Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ab9bb159 by Moritz Muehlenhoff at 2020-10-19T16:34:25+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -46026,7 +46026,7 @@ CVE-2020-7746
CVE-2020-7745
RESERVED
CVE-2020-7744 (This affects all versions of package com.mintegral.msdk:alphab.
The An ...)
- TODO: check
+ NOT-FOR-US: com.mintegral.msdk:alphab
CVE-2020-7743 (The package mathjs before 7.5.1 are vulnerable to Prototype
Pollution ...)
NOT-FOR-US: Node mathjs
CVE-2020-7742 (This affects the package simpl-schema before 1.10.2. ...)
@@ -56404,7 +56404,7 @@ CVE-2019-19886 (Trustwave ModSecurity 3.0.0 through
3.0.3 allows an attacker to
NOTE: https://github.com/SpiderLabs/ModSecurity/pull/2202
NOTE:
https://github.com/SpiderLabs/ModSecurity/commit/7ba77631f9a37e0680d23ee57c455c6a35c65cb9
CVE-2019-19885 (In Bender COMTRAXX, user authorization is validated for most,
but not ...)
- TODO: check
+ NOT-FOR-US: Bender COMTRAXX
CVE-2019-19884
RESERVED
CVE-2019-19883
@@ -61628,7 +61628,7 @@ CVE-2019-19515 (Ayision Ays-WR01 v28K.RPT.20161224
devices allow stored XSS in w
CVE-2019-19514 (Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in
basic r ...)
NOT-FOR-US: Ayision
CVE-2019-19513 (The BASSMIDI plugin 2.4.12.1 for Un4seen BASS Audio Library on
Windows ...)
- TODO: check
+ NOT-FOR-US: BASS Audio Library
CVE-2020-1924
RESERVED
CVE-2020-1923
@@ -64278,11 +64278,11 @@ CVE-2019-18797 (LibSass 3.6.1 has uncontrolled
recursion in Sass::Eval::operator
[stretch] - libsass <no-dsa> (Minor issue)
NOTE: https://github.com/sass/libsass/issues/3000
CVE-2019-18796 (The BASS Audio Library 2.4.14 under Windows is prone to a
BASS_StreamC ...)
- TODO: check
+ NOT-FOR-US: BASS Audio Library
CVE-2019-18795 (The BASS Audio Library 2.4.14 under Windows is prone to a
BASS_StreamC ...)
- TODO: check
+ NOT-FOR-US: BASS Audio Library
CVE-2019-18794 (The BASS Audio Library 2.4.14 under Windows is prone to a
BASS_StreamC ...)
- TODO: check
+ NOT-FOR-US: BASS Audio Library
CVE-2019-18793 (Parallels Plesk Panel 9.5 allows XSS in
target/locales/tr-TR/help/inde ...)
NOT-FOR-US: Parallels Plesk Panel
CVE-2017-18639 (Progress Sitefinity CMS before 10.1 allows XSS via /Pages
Parameter : ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab9bb1592c883be86c331b372e59d2b713727bd8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab9bb1592c883be86c331b372e59d2b713727bd8
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
