Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
339fc9fe by Salvatore Bonaccorso at 2020-05-18T22:25:50+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -17,9 +17,9 @@ CVE-2020-13138
CVE-2020-13137
RESERVED
CVE-2020-13136 (D-Link DSP-W215 1.26b03 devices send an obfuscated hash that
can be re ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2020-13135 (D-Link DSP-W215 1.26b03 devices allow information disclosure
by interc ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2020-13134
RESERVED
CVE-2020-13133
@@ -2055,15 +2055,15 @@ CVE-2020-12261 (Open-AudIT 3.3.0 allows an XSS attack
after login. ...)
CVE-2020-12260
RESERVED
CVE-2020-12259 (rConfig 3.9.4 is vulnerable to reflected XSS. The
configDevice.php fil ...)
- TODO: check
+ NOT-FOR-US: rConfig
CVE-2020-12258 (rConfig 3.9.4 is vulnerable to session fixation because
session expiry ...)
- TODO: check
+ NOT-FOR-US: rConfig
CVE-2020-12257 (rConfig 3.9.4 is vulnerable to cross-site request forgery
(CSRF) becau ...)
- TODO: check
+ NOT-FOR-US: rConfig
CVE-2020-12256 (rConfig 3.9.4 is vulnerable to reflected XSS. The
devicemgmnt.php file ...)
- TODO: check
+ NOT-FOR-US: rConfig
CVE-2020-12255 (rConfig 3.9.4 is vulnerable to remote code execution due to
improper v ...)
- TODO: check
+ NOT-FOR-US: rConfig
CVE-2020-12254 (Avira Antivirus before 5.0.2003.1821 on Windows allows
privilege escal ...)
NOT-FOR-US: Avira Antivirus
CVE-2019-20789 (Croogo before 3.0.7 allows XSS via the title to
admin/menus/menus or a ...)
@@ -4916,11 +4916,11 @@ CVE-2020-11553 (An issue was discovered in Castle Rock
SNMPc Online 12.10.10 bef
CVE-2020-11552
RESERVED
CVE-2020-11551 (An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi
Add-on ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2020-11550 (An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi
Add-on ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2020-11549 (An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi
Add-on ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2020-11548 (The Search Meter plugin through 2.13.2 for WordPress allows
user input ...)
NOT-FOR-US: Search Meter plugin for WordPress
CVE-2020-11547 (PRTG Network Monitor before 20.1.57.1745 allows remote
unauthenticated ...)
@@ -9913,7 +9913,7 @@ CVE-2020-9526
CVE-2020-9525
RESERVED
CVE-2020-9524 (Cross Site scripting vulnerability on Micro Focus Enterprise
Server an ...)
- TODO: check
+ NOT-FOR-US: Micro Focus
CVE-2020-9523 (Insufficiently protected credentials vulnerability on Micro
Focus ente ...)
NOT-FOR-US: Micro Focus
CVE-2020-9522
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/339fc9fe7aaab49f4d1b6ec9998483f8d8752b7c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/339fc9fe7aaab49f4d1b6ec9998483f8d8752b7c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
