Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e53c9d4e by Salvatore Bonaccorso at 2021-09-22T22:20:15+02:00
Process NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1191,7 +1191,7 @@ CVE-2021-41013
CVE-2021-41012
RESERVED
CVE-2021-41011 (LINE client for iOS before 11.15.0 might expose authentication
informa ...)
- TODO: check
+ NOT-FOR-US: LINE client for iOS
CVE-2021-41010
RESERVED
CVE-2021-41009
@@ -1465,7 +1465,7 @@ CVE-2021-40877
CVE-2021-40876
RESERVED
CVE-2021-40875 (Improper Access Control in Gurock TestRail versions <
7.2.0.3014 re ...)
- TODO: check
+ NOT-FOR-US: Gurock TestRail
CVE-2021-40874
RESERVED
CVE-2021-40873
@@ -1922,7 +1922,7 @@ CVE-2021-40686
CVE-2021-40685
RESERVED
CVE-2021-40684 (Talend ESB Runtime in all versions from 5.1 to 7.3.1-R2021-09,
7.2.1-R ...)
- TODO: check
+ NOT-FOR-US: Talend ESB Runtime
CVE-2021-XXXX [jwe cbc tag computation error]
- rhonabwy 0.9.13-4 (bug #993866)
[bullseye] - rhonabwy <no-dsa> (Minor issue; can be fixed via point
release)
@@ -4825,7 +4825,7 @@ CVE-2021-39406
CVE-2021-39405
RESERVED
CVE-2021-39404 (MaianAffiliate v1.0 allows an authenticated administrative
user to sav ...)
- TODO: check
+ NOT-FOR-US: MaianAffiliate
CVE-2021-39403
RESERVED
CVE-2021-39402 (MaianAffiliate v.1.0 is suffers from code injection by adding
a new pr ...)
@@ -4995,7 +4995,7 @@ CVE-2021-39341
CVE-2021-39340
RESERVED
CVE-2021-39339 (The Telefication WordPress plugin is vulnerable to Open Proxy
and Serv ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-39338
RESERVED
CVE-2021-39337
@@ -8442,11 +8442,11 @@ CVE-2021-37929
CVE-2021-37928
RESERVED
CVE-2021-37927 (Zoho ManageEngine ADManager Plus version 7110 and prior allows
account ...)
- TODO: check
+ NOT-FOR-US: Zoho ManageEngine ADManager Plus
CVE-2021-37926
RESERVED
CVE-2021-37925 (Zoho ManageEngine ADManager Plus version 7110 and prior has a
Post-Aut ...)
- TODO: check
+ NOT-FOR-US: Zoho ManageEngine ADManager Plus
CVE-2021-37924
RESERVED
CVE-2021-37923
@@ -12164,7 +12164,7 @@ CVE-2021-36262
CVE-2021-36261
RESERVED
CVE-2021-36260 (A command injection vulnerability in the web server of some
Hikvision ...)
- TODO: check
+ NOT-FOR-US: Hikvision
CVE-2021-36259
RESERVED
CVE-2021-36258
@@ -15944,9 +15944,9 @@ CVE-2021-34650 (The eID Easy WordPress plugin is
vulnerable to Reflected Cross-S
CVE-2021-34649 (The Simple Behance Portfolio WordPress plugin is vulnerable to
Reflect ...)
NOT-FOR-US: WordPress plugin
CVE-2021-34648 (The Ninja Forms WordPress plugin is vulnerable to arbitrary
email send ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-34647 (The Ninja Forms WordPress plugin is vulnerable to sensitive
informatio ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2021-34646 (Versions up to, and including, 5.4.3, of the Booster for
WooCommerce W ...)
NOT-FOR-US: WordPress plugin
CVE-2021-34645 (The Shopping Cart & eCommerce Store WordPress plugin is
vulnerable ...)
@@ -22885,7 +22885,7 @@ CVE-2021-31849
CVE-2021-31848
RESERVED
CVE-2021-31847 (Improper access control vulnerability in the repair process
for McAfee ...)
- TODO: check
+ NOT-FOR-US: McAfee
CVE-2021-31846
RESERVED
CVE-2021-31845 (A buffer overflow vulnerability in McAfee Data Loss Prevention
(DLP) D ...)
@@ -22897,7 +22897,7 @@ CVE-2021-31843 (Improper privileges management
vulnerability in McAfee Endpoint
CVE-2021-31842 (XML Entity Expansion injection vulnerability in McAfee
Endpoint Securi ...)
NOT-FOR-US: McAfee
CVE-2021-31841 (A DLL sideloading vulnerability in McAfee Agent for Windows
prior to 5 ...)
- TODO: check
+ NOT-FOR-US: McAfee
CVE-2021-31840 (A vulnerability in the preloading mechanism of specific
dynamic link l ...)
NOT-FOR-US: McAfee
CVE-2021-31839 (Improper privilege management vulnerability in McAfee Agent
for Window ...)
@@ -22907,7 +22907,7 @@ CVE-2021-31838 (A command injection vulnerability in
MVISION EDR (MVEDR) prior t
CVE-2021-31837 (Memory corruption vulnerability in the driver file component
in McAfee ...)
NOT-FOR-US: McAfee
CVE-2021-31836 (Improper privilege management vulnerability in maconfig for
McAfee Age ...)
- TODO: check
+ NOT-FOR-US: McAfee
CVE-2021-31835
RESERVED
CVE-2021-31834
@@ -46952,9 +46952,9 @@ CVE-2021-21994 (SFCB (Small Footprint CIM Broker) as
used in ESXi has an authent
CVE-2021-21993
RESERVED
CVE-2021-21992 (The vCenter Server contains a denial-of-service vulnerability
due to i ...)
- TODO: check
+ NOT-FOR-US: VMware
CVE-2021-21991 (The vCenter Server contains a local privilege escalation
vulnerability ...)
- TODO: check
+ NOT-FOR-US: VMware
CVE-2021-21990 (VMware Workspace one UEM console (2102 prior to 21.2.0.8, 2101
prior t ...)
NOT-FOR-US: VMware
CVE-2021-21989 (VMware Workstation (16.x prior to 16.1.2) and Horizon Client
for Windo ...)
@@ -173503,7 +173503,7 @@ CVE-2019-6290 (An infinite recursion issue was
discovered in eval.c in Netwide A
CVE-2019-6289 (uploads/include/dialog/select_soft.php in DedeCMS V57_UTF8_SP2
allows ...)
NOT-FOR-US: DedeCMS
CVE-2019-6288 (Edgecore ECS2020 Firmware 1.0.0.0 devices allow Unauthenticated
Comman ...)
- TODO: check
+ NOT-FOR-US: Edgecore ECS2020 Firmware
CVE-2019-6287 (In Rancher 2.0.0 through 2.1.5, project members have continued
access ...)
NOT-FOR-US: Rancher
CVE-2019-6286 (In LibSass 3.5.5, a heap-based buffer over-read exists in
Sass::Prelex ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e53c9d4e83c692185110036c587aba8f1ba0901e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e53c9d4e83c692185110036c587aba8f1ba0901e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
