Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1d2d4aac by security tracker role at 2021-10-23T08:10:17+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,19 @@
+CVE-2021-42852
+ RESERVED
+CVE-2021-42851
+ RESERVED
+CVE-2021-42850
+ RESERVED
+CVE-2021-42849
+ RESERVED
+CVE-2021-42848
+ RESERVED
+CVE-2021-3899
+ RESERVED
+CVE-2021-3898
+ RESERVED
+CVE-2021-3897
+ RESERVED
CVE-2021-42847
RESERVED
CVE-2021-42846
@@ -219,32 +235,32 @@ CVE-2021-3895
RESERVED
CVE-2021-23192
RESERVED
-CVE-2020-36502
- RESERVED
-CVE-2020-36501
- RESERVED
+CVE-2020-36502 (Swift File Transfer Mobile v1.1.2 was discovered to contain a
cross-si ...)
+ TODO: check
+CVE-2020-36501 (Multiple cross-site scripting (XSS) vulnerabilities in the
Support mod ...)
+ TODO: check
CVE-2020-36500
RESERVED
-CVE-2020-36499
- RESERVED
-CVE-2020-36498
- RESERVED
-CVE-2020-36497
- RESERVED
-CVE-2020-36496
- RESERVED
-CVE-2020-36495
- RESERVED
-CVE-2020-36494
- RESERVED
-CVE-2020-36493
- RESERVED
-CVE-2020-36492
- RESERVED
-CVE-2020-36491
- RESERVED
-CVE-2020-36490
- RESERVED
+CVE-2020-36499 (TAO Open Source Assessment Platform v3.3.0 RC02 was discovered
to cont ...)
+ TODO: check
+CVE-2020-36498 (Macrob7 Macs Framework Content Management System - 1.14f
contains a cr ...)
+ TODO: check
+CVE-2020-36497 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site
scripti ...)
+ TODO: check
+CVE-2020-36496 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site
scripti ...)
+ TODO: check
+CVE-2020-36495 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site
scripti ...)
+ TODO: check
+CVE-2020-36494 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site
scripti ...)
+ TODO: check
+CVE-2020-36493 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site
scripti ...)
+ TODO: check
+CVE-2020-36492 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site
scripti ...)
+ TODO: check
+CVE-2020-36491 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site
scripti ...)
+ TODO: check
+CVE-2020-36490 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site
scripti ...)
+ TODO: check
CVE-2021-XXXX [RUSTSEC-2020-0159: Potential segfault in localtime_r
invocations]
- rust-chrono <unfixed> (bug #996913)
NOTE: https://rustsec.org/advisories/RUSTSEC-2020-0159.html
@@ -1988,14 +2004,14 @@ CVE-2021-42394
RESERVED
CVE-2021-42393
RESERVED
-CVE-2020-36489
- RESERVED
-CVE-2020-36488
- RESERVED
+CVE-2020-36489 (Dropouts Technologies LLP Air Share v1.2 was discovered to
contain a c ...)
+ TODO: check
+CVE-2020-36488 (An issue in the FTP server of Sky File v2.1.0 allows attackers
to perf ...)
+ TODO: check
CVE-2020-36487
RESERVED
-CVE-2020-36486
- RESERVED
+CVE-2020-36486 (Swift File Transfer Mobile v1.1.2 and below was discovered to
contain ...)
+ TODO: check
CVE-2021-42392
RESERVED
CVE-2021-42391
@@ -2088,8 +2104,8 @@ CVE-2021-42348
RESERVED
CVE-2021-42347
RESERVED
-CVE-2020-36485
- RESERVED
+CVE-2020-36485 (Portable Ltd Playable v9.18 was discovered to contain an
arbitrary fil ...)
+ TODO: check
CVE-2021-42346
RESERVED
CVE-2021-42345
@@ -2511,8 +2527,8 @@ CVE-2021-42260 (TinyXML through 2.6.2 has an infinite
loop in TiXmlParsingData::
NOTE: https://sourceforge.net/p/tinyxml/bugs/141/
CVE-2021-42259
RESERVED
-CVE-2021-42258
- RESERVED
+CVE-2021-42258 (BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1
allows SQL i ...)
+ TODO: check
CVE-2021-42257 (check_smart before 6.9.1 allows unintended drive access by an
unprivil ...)
NOT-FOR-US: check_smart Icinga plugin
CVE-2021-42256
@@ -62833,36 +62849,36 @@ CVE-2020-28971 (An issue was discovered on Western
Digital My Cloud OS 5 devices
NOT-FOR-US: Western Digital My Cloud OS 5 devices
CVE-2020-28970 (An issue was discovered on Western Digital My Cloud OS 5
devices befor ...)
NOT-FOR-US: Western Digital My Cloud OS 5 devices
-CVE-2020-28969
- RESERVED
-CVE-2020-28968
- RESERVED
-CVE-2020-28967
- RESERVED
+CVE-2020-28969 (Aplioxio PDF ShapingUp 5.0.0.139 contains a buffer overflow
which allo ...)
+ TODO: check
+CVE-2020-28968 (Draytek VigorAP 1000C contains a stored cross-site scripting
(XSS) vul ...)
+ TODO: check
+CVE-2020-28967 (FlashGet v1.9.6 was discovered to contain a buffer overflow in
the 'cu ...)
+ TODO: check
CVE-2020-28966
RESERVED
CVE-2020-28965
RESERVED
-CVE-2020-28964
- RESERVED
-CVE-2020-28963
- RESERVED
+CVE-2020-28964 (Internet Download Manager 6.37.11.1 was discovered to contain
a stack ...)
+ TODO: check
+CVE-2020-28963 (Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was
discovered to ...)
+ TODO: check
CVE-2020-28962
RESERVED
-CVE-2020-28961
- RESERVED
-CVE-2020-28960
- RESERVED
+CVE-2020-28961 (Perfex CRM v2.4.4 was discovered to contain a stored
cross-site script ...)
+ TODO: check
+CVE-2020-28960 (Chichen Tech CMS v1.0 was discovered to contain multiple SQL
injection ...)
+ TODO: check
CVE-2020-28959
RESERVED
CVE-2020-28958
RESERVED
-CVE-2020-28957
- RESERVED
-CVE-2020-28956
- RESERVED
-CVE-2020-28955
- RESERVED
+CVE-2020-28957 (Multiple cross-site scripting (XSS) vulnerabilities in the
Customer Ad ...)
+ TODO: check
+CVE-2020-28956 (Multiple cross-site scripting (XSS) vulnerabilities in the
Sales modul ...)
+ TODO: check
+CVE-2020-28955 (SugarCRM v6.5.18 was discovered to contain a cross-site
scripting (XSS ...)
+ TODO: check
CVE-2020-28954 (web/controllers/ApiController.groovy in BigBlueButton before
2.2.29 la ...)
NOT-FOR-US: BigBlueButton
CVE-2020-28953 (In BigBlueButton before 2.2.29, a user can vote more than once
in a si ...)
@@ -80219,58 +80235,58 @@ CVE-2020-23063
RESERVED
CVE-2020-23062
RESERVED
-CVE-2020-23061
- RESERVED
-CVE-2020-23060
- RESERVED
+CVE-2020-23061 (Dropouts Technologies LLP Super Backup v2.0.5 was discovered
to contai ...)
+ TODO: check
+CVE-2020-23060 (Internet Download Manager 6.37.11.1 was discovered to contain
a stack ...)
+ TODO: check
CVE-2020-23059
RESERVED
-CVE-2020-23058
- RESERVED
+CVE-2020-23058 (An issue in the authentication mechanism in Nong Ge File
Explorer v1.4 ...)
+ TODO: check
CVE-2020-23057
RESERVED
CVE-2020-23056
RESERVED
-CVE-2020-23055
- RESERVED
-CVE-2020-23054
- RESERVED
+CVE-2020-23055 (ANCOM WLAN Controller (Wireless Series & Hotspot) WLC-1000
& W ...)
+ TODO: check
+CVE-2020-23054 (A cross-site scripting (XSS) vulnerability in NSK User Agent
String Sw ...)
+ TODO: check
CVE-2020-23053
RESERVED
-CVE-2020-23052
- RESERVED
-CVE-2020-23051
- RESERVED
-CVE-2020-23050
- RESERVED
-CVE-2020-23049
- RESERVED
-CVE-2020-23048
- RESERVED
-CVE-2020-23047
- RESERVED
-CVE-2020-23046
- RESERVED
-CVE-2020-23045
- RESERVED
-CVE-2020-23044
- RESERVED
-CVE-2020-23043
- RESERVED
-CVE-2020-23042
- RESERVED
-CVE-2020-23041
- RESERVED
-CVE-2020-23040
- RESERVED
-CVE-2020-23039
- RESERVED
-CVE-2020-23038
- RESERVED
-CVE-2020-23037
- RESERVED
-CVE-2020-23036
- RESERVED
+CVE-2020-23052 (Catalyst IT Ltd Mahara CMS v19.10.2 was discovered to contain
multiple ...)
+ TODO: check
+CVE-2020-23051 (Phpgurukul User Registration & User Management System v2.0
was dis ...)
+ TODO: check
+CVE-2020-23050 (TAO Open Source Assessment Platform v3.3.0 RC02 was discovered
to cont ...)
+ TODO: check
+CVE-2020-23049 (Fork CMS Content Management System v5.8.0 was discovered to
contain a ...)
+ TODO: check
+CVE-2020-23048 (SeedDMS Content Management System v6.0.7 contains a persistent
cross-s ...)
+ TODO: check
+CVE-2020-23047 (Macrob7 Macs Framework Content Management System - 1.14f was
discovere ...)
+ TODO: check
+CVE-2020-23046 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site
scripti ...)
+ TODO: check
+CVE-2020-23045 (Macrob7 Macs Framework Content Management System - 1.14f was
discovere ...)
+ TODO: check
+CVE-2020-23044 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site
scripti ...)
+ TODO: check
+CVE-2020-23043 (Tran Tu Air Sender v1.0.2 was discovered to contain an
arbitrary file ...)
+ TODO: check
+CVE-2020-23042 (Dropouts Technologies LLP Super Backup v2.0.5 was discovered
to contai ...)
+ TODO: check
+CVE-2020-23041 (Dropouts Technologies LLP Air Share v1.2 was discovered to
contain a c ...)
+ TODO: check
+CVE-2020-23040 (Sky File v2.1.0 contains a directory traversal vulnerability
in the FT ...)
+ TODO: check
+CVE-2020-23039 (Folder Lock v3.4.5 was discovered to contain a stored
cross-site scrip ...)
+ TODO: check
+CVE-2020-23038 (Swift File Transfer Mobile v1.1.2 and below was discovered to
contain ...)
+ TODO: check
+CVE-2020-23037 (Portable Ltd Playable v9.18 contains a code injection
vulnerability in ...)
+ TODO: check
+CVE-2020-23036 (MEDIA NAVI Inc SMACom v1.2 was discovered to contain an
insecure sessi ...)
+ TODO: check
CVE-2020-23035
RESERVED
CVE-2020-23034
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d2d4aac7623ffc3838a427125efc0b562e07844
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d2d4aac7623ffc3838a427125efc0b562e07844
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
