Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
5e5cd48c by security tracker role at 2020-10-06T20:10:25+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,95 @@
+CVE-2020-26607 (An issue was discovered in TimaService on Samsung mobile 
devices with  ...)
+       TODO: check
+CVE-2020-26606 (An issue was discovered on Samsung mobile devices with O(8.x), 
P(9.0), ...)
+       TODO: check
+CVE-2020-26605 (An issue was discovered on Samsung mobile devices with Q(10.0) 
and R(1 ...)
+       TODO: check
+CVE-2020-26604 (An issue was discovered in SystemUI on Samsung mobile devices 
with O(8 ...)
+       TODO: check
+CVE-2020-26603 (An issue was discovered on Samsung mobile devices with O(8.x), 
P(9.0), ...)
+       TODO: check
+CVE-2020-26602 (An issue was discovered in EthernetNetwork on Samsung mobile 
devices w ...)
+       TODO: check
+CVE-2020-26601 (An issue was discovered in DirEncryptService on Samsung mobile 
devices ...)
+       TODO: check
+CVE-2020-26600 (An issue was discovered on Samsung mobile devices with Q(10.0) 
softwar ...)
+       TODO: check
+CVE-2020-26599 (An issue was discovered on Samsung mobile devices with Q(10.0) 
softwar ...)
+       TODO: check
+CVE-2020-26598 (An issue was discovered on LG mobile devices with Android OS 
8.0, 8.1, ...)
+       TODO: check
+CVE-2020-26597 (An issue was discovered on LG mobile devices with Android OS 
9.0 and 1 ...)
+       TODO: check
+CVE-2020-26596
+       RESERVED
+CVE-2020-26595
+       RESERVED
+CVE-2020-26594
+       RESERVED
+CVE-2020-26593
+       RESERVED
+CVE-2020-26592
+       RESERVED
+CVE-2020-26591
+       RESERVED
+CVE-2020-26590
+       RESERVED
+CVE-2020-26589
+       RESERVED
+CVE-2020-26588
+       RESERVED
+CVE-2020-26587
+       RESERVED
+CVE-2020-26586
+       RESERVED
+CVE-2020-26585
+       RESERVED
+CVE-2020-26584
+       RESERVED
+CVE-2020-26583
+       RESERVED
+CVE-2020-26582 (D-Link DAP-1360U before 3.0.1 devices allow remote 
authenticated users ...)
+       TODO: check
+CVE-2020-26581
+       RESERVED
+CVE-2020-26580
+       RESERVED
+CVE-2020-26579
+       RESERVED
+CVE-2020-26578
+       RESERVED
+CVE-2020-26577
+       RESERVED
+CVE-2020-26576
+       RESERVED
+CVE-2020-26575 (In Wireshark through 3.2.7, the Facebook Zero Protocol (aka 
FBZERO) di ...)
+       TODO: check
+CVE-2020-26574 (** UNSUPPORTED WHEN ASSIGNED ** Leostream Connection Broker 
8.2.x is a ...)
+       TODO: check
+CVE-2020-26573
+       RESERVED
+CVE-2019-20932
+       RESERVED
+CVE-2019-20931
+       RESERVED
+CVE-2019-20930
+       RESERVED
+CVE-2019-20929
+       RESERVED
+CVE-2019-20928
+       RESERVED
+CVE-2019-20927
+       RESERVED
+CVE-2019-20926
+       RESERVED
+CVE-2019-20925
+       RESERVED
+CVE-2019-20924
+       RESERVED
+CVE-2019-20923
+       RESERVED
+CVE-1999-0199 (manual/search.texi in the GNU C Library (aka glibc) before 2.2 
lacks a ...)
+       TODO: check
 CVE-2020-26572 (The TCOS smart card software driver in OpenSC before 
0.21.0-rc1 has a  ...)
        - opensc <unfixed>
        NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22967
@@ -1243,10 +1335,10 @@ CVE-2020-25989
        RESERVED
 CVE-2020-25988
        RESERVED
-CVE-2020-25987
-       RESERVED
-CVE-2020-25986
-       RESERVED
+CVE-2020-25987 (MonoCMS Blog version as of 29-09-2020 stores hard-coded admin 
hashes i ...)
+       TODO: check
+CVE-2020-25986 (Cross Site Request Forgery (CSRF) vulnerability in MonoCMS 
Blog versio ...)
+       TODO: check
 CVE-2020-25985
        RESERVED
 CVE-2020-25984
@@ -1489,8 +1581,7 @@ CVE-2020-25868
        RESERVED
 CVE-2020-25867
        RESERVED
-CVE-2020-25866
-       RESERVED
+CVE-2020-25866 (In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP 
protocol dis ...)
        - wireshark 3.2.7-1
        [buster] - wireshark <not-affected> (Vulnerable code not present)
        [stretch] - wireshark <not-affected> (Vulnerable code not present)
@@ -1500,15 +1591,13 @@ CVE-2020-25865
        RESERVED
 CVE-2020-25864
        RESERVED
-CVE-2020-25863
-       RESERVED
+CVE-2020-25863 (In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 
2.6.20, the ...)
        - wireshark 3.2.7-1
        [buster] - wireshark <postponed> (Minor issue, can be fixed along in 
next DSA)
        [stretch] - wireshark <postponed> (Minor issue, can be fixed along in 
next DLA)
        NOTE: https://www.wireshark.org/security/wnpa-sec-2020-11.html
        NOTE: https://gitlab.com/wireshark/wireshark/-/issues/16741
-CVE-2020-25862
-       RESERVED
+CVE-2020-25862 (In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 
2.6.20, the ...)
        - wireshark 3.2.7-1
        [buster] - wireshark <postponed> (Minor issue, can be fixed along in 
next DSA)
        [stretch] - wireshark <postponed> (Minor issue, can be fixed along in 
next DLA)
@@ -1650,10 +1739,10 @@ CVE-2020-25805
        RESERVED
 CVE-2020-25804
        RESERVED
-CVE-2020-25803
-       RESERVED
-CVE-2020-25802
-       RESERVED
+CVE-2020-25803 (Improper Control of Dynamically-Managed Code Resources 
vulnerability i ...)
+       TODO: check
+CVE-2020-25802 (Improper Control of Dynamically-Managed Code Resources 
vulnerability i ...)
+       TODO: check
 CVE-2020-25801
        RESERVED
 CVE-2020-25800
@@ -1789,15 +1878,13 @@ CVE-2020-25745
        RESERVED
 CVE-2020-25744 (SaferVPN before 5.0.3.3 on Windows could allow low-privileged 
users to ...)
        NOT-FOR-US: SaferVPN
-CVE-2020-25743 [ide: null pointer dereference while cancelling i/o operation]
-       RESERVED
+CVE-2020-25743 (hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer 
dereferen ...)
        - qemu <unfixed> (bug #970940)
        [buster] - qemu <postponed> (Fix along in next qemu DSA)
        [stretch] - qemu <postponed> (Fix along in future DLA)
        NOTE: 
https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg01568.html
        NOTE: 
https://ruhr-uni-bochum.sciebo.de/s/NNWP2GfwzYKeKwE?path=%2Fide_nullptr1
-CVE-2020-25742 [scsi: lsi: null pointer dereference during memory move]
-       RESERVED
+CVE-2020-25742 (pci_change_irq_level in hw/pci/pci.c in QEMU before 5.1.1 has 
a NULL p ...)
        - qemu <unfixed> (bug #971390)
        [buster] - qemu <postponed> (Fix along in next qemu DSA)
        [stretch] - qemu <postponed> (Fix along in future DLA)
@@ -2005,16 +2092,14 @@ CVE-2020-25646
        RESERVED
 CVE-2020-25645
        RESERVED
-CVE-2020-25644
-       RESERVED
-CVE-2020-25643 [hdlc_ppp: add range checks in ppp_cp_parse_cr()]
-       RESERVED
+CVE-2020-25644 (A memory leak flaw was found in WildFly OpenSSL in versions 
prior to 1 ...)
+       TODO: check
+CVE-2020-25643 (A memory corruption flaw in the Linux kernel in versions 
before 5.9-rc ...)
        - linux <unfixed>
        NOTE: 
https://git.kernel.org/linus/66d42ed8b25b64eb63111a2b8582c5afc8bf1105
 CVE-2020-25642
        RESERVED
-CVE-2020-25641
-       RESERVED
+CVE-2020-25641 (A flaw was found in the Linux kernel's implementation of 
biovecs in ve ...)
        {DLA-2385-1}
        - linux 5.8.10-1
        [buster] - linux 4.19.146-1
@@ -2030,8 +2115,7 @@ CVE-2020-25639 [NULL pointer dereference via nouveau 
ioctl can lead to DoS]
        NOTE: 
https://lists.freedesktop.org/archives/nouveau/2020-August/036682.html
 CVE-2020-25638
        RESERVED
-CVE-2020-25637 [double free in qemuAgentGetInterfaces() in qemu_agent.c]
-       RESERVED
+CVE-2020-25637 (A double free memory issue was found to occur in the libvirt 
API, in v ...)
        {DLA-2395-1}
        - libvirt <unfixed> (bug #971555)
        NOTE: Introduced by: 
https://libvirt.org/git/?p=libvirt.git;a=commit;h=0977b8aa071de550e1a013d35e2c72615e65d520
 (v1.2.14-rc1)
@@ -2110,8 +2194,7 @@ CVE-2014-10402 (An issue was discovered in the DBI module 
through 1.643 for Perl
        [buster] - libdbi-perl <postponed> (Revisit when fixed upstream)
        [stretch] - libdbi-perl <postponed> (Revisit when fixed upstream)
        NOTE: https://rt.cpan.org/Public/Bug/Display.html?id=99508#txn-1911590
-CVE-2020-25613 [Potential HTTP Request Smuggling Vulnerability in WEBrick]
-       RESERVED
+CVE-2020-25613 (An issue was discovered in Ruby through 2.5.8, 2.6.x through 
2.6.6, an ...)
        {DLA-2392-1 DLA-2391-1}
        - ruby2.7 2.7.1-4
        - ruby2.5 <removed>
@@ -3888,8 +3971,8 @@ CVE-2020-24809
        RESERVED
 CVE-2020-24808
        RESERVED
-CVE-2020-24807
-       RESERVED
+CVE-2020-24807 (** UNSUPPORTED WHEN ASSIGNED ** The socket.io-file package 
through 2.0 ...)
+       TODO: check
 CVE-2020-24806
        RESERVED
 CVE-2020-24805
@@ -5183,18 +5266,18 @@ CVE-2020-24221
        RESERVED
 CVE-2020-24220 (ShopXO v1.8.1 has a command execution vulnerability. Attackers 
can use ...)
        NOT-FOR-US: ShopXO
-CVE-2020-24219
-       RESERVED
-CVE-2020-24218
-       RESERVED
-CVE-2020-24217
-       RESERVED
-CVE-2020-24216
-       RESERVED
-CVE-2020-24215
-       RESERVED
-CVE-2020-24214
-       RESERVED
+CVE-2020-24219 (An issue was discovered on URayTech IPTV/H.264/H.265 video 
encoders th ...)
+       TODO: check
+CVE-2020-24218 (An issue was discovered on URayTech IPTV/H.264/H.265 video 
encoders th ...)
+       TODO: check
+CVE-2020-24217 (An issue was discovered in the box application on HiSilicon 
based IPTV ...)
+       TODO: check
+CVE-2020-24216 (An issue was discovered in the box application on HiSilicon 
based IPTV ...)
+       TODO: check
+CVE-2020-24215 (An issue was discovered in the box application on HiSilicon 
based IPTV ...)
+       TODO: check
+CVE-2020-24214 (An issue was discovered in the box application on HiSilicon 
based IPTV ...)
+       TODO: check
 CVE-2020-24213 (An integer overflow was discovered in YGOPro ygocore v13.51. 
Attackers ...)
        NOT-FOR-US: ygocore
 CVE-2020-24212
@@ -5957,8 +6040,8 @@ CVE-2020-23834 (Insecure Service File Permissions in the 
bd service in Real Time
        NOT-FOR-US: Real Time Logic BarracudaDrive
 CVE-2020-23833 (Projectworlds House Rental v1.0 suffers from an 
unauthenticated SQL In ...)
        NOT-FOR-US: Projectworlds House Rental
-CVE-2020-23832
-       RESERVED
+CVE-2020-23832 (A Persistent Cross-Site Scripting (XSS) vulnerability in 
message_admin ...)
+       TODO: check
 CVE-2020-23831 (A Reflected Cross-Site Scripting (XSS) vulnerability in the 
index.php  ...)
        NOT-FOR-US: SourceCodester Stock Management System
 CVE-2020-23830 (A Cross-Site Request Forgery (CSRF) vulnerability in 
changeUsername.ph ...)
@@ -21227,8 +21310,8 @@ CVE-2020-16269 (radare2 4.5.0 misparses DWARF 
information in executable files, c
        NOTE: https://github.com/radareorg/radare2/issues/17383
 CVE-2020-16268
        RESERVED
-CVE-2020-16267
-       RESERVED
+CVE-2020-16267 (Zoho ManageEngine Applications Manager version 14740 and prior 
allows  ...)
+       TODO: check
 CVE-2020-16266 (An XSS issue was discovered in MantisBT before 2.24.2. 
Improper escapi ...)
        - mantis <removed>
 CVE-2015-9549 (A reflected Cross-site Scripting (XSS) vulnerability exists in 
OcPorta ...)
@@ -21987,8 +22070,8 @@ CVE-2020-15929
        RESERVED
 CVE-2020-15928
        RESERVED
-CVE-2020-15927
-       RESERVED
+CVE-2020-15927 (Zoho ManageEngine Applications Manager version 14740 and prior 
allows  ...)
+       TODO: check
 CVE-2020-15926 (Rocket.Chat through 3.4.2 allows XSS where an attacker can 
send a spec ...)
        NOT-FOR-US: Rocket.Chat
 CVE-2020-15925 (A SQL injection vulnerability at a tpf URI in Loway 
QueueMetrics befor ...)
@@ -22904,8 +22987,7 @@ CVE-2020-15600 (An issue was discovered in CMSUno 
before 1.6.1. uno.php allows C
        NOT-FOR-US: CMSUno
 CVE-2020-15599 (Victor CMS through 2019-02-28 allows XSS via the register.php 
user_fir ...)
        NOT-FOR-US: Victor CMS
-CVE-2020-15598
-       RESERVED
+CVE-2020-15598 (** DISPUTED ** Trustwave ModSecurity 3.x through 3.0.4 allows 
denial o ...)
        {DSA-4765-1}
        - modsecurity 3.0.4-2
        NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1879588
@@ -23783,8 +23865,8 @@ CVE-2020-15241
        RESERVED
 CVE-2020-15240
        RESERVED
-CVE-2020-15239
-       RESERVED
+CVE-2020-15239 (In xmpp-http-upload before version 0.4.0, when the GET method 
is attac ...)
+       TODO: check
 CVE-2020-15238
        RESERVED
 CVE-2020-15237 (In Shrine before version 3.3.0, when using the 
`derivation_endpoint` p ...)
@@ -23834,8 +23916,8 @@ CVE-2020-15216 (In goxmldsig (XML Digital Signatures 
implemented in pure Go) bef
        - golang-github-russellhaering-goxmldsig <unfixed> (bug #971615)
        NOTE: 
https://github.com/russellhaering/goxmldsig/security/advisories/GHSA-q547-gmf8-8jr7
        NOTE: 
https://github.com/russellhaering/goxmldsig/commit/f6188febf0c29d7ffe26a0436212b19cb9615e64
-CVE-2020-15215
-       RESERVED
+CVE-2020-15215 (Electron before versions 11.0.0-beta.6, 10.1.2, 9.3.1 or 8.5.2 
is vuln ...)
+       TODO: check
 CVE-2020-15214 (In TensorFlow Lite before versions 2.2.1 and 2.3.1, models 
using segme ...)
        - tensorflow <itp> (bug #804612)
 CVE-2020-15213 (In TensorFlow Lite before versions 2.2.1 and 2.3.1, models 
using segme ...)
@@ -23916,8 +23998,8 @@ CVE-2020-15176
        RESERVED
 CVE-2020-15175
        RESERVED
-CVE-2020-15174
-       RESERVED
+CVE-2020-15174 (In Electron before versions 11.0.0-beta.1, 10.0.1, 9.3.0 or 
8.5.1 the  ...)
+       TODO: check
 CVE-2020-15173 (In ACCEL-PPP (an implementation of PPTP/PPPoE/L2TP/SSTP), 
there is a b ...)
        NOT-FOR-US: ACCEL-PPP
 CVE-2020-15172 (The Act module for Red Discord Bot before commit 6b9f3b86 is 
vulnerabl ...)
@@ -28883,12 +28965,12 @@ CVE-2020-13347
        RESERVED
 CVE-2020-13346
        RESERVED
-CVE-2020-13345
-       RESERVED
+CVE-2020-13345 (An issue has been discovered in GitLab affecting all versions 
starting ...)
+       TODO: check
 CVE-2020-13344
        RESERVED
-CVE-2020-13343
-       RESERVED
+CVE-2020-13343 (An issue has been discovered in GitLab affecting all versions 
starting ...)
+       TODO: check
 CVE-2020-13342
        RESERVED
 CVE-2020-13341
@@ -28911,8 +28993,7 @@ CVE-2020-13335
 CVE-2020-13334
        RESERVED
        - gitlab <unfixed>
-CVE-2020-13333
-       RESERVED
+CVE-2020-13333 (A potential DOS vulnerability was discovered in GitLab 
versions 13.1,  ...)
        - gitlab <unfixed>
 CVE-2020-13332
        RESERVED
@@ -41931,10 +42012,10 @@ CVE-2019-20449
        RESERVED
 CVE-2019-20448
        RESERVED
-CVE-2020-8782
-       RESERVED
-CVE-2020-8781
-       RESERVED
+CVE-2020-8782 (Unauthenticated RPC server on ALEOS before 4.4.9, 4.9.5, and 
4.14.0 al ...)
+       TODO: check
+CVE-2020-8781 (Lack of input sanitization in UpdateRebootMgr service of ALEOS 
4.11 an ...)
+       TODO: check
 CVE-2020-8780
        RESERVED
 CVE-2020-8779
@@ -44546,12 +44627,12 @@ CVE-2020-7743
        RESERVED
 CVE-2020-7742
        RESERVED
-CVE-2020-7741
-       RESERVED
-CVE-2020-7740
-       RESERVED
-CVE-2020-7739
-       RESERVED
+CVE-2020-7741 (This affects the package hellojs before 1.18.6. The code get 
the param ...)
+       TODO: check
+CVE-2020-7740 (This affects all versions of package node-pdf-generator. Due to 
lack o ...)
+       TODO: check
+CVE-2020-7739 (This affects all versions of package phantomjs-seo. It is 
possible for ...)
+       TODO: check
 CVE-2020-7738 (All versions of package shiba are vulnerable to Arbitrary Code 
Executi ...)
        TODO: check
 CVE-2020-7737 (All versions of package safetydance are vulnerable to Prototype 
Pollut ...)
@@ -45173,10 +45254,10 @@ CVE-2020-7468
        RESERVED
 CVE-2020-7467
        RESERVED
-CVE-2020-7466
-       RESERVED
-CVE-2020-7465
-       RESERVED
+CVE-2020-7466 (The PPP implementation of MPD before 5.9 allows a remote 
attacker who  ...)
+       TODO: check
+CVE-2020-7465 (The L2TP implementation of MPD before 5.9 allows a remote 
attacker who ...)
+       TODO: check
 CVE-2020-7464
        RESERVED
 CVE-2020-7463
@@ -45687,7 +45768,7 @@ CVE-2020-7234 (Ruckus ZoneFlex R310 104.0.0.0.1347 
devices allow Stored XSS via
        NOT-FOR-US: Ruckus ZoneFlex R310 devices
 CVE-2020-7233 (KMS Controls BAC-A1616BC BACnet devices have a cleartext 
password of s ...)
        NOT-FOR-US: KMS Controls BAC-A1616BC BACnet devices
-CVE-2020-7232 (Evoko Home 1.31 devices allow remote attackers to obtain 
sensitive inf ...)
+CVE-2020-7232 (Evoko Home devices 1.31 through 1.37 allow remote attackers to 
obtain  ...)
        NOT-FOR-US: Evoko Home devices
 CVE-2020-7231 (Evoko Home 1.31 devices provide different error messages for 
failed lo ...)
        NOT-FOR-US: Evoko Home devices
@@ -52658,8 +52739,8 @@ CVE-2020-4530 (IBM Business Automation Workflow C.D.0 
and IBM Business Process M
        NOT-FOR-US: IBM
 CVE-2020-4529 (IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to 
server si ...)
        NOT-FOR-US: IBM
-CVE-2020-4528
-       RESERVED
+CVE-2020-4528 (IBM MQ Appliance (IBM DataPower Gateway 10.0.0.0 and 2018.4.1.0 
throug ...)
+       TODO: check
 CVE-2020-4527 (IBM Planning Analytics 2.0 could allow a remote attacker to 
obtain sen ...)
        NOT-FOR-US: IBM
 CVE-2020-4526 (IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to 
cross-sit ...)
@@ -60157,20 +60238,20 @@ CVE-2020-1909
        RESERVED
 CVE-2020-1908
        RESERVED
-CVE-2020-1907
-       RESERVED
-CVE-2020-1906
-       RESERVED
-CVE-2020-1905
-       RESERVED
-CVE-2020-1904
-       RESERVED
-CVE-2020-1903
-       RESERVED
-CVE-2020-1902
-       RESERVED
-CVE-2020-1901
-       RESERVED
+CVE-2020-1907 (A stack overflow in WhatsApp for Android prior to v2.20.196.16, 
WhatsA ...)
+       TODO: check
+CVE-2020-1906 (A buffer overflow in WhatsApp for Android prior to v2.20.130 
and Whats ...)
+       TODO: check
+CVE-2020-1905 (Media ContentProvider URIs used for opening attachments in 
other apps  ...)
+       TODO: check
+CVE-2020-1904 (A path validation issue in WhatsApp for iOS prior to v2.20.61 
and What ...)
+       TODO: check
+CVE-2020-1903 (An issue when unzipping docx, pptx, and xlsx documents in 
WhatsApp for ...)
+       TODO: check
+CVE-2020-1902 (A user running a quick search on a highly forwarded message on 
WhatsAp ...)
+       TODO: check
+CVE-2020-1901 (Receiving a large text message containing URLs in WhatsApp for 
iOS pri ...)
+       TODO: check
 CVE-2020-1900
        RESERVED
 CVE-2020-1899
@@ -61636,8 +61717,8 @@ CVE-2019-19202 (In Vtiger 7.x before 7.2.0, the My 
Preferences saving functional
        NOT-FOR-US: Vtiger CRM
 CVE-2019-19201
        RESERVED
-CVE-2019-19200
-       RESERVED
+CVE-2019-19200 (REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to 
access t ...)
+       TODO: check
 CVE-2019-19199 (REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session 
Expiratio ...)
        NOT-FOR-US: REDDOXX MailDepot
 CVE-2019-19198 (The Scoutnet Kalender plugin 1.1.0 for WordPress allows XSS. 
...)
@@ -107563,8 +107644,8 @@ CVE-2019-4727
        RESERVED
 CVE-2019-4726 (IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 
5.2.6.5 i ...)
        NOT-FOR-US: IBM
-CVE-2019-4725
-       RESERVED
+CVE-2019-4725 (IBM Security Access Manager Appliance 9.0 is vulnerable to 
cross-site  ...)
+       TODO: check
 CVE-2019-4724
        RESERVED
 CVE-2019-4723
@@ -108361,10 +108442,10 @@ CVE-2019-4328
        RESERVED
 CVE-2019-4327 ("HCL AppScan Enterprise uses hard-coded credentials which can 
be explo ...)
        NOT-FOR-US: HCL AppScan Enterprise
-CVE-2019-4326
-       RESERVED
-CVE-2019-4325
-       RESERVED
+CVE-2019-4326 ("HCL AppScan Enterprise security rules update administration 
section o ...)
+       TODO: check
+CVE-2019-4325 ("HCL AppScan Enterprise makes use of broken or risky 
cryptographic alg ...)
+       TODO: check
 CVE-2019-4324 ("HCL AppScan Enterprise is susceptible to Cross-Site Scripting 
while i ...)
        NOT-FOR-US: HCL
 CVE-2019-4323 ("HCL AppScan Enterprise advisory API documentation is 
susceptible to c ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5e5cd48c004be135ea68c5d98299aa316d84ac34

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5e5cd48c004be135ea68c5d98299aa316d84ac34
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to