Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
cd6e95b4 by Salvatore Bonaccorso at 2020-06-30T10:47:04+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4780,7 +4780,7 @@ CVE-2020-13425 (TrackR devices through 2020-05-06 allow
attackers to trigger the
CVE-2020-13424 (The XCloner component before 3.5.4 for Joomla! allows
Authenticated Lo ...)
NOT-FOR-US: Joomla addon
CVE-2020-13423 (Form Builder 2.1.0 for Magento has multiple XSS issues that
can be exp ...)
- TODO: check
+ NOT-FOR-US: Form Builder for Magento
CVE-2020-13422
RESERVED
CVE-2020-13421
@@ -8136,17 +8136,17 @@ CVE-2020-12039 (Baxter Sigma Spectrum Infusion Pumps
Sigma Spectrum Infusion Sys
CVE-2020-12038 (Products that use EDS Subsystem: Version 28.0.1 and prior
(FactoryTalk ...)
NOT-FOR-US: Rockwell Automation
CVE-2020-12037 (Baxter PrismaFlex all versions, PrisMax all versions prior to
3.x, The ...)
- TODO: check
+ NOT-FOR-US: Baxter
CVE-2020-12036 (Baxter PrismaFlex all versions, PrisMax all versions prior to
3.x, The ...)
- TODO: check
+ NOT-FOR-US: Baxter
CVE-2020-12035 (Baxter PrismaFlex all versions, PrisMax all versions prior to
3.x, The ...)
- TODO: check
+ NOT-FOR-US: Baxter
CVE-2020-12034 (Products that use EDS Subsystem: Version 28.0.1 and prior
(FactoryTalk ...)
NOT-FOR-US: Rockwell Automation
CVE-2020-12033 (In Rockwell Automation FactoryTalk Services Platform, all
versions, th ...)
NOT-FOR-US: Rockwell Automation
CVE-2020-12032 (Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix
EM1200 Vers ...)
- TODO: check
+ NOT-FOR-US: Baxter
CVE-2020-12031
RESERVED
CVE-2020-12030
@@ -8162,7 +8162,7 @@ CVE-2020-12026 (Advantech WebAccess Node, Version 8.4.4
and prior, Version 9.0.0
CVE-2020-12025
RESERVED
CVE-2020-12024 (Baxter ExactaMix EM 2400 versions 1.10, 1.11, 1.13, 1.14 and
ExactaMix ...)
- TODO: check
+ NOT-FOR-US: Baxter
CVE-2020-12023 (Philips IntelliBridge Enterprise (IBE), Versions B.12 and
prior, Intel ...)
NOT-FOR-US: Philips
CVE-2020-12022 (Advantech WebAccess Node, Version 8.4.4 and prior, Version
9.0.0. An i ...)
@@ -8170,7 +8170,7 @@ CVE-2020-12022 (Advantech WebAccess Node, Version 8.4.4
and prior, Version 9.0.0
CVE-2020-12021 (In OSIsoft PI Web API 2019 Patch 1 (1.12.0.6346) and all
previous vers ...)
NOT-FOR-US: OSIsoft PI Web
CVE-2020-12020 (Baxter ExactaMix EM 2400 Versions 1.10, 1.11, and 1.13 and
ExactaMix E ...)
- TODO: check
+ NOT-FOR-US: Baxter
CVE-2020-12019 (WebAccess Node Version 8.4.4 and prior is vulnerable to a
stack-based ...)
NOT-FOR-US: WebAccess Node
CVE-2020-12018 (Advantech WebAccess Node, Version 8.4.4 and prior, Version
9.0.0. An o ...)
@@ -8178,7 +8178,7 @@ CVE-2020-12018 (Advantech WebAccess Node, Version 8.4.4
and prior, Version 9.0.0
CVE-2020-12017 (GE Grid Solutions Reason RT Clocks, RT430, RT431, and RT434,
all firmw ...)
NOT-FOR-US: GE Grid Solutions Reason RT Clocks
CVE-2020-12016 (Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix
EM2400 Vers ...)
- TODO: check
+ NOT-FOR-US: Baxter
CVE-2020-12015
RESERVED
CVE-2020-12014 (Advantech WebAccess Node, Version 8.4.4 and prior, Version
9.0.0. Inpu ...)
@@ -8186,7 +8186,7 @@ CVE-2020-12014 (Advantech WebAccess Node, Version 8.4.4
and prior, Version 9.0.0
CVE-2020-12013
RESERVED
CVE-2020-12012 (Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix
EM2400 Vers ...)
- TODO: check
+ NOT-FOR-US: Baxter
CVE-2020-12011
RESERVED
CVE-2020-12010 (Advantech WebAccess Node, Version 8.4.4 and prior, Version
9.0.0. Mult ...)
@@ -8194,7 +8194,7 @@ CVE-2020-12010 (Advantech WebAccess Node, Version 8.4.4
and prior, Version 9.0.0
CVE-2020-12009
RESERVED
CVE-2020-12008 (Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix
EM1200 Vers ...)
- TODO: check
+ NOT-FOR-US: Baxter
CVE-2020-12007
RESERVED
CVE-2020-12006 (Advantech WebAccess Node, Version 8.4.4 and prior, Version
9.0.0. Mult ...)
@@ -19668,19 +19668,19 @@ CVE-2019-20418
CVE-2019-20417
RESERVED
CVE-2019-20416 (Affected versions of Atlassian Jira Server and Data Center
allow remot ...)
- TODO: check
+ NOT-FOR-US: Atlassian
CVE-2019-20415 (Atlassian Jira Server and Data Center in affected versions
allows remo ...)
- TODO: check
+ NOT-FOR-US: Atlassian
CVE-2019-20414 (Affected versions of Atlassian Jira Server and Data Center
allow remot ...)
- TODO: check
+ NOT-FOR-US: Atlassian
CVE-2019-20413 (Affected versions of Atlassian Jira Server and Data Center
allow remot ...)
- TODO: check
+ NOT-FOR-US: Atlassian
CVE-2019-20412 (The Convert Sub-Task to Issue page in affected versions of
Atlassian J ...)
- TODO: check
+ NOT-FOR-US: Atlassian
CVE-2019-20411 (Affected versions of Atlassian Jira Server and Data Center
allow remot ...)
- TODO: check
+ NOT-FOR-US: Atlassian
CVE-2019-20410 (Affected versions of Atlassian Jira Server and Data Center
allow remot ...)
- TODO: check
+ NOT-FOR-US: Atlassian
CVE-2019-20409 (The way in which velocity templates were used in Atlassian
Jira Server ...)
NOT-FOR-US: Atlassian
CVE-2019-20408
@@ -20608,23 +20608,23 @@ CVE-2020-7512 (A CWE-1103: Use of Platform-Dependent
Third Party Components with
CVE-2020-7511 (A CWE-327: Use of a Broken or Risky Cryptographic Algorithm
vulnerabil ...)
TODO: check
CVE-2020-7510 (A CWE-200: Information Exposure vulnerability exists in Easergy
T300 ( ...)
- TODO: check
+ NOT-FOR-US: Easergy T300
CVE-2020-7509 (A CWE-269: Improper privilege management (write) vulnerability
exists ...)
- TODO: check
+ NOT-FOR-US: Easergy T300
CVE-2020-7508 (A CWE-307 Improper Restriction of Excessive Authentication
Attempts vu ...)
- TODO: check
+ NOT-FOR-US: Easergy T300
CVE-2020-7507 (A CWE-400: Uncontrolled Resource Consumption vulnerability
exists in E ...)
- TODO: check
+ NOT-FOR-US: Easergy T300
CVE-2020-7506 (A CWE-538: File and Directory Information Exposure
vulnerability exist ...)
- TODO: check
+ NOT-FOR-US: Easergy T300
CVE-2020-7505 (A CWE-494 Download of Code Without Integrity Check
vulnerability exist ...)
- TODO: check
+ NOT-FOR-US: Easergy T300
CVE-2020-7504 (A CWE-20: Improper Input Validation vulnerability exists in
Easergy T3 ...)
- TODO: check
+ NOT-FOR-US: Easergy T300
CVE-2020-7503 (A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability
exists in E ...)
- TODO: check
+ NOT-FOR-US: Easergy T300
CVE-2020-7502 (A CWE-787: Out-of-bounds Write vulnerability exists in Modicon
M218 Lo ...)
- TODO: check
+ NOT-FOR-US: Modicon
CVE-2020-7501 (A CWE-798: Use of Hard-coded Credentials vulnerability exists
in Vijeo ...)
NOT-FOR-US: Schneider
CVE-2020-7500 (A CWE-89:Improper Neutralization of Special Elements used in an
SQL Co ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd6e95b4c81f7c232dc0c34a1ba31299f2b69aa0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd6e95b4c81f7c232dc0c34a1ba31299f2b69aa0
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
