Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0eb6cd18 by security tracker role at 2021-05-18T08:10:27+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,253 @@
+CVE-2021-33167
+ RESERVED
+CVE-2021-33166
+ RESERVED
+CVE-2021-33165
+ RESERVED
+CVE-2021-33164
+ RESERVED
+CVE-2021-33163
+ RESERVED
+CVE-2021-33162
+ RESERVED
+CVE-2021-33161
+ RESERVED
+CVE-2021-33160
+ RESERVED
+CVE-2021-33159
+ RESERVED
+CVE-2021-33158
+ RESERVED
+CVE-2021-33157
+ RESERVED
+CVE-2021-33156
+ RESERVED
+CVE-2021-33155
+ RESERVED
+CVE-2021-33154
+ RESERVED
+CVE-2021-33153
+ RESERVED
+CVE-2021-33152
+ RESERVED
+CVE-2021-33151
+ RESERVED
+CVE-2021-33150
+ RESERVED
+CVE-2021-33149
+ RESERVED
+CVE-2021-33148
+ RESERVED
+CVE-2021-33147
+ RESERVED
+CVE-2021-33146
+ RESERVED
+CVE-2021-33145
+ RESERVED
+CVE-2021-33144
+ RESERVED
+CVE-2021-33143
+ RESERVED
+CVE-2021-33142
+ RESERVED
+CVE-2021-33141
+ RESERVED
+CVE-2021-33140
+ RESERVED
+CVE-2021-33139
+ RESERVED
+CVE-2021-33138
+ RESERVED
+CVE-2021-33137
+ RESERVED
+CVE-2021-33136
+ RESERVED
+CVE-2021-33135
+ RESERVED
+CVE-2021-33134
+ RESERVED
+CVE-2021-33133
+ RESERVED
+CVE-2021-33132
+ RESERVED
+CVE-2021-33131
+ RESERVED
+CVE-2021-33130
+ RESERVED
+CVE-2021-33129
+ RESERVED
+CVE-2021-33128
+ RESERVED
+CVE-2021-33127
+ RESERVED
+CVE-2021-33126
+ RESERVED
+CVE-2021-33125
+ RESERVED
+CVE-2021-33124
+ RESERVED
+CVE-2021-33123
+ RESERVED
+CVE-2021-33122
+ RESERVED
+CVE-2021-33121
+ RESERVED
+CVE-2021-33120
+ RESERVED
+CVE-2021-33119
+ RESERVED
+CVE-2021-33118
+ RESERVED
+CVE-2021-33117
+ RESERVED
+CVE-2021-33116
+ RESERVED
+CVE-2021-33115
+ RESERVED
+CVE-2021-33114
+ RESERVED
+CVE-2021-33113
+ RESERVED
+CVE-2021-33112
+ RESERVED
+CVE-2021-33111
+ RESERVED
+CVE-2021-33110
+ RESERVED
+CVE-2021-33109
+ RESERVED
+CVE-2021-33108
+ RESERVED
+CVE-2021-33107
+ RESERVED
+CVE-2021-33106
+ RESERVED
+CVE-2021-33105
+ RESERVED
+CVE-2021-33104
+ RESERVED
+CVE-2021-33103
+ RESERVED
+CVE-2021-33102
+ RESERVED
+CVE-2021-33101
+ RESERVED
+CVE-2021-33100
+ RESERVED
+CVE-2021-33099
+ RESERVED
+CVE-2021-33098
+ RESERVED
+CVE-2021-33097
+ RESERVED
+CVE-2021-33096
+ RESERVED
+CVE-2021-33095
+ RESERVED
+CVE-2021-33094
+ RESERVED
+CVE-2021-33093
+ RESERVED
+CVE-2021-33092
+ RESERVED
+CVE-2021-33091
+ RESERVED
+CVE-2021-33090
+ RESERVED
+CVE-2021-33089
+ RESERVED
+CVE-2021-33088
+ RESERVED
+CVE-2021-33087
+ RESERVED
+CVE-2021-33086
+ RESERVED
+CVE-2021-33085
+ RESERVED
+CVE-2021-33084
+ RESERVED
+CVE-2021-33083
+ RESERVED
+CVE-2021-33082
+ RESERVED
+CVE-2021-33081
+ RESERVED
+CVE-2021-33080
+ RESERVED
+CVE-2021-33079
+ RESERVED
+CVE-2021-33078
+ RESERVED
+CVE-2021-33077
+ RESERVED
+CVE-2021-33076
+ RESERVED
+CVE-2021-33075
+ RESERVED
+CVE-2021-33074
+ RESERVED
+CVE-2021-33073
+ RESERVED
+CVE-2021-33072
+ RESERVED
+CVE-2021-33071
+ RESERVED
+CVE-2021-33070
+ RESERVED
+CVE-2021-33069
+ RESERVED
+CVE-2021-33068
+ RESERVED
+CVE-2021-33067
+ RESERVED
+CVE-2021-33066
+ RESERVED
+CVE-2021-33065
+ RESERVED
+CVE-2021-33064
+ RESERVED
+CVE-2021-33063
+ RESERVED
+CVE-2021-33062
+ RESERVED
+CVE-2021-33061
+ RESERVED
+CVE-2021-33060
+ RESERVED
+CVE-2021-33059
+ RESERVED
+CVE-2021-33058
+ RESERVED
+CVE-2021-33057
+ RESERVED
+CVE-2021-33056
+ RESERVED
+CVE-2021-33055
+ RESERVED
+CVE-2021-33054
+ RESERVED
+CVE-2021-33053
+ RESERVED
+CVE-2021-33052
+ RESERVED
+CVE-2021-33051
+ RESERVED
+CVE-2021-33050
+ RESERVED
+CVE-2021-33049
+ RESERVED
+CVE-2021-33048
+ RESERVED
+CVE-2021-33047
+ RESERVED
+CVE-2021-33046
+ RESERVED
+CVE-2021-33045
+ RESERVED
+CVE-2021-33044
+ RESERVED
+CVE-2020-36363
+ RESERVED
CVE-2021-3554
RESERVED
CVE-2021-3553
@@ -256,6 +506,7 @@ CVE-2021-32923
CVE-2021-32922
RESERVED
CVE-2021-32921 (An issue was discovered in Prosody before 0.11.9. It does not
use a co ...)
+ {DSA-4916-1}
- prosody 0.11.9-1 (bug #988668)
NOTE: https://www.openwall.com/lists/oss-security/2021/05/13/1
NOTE: https://prosody.im/security/advisory_20210512.txt
@@ -263,6 +514,7 @@ CVE-2021-32921 (An issue was discovered in Prosody before
0.11.9. It does not us
NOTE: https://hg.prosody.im/trunk/rev/13b84682518e
NOTE: https://hg.prosody.im/trunk/rev/6f56170ea986
CVE-2021-32920 (Prosody before 0.11.9 allows Uncontrolled CPU Consumption via
a flood ...)
+ {DSA-4916-1}
- prosody 0.11.9-1 (bug #988668)
NOTE: https://www.openwall.com/lists/oss-security/2021/05/13/1
NOTE: https://prosody.im/security/advisory_20210512.txt
@@ -270,12 +522,14 @@ CVE-2021-32920 (Prosody before 0.11.9 allows Uncontrolled
CPU Consumption via a
NOTE: https://hg.prosody.im/trunk/rev/5a484bd050a7
NOTE: https://hg.prosody.im/trunk/rev/aaf9c6b6d18d
CVE-2021-32919 (An issue was discovered in Prosody before 0.11.9. The
undocumented dia ...)
+ {DSA-4916-1}
- prosody 0.11.9-1 (bug #988668)
NOTE: https://www.openwall.com/lists/oss-security/2021/05/13/1
NOTE: https://prosody.im/security/advisory_20210512.txt
NOTE: https://hg.prosody.im/trunk/rev/6be890ca492e
NOTE: https://hg.prosody.im/trunk/rev/d0e9ffccdef9
CVE-2021-32918 (An issue was discovered in Prosody before 0.11.9. Default
settings are ...)
+ {DSA-4916-1}
- prosody 0.11.9-1 (bug #988668)
NOTE: https://www.openwall.com/lists/oss-security/2021/05/13/1
NOTE: https://prosody.im/security/advisory_20210512.txt
@@ -286,6 +540,7 @@ CVE-2021-32918 (An issue was discovered in Prosody before
0.11.9. Default settin
NOTE: https://hg.prosody.im/trunk/rev/1937b3c3efb5
NOTE: https://hg.prosody.im/trunk/rev/3413fea9e6db
CVE-2021-32917 (An issue was discovered in Prosody before 0.11.9. The proxy65
componen ...)
+ {DSA-4916-1}
- prosody 0.11.9-1 (bug #988668)
NOTE: https://www.openwall.com/lists/oss-security/2021/05/13/1
NOTE: https://prosody.im/security/advisory_20210512.txt
@@ -878,8 +1133,8 @@ CVE-2021-32624
RESERVED
CVE-2021-32623
RESERVED
-CVE-2021-32622
- RESERVED
+CVE-2021-32622 (Matrix-React-SDK is a react-based SDK for inserting a Matrix
chat/voip ...)
+ TODO: check
CVE-2021-32621
RESERVED
CVE-2021-32620
@@ -5749,14 +6004,17 @@ CVE-2021-30521
RESERVED
CVE-2021-30520
RESERVED
+ {DSA-4917-1}
- chromium 90.0.4430.212-1
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2021-30519
RESERVED
+ {DSA-4917-1}
- chromium 90.0.4430.212-1
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2021-30518
RESERVED
+ {DSA-4917-1}
- chromium 90.0.4430.212-1
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2021-30517
@@ -5765,46 +6023,57 @@ CVE-2021-30517
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2021-30516
RESERVED
+ {DSA-4917-1}
- chromium 90.0.4430.212-1
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2021-30515
RESERVED
+ {DSA-4917-1}
- chromium 90.0.4430.212-1
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2021-30514
RESERVED
+ {DSA-4917-1}
- chromium 90.0.4430.212-1
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2021-30513
RESERVED
+ {DSA-4917-1}
- chromium 90.0.4430.212-1
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2021-30512
RESERVED
+ {DSA-4917-1}
- chromium 90.0.4430.212-1
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2021-30511
RESERVED
+ {DSA-4917-1}
- chromium 90.0.4430.212-1
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2021-30510
RESERVED
+ {DSA-4917-1}
- chromium 90.0.4430.212-1
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2021-30509
RESERVED
+ {DSA-4917-1}
- chromium 90.0.4430.212-1
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2021-30508
RESERVED
+ {DSA-4917-1}
- chromium 90.0.4430.212-1
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2021-30507
RESERVED
+ {DSA-4917-1}
- chromium 90.0.4430.212-1
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2021-30506
RESERVED
+ {DSA-4917-1}
- chromium 90.0.4430.212-1
[stretch] - chromium <end-of-life> (see DSA 4562)
CVE-2021-30505
@@ -13222,7 +13491,7 @@ CVE-2021-27386 (A vulnerability has been identified in
SIMATIC HMI Comfort Outdo
NOT-FOR-US: Siemens
CVE-2021-27385 (A remote attacker could send specially crafted packets to a
SmartVNC d ...)
NOT-FOR-US: Siemens
-CVE-2021-27384 (A vulnerability has been identified in SIMATIC HMI Comfort
Outdoor Pan ...)
+CVE-2021-27384 (SmartVNC has an out-of-bounds memory access vulnerability in
the devic ...)
NOT-FOR-US: Siemens
CVE-2021-27383 (SmartVNC has a heap allocation leak vulnerability in the
server Tight ...)
NOT-FOR-US: Siemens
@@ -17562,7 +17831,7 @@ CVE-2021-25663 (A vulnerability has been identified in
Nucleus 4 (All versions &
NOT-FOR-US: Nucleus (Siemens)
CVE-2021-25662 (SmartVNC client fails to handle an exception properly if the
program e ...)
NOT-FOR-US: Siemens
-CVE-2021-25661 (A vulnerability has been identified in SIMATIC HMI Comfort
Outdoor Pan ...)
+CVE-2021-25661 (SmartVNC has an out-of-bounds memory access vulnerability that
could b ...)
NOT-FOR-US: Siemens
CVE-2021-25660 (A vulnerability has been identified in SIMATIC HMI Comfort
Outdoor Pan ...)
NOT-FOR-US: Siemens
@@ -23141,6 +23410,7 @@ CVE-2021-3052
RESERVED
CVE-2021-3051
RESERVED
+ {DSA-4917-1}
CVE-2021-3050
RESERVED
CVE-2021-3049
@@ -50089,8 +50359,8 @@ CVE-2020-24757
RESERVED
CVE-2020-24756
RESERVED
-CVE-2020-24755
- RESERVED
+CVE-2020-24755 (In Ubiquiti UniFi Video v3.10.13, when the executable starts,
its firs ...)
+ TODO: check
CVE-2020-24754
RESERVED
CVE-2020-24753 (A memory corruption vulnerability in Objective Open CBOR
Run-time (ooc ...)
@@ -56110,42 +56380,42 @@ CVE-2020-21846
RESERVED
CVE-2020-21845 (Codoforum 4.8.3 allows HTML Injection in the 'admin dashboard
Manage u ...)
NOT-FOR-US: Codoforum
-CVE-2020-21844
- RESERVED
-CVE-2020-21843
- RESERVED
-CVE-2020-21842
- RESERVED
-CVE-2020-21841
- RESERVED
-CVE-2020-21840
- RESERVED
-CVE-2020-21839
- RESERVED
-CVE-2020-21838
- RESERVED
+CVE-2020-21844 (GNU LibreDWG 0.10 is affected by: memcpy-param-overlap. The
impact is: ...)
+ TODO: check
+CVE-2020-21843 (A heap based buffer overflow vulnerability exits in GNU
LibreDWG 0.10 ...)
+ TODO: check
+CVE-2020-21842 (A heap based buffer overflow vulnerability exists in GNU
LibreDWG 0.10 ...)
+ TODO: check
+CVE-2020-21841 (A heap based buffer overflow vulnerability exits in GNU
LibreDWG 0.10 ...)
+ TODO: check
+CVE-2020-21840 (A heap based buffer overflow vulnerability exits in GNU
LibreDWG 0.10 ...)
+ TODO: check
+CVE-2020-21839 (An issue was discovered in GNU LibreDWG 0.10. Crafted input
will lead ...)
+ TODO: check
+CVE-2020-21838 (A heap based buffer overflow vulnerability exits in GNU
LibreDWG 0.10 ...)
+ TODO: check
CVE-2020-21837
RESERVED
-CVE-2020-21836
- RESERVED
-CVE-2020-21835
- RESERVED
-CVE-2020-21834
- RESERVED
-CVE-2020-21833
- RESERVED
-CVE-2020-21832
- RESERVED
-CVE-2020-21831
- RESERVED
-CVE-2020-21830
- RESERVED
+CVE-2020-21836 (A heap based buffer overflow vulnerability exists in GNU
LibreDWG 0.10 ...)
+ TODO: check
+CVE-2020-21835 (A null pointer deference issue exists in GNU LibreDWG 0.10 via
read_20 ...)
+ TODO: check
+CVE-2020-21834 (A null pointer deference issue exists in GNU LibreDWG 0.10 via
get_bmp ...)
+ TODO: check
+CVE-2020-21833 (A heap based buffer overflow vulnerability exits in GNU
LibreDWG 0.10 ...)
+ TODO: check
+CVE-2020-21832 (A heap based buffer overflow vulnerability exists in GNU
LibreDWG 0.10 ...)
+ TODO: check
+CVE-2020-21831 (A heap based buffer overflow vulnerability exists in GNU
LibreDWG 0.10 ...)
+ TODO: check
+CVE-2020-21830 (A heap based buffer overflow vulneraibility exists in GNU
LibreDWG 0.1 ...)
+ TODO: check
CVE-2020-21829
RESERVED
CVE-2020-21828
RESERVED
-CVE-2020-21827
- RESERVED
+CVE-2020-21827 (A heap based buffer overflow vulnerability exists in GNU
LibreDWG 0.10 ...)
+ TODO: check
CVE-2020-21826
RESERVED
CVE-2020-21825
@@ -63422,16 +63692,16 @@ CVE-2020-18200
RESERVED
CVE-2020-18199
RESERVED
-CVE-2020-18198
- RESERVED
+CVE-2020-18198 (Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows
remote at ...)
+ TODO: check
CVE-2020-18197
RESERVED
CVE-2020-18196
RESERVED
-CVE-2020-18195
- RESERVED
-CVE-2020-18194
- RESERVED
+CVE-2020-18195 (Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows
remote at ...)
+ TODO: check
+CVE-2020-18194 (Cross Site Scripting (XSS) in emlog v6.0.0 allows remote
attackers to ...)
+ TODO: check
CVE-2020-18193
RESERVED
CVE-2020-18192
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0eb6cd186d60edaf61c5ba34d39c65fd0ab9ea47
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0eb6cd186d60edaf61c5ba34d39c65fd0ab9ea47
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
