Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6e92363c by Salvatore Bonaccorso at 2020-04-16T21:46:43+02:00
Process several NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -22598,36 +22598,36 @@ CVE-2020-2798 (Vulnerability in the Oracle WebLogic
Server product of Oracle Fus
CVE-2020-2797 (Vulnerability in the PeopleSoft Enterprise PeopleTools product
of Orac ...)
NOT-FOR-US: Oracle
CVE-2020-2796 (Vulnerability in the Oracle Email Center product of Oracle
E-Business ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2795 (Vulnerability in the Oracle Knowledge product of Oracle
Knowledge (com ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2794 (Vulnerability in the Oracle Email Center product of Oracle
E-Business ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2793 (Vulnerability in the Oracle Financial Services Analytical
Applications ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2792
RESERVED
CVE-2020-2791 (Vulnerability in the Oracle Knowledge product of Oracle
Knowledge (com ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2790 (Vulnerability in the MySQL Server product of Oracle MySQL
(component: ...)
- mysql-5.7 <unfixed> (bug #956832)
NOTE:
https://www.oracle.com/security-alerts/cpuapr2020.html#AppendixMSQL
CVE-2020-2789 (Vulnerability in the Oracle iSupport product of Oracle
E-Business Suit ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2788
RESERVED
CVE-2020-2787 (Vulnerability in the Oracle Outside In Technology product of
Oracle Fu ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2786 (Vulnerability in the Oracle Outside In Technology product of
Oracle Fu ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2785 (Vulnerability in the Oracle Outside In Technology product of
Oracle Fu ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2784 (Vulnerability in the Oracle Outside In Technology product of
Oracle Fu ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2783 (Vulnerability in the Oracle Outside In Technology product of
Oracle Fu ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2782 (Vulnerability in the PeopleSoft Enterprise PeopleTools product
of Orac ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2781 (Vulnerability in the Java SE, Java SE Embedded product of
Oracle Java ...)
- openjdk-14 14.0.1+7-1
- openjdk-11 11.0.7+10-1
@@ -22643,11 +22643,11 @@ CVE-2020-2778 (Vulnerability in the Java SE product
of Oracle Java SE (component
- openjdk-14 14.0.1+7-1
- openjdk-11 11.0.7+10-1
CVE-2020-2777 (Vulnerability in the Hyperion Financial Management product of
Oracle H ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2776 (Vulnerability in the PeopleSoft Enterprise PeopleTools product
of Orac ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2775 (Vulnerability in the PeopleSoft Enterprise PeopleTools product
of Orac ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2774 (Vulnerability in the MySQL Server product of Oracle MySQL
(component: ...)
- mysql-5.7 <not-affected> (Only affects MySQL 8)
NOTE:
https://www.oracle.com/security-alerts/cpuapr2020.html#AppendixMSQL
@@ -22657,14 +22657,14 @@ CVE-2020-2773 (Vulnerability in the Java SE, Java SE
Embedded product of Oracle
- openjdk-8 8u252-b09-1
- openjdk-7 <removed>
CVE-2020-2772 (Vulnerability in the Oracle Human Resources product of Oracle
E-Busine ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2771 (Vulnerability in the Oracle Solaris product of Oracle Systems
(compone ...)
NOT-FOR-US: Oracle Solaris
CVE-2020-2770 (Vulnerability in the MySQL Server product of Oracle MySQL
(component: ...)
- mysql-5.7 <not-affected> (Only affects MySQL 8)
NOTE:
https://www.oracle.com/security-alerts/cpuapr2020.html#AppendixMSQL
CVE-2020-2769 (Vulnerability in the Hyperion Financial Reporting product of
Oracle Hy ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2768 (Vulnerability in the MySQL Cluster product of Oracle MySQL
(component: ...)
- mysql-cluster <itp> (bug #833356)
NOTE:
https://www.oracle.com/security-alerts/cpuapr2020.html#AppendixMSQL
@@ -22672,7 +22672,7 @@ CVE-2020-2767 (Vulnerability in the Java SE product of
Oracle Java SE (component
- openjdk-14 14.0.1+7-1
- openjdk-11 11.0.7+10-1
CVE-2020-2766 (Vulnerability in the Oracle WebLogic Server product of Oracle
Fusion M ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2765 (Vulnerability in the MySQL Server product of Oracle MySQL
(component: ...)
- mysql-5.7 <unfixed> (bug #956832)
NOTE:
https://www.oracle.com/security-alerts/cpuapr2020.html#AppendixMSQL
@@ -22715,27 +22715,27 @@ CVE-2020-2754 (Vulnerability in the Java SE, Java SE
Embedded product of Oracle
- openjdk-11 11.0.7+10-1
- openjdk-8 8u252-b09-1
CVE-2020-2753 (Vulnerability in the Oracle Workflow product of Oracle
E-Business Suit ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2752 (Vulnerability in the MySQL Client product of Oracle MySQL
(component: ...)
- mysql-5.7 <unfixed> (bug #956832)
NOTE:
https://www.oracle.com/security-alerts/cpuapr2020.html#AppendixMSQL
CVE-2020-2751 (Vulnerability in the PeopleSoft Enterprise PeopleTools product
of Orac ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2750 (Vulnerability in the Oracle General Ledger product of Oracle
E-Busines ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2749 (Vulnerability in the Oracle Solaris product of Oracle Systems
(compone ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2748 (Vulnerability in the Oracle VM VirtualBox product of Oracle
Virtualiza ...)
- virtualbox 6.1.6-dfsg-1
[jessie] - virtualbox <end-of-life> (DSA-3699-1)
CVE-2020-2747 (Vulnerability in the Oracle Access Manager product of Oracle
Fusion Mi ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2746 (Vulnerability in the Oracle Hospitality Reporting and Analytics
compon ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2745 (Vulnerability in the Oracle Access Manager product of Oracle
Fusion Mi ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2744 (Vulnerability in the Oracle Transportation Management product
of Oracl ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2743 (Vulnerability in the Oracle VM VirtualBox product of Oracle
Virtualiza ...)
- virtualbox 6.1.2-dfsg-1
[jessie] - virtualbox <end-of-life> (DSA-3699-1)
@@ -22746,21 +22746,21 @@ CVE-2020-2741 (Vulnerability in the Oracle VM
VirtualBox product of Oracle Virtu
- virtualbox 6.1.6-dfsg-1
[jessie] - virtualbox <end-of-life> (DSA-3699-1)
CVE-2020-2740 (Vulnerability in the Oracle Access Manager product of Oracle
Fusion Mi ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2739 (Vulnerability in the Oracle WebCenter Sites product of Oracle
Fusion M ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2738 (Vulnerability in the Siebel UI Framework product of Oracle
Siebel CRM ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2737 (Vulnerability in the Core RDBMS component of Oracle Database
Server. S ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2736
RESERVED
CVE-2020-2735 (Vulnerability in the Java VM component of Oracle Database
Server. Supp ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2734 (Vulnerability in the RDBMS/Optimizer component of Oracle
Database Serv ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2733 (Vulnerability in the JD Edwards EnterpriseOne Tools product of
Oracle ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2732 (A flaw was discovered in the way that the KVM hypervisor
handled instr ...)
- linux 5.5.13-1
NOTE:
https://git.kernel.org/linus/07721feee46b4b248402133228235318199b05ec
@@ -22820,7 +22820,7 @@ CVE-2020-2708
CVE-2020-2707 (Vulnerability in the Primavera P6 Enterprise Project Portfolio
Managem ...)
NOT-FOR-US: Oracle
CVE-2020-2706 (Vulnerability in the Primavera P6 Enterprise Project Portfolio
Managem ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2705 (Vulnerability in the Oracle VM VirtualBox product of Oracle
Virtualiza ...)
- virtualbox 6.1.2-dfsg-1
[jessie] - virtualbox <end-of-life> (DSA-3699-1)
@@ -23080,7 +23080,7 @@ CVE-2020-2596 (Vulnerability in the Oracle CRM
Technical Foundation product of O
CVE-2020-2595 (Vulnerability in the Oracle GraalVM Enterprise Edition product
of Orac ...)
NOT-FOR-US: Oracle
CVE-2020-2594 (Vulnerability in the Primavera P6 Enterprise Project Portfolio
Managem ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2593 (Vulnerability in the Java SE, Java SE Embedded product of
Oracle Java ...)
{DSA-4621-1 DSA-4605-1 DLA-2128-1}
- openjdk-13 13.0.2+8-1
@@ -23191,7 +23191,7 @@ CVE-2020-2555 (Vulnerability in the Oracle Coherence
product of Oracle Fusion Mi
CVE-2020-2554
RESERVED
CVE-2020-2553 (Vulnerability in the Oracle Knowledge product of Oracle
Knowledge (com ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2552 (Vulnerability in the Oracle WebLogic Server product of Oracle
Fusion M ...)
NOT-FOR-US: Oracle
CVE-2020-2551 (Vulnerability in the Oracle WebLogic Server product of Oracle
Fusion M ...)
@@ -23249,11 +23249,11 @@ CVE-2020-2526
CVE-2020-2525
RESERVED
CVE-2020-2524 (Vulnerability in the Oracle Knowledge product of Oracle
Knowledge (com ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2523
RESERVED
CVE-2020-2522 (Vulnerability in the Oracle Knowledge product of Oracle
Knowledge (com ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2521
RESERVED
CVE-2020-2520
@@ -23269,7 +23269,7 @@ CVE-2020-2516 (Vulnerability in the Core RDBMS
component of Oracle Database Serv
CVE-2020-2515 (Vulnerability in the Database Gateway for ODBC component of
Oracle Dat ...)
NOT-FOR-US: Oracle
CVE-2020-2514 (Vulnerability in the Oracle Application Express component of
Oracle Da ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2020-2513
RESERVED
CVE-2020-2512 (Vulnerability in the Database Gateway for ODBC component of
Oracle Dat ...)
@@ -25217,7 +25217,7 @@ CVE-2019-19502 (Code injection in pluginconfig.php in
Image Uploader and Browser
CVE-2019-19501 (VeraCrypt 1.24 allows Local Privilege Escalation during
execution of V ...)
NOT-FOR-US: VeraCrypt
CVE-2019-19500 (Matrix42 Workspace Management 9.1.2.2765 and below allows
stored XSS v ...)
- TODO: check
+ NOT-FOR-US: Matrix42 Workspace Management
CVE-2019-19499
RESERVED
CVE-2019-19498
@@ -25767,7 +25767,7 @@ CVE-2019-19391 (** DISPUTED ** In LuaJIT through 2.0.5,
as used in Moonjit befor
NOTE: Negligible security impact. The debug library is unsafe per se
and one is
NOTE: not supposed to release an application with the debug library.
CVE-2019-19390 (The Search parameter of the Software Catalogue section of
Matrix42 Wor ...)
- TODO: check
+ NOT-FOR-US: Matrix42 Workspace Management
CVE-2019-19389 (JetBrains Ktor framework before version 1.2.6 was vulnerable
to HTTP R ...)
NOT-FOR-US: JetBrains Ktor framework
CVE-2019-19388 (A cross-site scripting (XSS) vulnerability in
app/dialplans/dialplan_d ...)
@@ -26274,9 +26274,9 @@ CVE-2019-19303
CVE-2019-19302
RESERVED
CVE-2019-19301 (A vulnerability has been identified in SCALANCE X-200 switch
family (i ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2019-19300 (A vulnerability has been identified in KTK ATE530S (All
versions), SID ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2019-19299 (A vulnerability has been identified in SiNVR 3 Central Control
Server ...)
NOT-FOR-US: SiNVR 3 Central Control Server (CCS)
CVE-2019-19298 (A vulnerability has been identified in SiNVR 3 Central Control
Server ...)
@@ -27584,7 +27584,7 @@ CVE-2019-18824 (Barco ClickShare Button R9861500D01
devices before 1.9.0 have Mi
CVE-2019-18823
RESERVED
CVE-2019-18822 (A privilege escalation vulnerability in ZOOM Call Recording
6.3.1 allo ...)
- TODO: check
+ NOT-FOR-US: ZOOM Call Recording
CVE-2019-18821 (Eximious Logo Designer 3.82 has a User Mode Write AV starting
at ExiCu ...)
NOT-FOR-US: Eximious Logo Designer
CVE-2019-18820 (Eximious Logo Designer 3.82 has Heap Corruption starting at
ntdll!Rtlp ...)
@@ -28930,7 +28930,7 @@ CVE-2020-1096
CVE-2020-1095
RESERVED
CVE-2020-1094 (An elevation of privilege vulnerability exists when the Windows
Work F ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1093
RESERVED
CVE-2020-1092
@@ -29018,9 +29018,9 @@ CVE-2020-1052
CVE-2020-1051
RESERVED
CVE-2020-1050 (A cross site scripting vulnerability exists when Microsoft
Dynamics 36 ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1049 (A cross site scripting vulnerability exists when Microsoft
Dynamics 36 ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1048
RESERVED
CVE-2020-1047
@@ -29060,13 +29060,13 @@ CVE-2020-1031
CVE-2020-1030
RESERVED
CVE-2020-1029 (An elevation of privilege vulnerability exists when Connected
User Exp ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1028
RESERVED
CVE-2020-1027 (An elevation of privilege vulnerability exists in the way that
the Win ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1026 (A Security Feature Bypass vulnerability exists in the MSR
JavaScript C ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1025
RESERVED
CVE-2020-1024
@@ -29074,217 +29074,217 @@ CVE-2020-1024
CVE-2020-1023
RESERVED
CVE-2020-1022 (A remote code execution vulnerability exists in Microsoft
Dynamics Bus ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1021
RESERVED
CVE-2020-1020 (A remote code execution vulnerability exists in Microsoft
Windows when ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1019 (An elevation of privilege vulnerability exists in RMS Sharing
App for ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1018 (An information disclosure vulnerability exists when Microsoft
Dynamics ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1017 (An elevation of privilege vulnerability exists in the way the
Windows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1016 (An information disclosure vulnerability exists when the Windows
Push N ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1015 (An elevation of privilege vulnerability exists in the way that
the Use ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1014 (An elevation of privilege vulnerability exists in the Microsoft
Window ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1013
RESERVED
CVE-2020-1012
RESERVED
CVE-2020-1011 (An elevation of privilege vulnerability exists when the Windows
System ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1010
RESERVED
CVE-2020-1009 (An elevation of privilege vulnerability exists in the way that
the Mic ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1008 (A remote code execution vulnerability exists when the Windows
Jet Data ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1007 (An information disclosure vulnerability exists when the Windows
kernel ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1006 (An elevation of privilege vulnerability exists in the way the
Windows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1005 (An information disclosure vulnerability exists when the
Microsoft Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1004 (An elevation of privilege vulnerability exists when the Windows
Graphi ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1003 (An elevation of privilege vulnerability exists when the Windows
kernel ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1002 (An elevation of privilege vulnerability exists when the
MpSigStub.exe ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1001 (An elevation of privilege vulnerability exists in the way the
Windows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-1000 (An elevation of privilege vulnerability exists when the Windows
kernel ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0999 (A remote code execution vulnerability exists when the Windows
Jet Data ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0998
RESERVED
CVE-2020-0997
RESERVED
CVE-2020-0996 (An elevation of privilege vulnerability exists when the Windows
Update ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0995 (A remote code execution vulnerability exists when the Windows
Jet Data ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0994 (A remote code execution vulnerability exists when the Windows
Jet Data ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0993 (A denial of service vulnerability exists in Windows DNS when it
fails ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0992 (A remote code execution vulnerability exists when the Windows
Jet Data ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0991 (A remote code execution vulnerability exists in Microsoft
Office softw ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0990
RESERVED
CVE-2020-0989
RESERVED
CVE-2020-0988 (A remote code execution vulnerability exists when the Windows
Jet Data ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0987 (An information disclosure vulnerability exists when the
Microsoft Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0986
RESERVED
CVE-2020-0985 (An elevation of privilege vulnerability exists when the Windows
Update ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0984 (An elevation of privilege vulnerability exists when the
Microsoft Auto ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0983 (An elevation of privilege vulnerability exists when the Windows
Delive ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0982 (An information disclosure vulnerability exists when the
Microsoft Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0981 (A security feature bypass vulnerability exists when Windows
fails to p ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0980 (A remote code execution vulnerability exists in Microsoft Word
softwar ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0979 (A remote code execution vulnerability exists in Microsoft Excel
softwa ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0978 (A cross-site-scripting (XSS) vulnerability exists when
Microsoft Share ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0977 (A spoofing vulnerability exists when Microsoft SharePoint
Server does ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0976 (A spoofing vulnerability exists when Microsoft SharePoint
Server does ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0975 (A spoofing vulnerability exists when Microsoft SharePoint
Server does ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0974 (A remote code execution vulnerability exists in Microsoft
SharePoint w ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0973 (A cross-site-scripting (XSS) vulnerability exists when
Microsoft Share ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0972 (A spoofing vulnerability exists when Microsoft SharePoint
Server does ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0971 (A remote code execution vulnerability exists in Microsoft
SharePoint w ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0970 (A remote code execution vulnerability exists in the way that
the Chakr ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0969 (A remote code execution vulnerability exists in the way that
the Chakr ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0968 (A remote code execution vulnerability exists in the way that
the scrip ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0967 (A remote code execution vulnerability exists in the way that
the VBScr ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0966 (A remote code execution vulnerability exists in the way that
the VBScr ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0965 (A remoted code execution vulnerability exists in the way that
Microsof ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0964 (A remote code execution vulnerability exists in the way that
the Windo ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0963
RESERVED
CVE-2020-0962 (An information disclosure vulnerability exists when the win32k
compone ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0961 (A remote code execution vulnerability exists when the Microsoft
Office ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0960 (A remote code execution vulnerability exists when the Windows
Jet Data ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0959 (A remote code execution vulnerability exists when the Windows
Jet Data ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0958 (An elevation of privilege vulnerability exists in Windows when
the Win ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0957 (An elevation of privilege vulnerability exists in Windows when
the Win ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0956 (An elevation of privilege vulnerability exists in Windows when
the Win ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0955 (An information disclosure vulnerability exists when certain
central pr ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0954 (A cross-site-scripting (XSS) vulnerability exists when
Microsoft Share ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0953 (A remote code execution vulnerability exists when the Windows
Jet Data ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0952 (An information disclosure vulnerability exists when the Windows
GDI co ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0951
RESERVED
CVE-2020-0950 (A memory corruption vulnerability exists when Windows Media
Foundation ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0949 (A memory corruption vulnerability exists when Windows Media
Foundation ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0948 (A memory corruption vulnerability exists when Windows Media
Foundation ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0947 (An information disclosure vulnerability exists when Media
Foundation i ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0946 (An information disclosure vulnerability exists when Media
Foundation i ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0945 (An information disclosure vulnerability exists when Media
Foundation i ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0944 (An elevation of privilege vulnerability exists when Connected
User Exp ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0943 (An authentication bypass vulnerability exists in Microsoft
YourPhoneCo ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0942 (An elevation of privilege vulnerability exists when Connected
User Exp ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0941
RESERVED
CVE-2020-0940 (An elevation of privilege vulnerability exists in the way the
Windows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0939 (An information disclosure vulnerability exists when Media
Foundation i ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0938 (A remote code execution vulnerability exists in Microsoft
Windows when ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0937 (An information disclosure vulnerability exists when Media
Foundation i ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0936 (An elevation of privilege vulnerability exists when a Windows
schedule ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0935 (An elevation of privilege vulnerability exists when the
OneDrive for W ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0934 (An elevation of privilege vulnerability exists when the Windows
WpcDes ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0933 (A cross-site-scripting (XSS) vulnerability exists when
Microsoft Share ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0932 (A remote code execution vulnerability exists in Microsoft
SharePoint w ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0931 (A remote code execution vulnerability exists in Microsoft
SharePoint w ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0930 (A cross-site-scripting (XSS) vulnerability exists when
Microsoft Share ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0929 (A remote code execution vulnerability exists in Microsoft
SharePoint w ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0928
RESERVED
CVE-2020-0927 (A cross-site-scripting (XSS) vulnerability exists when
Microsoft Share ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0926 (A cross-site-scripting (XSS) vulnerability exists when
Microsoft Share ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0925 (A cross-site-scripting (XSS) vulnerability exists when
Microsoft Share ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0924 (A cross-site-scripting (XSS) vulnerability exists when
Microsoft Share ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0923 (A cross-site-scripting (XSS) vulnerability exists when
Microsoft Share ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0922
RESERVED
CVE-2020-0921
RESERVED
CVE-2020-0920 (A remote code execution vulnerability exists in Microsoft
SharePoint w ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0919 (An elevation of privilege vulnerability exists in Remote
Desktop App f ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0918 (An elevation of privilege vulnerability exists when Windows
Hyper-V on ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0917 (An elevation of privilege vulnerability exists when Windows
Hyper-V on ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0916
RESERVED
CVE-2020-0915
@@ -29292,21 +29292,21 @@ CVE-2020-0915
CVE-2020-0914
RESERVED
CVE-2020-0913 (An elevation of privilege vulnerability exists when the Windows
kernel ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0912
RESERVED
CVE-2020-0911
RESERVED
CVE-2020-0910 (A remote code execution vulnerability exists when Windows
Hyper-V on a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0909
RESERVED
CVE-2020-0908
RESERVED
CVE-2020-0907 (A remote code execution vulnerability exists in the way that
Microsoft ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0906 (A remote code execution vulnerability exists in Microsoft Excel
softwa ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0905 (An remote code execution vulnerability exists in Microsoft
Dynamics Bu ...)
NOT-FOR-US: Microsoft
CVE-2020-0904
@@ -29318,9 +29318,9 @@ CVE-2020-0902 (An elevation of privilege vulnerability
exists in Service Fabric
CVE-2020-0901
RESERVED
CVE-2020-0900 (An elevation of privilege vulnerability exists when the Visual
Studio ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0899 (An elevation of privilege vulnerability exists when Microsoft
Visual S ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0898 (An elevation of privilege vulnerability exists when the Windows
Graphi ...)
NOT-FOR-US: Microsoft
CVE-2020-0897 (An elevation of privilege vulnerability exists when the Windows
Work F ...)
@@ -29328,7 +29328,7 @@ CVE-2020-0897 (An elevation of privilege vulnerability
exists when the Windows W
CVE-2020-0896 (An elevation of privilege vulnerability exists when Windows
improperly ...)
NOT-FOR-US: Microsoft
CVE-2020-0895 (A remote code execution vulnerability exists in the way that
the VBScr ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0894 (A cross-site-scripting (XSS) vulnerability exists when
Microsoft Share ...)
NOT-FOR-US: Microsoft
CVE-2020-0893 (A cross-site-scripting (XSS) vulnerability exists when
Microsoft Share ...)
@@ -29340,9 +29340,9 @@ CVE-2020-0891 (This vulnerability is caused when
SharePoint Server does not prop
CVE-2020-0890
RESERVED
CVE-2020-0889 (A remote code execution vulnerability exists when the Windows
Jet Data ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0888 (An elevation of privilege vulnerability exists when DirectX
improperly ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0887 (An elevation of privilege vulnerability exists in Windows when
the Win ...)
NOT-FOR-US: Microsoft
CVE-2020-0886
@@ -29448,7 +29448,7 @@ CVE-2020-0837
CVE-2020-0836
RESERVED
CVE-2020-0835 (An elevation of privilege vulnerability exists when Windows
Defender a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0834 (An elevation of privilege vulnerability exists when Windows
improperly ...)
NOT-FOR-US: Microsoft
CVE-2020-0833 (A remote code execution vulnerability exists in the way that
the scrip ...)
@@ -29476,7 +29476,7 @@ CVE-2020-0823 (A remote code execution vulnerability
exists in the way that the
CVE-2020-0822 (An elevation of privilege vulnerability exists when the Windows
Langua ...)
NOT-FOR-US: Microsoft
CVE-2020-0821 (An information disclosure vulnerability exists when the Windows
kernel ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0820 (An information disclosure vulnerability exists when Media
Foundation i ...)
NOT-FOR-US: Microsoft
CVE-2020-0819 (An elevation of privilege vulnerability exists when the Windows
Device ...)
@@ -29530,7 +29530,7 @@ CVE-2020-0796 (A remote code execution vulnerability
exists in the way that the
CVE-2020-0795 (This vulnerability is caused when SharePoint Server does not
properly ...)
NOT-FOR-US: Microsoft
CVE-2020-0794 (A denial of service vulnerability exists when Windows
improperly handl ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0793 (An elevation of privilege vulnerability exists when the
Diagnostics Hu ...)
NOT-FOR-US: Microsoft
CVE-2020-0792 (An elevation of privilege vulnerability exists when the Windows
Graphi ...)
@@ -29550,7 +29550,7 @@ CVE-2020-0786 (A denial of service vulnerability exists
when the Windows Tile Ob
CVE-2020-0785 (An elevation of privilege vulnerability exists when the Windows
User P ...)
NOT-FOR-US: Microsoft
CVE-2020-0784 (An elevation of privilege vulnerability exists when DirectX
improperly ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0783 (An elevation of privilege vulnerability exists when the Windows
Univer ...)
NOT-FOR-US: Microsoft
CVE-2020-0782
@@ -29598,7 +29598,7 @@ CVE-2020-0762 (An elevation of privilege vulnerability
exists when Windows Defen
CVE-2020-0761
RESERVED
CVE-2020-0760 (A remote code execution vulnerability exists when Microsoft
Office imp ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0759 (A remote code execution vulnerability exists in Microsoft Excel
softwa ...)
NOT-FOR-US: Microsoft
CVE-2020-0758 (An elevation of privilege vulnerability exists when Azure
DevOps Serve ...)
@@ -29720,7 +29720,7 @@ CVE-2020-0701 (An elevation of privilege vulnerability
exists in the way that th
CVE-2020-0700 (A Cross-site Scripting (XSS) vulnerability exists when Azure
DevOps Se ...)
NOT-FOR-US: Microsoft
CVE-2020-0699 (An information disclosure vulnerability exists when the win32k
compone ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0698 (An information disclosure vulnerability exists when the
Telephony Serv ...)
NOT-FOR-US: Microsoft
CVE-2020-0697 (An elevation of privilege vulnerability exists in Microsoft
Office OLi ...)
@@ -29744,7 +29744,7 @@ CVE-2020-0689 (A security feature bypass vulnerability
exists in secure boot, ak
CVE-2020-0688 (A remote code execution vulnerability exists in Microsoft
Exchange sof ...)
NOT-FOR-US: Microsoft
CVE-2020-0687 (A remote code execution vulnerability exists when the Windows
font lib ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2020-0686 (An elevation of privilege vulnerability exists in the Windows
Installe ...)
NOT-FOR-US: Microsoft
CVE-2020-0685 (An elevation of privilege vulnerability exists when Windows
improperly ...)
@@ -35927,7 +35927,7 @@ CVE-2019-16881 (An issue was discovered in the
portaudio-rs crate through 0.3.1
CVE-2019-16880 (An issue was discovered in the linea crate through 0.9.4 for
Rust. The ...)
NOT-FOR-US: Rust linea crate
CVE-2019-16879 (The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70,
with fir ...)
- TODO: check
+ NOT-FOR-US: Synergy Systems & Solutions (SSS)
CVE-2019-16878 (Portainer before 1.22.1 has XSS (issue 2 of 2). ...)
NOT-FOR-US: Portainer
CVE-2019-16877 (Portainer before 1.22.1 has Incorrect Access Control (issue 4
of 4). ...)
@@ -44422,7 +44422,7 @@ CVE-2019-14328 (The Simple Membership plugin before
3.8.5 for WordPress has CSRF
CVE-2019-14327 (A CSRF vulnerability in Settings form in the Custom Simple Rss
plugin ...)
NOT-FOR-US: Custom Simple Rss plugin for WordPress
CVE-2019-14326 (An issue was discovered in AndyOS Andy versions up to
46.11.113. By de ...)
- TODO: check
+ NOT-FOR-US: AndyOS Andy
CVE-2019-14325
RESERVED
CVE-2019-14324
@@ -54899,7 +54899,7 @@ CVE-2019-10941
CVE-2019-10940 (A vulnerability has been identified in SINEMA Server (All
versions < ...)
NOT-FOR-US: Siemens
CVE-2019-10939 (A vulnerability has been identified in TIM 3V-IE (incl. SIPLUS
NET var ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2019-10938 (A vulnerability has been identified in SIPROTEC 5 devices with
CPU var ...)
NOT-FOR-US: Ethernet plug-in communication modules for SIPROTEC 5
devices
CVE-2019-10937 (A vulnerability has been identified in SIMATIC TDC CP51M1 (All
version ...)
@@ -78019,7 +78019,7 @@ CVE-2019-2882
CVE-2019-2881
RESERVED
CVE-2019-2880 (Vulnerability in the Oracle Retail Store Inventory Management
product ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2019-2879 (Vulnerability in the MySQL Server component of Oracle MySQL
(subcompon ...)
- mysql-5.7 <not-affected> (Only affects MySQL 8)
CVE-2019-2878 (Vulnerability in the Sun ZFS Storage Appliance Kit (AK)
component of O ...)
@@ -80944,7 +80944,7 @@ CVE-2019-1868 (A vulnerability in the web-based
management interface of Cisco We
CVE-2019-1867 (A vulnerability in the REST API of Cisco Elastic Services
Controller ( ...)
NOT-FOR-US: Cisco
CVE-2019-1866 (Cisco Webex Business Suite before 39.1.0 contains a
vulnerability that ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2019-1865 (A vulnerability in the web-based management interface of Cisco
Integra ...)
NOT-FOR-US: Cisco
CVE-2019-1864 (A vulnerability in the web-based management interface of Cisco
Integra ...)
@@ -121582,7 +121582,7 @@ CVE-2018-6404
CVE-2018-6403
RESERVED
CVE-2018-6402 (Ecobee Ecobee4 4.2.0.171 devices can be forced to
deauthenticate and c ...)
- TODO: check
+ NOT-FOR-US: Ecobee Ecobee4 4.2.0.171 devices
CVE-2018-6401 (Meross MSS110 devices before 1.1.24 contain a TELNET listener
providin ...)
NOT-FOR-US: Meross
CVE-2018-6400 (Kingsoft WPS Office Free 10.2.0.5978 allows local users to gain
privil ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e92363ce1baf536db07160a36ef64f3a45afc03
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e92363ce1baf536db07160a36ef64f3a45afc03
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
