ...) - TODO: check + NOT-FOR-US: CandidATS CVE-2022-42744 (CandidATS version 3.0.0 allows an external attacker to perform CRUD op ...) - TODO: check + NOT-FOR-US: CandidATS CVE-2022-42743 (deep-parse-json version 1.0.2 allows an external attacker to edit or a ...) TODO: check CVE-2022-42742 @@ -12958,7 +12958,7 @@ CVE-2022-40205 CVE-2022-40193 (Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in Awe ...) NOT-FOR-US: WordPress plugin CVE-2022-40131 (Cross-Site Request Forgery (CSRF) vulnerability in a3rev Software Page ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2022-38974 RESERVED CVE-2022-38468 @@ -12980,7 +12980,7 @@ CVE-2022-36424 CVE-2022-36417 (Multiple Stored Cross-Site Scripting (XSS) via Cross-Site Request Forg ...) NOT-FOR-US: WordPress plugin CVE-2022-36404 (Auth. (subscriber+) Broken Access Control vulnerability in David Cole ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2022-35238 (Unauthenticated Plugin Settings Change vulnerability in Awesome Filter ...) NOT-FOR-US: WordPress plugin CVE-2022-33978 (Reflected Cross-Site Scripting (XSS) vulnerability FontMeister plugin ...) @@ -16000,7 +16000,7 @@ CVE-2022-39384 CVE-2022-39383 RESERVED CVE-2022-39382 (Keystone is a headless CMS for Node.js — built with GraphQL and ...) - TODO: check + NOT-FOR-US: Keystone CMS CVE-2022-39381 (Muhammara is a node module with c/cpp bindings to modify PDF with js f ...) TODO: check CVE-2022-39380 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ca091fd2982fd316b54d0527f7d3d8ee6874b0ed -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ca091fd2982fd316b54d0527f7d3d8ee6874b0ed You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits