Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3bdc02b4 by security tracker role at 2021-07-14T08:10:20+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,9 @@
+CVE-2021-36739
+ RESERVED
+CVE-2021-36738
+ RESERVED
+CVE-2021-36737
+ RESERVED
CVE-2021-36736
RESERVED
CVE-2021-36735
@@ -744,12 +750,10 @@ CVE-2021-36376 (dandavison delta before 0.8.3 on Windows
resolves an executable'
TODO: check
CVE-2021-36375
RESERVED
-CVE-2021-36374
- RESERVED
+CVE-2021-36374 (When reading a specially crafted ZIP archive, or a derived
formats, an ...)
- ant <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2021/07/13/6
-CVE-2021-36373
- RESERVED
+CVE-2021-36373 (When reading a specially crafted TAR archive an Apache Ant
build can b ...)
- ant <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2021/07/13/5
CVE-2021-36372
@@ -8946,8 +8950,8 @@ CVE-2021-32757
RESERVED
CVE-2021-32756
RESERVED
-CVE-2021-32755
- RESERVED
+CVE-2021-32755 (Wire is a collaboration platform. wire-ios-transport handles
authentic ...)
+ TODO: check
CVE-2021-32754 (FlowDroid is a data flow analysis tool. FlowDroid versions
prior to 2. ...)
NOT-FOR-US: FlowDroid
CVE-2021-32753 (EdgeX Foundry is an open source project for building a common
open fra ...)
@@ -39150,14 +39154,14 @@ CVE-2021-20786
RESERVED
CVE-2021-20785
RESERVED
-CVE-2021-20784
- RESERVED
+CVE-2021-20784 (HTTP header injection vulnerability in Everything all versions
except ...)
+ TODO: check
CVE-2021-20783
RESERVED
-CVE-2021-20782
- RESERVED
-CVE-2021-20781
- RESERVED
+CVE-2021-20782 (Cross-site request forgery (CSRF) vulnerability in Software
License Ma ...)
+ TODO: check
+CVE-2021-20781 (Cross-site request forgery (CSRF) vulnerability in WordPress
Meta Data ...)
+ TODO: check
CVE-2021-20780 (Cross-site request forgery (CSRF) vulnerability in WPCS -
WordPress Cu ...)
NOT-FOR-US: Wordpress plugin
CVE-2021-20779 (Cross-site request forgery (CSRF) vulnerability in WordPress
Email Tem ...)
@@ -39222,10 +39226,10 @@ CVE-2021-20750 (Cross-site scripting vulnerability in
EC-CUBE EC-CUBE 3.0.0 to 3
NOT-FOR-US: EC-CUBE
CVE-2021-20749 (Cross-site scripting vulnerability in Fudousan plugin ver5.7.0
and ear ...)
NOT-FOR-US: Fudousan plugin
-CVE-2021-20748
- RESERVED
-CVE-2021-20747
- RESERVED
+CVE-2021-20748 (Retty App for Android versions prior to 4.8.13 and Retty App
for iOS v ...)
+ TODO: check
+CVE-2021-20747 (Improper authorization in handler for custom URL scheme
vulnerability ...)
+ TODO: check
CVE-2021-20746 (Cross-site scripting vulnerability in WordPress Popular Posts
5.3.2 an ...)
NOT-FOR-US: Wordpress plugin
CVE-2021-20745 (Inkdrop versions prior to v5.3.1 allows an attacker to execute
arbitra ...)
@@ -69740,22 +69744,22 @@ CVE-2020-19724
RESERVED
CVE-2020-19723
RESERVED
-CVE-2020-19722
- RESERVED
-CVE-2020-19721
- RESERVED
-CVE-2020-19720
- RESERVED
-CVE-2020-19719
- RESERVED
-CVE-2020-19718
- RESERVED
-CVE-2020-19717
- RESERVED
-CVE-2020-19716
- RESERVED
-CVE-2020-19715
- RESERVED
+CVE-2020-19722 (An unhandled memory allocation failure in Core/Ap4Atom.cpp of
Bento 1. ...)
+ TODO: check
+CVE-2020-19721 (A heap buffer overflow vulnerability in Ap4TrunAtom.cpp of
Bento 1.5.1 ...)
+ TODO: check
+CVE-2020-19720 (An unhandled memory allocation failure in Core/AP4IkmsAtom.cpp
of Bent ...)
+ TODO: check
+CVE-2020-19719 (A buffer overflow vulnerability in Ap4ElstAtom.cpp of Bento
1.5.1-628 ...)
+ TODO: check
+CVE-2020-19718 (An unhandled memory allocation failure in Core/Ap4Atom.cpp of
Bento 1. ...)
+ TODO: check
+CVE-2020-19717 (An unhandled memory allocation failure in Core/Ap48bdlAtom.cpp
of Bent ...)
+ TODO: check
+CVE-2020-19716 (A buffer overflow vulnerability in the Databuf function in
types.cpp o ...)
+ TODO: check
+CVE-2020-19715 (An integer overflow vulnerability in the getUShort function of
Exiv2 0 ...)
+ TODO: check
CVE-2020-19714
RESERVED
CVE-2020-19713
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3bdc02b4868c13e31b8ae0e26079395b193fcc57
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3bdc02b4868c13e31b8ae0e26079395b193fcc57
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
