Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
abd04bc2 by security tracker role at 2020-11-20T08:10:22+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,43 @@
+CVE-2020-28971
+ RESERVED
+CVE-2020-28970
+ RESERVED
+CVE-2020-28969
+ RESERVED
+CVE-2020-28968
+ RESERVED
+CVE-2020-28967
+ RESERVED
+CVE-2020-28966
+ RESERVED
+CVE-2020-28965
+ RESERVED
+CVE-2020-28964
+ RESERVED
+CVE-2020-28963
+ RESERVED
+CVE-2020-28962
+ RESERVED
+CVE-2020-28961
+ RESERVED
+CVE-2020-28960
+ RESERVED
+CVE-2020-28959
+ RESERVED
+CVE-2020-28958
+ RESERVED
+CVE-2020-28957
+ RESERVED
+CVE-2020-28956
+ RESERVED
+CVE-2020-28955
+ RESERVED
+CVE-2020-28954 (web/controllers/ApiController.groovy in BigBlueButton before
2.2.29 la ...)
+ TODO: check
+CVE-2020-28953 (In BigBlueButton before 2.2.29, a user can vote more than once
in a si ...)
+ TODO: check
+CVE-2020-28952
+ RESERVED
CVE-2020-28951 (libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may
encounter ...)
NOT-FOR-US: libuci in OpenWrt
CVE-2020-28950
@@ -61,8 +101,8 @@ CVE-2020-28926
RESERVED
CVE-2020-28925
RESERVED
-CVE-2020-28924
- RESERVED
+CVE-2020-28924 (An issue was discovered in Rclone before 1.53.3. Due to the
use of a w ...)
+ TODO: check
CVE-2020-28923
RESERVED
CVE-2020-28922
@@ -2414,8 +2454,8 @@ CVE-2020-28352
RESERVED
CVE-2020-28351 (The conferencing component on Mitel ShoreTel 19.46.1802.0
devices coul ...)
NOT-FOR-US: Mitel
-CVE-2020-28350
- RESERVED
+CVE-2020-28350 (A Cross Site Scripting (XSS) vulnerability exists in OPAC in
Sokrates ...)
+ TODO: check
CVE-2020-28349 (** DISPUTED ** An inaccurate frame deduplication process in
ChirpStack ...)
NOT-FOR-US: ChirpStack Network Server
CVE-2020-28348
@@ -4207,16 +4247,16 @@ CVE-2020-28215
RESERVED
CVE-2020-28214
RESERVED
-CVE-2020-28213
- RESERVED
-CVE-2020-28212
- RESERVED
-CVE-2020-28211
- RESERVED
-CVE-2020-28210
- RESERVED
-CVE-2020-28209
- RESERVED
+CVE-2020-28213 (A CWE-494: Download of Code Without Integrity Check
vulnerability exis ...)
+ TODO: check
+CVE-2020-28212 (A CWE-307: Improper Restriction of Excessive Authentication
Attempts v ...)
+ TODO: check
+CVE-2020-28211 (A CWE-863: Incorrect Authorization vulnerability exists in PLC
Simulat ...)
+ TODO: check
+CVE-2020-28210 (A CWE-79 Improper Neutralization of Input During Web Page
Generation ( ...)
+ TODO: check
+CVE-2020-28209 (A CWE-428 Windows Unquoted Search Path vulnerability exists in
EcoStru ...)
+ TODO: check
CVE-2020-28208
RESERVED
CVE-2020-28207
@@ -9658,8 +9698,8 @@ CVE-2020-25991
RESERVED
CVE-2020-25990 (WebsiteBaker 2.12.2 allows SQL Injection via parameter
'display_name' ...)
NOT-FOR-US: WebsiteBaker
-CVE-2020-25989
- RESERVED
+CVE-2020-25989 (Privilege escalation via arbitrary file write in pritunl
electron clie ...)
+ TODO: check
CVE-2020-25988 (UPNP Service listening on port 5555 in Genexis Platinum 4410
Router V2 ...)
TODO: check
CVE-2020-25987 (MonoCMS Blog 1.0 stores hard-coded admin hashes in the log.xml
file in ...)
@@ -53888,54 +53928,54 @@ CVE-2020-7575 (A vulnerability has been identified in
Climatix POL908 (BACnet/IP
NOT-FOR-US: Climatix
CVE-2020-7574 (A vulnerability has been identified in Climatix POL908
(BACnet/IP modu ...)
NOT-FOR-US: Climatix
-CVE-2020-7573
- RESERVED
-CVE-2020-7572
- RESERVED
-CVE-2020-7571
- RESERVED
-CVE-2020-7570
- RESERVED
-CVE-2020-7569
- RESERVED
-CVE-2020-7568
- RESERVED
-CVE-2020-7567
- RESERVED
-CVE-2020-7566
- RESERVED
-CVE-2020-7565
- RESERVED
+CVE-2020-7573 (A CWE-284 Improper Access Control vulnerability exists in
EcoStruxure ...)
+ TODO: check
+CVE-2020-7572 (A CWE-611 Improper Restriction of XML External Entity Reference
vulner ...)
+ TODO: check
+CVE-2020-7571 (A CWE-79 Multiple Improper Neutralization of Input During Web
Page Gen ...)
+ TODO: check
+CVE-2020-7570 (A CWE-79 Improper Neutralization of Input During Web Page
Generation ( ...)
+ TODO: check
+CVE-2020-7569 (A CWE-434 Unrestricted Upload of File with Dangerous Type
vulnerabilit ...)
+ TODO: check
+CVE-2020-7568 (A CWE-200: Exposure of Sensitive Information to an Unauthorized
Actor ...)
+ TODO: check
+CVE-2020-7567 (A CWE-311: Missing Encryption of Sensitive Data vulnerability
exists i ...)
+ TODO: check
+CVE-2020-7566 (A CWE-334: Small Space of Random Values vulnerability exists in
Modico ...)
+ TODO: check
+CVE-2020-7565 (A CWE-326: Inadequate Encryption Strength vulnerability exists
in Modi ...)
+ TODO: check
CVE-2020-7564 (A CWE-120: Buffer Copy without Checking Size of Input ('Classic
Buffer ...)
NOT-FOR-US: Modicon
CVE-2020-7563 (A CWE-787: Out-of-bounds Write vulnerability exists in the Web
Server ...)
NOT-FOR-US: Modicon
CVE-2020-7562 (A CWE-125: Out-of-Bounds Read vulnerability exists in the Web
Server o ...)
NOT-FOR-US: Modicon
-CVE-2020-7561
- RESERVED
+CVE-2020-7561 (A CWE-284: Improper Access Control vulnerability exists in
Easergy T30 ...)
+ TODO: check
CVE-2020-7560
RESERVED
-CVE-2020-7559
- RESERVED
-CVE-2020-7558
- RESERVED
-CVE-2020-7557
- RESERVED
-CVE-2020-7556
- RESERVED
-CVE-2020-7555
- RESERVED
-CVE-2020-7554
- RESERVED
-CVE-2020-7553
- RESERVED
-CVE-2020-7552
- RESERVED
-CVE-2020-7551
- RESERVED
-CVE-2020-7550
- RESERVED
+CVE-2020-7559 (A CWE-120: Buffer Copy without Checking Size of Input ('Classic
Buffer ...)
+ TODO: check
+CVE-2020-7558 (A CWE-787 Out-of-bounds Write vulnerability exists in IGSS
Definition ...)
+ TODO: check
+CVE-2020-7557 (A CWE-125 Out-of-bounds Read vulnerability exists in IGSS
Definition ( ...)
+ TODO: check
+CVE-2020-7556 (A CWE-787 Out-of-bounds Write vulnerability exists in IGSS
Definition ...)
+ TODO: check
+CVE-2020-7555 (A CWE-787 Out-of-bounds Write vulnerability exists in IGSS
Definition ...)
+ TODO: check
+CVE-2020-7554 (A CWE-119 Improper Restriction of Operations within the Bounds
of a Me ...)
+ TODO: check
+CVE-2020-7553 (A CWE-787 Out-of-bounds Write vulnerability exists in IGSS
Definition ...)
+ TODO: check
+CVE-2020-7552 (A CWE-119 Improper Restriction of Operations within the Bounds
of a Me ...)
+ TODO: check
+CVE-2020-7551 (A CWE-119 Improper Restriction of Operations within the Bounds
of a Me ...)
+ TODO: check
+CVE-2020-7550 (A CWE-119 Improper Restriction of Operations within the Bounds
of a Me ...)
+ TODO: check
CVE-2020-7549
RESERVED
CVE-2020-7548
@@ -53946,8 +53986,8 @@ CVE-2020-7546
RESERVED
CVE-2020-7545
RESERVED
-CVE-2020-7544
- RESERVED
+CVE-2020-7544 (A CWE-269 Improper Privilege Management vulnerability exists in
EcoStr ...)
+ TODO: check
CVE-2020-7543
RESERVED
CVE-2020-7542
@@ -53958,8 +53998,8 @@ CVE-2020-7540
RESERVED
CVE-2020-7539
RESERVED
-CVE-2020-7538
- RESERVED
+CVE-2020-7538 (A CWE-754: Improper Check for Unusual or Exceptional Conditions
vulner ...)
+ TODO: check
CVE-2020-7537
RESERVED
CVE-2020-7536
@@ -58648,8 +58688,8 @@ CVE-2020-5670
RESERVED
CVE-2020-5669
RESERVED
-CVE-2020-5668
- RESERVED
+CVE-2020-5668 (Uncontrolled resource consumption vulnerability in MELSEC iQ-R
Series ...)
+ TODO: check
CVE-2020-5667 (Studyplus App for Android v6.3.7 and earlier and Studyplus App
for iOS ...)
NOT-FOR-US: Studyplus
CVE-2020-5666 (Uncontrolled resource consumption vulnerability in MELSEC iQ-R
Series ...)
@@ -61106,8 +61146,7 @@ CVE-2020-4790
RESERVED
CVE-2020-4789
RESERVED
-CVE-2020-4788 [Speculation on incompletely validated data on IBM Power9]
- RESERVED
+CVE-2020-4788 (IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow
a local ...)
- linux <unfixed>
CVE-2020-4787
RESERVED
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/abd04bc2496673b1eaa3342767c89d5e97d5aab9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/abd04bc2496673b1eaa3342767c89d5e97d5aab9
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
