Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0cbe6fdf by security tracker role at 2020-12-22T08:10:18+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,311 @@
+CVE-2021-21233
+ RESERVED
+CVE-2021-21232
+ RESERVED
+CVE-2021-21231
+ RESERVED
+CVE-2021-21230
+ RESERVED
+CVE-2021-21229
+ RESERVED
+CVE-2021-21228
+ RESERVED
+CVE-2021-21227
+ RESERVED
+CVE-2021-21226
+ RESERVED
+CVE-2021-21225
+ RESERVED
+CVE-2021-21224
+ RESERVED
+CVE-2021-21223
+ RESERVED
+CVE-2021-21222
+ RESERVED
+CVE-2021-21221
+ RESERVED
+CVE-2021-21220
+ RESERVED
+CVE-2021-21219
+ RESERVED
+CVE-2021-21218
+ RESERVED
+CVE-2021-21217
+ RESERVED
+CVE-2021-21216
+ RESERVED
+CVE-2021-21215
+ RESERVED
+CVE-2021-21214
+ RESERVED
+CVE-2021-21213
+ RESERVED
+CVE-2021-21212
+ RESERVED
+CVE-2021-21211
+ RESERVED
+CVE-2021-21210
+ RESERVED
+CVE-2021-21209
+ RESERVED
+CVE-2021-21208
+ RESERVED
+CVE-2021-21207
+ RESERVED
+CVE-2021-21206
+ RESERVED
+CVE-2021-21205
+ RESERVED
+CVE-2021-21204
+ RESERVED
+CVE-2021-21203
+ RESERVED
+CVE-2021-21202
+ RESERVED
+CVE-2021-21201
+ RESERVED
+CVE-2021-21200
+ RESERVED
+CVE-2021-21199
+ RESERVED
+CVE-2021-21198
+ RESERVED
+CVE-2021-21197
+ RESERVED
+CVE-2021-21196
+ RESERVED
+CVE-2021-21195
+ RESERVED
+CVE-2021-21194
+ RESERVED
+CVE-2021-21193
+ RESERVED
+CVE-2021-21192
+ RESERVED
+CVE-2021-21191
+ RESERVED
+CVE-2021-21190
+ RESERVED
+CVE-2021-21189
+ RESERVED
+CVE-2021-21188
+ RESERVED
+CVE-2021-21187
+ RESERVED
+CVE-2021-21186
+ RESERVED
+CVE-2021-21185
+ RESERVED
+CVE-2021-21184
+ RESERVED
+CVE-2021-21183
+ RESERVED
+CVE-2021-21182
+ RESERVED
+CVE-2021-21181
+ RESERVED
+CVE-2021-21180
+ RESERVED
+CVE-2021-21179
+ RESERVED
+CVE-2021-21178
+ RESERVED
+CVE-2021-21177
+ RESERVED
+CVE-2021-21176
+ RESERVED
+CVE-2021-21175
+ RESERVED
+CVE-2021-21174
+ RESERVED
+CVE-2021-21173
+ RESERVED
+CVE-2021-21172
+ RESERVED
+CVE-2021-21171
+ RESERVED
+CVE-2021-21170
+ RESERVED
+CVE-2021-21169
+ RESERVED
+CVE-2021-21168
+ RESERVED
+CVE-2021-21167
+ RESERVED
+CVE-2021-21166
+ RESERVED
+CVE-2021-21165
+ RESERVED
+CVE-2021-21164
+ RESERVED
+CVE-2021-21163
+ RESERVED
+CVE-2021-21162
+ RESERVED
+CVE-2021-21161
+ RESERVED
+CVE-2021-21160
+ RESERVED
+CVE-2021-21159
+ RESERVED
+CVE-2021-21158
+ RESERVED
+CVE-2021-21157
+ RESERVED
+CVE-2021-21156
+ RESERVED
+CVE-2021-21155
+ RESERVED
+CVE-2021-21154
+ RESERVED
+CVE-2021-21153
+ RESERVED
+CVE-2021-21152
+ RESERVED
+CVE-2021-21151
+ RESERVED
+CVE-2021-21150
+ RESERVED
+CVE-2021-21149
+ RESERVED
+CVE-2021-21148
+ RESERVED
+CVE-2021-21147
+ RESERVED
+CVE-2021-21146
+ RESERVED
+CVE-2021-21145
+ RESERVED
+CVE-2021-21144
+ RESERVED
+CVE-2021-21143
+ RESERVED
+CVE-2021-21142
+ RESERVED
+CVE-2021-21141
+ RESERVED
+CVE-2021-21140
+ RESERVED
+CVE-2021-21139
+ RESERVED
+CVE-2021-21138
+ RESERVED
+CVE-2021-21137
+ RESERVED
+CVE-2021-21136
+ RESERVED
+CVE-2021-21135
+ RESERVED
+CVE-2021-21134
+ RESERVED
+CVE-2021-21133
+ RESERVED
+CVE-2021-21132
+ RESERVED
+CVE-2021-21131
+ RESERVED
+CVE-2021-21130
+ RESERVED
+CVE-2021-21129
+ RESERVED
+CVE-2021-21128
+ RESERVED
+CVE-2021-21127
+ RESERVED
+CVE-2021-21126
+ RESERVED
+CVE-2021-21125
+ RESERVED
+CVE-2021-21124
+ RESERVED
+CVE-2021-21123
+ RESERVED
+CVE-2021-21122
+ RESERVED
+CVE-2021-21121
+ RESERVED
+CVE-2021-21120
+ RESERVED
+CVE-2021-21119
+ RESERVED
+CVE-2021-21118
+ RESERVED
+CVE-2021-21117
+ RESERVED
+CVE-2021-21116
+ RESERVED
+CVE-2021-21115
+ RESERVED
+CVE-2021-21114
+ RESERVED
+CVE-2021-21113
+ RESERVED
+CVE-2021-21112
+ RESERVED
+CVE-2021-21111
+ RESERVED
+CVE-2021-21110
+ RESERVED
+CVE-2021-21109
+ RESERVED
+CVE-2021-21108
+ RESERVED
+CVE-2021-21107
+ RESERVED
+CVE-2021-21106
+ RESERVED
+CVE-2020-35626 (An issue was discovered in the PushToWatch extension for
MediaWiki thr ...)
+ TODO: check
+CVE-2020-35625 (An issue was discovered in the Widgets extension for MediaWiki
through ...)
+ TODO: check
+CVE-2020-35624 (An issue was discovered in the SecurePoll extension for
MediaWiki thro ...)
+ TODO: check
+CVE-2020-35623 (An issue was discovered in the CasAuth extension for MediaWiki
through ...)
+ TODO: check
+CVE-2020-35622 (An issue was discovered in the GlobalUsage extension for
MediaWiki thr ...)
+ TODO: check
+CVE-2020-35621
+ RESERVED
+CVE-2020-35620
+ RESERVED
+CVE-2020-35619
+ RESERVED
+CVE-2020-35618
+ RESERVED
+CVE-2020-35617
+ RESERVED
+CVE-2020-35616
+ RESERVED
+CVE-2020-35615
+ RESERVED
+CVE-2020-35614
+ RESERVED
+CVE-2020-35613
+ RESERVED
+CVE-2020-35612
+ RESERVED
+CVE-2020-35611
+ RESERVED
+CVE-2020-35610
+ RESERVED
+CVE-2020-35609
+ RESERVED
+CVE-2020-35608
+ RESERVED
+CVE-2020-35607
+ RESERVED
+CVE-2020-35606 (Arbitrary command execution can occur in Webmin through 1.962.
Any use ...)
+ TODO: check
+CVE-2020-35605 (The Graphics Protocol feature in graphics.c in kitty before
0.19.3 all ...)
+ TODO: check
+CVE-2020-35604 (An XXE attack can occur in Kronos WebTA 5.0.4 when SAML is
used. ...)
+ TODO: check
+CVE-2020-35603
+ RESERVED
+CVE-2020-35602
+ RESERVED
+CVE-2020-35601
+ RESERVED
CVE-2020-35600
RESERVED
CVE-2020-35599
@@ -3149,8 +3457,8 @@ CVE-2020-35153
RESERVED
CVE-2020-35152
RESERVED
-CVE-2020-35151
- RESERVED
+CVE-2020-35151 (The Online Marriage Registration System 1.0 post parameter
"searchdata ...)
+ TODO: check
CVE-2020-35150
RESERVED
CVE-2020-35149 (lib/utils.js in mquery before 3.2.3 allows a pollution attack
because ...)
@@ -4986,8 +5294,8 @@ CVE-2020-29598
RESERVED
CVE-2020-29597 (IncomCMS 2.0 has a modules/uploader/showcase/script.php
insecure file ...)
NOT-FOR-US: IncomCMS
-CVE-2020-29596
- RESERVED
+CVE-2020-29596 (MiniWeb HTTP server 0.8.19 allows remote attackers to cause a
denial o ...)
+ TODO: check
CVE-2020-29595 (PlugIns\IDE_ACDStd.apl in ACDSee Photo Studio Studio
Professional 2021 ...)
NOT-FOR-US: ACDSee Photo Studio Studio Professional
CVE-2020-29594
@@ -14599,7 +14907,7 @@ CVE-2020-26941
RESERVED
CVE-2020-26940
RESERVED
-CVE-2020-26939 (In Legion of the Bouncy Castle BC before 1.55 and BC-FJA
before 1.0.1. ...)
+CVE-2020-26939 (In Legion of the Bouncy Castle BC before 1.61 and BC-FJA
before 1.0.1. ...)
{DLA-2433-1}
- bouncycastle 1.61-1
NOTE: https://github.com/bcgit/bc-java/wiki/CVE-2020-26939
@@ -16020,22 +16328,22 @@ CVE-2020-26286
RESERVED
CVE-2020-26285
RESERVED
-CVE-2020-26284
- RESERVED
+CVE-2020-26284 (Hugo is a fast and Flexible Static Site Generator built in Go.
Hugo de ...)
+ TODO: check
CVE-2020-26283
RESERVED
CVE-2020-26282
RESERVED
-CVE-2020-26281
- RESERVED
+CVE-2020-26281 (async-h1 is an asynchronous HTTP/1.1 parser for Rust
(crates.io). Ther ...)
+ TODO: check
CVE-2020-26280 (OpenSlides is a free, Web-based presentation and assembly
system for m ...)
NOT-FOR-US: OpenSlides
CVE-2020-26279
RESERVED
CVE-2020-26278
RESERVED
-CVE-2020-26277
- RESERVED
+CVE-2020-26277 (DBdeployer is a tool that deploys MySQL database servers
easily. In DB ...)
+ TODO: check
CVE-2020-26276 (Fleet is an open source osquery manager. In Fleet before
version 3.5.1 ...)
NOT-FOR-US: Fleet (osquery frontend)
CVE-2020-26275 (The Jupyter Server provides the backend (i.e. the core
services, APIs, ...)
@@ -26547,10 +26855,10 @@ CVE-2020-21380
RESERVED
CVE-2020-21379
RESERVED
-CVE-2020-21378
- RESERVED
-CVE-2020-21377
- RESERVED
+CVE-2020-21378 (SQL injection vulnerability in SeaCMS 10.1 (2020.02.08) via
the id par ...)
+ TODO: check
+CVE-2020-21377 (SQL injection vulnerability in yunyecms V2.0.1 via the selcart
paramet ...)
+ TODO: check
CVE-2020-21376
RESERVED
CVE-2020-21375
@@ -50131,8 +50439,8 @@ CVE-2020-11719
RESERVED
CVE-2020-11718
RESERVED
-CVE-2020-11717
- RESERVED
+CVE-2020-11717 (An issue was discovered in Programi 014 31.01.2020. It has
multiple SQ ...)
+ TODO: check
CVE-2020-11716 (Panasonic P110, Eluga Z1 Pro, Eluga X1, and Eluga X1 Pro
devices throu ...)
NOT-FOR-US: Panasonic
CVE-2020-11715 (Panasonic P99 devices through 2020-04-10 have Incorrect Access
Control ...)
@@ -57593,8 +57901,8 @@ CVE-2020-8996 (AnyShare Cloud 6.0.9 allows
authenticated directory traversal to
NOT-FOR-US: AnyShare Cloud
CVE-2019-20456 (Goverlan Reach Console before 9.50, Goverlan Reach Server
before 3.50, ...)
NOT-FOR-US: Goverlan
-CVE-2020-8995
- RESERVED
+CVE-2020-8995 (Programi Bilanc Build 007 Release 014 31.01.2020 supplies a
.exe file ...)
+ TODO: check
CVE-2019-20455 (Gateways/Gateway.php in Heartland & Global Payments PHP
SDK before ...)
NOT-FOR-US: Heartland & Global Payments PHP SDK
CVE-2019-20454 (An out-of-bounds read was discovered in PCRE before 10.34 when
the pat ...)
@@ -169563,8 +169871,8 @@ CVE-2018-7582 (WebLog Expert Web Server Enterprise
9.4 allows Remote Denial Of S
NOT-FOR-US: WebLog Expert Web Server Enterprise
CVE-2018-7581 (\ProgramData\WebLog Expert\WebServer\WebServer.cfg in WebLog
Expert We ...)
NOT-FOR-US: WebLog Expert Web Server Enterprise
-CVE-2018-7580
- RESERVED
+CVE-2018-7580 (Philips Hue is vulnerable to a Denial of Service attack.
Sending a SYN ...)
+ TODO: check
CVE-2017-18211 (In ImageMagick 7.0.7, a NULL pointer dereference vulnerability
was fou ...)
{DLA-2366-1}
- imagemagick 8:6.9.9.34+dfsg-3 (low)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0cbe6fdf6e109aeedf97d3e2663dd35704d360e8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0cbe6fdf6e109aeedf97d3e2663dd35704d360e8
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
