Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 49fc4d91 by Salvatore Bonaccorso at 2021-10-01T22:35:04+02:00 Process some more NFUs - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -2020,13 +2020,13 @@ CVE-2021-40930 CVE-2021-40929 RESERVED CVE-2021-40928 (Cross-site scripting (XSS) vulnerability in index.php in FlexTV beta d ...) - TODO: check + NOT-FOR-US: FlexTV CVE-2021-40927 (Cross-site scripting (XSS) vulnerability in callback.php in Spotify-fo ...) - TODO: check + NOT-FOR-US: Spotify-for-Alfred CVE-2021-40926 (Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in g ...) TODO: check CVE-2021-40925 (Cross-site scripting (XSS) vulnerability in dompdf/dompdf/www/demo.php ...) - TODO: check + NOT-FOR-US: infaveo-helpdesk CVE-2021-40924 (Cross-site scripting (XSS) vulnerability in install/index.php in bugs ...) TODO: check CVE-2021-40923 (Cross-site scripting (XSS) vulnerability in install/index.php in bugs ...) @@ -2034,7 +2034,7 @@ CVE-2021-40923 (Cross-site scripting (XSS) vulnerability in install/index.php in CVE-2021-40922 (Cross-site scripting (XSS) vulnerability in install/index.php in bugs ...) TODO: check CVE-2021-40921 (Cross-site scripting (XSS) vulnerability in _contactform.inc.php in De ...) - TODO: check + NOT-FOR-US: Detector CVE-2021-40920 RESERVED CVE-2021-40919 @@ -8734,9 +8734,9 @@ CVE-2021-38106 CVE-2021-38105 RESERVED CVE-2021-38104 (IPPP72.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Ou ...) - TODO: check + NOT-FOR-US: Corel Presentations CVE-2021-38103 (IBJPG2.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Ou ...) - TODO: check + NOT-FOR-US: Corel Presentations CVE-2021-38102 RESERVED CVE-2021-38101 @@ -8744,13 +8744,13 @@ CVE-2021-38101 CVE-2021-38100 RESERVED CVE-2021-38099 (CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by ...) - TODO: check + NOT-FOR-US: Corel PhotoPaint Standard CVE-2021-38098 RESERVED CVE-2021-38097 (Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnera ...) - TODO: check + NOT-FOR-US: Corel PDF Fusion CVE-2021-38096 (Coreip.dll in Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds ...) - TODO: check + NOT-FOR-US: Corel PDF Fusion CVE-2021-38095 (The REST API in Planview Spigit 4.5.3 allows remote unauthenticated at ...) NOT-FOR-US: Planview Spigit CVE-2021-38094 (Integer Overflow vulnerability in function filter_sobel in libavfilter ...) @@ -15224,7 +15224,7 @@ CVE-2021-35299 (Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows atta CVE-2021-35298 (Cross Site Scripting (XSS) in Zammad 1.0.x up to 4.0.0 allows remote a ...) - zammad <itp> (bug #841355) CVE-2021-35297 (Scalabium dBase Viewer version 2.6 (Build 5.751) is vulnerable to remo ...) - TODO: check + NOT-FOR-US: Scalabium dBase Viewer CVE-2021-35296 RESERVED CVE-2021-35295 @@ -30784,11 +30784,11 @@ CVE-2021-29112 CVE-2021-29111 RESERVED CVE-2021-29110 (Stored cross-site scripting (XSS) issue in Esri Portal for ArcGIS may ...) - TODO: check + NOT-FOR-US: Esri CVE-2021-29109 (A reflected XSS vulnerability in Esri Portal for ArcGIS version 10.9 a ...) - TODO: check + NOT-FOR-US: Esri CVE-2021-29108 (There is an privilege escalation vulnerability in organization-specifi ...) - TODO: check + NOT-FOR-US: Esri CVE-2021-29107 (A stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Man ...) NOT-FOR-US: ArcGIS Server Manager CVE-2021-29106 (A reflected Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Se ...) @@ -43424,7 +43424,7 @@ CVE-2021-23895 (Deserialization of untrusted data vulnerability in McAfee Databa CVE-2021-23894 (Deserialization of untrusted data vulnerability in McAfee Database Sec ...) NOT-FOR-US: McAfee CVE-2021-23893 (Privilege Escalation vulnerability in a Windows system driver of McAfe ...) - TODO: check + NOT-FOR-US: McAfee CVE-2021-23892 (By exploiting a time of check to time of use (TOCTOU) race condition d ...) NOT-FOR-US: McAfee CVE-2021-23891 (Privilege Escalation vulnerability in McAfee Total Protection (MTP) pr ...) @@ -80717,11 +80717,11 @@ CVE-2020-21016 CVE-2020-21015 RESERVED CVE-2020-21014 (emlog v6.0.0 contains an arbitrary file deletion vulnerability in admi ...) - TODO: check + NOT-FOR-US: emlog CVE-2020-21013 (emlog v6.0.0 contains a SQL injection via /admin/comment.php. ...) - TODO: check + NOT-FOR-US: emlog CVE-2020-21012 (Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to ...) - TODO: check + NOT-FOR-US: Sourcecodester Hotel and Lodge Management System CVE-2020-21011 RESERVED CVE-2020-21010 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/49fc4d91f15a717471cf9725fd246bc1ddf9010a -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/49fc4d91f15a717471cf9725fd246bc1ddf9010a You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits