From b39f9d0739bef42db23996f57d0b341a19ee01b8 Mon Sep 17 00:00:00 2001
From: Salvatore Bonaccorso <carnil@debian.org>
Date: Thu, 22 Sep 2022 22:32:53 +0200
Subject: Process some NFUs

---
 data/CVE/list | 36 ++++++++++++++++++------------------
 1 file changed, 18 insertions(+), 18 deletions(-)

(limited to 'data/CVE/list')

diff --git a/data/CVE/list b/data/CVE/list
index 3758ab1a75..40aeb43661 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -876,13 +876,13 @@ CVE-2022-40937
 CVE-2022-40936
 	RESERVED
 CVE-2022-40935 (Online Pet Shop We App v1.0 is vulnerable to SQL Injection via /pet_sh ...)
-	TODO: check
+	NOT-FOR-US: Online Pet Shop We App
 CVE-2022-40934 (Online Pet Shop We App v1.0 is vulnerable to SQL injection via /pet_sh ...)
-	TODO: check
+	NOT-FOR-US: Online Pet Shop We App
 CVE-2022-40933 (Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injectio ...)
-	TODO: check
+	NOT-FOR-US: Online Pet Shop We App
 CVE-2022-40932 (In Zoo Management System v1.0, there is an arbitrary file upload vulne ...)
-	TODO: check
+	NOT-FOR-US: Zoo Management System
 CVE-2022-40931
 	RESERVED
 CVE-2022-40930
@@ -2069,15 +2069,15 @@ CVE-2022-40449
 CVE-2022-40448
 	RESERVED
 CVE-2022-40447 (ZZCMS 2022 was discovered to contain a SQL injection vulnerability via ...)
-	TODO: check
+	NOT-FOR-US: ZZCMS
 CVE-2022-40446 (ZZCMS 2022 was discovered to contain a SQL injection vulnerability via ...)
-	TODO: check
+	NOT-FOR-US: ZZCMS
 CVE-2022-40445
 	RESERVED
 CVE-2022-40444 (ZZCMS 2022 was discovered to contain a full path disclosure vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: ZZCMS
 CVE-2022-40443 (An absolute path traversal vulnerability in ZZCMS 2022 allows attacker ...)
-	TODO: check
+	NOT-FOR-US: ZZCMS
 CVE-2022-40442
 	RESERVED
 CVE-2022-40441
@@ -4818,7 +4818,7 @@ CVE-2022-3095
 CVE-2022-3094
 	RESERVED
 CVE-2022-39197 (An XSS (Cross Site Scripting) vulnerability was found in HelpSystems C ...)
-	TODO: check
+	NOT-FOR-US: Cobalt Strike
 CVE-2022-39196 (Blackboard Learn 1.10.1 allows remote authenticated users to read unin ...)
 	NOT-FOR-US: Blackboard Learn
 CVE-2022-39195
@@ -10421,7 +10421,7 @@ CVE-2022-37236
 CVE-2022-37235
 	RESERVED
 CVE-2022-37234 (Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1. ...)
-	TODO: check
+	NOT-FOR-US: Netgear
 CVE-2022-37233
 	RESERVED
 CVE-2022-37232
@@ -13321,15 +13321,15 @@ CVE-2022-36109 (Moby is an open-source project created by Docker to enable softw
 	NOTE: https://github.com/moby/moby/security/advisories/GHSA-rc4r-wh2q-q6c4
 	NOTE: https://github.com/moby/moby/commit/de7af816e76a7fd3fbf06bffa6832959289fba32
 CVE-2022-36108 (TYPO3 is an open source PHP based web content management system releas ...)
-	TODO: check
+	NOT-FOR-US: Typo3
 CVE-2022-36107 (TYPO3 is an open source PHP based web content management system releas ...)
-	TODO: check
+	NOT-FOR-US: Typo3
 CVE-2022-36106 (TYPO3 is an open source PHP based web content management system releas ...)
-	TODO: check
+	NOT-FOR-US: Typo3
 CVE-2022-36105 (TYPO3 is an open source PHP based web content management system releas ...)
-	TODO: check
+	NOT-FOR-US: Typo3
 CVE-2022-36104 (TYPO3 is an open source PHP based web content management system releas ...)
-	TODO: check
+	NOT-FOR-US: Typo3
 CVE-2022-36103 (Talos Linux is a Linux distribution built for Kubernetes deployments.  ...)
 	TODO: check
 CVE-2022-36102 (Shopware is an open source e-commerce software. In affected versions i ...)
@@ -13785,9 +13785,9 @@ CVE-2022-35897
 CVE-2022-35896 (An issue SMM memory leak vulnerability in SMM driver (SMRAM was discov ...)
 	TODO: check
 CVE-2022-35895 (An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5. ...)
-	TODO: check
+	NOT-FOR-US: Insyde
 CVE-2022-35894 (An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5. ...)
-	TODO: check
+	NOT-FOR-US: Insyde
 CVE-2022-35893
 	RESERVED
 CVE-2022-35892
@@ -15110,7 +15110,7 @@ CVE-2022-35409 (An issue was discovered in Mbed TLS before 2.28.1 and 3.x before
 	NOTE: https://github.com/Mbed-TLS/mbedtls/commit/6b4f062cde84b9df57275676c428508ec6e41211 (v2.28.1)
 	NOTE: https://github.com/Mbed-TLS/mbedtls/commit/719c723afc63930d3472a12c0edb654a7d08d6b9 (v2.28.1)
 CVE-2022-35408 (An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5. ...)
-	TODO: check
+	NOT-FOR-US: Insyde
 CVE-2022-35407
 	RESERVED
 CVE-2022-35406 (A URL disclosure issue was discovered in Burp Suite before 2022.6. If  ...)
-- 
cgit v1.2.3