Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
eab2012e by Moritz Muehlenhoff at 2021-03-12T15:43:27+01:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -23210,7 +23210,7 @@ CVE-2021-1731 (PFX Encryption Security Feature Bypass
Vulnerability ...)
CVE-2021-1730 (Microsoft Exchange Server Spoofing Vulnerability This CVE ID is
unique ...)
NOT-FOR-US: Microsoft
CVE-2021-1729 (Windows Update Stack Setup Elevation of Privilege Vulnerability
...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2021-1728 (System Center Operations Manager Elevation of Privilege
Vulnerability ...)
NOT-FOR-US: Microsoft
CVE-2021-1727 (Windows Installer Elevation of Privilege Vulnerability ...)
@@ -24408,7 +24408,7 @@ CVE-2020-29047 (The wp-hotel-booking plugin through
1.10.2 for WordPress allows
CVE-2020-29046
RESERVED
CVE-2020-29045 (The food-and-drink-menu plugin through 2.2.0 for WordPress
allows remo ...)
- TODO: check
+ NOT-FOR-US: Wordpress plugin
CVE-2020-29044
RESERVED
CVE-2020-29043 (An issue was discovered in BigBlueButton through 2.2.29. When
at attac ...)
@@ -26896,7 +26896,7 @@ CVE-2020-28468 (This affects the package pwntools
before 4.3.1. The shellcraft g
CVE-2020-28467
RESERVED
CVE-2020-28466 (This affects all versions of package
github.com/nats-io/nats-server/se ...)
- TODO: check
+ NOT-FOR-US: nats-server
CVE-2020-28465
RESERVED
CVE-2020-28464 (This affects the package djv before 2.1.4. By controlling the
schema f ...)
@@ -28380,39 +28380,39 @@ CVE-2021-0467
CVE-2021-0466
RESERVED
CVE-2021-0465 (In GenerateFaceMask of face.cc, there is a possible out of
bounds writ ...)
- TODO: check
+ NOT-FOR-US: Android/Pixel kernel component not in mainline
CVE-2021-0464 (In sound_trigger_event_alloc of platform.h, there is a possible
out of ...)
- TODO: check
+ NOT-FOR-US: Android/Pixel kernel component not in mainline
CVE-2021-0463 (In convertToHidl of convert.cpp, there is a possible out of
bounds rea ...)
- TODO: check
+ NOT-FOR-US: Android/Pixel kernel component not in mainline
CVE-2021-0462 (In the NXP NFC firmware, there is a possible insecure firmware
update ...)
- TODO: check
+ NOT-FOR-US: NXP NFC firmware as used in Android/Pixel
CVE-2021-0461 (In iaxxx_core_sensor_change_state of iaxxx-module.c, there is a
possib ...)
- TODO: check
+ NOT-FOR-US: Android/Pixel kernel component not in mainline
CVE-2021-0460 (In the FingerTipS touch screen driver, there is a possible out
of boun ...)
- TODO: check
+ NOT-FOR-US: Android/Pixel kernel component not in mainline
CVE-2021-0459 (In fts_driver_test_write of fts_proc.c, there is a possible out
of bou ...)
- TODO: check
+ NOT-FOR-US: Android/Pixel kernel component not in mainline
CVE-2021-0458 (In the FingerTipS touch screen driver, there is a possible out
of boun ...)
- TODO: check
+ NOT-FOR-US: Android/Pixel kernel component not in mainline
CVE-2021-0457 (In the FingerTipS touch screen driver, there is a possible out
of boun ...)
- TODO: check
+ NOT-FOR-US: Android/Pixel kernel component not in mainline
CVE-2021-0456 (In the Citadel chip firmware, there is a possible out of bounds
write ...)
- TODO: check
+ NOT-FOR-US: Citadel chip firmware as used in Android/Pixel
CVE-2021-0455 (In the Citadel chip firmware, there is a possible out of bounds
write ...)
- TODO: check
+ NOT-FOR-US: Citadel chip firmware as used in Android/Pixel
CVE-2021-0454 (In the Citadel chip firmware, there is a possible out of bounds
write ...)
- TODO: check
+ NOT-FOR-US: Citadel chip firmware as used in Android/Pixel
CVE-2021-0453 (In the Titan-M chip firmware, there is a possible disclosure of
stack ...)
- TODO: check
+ NOT-FOR-US: Titan-M chip firmware as used in Android/Pixel
CVE-2021-0452 (In the Titan M chip firmware, there is a possible disclosure of
stack ...)
- TODO: check
+ NOT-FOR-US: Titan-M chip firmware as used in Android/Pixel
CVE-2021-0451 (In the Titan M chip firmware, there is a possible disclosure of
stack ...)
- TODO: check
+ NOT-FOR-US: Titan-M chip firmware as used in Android/Pixel
CVE-2021-0450 (In the Titan M chip firmware, there is a possible disclosure of
stack ...)
- TODO: check
+ NOT-FOR-US: Titan-M chip firmware as used in Android/Pixel
CVE-2021-0449 (In the Titan M chip firmware, there is a possible disclosure of
stack ...)
- TODO: check
+ NOT-FOR-US: Titan-M chip firmware as used in Android/Pixel
CVE-2021-0448
RESERVED
CVE-2021-0447
@@ -37377,9 +37377,9 @@ CVE-2020-24986 (Concrete5 up to and including 8.5.2
allows Unrestricted Upload o
CVE-2020-24985
RESERVED
CVE-2020-24984 (An issue was discovered in Quadbase EspressReports ES 7 Update
9. It a ...)
- TODO: check
+ NOT-FOR-US: Quadbase EspressReports
CVE-2020-24983 (An issue was discovered in Quadbase EspressReports ES 7 Update
9. An u ...)
- TODO: check
+ NOT-FOR-US: Quadbase EspressReports
CVE-2020-24982
RESERVED
CVE-2020-24981 (An Incorrect Access Control vulnerability exists in
/ucms/chk.php in U ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eab2012e2185cb6b3e0a8b4424f7f9d73a880bc1
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eab2012e2185cb6b3e0a8b4424f7f9d73a880bc1
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
