Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ebbc3fce by Moritz Muehlenhoff at 2020-10-21T16:04:32+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -47797,7 +47797,7 @@ CVE-2020-7373
CVE-2020-7372
RESERVED
CVE-2020-7371 (User Interface (UI) Misrepresentation of Critical Information
vulnerab ...)
- TODO: check
+ NOT-FOR-US: Yandex Browser
CVE-2020-7370 (User Interface (UI) Misrepresentation of Critical Information
vulnerab ...)
NOT-FOR-US: Danyil Vasilenko's Bolt Browser
CVE-2020-7369 (User Interface (UI) Misrepresentation of Critical Information
vulnerab ...)
@@ -51876,11 +51876,11 @@ CVE-2020-5794
CVE-2020-5793
RESERVED
CVE-2020-5792 (Improper neutralization of argument delimiters in a command in
Nagios ...)
- TODO: check
+ NOT-FOR-US: Nagios XI
CVE-2020-5791 (Improper neutralization of special elements used in an OS
command in N ...)
- TODO: check
+ NOT-FOR-US: Nagios XI
CVE-2020-5790 (Cross-site request forgery in Nagios XI 5.7.3 allows a remote
attacker ...)
- TODO: check
+ NOT-FOR-US: Nagios XI
CVE-2020-5789 (Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3
allows ...)
NOT-FOR-US: Teltonika
CVE-2020-5788 (Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3
allows ...)
@@ -56199,7 +56199,8 @@ CVE-2020-3994 (VMware vCenter Server (6.7 before 6.7u3,
6.6 before 6.5u3k) conta
CVE-2020-3993 (VMware NSX-T (3.x before 3.0.2, 2.5.x before 2.5.2.2.0)
contains a sec ...)
NOT-FOR-US: VMware
CVE-2020-3992 (OpenSLP as used in VMware ESXi (7.0 before
ESXi_7.0.1-0.0.16850804, 6. ...)
- TODO: check
+ NOT-FOR-US: VMware
+ NOTE: Might affect src:openslp-dfsg, but removed years ago
CVE-2020-3991 (VMware Horizon Client for Windows (5.x before 5.5.0) contains a
denial ...)
NOT-FOR-US: VMware
CVE-2020-3990 (VMware Workstation (15.x) and Horizon Client for Windows (5.x
before 5 ...)
@@ -84003,7 +84004,7 @@ CVE-2019-13635 (The WP Fastest Cache plugin through
0.8.9.5 for WordPress allows
CVE-2019-13634
RESERVED
CVE-2019-13633 (Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS.
An attack ...)
- TODO: check
+ NOT-FOR-US: Blinger.io
CVE-2019-13632
RESERVED
CVE-2019-13631 (In parse_hid_report_descriptor in drivers/input/tablet/gtco.c
in the L ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ebbc3fce2c21b5aae07512b401c3ce2d63e81b81
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ebbc3fce2c21b5aae07512b401c3ce2d63e81b81
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
