Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
978252f4 by Moritz Muehlenhoff at 2021-03-12T14:01:21+01:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -198,7 +198,7 @@ CVE-2021-28145
CVE-2021-28144 (prog.cgi on D-Link DIR-3060 devices before 1.11b04 HF2 allows
remote a ...)
NOT-FOR-US: D-Link
CVE-2021-28143 (/jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows
authenticated ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2021-28142
RESERVED
CVE-2021-28141 (An issue was discovered in Progress Telerik UI for ASP.NET
AJAX 2021.1 ...)
@@ -1346,9 +1346,9 @@ CVE-2021-27649
CVE-2021-27648
RESERVED
CVE-2021-27647 (Out-of-bounds Read vulnerability in iscsi_snapshot_comm_core
in Synolo ...)
- TODO: check
+ NOT-FOR-US: Synology
CVE-2021-27646 (Use After Free vulnerability in iscsi_snapshot_comm_core in
Synology D ...)
- TODO: check
+ NOT-FOR-US: Synology
CVE-2021-27645 (The nameserver caching daemon (nscd) in the GNU C Library (aka
glibc o ...)
- glibc <unfixed> (bug #983479)
[buster] - glibc <no-dsa> (Minor issue)
@@ -2598,7 +2598,7 @@ CVE-2021-27082 (Quantum Development Kit for Visual Studio
Code Remote Code Execu
CVE-2021-27081 (Visual Studio Code ESLint Extension Remote Code Execution
Vulnerabilit ...)
NOT-FOR-US: Microsoft
CVE-2021-27080 (Azure Sphere Unsigned Code Execution Vulnerability This CVE ID
is uniq ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2021-27079
RESERVED
CVE-2021-27078 (Microsoft Exchange Server Remote Code Execution Vulnerability
This CVE ...)
@@ -2608,9 +2608,9 @@ CVE-2021-27077 (Windows Win32k Elevation of Privilege
Vulnerability This CVE ID
CVE-2021-27076 (Microsoft SharePoint Server Remote Code Execution
Vulnerability ...)
NOT-FOR-US: Microsoft
CVE-2021-27075 (Azure Virtual Machine Information Disclosure Vulnerability ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2021-27074 (Azure Sphere Unsigned Code Execution Vulnerability This CVE ID
is uniq ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2021-27073
RESERVED
CVE-2021-27072
@@ -2634,9 +2634,9 @@ CVE-2021-27064
CVE-2021-27063 (Windows DNS Server Denial of Service Vulnerability This CVE ID
is uniq ...)
NOT-FOR-US: Microsoft
CVE-2021-27062 (HEVC Video Extensions Remote Code Execution Vulnerability This
CVE ID ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2021-27061 (HEVC Video Extensions Remote Code Execution Vulnerability This
CVE ID ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2021-27060 (Visual Studio Code Remote Code Execution Vulnerability ...)
NOT-FOR-US: Microsoft
CVE-2021-27059 (Microsoft Office Remote Code Execution Vulnerability This CVE
ID is un ...)
@@ -2656,15 +2656,15 @@ CVE-2021-27053 (Microsoft Excel Remote Code Execution
Vulnerability This CVE ID
CVE-2021-27052 (Microsoft SharePoint Server Information Disclosure
Vulnerability ...)
NOT-FOR-US: Microsoft
CVE-2021-27051 (HEVC Video Extensions Remote Code Execution Vulnerability This
CVE ID ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2021-27050 (HEVC Video Extensions Remote Code Execution Vulnerability This
CVE ID ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2021-27049 (HEVC Video Extensions Remote Code Execution Vulnerability This
CVE ID ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2021-27048 (HEVC Video Extensions Remote Code Execution Vulnerability This
CVE ID ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2021-27047 (HEVC Video Extensions Remote Code Execution Vulnerability This
CVE ID ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2021-27046
RESERVED
CVE-2021-27045
@@ -3018,7 +3018,7 @@ CVE-2021-26904 (LMA ISIDA Retriever 5.2 allows SQL
Injection. ...)
CVE-2021-26903 (LMA ISIDA Retriever 5.2 is vulnerable to XSS via
query['text']. ...)
NOT-FOR-US: LMA ISIDA Retriever
CVE-2021-26902 (HEVC Video Extensions Remote Code Execution Vulnerability This
CVE ID ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2021-26901 (Windows Event Tracing Elevation of Privilege Vulnerability
This CVE ID ...)
NOT-FOR-US: Microsoft
CVE-2021-26900 (Windows Win32k Elevation of Privilege Vulnerability This CVE
ID is uni ...)
@@ -3070,7 +3070,7 @@ CVE-2021-26878 (Windows Print Spooler Elevation of
Privilege Vulnerability This
CVE-2021-26877 (Windows DNS Server Remote Code Execution Vulnerability This
CVE ID is ...)
NOT-FOR-US: Microsoft
CVE-2021-26876 (OpenType Font Parsing Remote Code Execution Vulnerability ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2021-26875 (Windows Win32k Elevation of Privilege Vulnerability This CVE
ID is uni ...)
NOT-FOR-US: Microsoft
CVE-2021-26874 (Windows Overlay Filter Elevation of Privilege Vulnerability
...)
@@ -3786,7 +3786,7 @@ CVE-2021-26571 (The Baseboard Management Controller (BMC)
firmware in HPE Apollo
CVE-2021-26570 (The Baseboard Management Controller (BMC) firmware in HPE
Apollo 70 Sy ...)
NOT-FOR-US: HPE
CVE-2021-26569 (Race Condition within a Thread vulnerability in
iscsi_snapshot_comm_co ...)
- TODO: check
+ NOT-FOR-US: Synology
CVE-2021-26568
RESERVED
CVE-2021-26567 (Use of unmaintained third party components vulnerability in
faad in Sy ...)
@@ -9540,11 +9540,11 @@ CVE-2021-24112 (.NET Core Remote Code Execution
Vulnerability This CVE ID is uni
CVE-2021-24111 (.NET Framework Denial of Service Vulnerability ...)
NOT-FOR-US: Microsoft
CVE-2021-24110 (HEVC Video Extensions Remote Code Execution Vulnerability This
CVE ID ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2021-24109 (Microsoft Azure Kubernetes Service Elevation of Privilege
Vulnerabilit ...)
NOT-FOR-US: Microsoft
CVE-2021-24108 (Microsoft Office Remote Code Execution Vulnerability This CVE
ID is un ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2021-24107 (Windows Event Tracing Information Disclosure Vulnerability ...)
NOT-FOR-US: Microsoft
CVE-2021-24106 (Windows DirectX Information Disclosure Vulnerability ...)
@@ -9582,7 +9582,7 @@ CVE-2021-24091 (Windows Camera Codec Pack Remote Code
Execution Vulnerability ..
CVE-2021-24090 (Windows Error Reporting Elevation of Privilege Vulnerability
...)
NOT-FOR-US: Microsoft
CVE-2021-24089 (HEVC Video Extensions Remote Code Execution Vulnerability This
CVE ID ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2021-24088 (Windows Local Spooler Remote Code Execution Vulnerability ...)
NOT-FOR-US: Microsoft
CVE-2021-24087 (Azure IoT CLI extension Elevation of Privilege Vulnerability
...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/978252f422005f266dad949515b85cde9c06436f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/978252f422005f266dad949515b85cde9c06436f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
