Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5d8c071a by security tracker role at 2021-07-07T08:10:19+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,97 @@
+CVE-2021-3637
+ RESERVED
+CVE-2021-36211
+ RESERVED
+CVE-2021-36210
+ RESERVED
+CVE-2021-36209
+ RESERVED
+CVE-2021-36208
+ RESERVED
+CVE-2021-36207
+ RESERVED
+CVE-2021-36206
+ RESERVED
+CVE-2021-36205
+ RESERVED
+CVE-2021-36204
+ RESERVED
+CVE-2021-36203
+ RESERVED
+CVE-2021-36202
+ RESERVED
+CVE-2021-36201
+ RESERVED
+CVE-2021-36200
+ RESERVED
+CVE-2021-36199
+ RESERVED
+CVE-2021-36198
+ RESERVED
+CVE-2021-36197
+ RESERVED
+CVE-2021-36196
+ RESERVED
+CVE-2021-36195
+ RESERVED
+CVE-2021-36194
+ RESERVED
+CVE-2021-36193
+ RESERVED
+CVE-2021-36192
+ RESERVED
+CVE-2021-36191
+ RESERVED
+CVE-2021-36190
+ RESERVED
+CVE-2021-36189
+ RESERVED
+CVE-2021-36188
+ RESERVED
+CVE-2021-36187
+ RESERVED
+CVE-2021-36186
+ RESERVED
+CVE-2021-36185
+ RESERVED
+CVE-2021-36184
+ RESERVED
+CVE-2021-36183
+ RESERVED
+CVE-2021-36182
+ RESERVED
+CVE-2021-36181
+ RESERVED
+CVE-2021-36180
+ RESERVED
+CVE-2021-36179
+ RESERVED
+CVE-2021-36178
+ RESERVED
+CVE-2021-36177
+ RESERVED
+CVE-2021-36176
+ RESERVED
+CVE-2021-36175
+ RESERVED
+CVE-2021-36174
+ RESERVED
+CVE-2021-36173
+ RESERVED
+CVE-2021-36172
+ RESERVED
+CVE-2021-36171
+ RESERVED
+CVE-2021-36170
+ RESERVED
+CVE-2021-36169
+ RESERVED
+CVE-2021-36168
+ RESERVED
+CVE-2021-36167
+ RESERVED
+CVE-2021-36166
+ RESERVED
CVE-2021-36165
RESERVED
CVE-2021-36164
@@ -2533,8 +2627,7 @@ CVE-2021-3609
NOTE: https://www.openwall.com/lists/oss-security/2021/06/19/1
CVE-2021-35040
RESERVED
-CVE-2021-35039 [module: limit enabling module.sig_enforce]
- RESERVED
+CVE-2021-35039 (kernel/module.c in the Linux kernel before 5.12.14 mishandles
Signatur ...)
- linux <unfixed>
[stretch] - linux <not-affected> (Vulnerable code introduced later)
NOTE: https://www.openwall.com/lists/oss-security/2021/07/06/3
@@ -32948,26 +33041,26 @@ CVE-2021-22234
RESERVED
CVE-2021-22233
RESERVED
-CVE-2021-22232
- RESERVED
+CVE-2021-22232 (HTML injection was possible via the full name field before
versions 13 ...)
+ TODO: check
CVE-2021-22231
RESERVED
CVE-2021-22230
RESERVED
-CVE-2021-22229
- RESERVED
-CVE-2021-22228
- RESERVED
+CVE-2021-22229 (An issue has been discovered in GitLab CE/EE affecting all
versions st ...)
+ TODO: check
+CVE-2021-22228 (An issue has been discovered in GitLab affecting all versions.
Imprope ...)
+ TODO: check
CVE-2021-22227
RESERVED
-CVE-2021-22226
- RESERVED
+CVE-2021-22226 (Under certain conditions, some users were able to push to
protected br ...)
+ TODO: check
CVE-2021-22225
RESERVED
CVE-2021-22224
RESERVED
-CVE-2021-22223
- RESERVED
+CVE-2021-22223 (Client-Side code injection through Feature Flag name in GitLab
CE/EE s ...)
+ TODO: check
CVE-2021-22222 (Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to
3.4.5 allow ...)
[experimental] - wireshark 3.4.6-1~exp1
- wireshark <unfixed>
@@ -37843,16 +37936,16 @@ CVE-2021-20782
RESERVED
CVE-2021-20781
RESERVED
-CVE-2021-20780
- RESERVED
-CVE-2021-20779
- RESERVED
+CVE-2021-20780 (Cross-site request forgery (CSRF) vulnerability in WPCS -
WordPress Cu ...)
+ TODO: check
+CVE-2021-20779 (Cross-site request forgery (CSRF) vulnerability in WordPress
Email Tem ...)
+ TODO: check
CVE-2021-20778 (Improper access control vulnerability in EC-CUBE 4.0.6
(EC-CUBE 4 seri ...)
NOT-FOR-US: EC-CUBE
-CVE-2021-20777
- RESERVED
-CVE-2021-20776
- RESERVED
+CVE-2021-20777 (Improper authorization in handler for custom URL scheme
vulnerability ...)
+ TODO: check
+CVE-2021-20776 (Improper authentication vulnerability in SCT-40CM01SR and
AT-40CM01SR ...)
+ TODO: check
CVE-2021-20775
RESERVED
CVE-2021-20774
@@ -37925,10 +38018,10 @@ CVE-2021-20741 (Cross-site scripting vulnerability in
Hitachi Application Server
NOT-FOR-US: Hitachi
CVE-2021-20740 (Hitachi Virtual File Platform Versions prior to 5.5.3-09 and
Versions ...)
NOT-FOR-US: Hitachi
-CVE-2021-20739
- RESERVED
-CVE-2021-20738
- RESERVED
+CVE-2021-20739 (WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK,
WRH-300SV, ...)
+ TODO: check
+CVE-2021-20738 (WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow
an unau ...)
+ TODO: check
CVE-2021-20737 (Improper authentication vulnerability in GROWI versions prior
to v4.2. ...)
NOT-FOR-US: GROWI
CVE-2021-20736 (NoSQL injection vulnerability in GROWI versions prior to
v4.2.20 allow ...)
@@ -60289,8 +60382,8 @@ CVE-2020-23699
RESERVED
CVE-2020-23698
RESERVED
-CVE-2020-23697
- RESERVED
+CVE-2020-23697 (Cross Site Scripting vulnerabilty in Monstra CMS 3.0.4 via the
page fe ...)
+ TODO: check
CVE-2020-23696
RESERVED
CVE-2020-23695
@@ -63226,12 +63319,12 @@ CVE-2020-22253
RESERVED
CVE-2020-22252
RESERVED
-CVE-2020-22251
- RESERVED
+CVE-2020-22251 (Cross Site Scripting (XSS) vulnerability in phpList 3.5.3 via
the logi ...)
+ TODO: check
CVE-2020-22250
RESERVED
-CVE-2020-22249
- RESERVED
+CVE-2020-22249 (Remote Code Execution vulnerability in phplist 3.5.1. The
application ...)
+ TODO: check
CVE-2020-22248
RESERVED
CVE-2020-22247
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5d8c071a5c6f55f37fcbb1f19c807a64f73b9999
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5d8c071a5c6f55f37fcbb1f19c807a64f73b9999
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
