Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
973e7eb9 by Salvatore Bonaccorso at 2021-10-23T10:20:00+02:00
Process several NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -236,31 +236,31 @@ CVE-2021-3895
CVE-2021-23192
RESERVED
CVE-2020-36502 (Swift File Transfer Mobile v1.1.2 was discovered to contain a
cross-si ...)
- TODO: check
+ NOT-FOR-US: Swift File Transfer Mobile
CVE-2020-36501 (Multiple cross-site scripting (XSS) vulnerabilities in the
Support mod ...)
- TODO: check
+ NOT-FOR-US: SugarCRM
CVE-2020-36500
RESERVED
CVE-2020-36499 (TAO Open Source Assessment Platform v3.3.0 RC02 was discovered
to cont ...)
- TODO: check
+ NOT-FOR-US: TAO Open Source Assessment Platform
CVE-2020-36498 (Macrob7 Macs Framework Content Management System - 1.14f
contains a cr ...)
- TODO: check
+ NOT-FOR-US: Macrob7 Macs Framework Content Management System
CVE-2020-36497 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site
scripti ...)
- TODO: check
+ NOT-FOR-US: DedeCMS
CVE-2020-36496 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site
scripti ...)
- TODO: check
+ NOT-FOR-US: DedeCMS
CVE-2020-36495 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site
scripti ...)
- TODO: check
+ NOT-FOR-US: DedeCMS
CVE-2020-36494 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site
scripti ...)
- TODO: check
+ NOT-FOR-US: DedeCMS
CVE-2020-36493 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site
scripti ...)
- TODO: check
+ NOT-FOR-US: DedeCMS
CVE-2020-36492 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site
scripti ...)
- TODO: check
+ NOT-FOR-US: DedeCMS
CVE-2020-36491 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site
scripti ...)
- TODO: check
+ NOT-FOR-US: DedeCMS
CVE-2020-36490 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site
scripti ...)
- TODO: check
+ NOT-FOR-US: DedeCMS
CVE-2021-XXXX [RUSTSEC-2020-0159: Potential segfault in localtime_r
invocations]
- rust-chrono <unfixed> (bug #996913)
NOTE: https://rustsec.org/advisories/RUSTSEC-2020-0159.html
@@ -2005,13 +2005,13 @@ CVE-2021-42394
CVE-2021-42393
RESERVED
CVE-2020-36489 (Dropouts Technologies LLP Air Share v1.2 was discovered to
contain a c ...)
- TODO: check
+ NOT-FOR-US: Dropouts Technologies LLP Air Share
CVE-2020-36488 (An issue in the FTP server of Sky File v2.1.0 allows attackers
to perf ...)
- TODO: check
+ NOT-FOR-US: Sky File
CVE-2020-36487
RESERVED
CVE-2020-36486 (Swift File Transfer Mobile v1.1.2 and below was discovered to
contain ...)
- TODO: check
+ NOT-FOR-US: Swift File Transfer Mobile
CVE-2021-42392
RESERVED
CVE-2021-42391
@@ -2105,7 +2105,7 @@ CVE-2021-42348
CVE-2021-42347
RESERVED
CVE-2020-36485 (Portable Ltd Playable v9.18 was discovered to contain an
arbitrary fil ...)
- TODO: check
+ NOT-FOR-US: Portable Ltd Playable
CVE-2021-42346
RESERVED
CVE-2021-42345
@@ -2528,7 +2528,7 @@ CVE-2021-42260 (TinyXML through 2.6.2 has an infinite
loop in TiXmlParsingData::
CVE-2021-42259
RESERVED
CVE-2021-42258 (BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1
allows SQL i ...)
- TODO: check
+ NOT-FOR-US: BQE BillQuick Web Suite
CVE-2021-42257 (check_smart before 6.9.1 allows unintended drive access by an
unprivil ...)
NOT-FOR-US: check_smart Icinga plugin
CVE-2021-42256
@@ -62850,35 +62850,35 @@ CVE-2020-28971 (An issue was discovered on Western
Digital My Cloud OS 5 devices
CVE-2020-28970 (An issue was discovered on Western Digital My Cloud OS 5
devices befor ...)
NOT-FOR-US: Western Digital My Cloud OS 5 devices
CVE-2020-28969 (Aplioxio PDF ShapingUp 5.0.0.139 contains a buffer overflow
which allo ...)
- TODO: check
+ NOT-FOR-US: Aplioxio PDF ShapingUp
CVE-2020-28968 (Draytek VigorAP 1000C contains a stored cross-site scripting
(XSS) vul ...)
- TODO: check
+ NOT-FOR-US: Draytek VigorAP 1000C
CVE-2020-28967 (FlashGet v1.9.6 was discovered to contain a buffer overflow in
the 'cu ...)
- TODO: check
+ NOT-FOR-US: FlashGet
CVE-2020-28966
RESERVED
CVE-2020-28965
RESERVED
CVE-2020-28964 (Internet Download Manager 6.37.11.1 was discovered to contain
a stack ...)
- TODO: check
+ NOT-FOR-US: Internet Download Manager
CVE-2020-28963 (Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was
discovered to ...)
- TODO: check
+ NOT-FOR-US: Passcovery Co. Ltd ZIP Password Recovery
CVE-2020-28962
RESERVED
CVE-2020-28961 (Perfex CRM v2.4.4 was discovered to contain a stored
cross-site script ...)
- TODO: check
+ NOT-FOR-US: Perfex CRM
CVE-2020-28960 (Chichen Tech CMS v1.0 was discovered to contain multiple SQL
injection ...)
- TODO: check
+ NOT-FOR-US: Chichen Tech CMS
CVE-2020-28959
RESERVED
CVE-2020-28958
RESERVED
CVE-2020-28957 (Multiple cross-site scripting (XSS) vulnerabilities in the
Customer Ad ...)
- TODO: check
+ NOT-FOR-US: Foxlor
CVE-2020-28956 (Multiple cross-site scripting (XSS) vulnerabilities in the
Sales modul ...)
- TODO: check
+ NOT-FOR-US: SugarCRM
CVE-2020-28955 (SugarCRM v6.5.18 was discovered to contain a cross-site
scripting (XSS ...)
- TODO: check
+ NOT-FOR-US: SugarCRM
CVE-2020-28954 (web/controllers/ApiController.groovy in BigBlueButton before
2.2.29 la ...)
NOT-FOR-US: BigBlueButton
CVE-2020-28953 (In BigBlueButton before 2.2.29, a user can vote more than once
in a si ...)
@@ -80236,57 +80236,57 @@ CVE-2020-23063
CVE-2020-23062
RESERVED
CVE-2020-23061 (Dropouts Technologies LLP Super Backup v2.0.5 was discovered
to contai ...)
- TODO: check
+ NOT-FOR-US: Dropouts Technologies LLP Super Backup
CVE-2020-23060 (Internet Download Manager 6.37.11.1 was discovered to contain
a stack ...)
- TODO: check
+ NOT-FOR-US: Internet Download Manager
CVE-2020-23059
RESERVED
CVE-2020-23058 (An issue in the authentication mechanism in Nong Ge File
Explorer v1.4 ...)
- TODO: check
+ NOT-FOR-US: Nong Ge File Explorer
CVE-2020-23057
RESERVED
CVE-2020-23056
RESERVED
CVE-2020-23055 (ANCOM WLAN Controller (Wireless Series & Hotspot) WLC-1000
& W ...)
- TODO: check
+ NOT-FOR-US: ANCOM WLAN Controller (Wireless Series & Hotspot) WLC-1000
& WLC-4006
CVE-2020-23054 (A cross-site scripting (XSS) vulnerability in NSK User Agent
String Sw ...)
- TODO: check
+ NOT-FOR-US: NSK User Agent String Switcher Service
CVE-2020-23053
RESERVED
CVE-2020-23052 (Catalyst IT Ltd Mahara CMS v19.10.2 was discovered to contain
multiple ...)
TODO: check
CVE-2020-23051 (Phpgurukul User Registration & User Management System v2.0
was dis ...)
- TODO: check
+ NOT-FOR-US: Phpgurukul User Registration & User Management System
CVE-2020-23050 (TAO Open Source Assessment Platform v3.3.0 RC02 was discovered
to cont ...)
- TODO: check
+ NOT-FOR-US: TAO Open Source Assessment Platform
CVE-2020-23049 (Fork CMS Content Management System v5.8.0 was discovered to
contain a ...)
- TODO: check
+ NOT-FOR-US: Fork CMS
CVE-2020-23048 (SeedDMS Content Management System v6.0.7 contains a persistent
cross-s ...)
- TODO: check
+ NOT-FOR-US: SeedDMS CMS
CVE-2020-23047 (Macrob7 Macs Framework Content Management System - 1.14f was
discovere ...)
- TODO: check
+ NOT-FOR-US: Macrob7 Macs Framework Content Management System
CVE-2020-23046 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site
scripti ...)
- TODO: check
+ NOT-FOR-US: DedeCMS
CVE-2020-23045 (Macrob7 Macs Framework Content Management System - 1.14f was
discovere ...)
- TODO: check
+ NOT-FOR-US: Macrob7 Macs Framework Content Management System
CVE-2020-23044 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site
scripti ...)
- TODO: check
+ NOT-FOR-US: DedeCMS
CVE-2020-23043 (Tran Tu Air Sender v1.0.2 was discovered to contain an
arbitrary file ...)
- TODO: check
+ NOT-FOR-US: Tran Tu Air Sender
CVE-2020-23042 (Dropouts Technologies LLP Super Backup v2.0.5 was discovered
to contai ...)
- TODO: check
+ NOT-FOR-US: Dropouts Technologies LLP Super Backup
CVE-2020-23041 (Dropouts Technologies LLP Air Share v1.2 was discovered to
contain a c ...)
- TODO: check
+ NOT-FOR-US: Dropouts Technologies LLP Air Share
CVE-2020-23040 (Sky File v2.1.0 contains a directory traversal vulnerability
in the FT ...)
- TODO: check
+ NOT-FOR-US: Sky File
CVE-2020-23039 (Folder Lock v3.4.5 was discovered to contain a stored
cross-site scrip ...)
- TODO: check
+ NOT-FOR-US: Folder Lock
CVE-2020-23038 (Swift File Transfer Mobile v1.1.2 and below was discovered to
contain ...)
- TODO: check
+ NOT-FOR-US: Swift File Transfer Mobile
CVE-2020-23037 (Portable Ltd Playable v9.18 contains a code injection
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Portable Ltd Playable
CVE-2020-23036 (MEDIA NAVI Inc SMACom v1.2 was discovered to contain an
insecure sessi ...)
- TODO: check
+ NOT-FOR-US: MEDIA NAVI Inc SMACom
CVE-2020-23035
RESERVED
CVE-2020-23034
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/973e7eb9b008523a2dc510671156c557430ea25f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/973e7eb9b008523a2dc510671156c557430ea25f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
