[Git][security-tracker-team/security-tracker][master] Process more NFUs

Salvatore Bonaccorso carnil at debian.org
Tue Jun 30 05:54:24 BST 2020 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4c7a0729 by Salvatore Bonaccorso at 2020-06-30T06:53:58+02:00
Process more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -93,31 +93,31 @@ CVE-2020-15326 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded certi
 CVE-2020-15325 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded Erlang cook ...)
 	NOT-FOR-US: Zyxel
 CVE-2020-15324 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a world-readable axess/ ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15323 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the cloud1234 password  ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15322 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM ha ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15321 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password fo ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15320 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15319 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15318 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15317 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15316 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH k ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15315 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15314 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15313 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH k ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15312 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15311 (Stash 1.0.3 allows SQL Injection via the downloadmp3.php download para ...)
 	NOT-FOR-US: Stash
 CVE-2020-15310
@@ -609,7 +609,7 @@ CVE-2020-15071
 CVE-2020-15070
 	RESERVED
 CVE-2020-15069 (Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow an ...)
-	TODO: check
+	NOT-FOR-US: Sophos
 CVE-2020-15068
 	RESERVED
 CVE-2020-15067
@@ -667,7 +667,7 @@ CVE-2020-15045
 CVE-2020-15044
 	RESERVED
 CVE-2020-15043 (iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling  ...)
-	TODO: check
+	NOT-FOR-US: iBall WRB303N devices
 CVE-2020-15042
 	RESERVED
 CVE-2020-15041 (PHP-Fusion 9.03.60 allows XSS via the administration/site_links.php Ad ...)
@@ -2289,11 +2289,11 @@ CVE-2020-14416 (In the Linux kernel before 5.4.16, a race condition in tty->d
 	[jessie] - linux 3.16.84-1
 	NOTE: https://git.kernel.org/linus/0ace17d56824165c7f4c68785d6b58971db954dd
 CVE-2020-14414 (NeDi 1.9C is vulnerable to Remote Command Execution. pwsec.php imprope ...)
-	TODO: check
+	NOT-FOR-US: NeDi
 CVE-2020-14413 (NeDi 1.9C is vulnerable to XSS because of an incorrect implementation  ...)
-	TODO: check
+	NOT-FOR-US: NeDi
 CVE-2020-14412 (NeDi 1.9C is vulnerable to Remote Command Execution. System-Snapshot.p ...)
-	TODO: check
+	NOT-FOR-US: NeDi
 CVE-2020-14411
 	RESERVED
 CVE-2020-14410
@@ -3080,15 +3080,15 @@ CVE-2020-14074 (TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-base
 CVE-2020-14073 (XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map proper ...)
 	NOT-FOR-US: PRTG Network Monitor
 CVE-2020-14072 (An issue was discovered in MK-AUTH 19.01. It allows command execution  ...)
-	TODO: check
+	NOT-FOR-US: MK-AUTH
 CVE-2020-14071 (An issue was discovered in MK-AUTH 19.01. XSS vulnerabilities in admin ...)
-	TODO: check
+	NOT-FOR-US: MK-AUTH
 CVE-2020-14070 (An issue was discovered in MK-AUTH 19.01. There is authentication bypa ...)
-	TODO: check
+	NOT-FOR-US: MK-AUTH
 CVE-2020-14069 (An issue was discovered in MK-AUTH 19.01. There are SQL injection issu ...)
-	TODO: check
+	NOT-FOR-US: MK-AUTH
 CVE-2020-14068 (An issue was discovered in MK-AUTH 19.01. The web login functionality  ...)
-	TODO: check
+	NOT-FOR-US: MK-AUTH
 CVE-2020-14067 (The install_from_hash functionality in Navigate CMS 2.9 does not consi ...)
 	NOT-FOR-US: Navigate CMS
 CVE-2020-14066
@@ -3525,7 +3525,7 @@ CVE-2020-13898 (An issue was discovered in janus-gateway (aka Janus WebRTC Serve
 CVE-2020-13897 (HESK before 3.1.10 allows reflected XSS. ...)
 	NOT-FOR-US: HESK
 CVE-2020-13896 (The web interface of Maipu MP1800X-50 7.5.3.14(R) devices allows remot ...)
-	TODO: check
+	NOT-FOR-US: Maipu devices
 CVE-2020-13894 (handler/upload_handler.jsp in DEXT5 Editor through 3.5.1402961 allows  ...)
 	NOT-FOR-US: DEXT5 Editor
 CVE-2020-13893
@@ -4196,7 +4196,7 @@ CVE-2020-13659 (address_space_map in exec.c in QEMU 4.2.0 can trigger a NULL poi
 CVE-2020-13658
 	RESERVED
 CVE-2020-13657 (An elevation of privilege vulnerability exists in Avast Free Antivirus ...)
-	TODO: check
+	NOT-FOR-US: Avast
 CVE-2020-13656 (In Morgan Stanley Hobbes through 2020-05-21, the array implementation  ...)
 	NOT-FOR-US: Hobbes
 CVE-2020-13655
@@ -6626,7 +6626,7 @@ CVE-2018-21233 (TensorFlow before 1.7.0 has an integer overflow that causes an o
 CVE-2020-12636
 	RESERVED
 CVE-2020-12635 (XSS exists in the WebForms Pro M2 extension before 2.9.17 for Magento  ...)
-	TODO: check
+	NOT-FOR-US: WebForms Pro M2 extension for Magento
 CVE-2020-12634
 	RESERVED
 CVE-2020-12633
@@ -8056,23 +8056,23 @@ CVE-2020-12049 (An issue was discovered in dbus >= 1.3.0 before 1.12.18. The
 	NOTE: Fixed by: https://gitlab.freedesktop.org/dbus/dbus/-/commit/272d484283883fa9ff95b69d924fff6cd34842f5
 	NOTE: Test: https://gitlab.freedesktop.org/dbus/dbus/-/commit/8bc1381819e5a845331650bfa28dacf6d2ac1748
 CVE-2020-12048 (Phoenix Hemodialysis Delivery System SW 3.36 and 3.40, The Phoenix Hem ...)
-	TODO: check
+	NOT-FOR-US: Phoenix Hemodialysis Delivery System
 CVE-2020-12047 (The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), whe ...)
-	TODO: check
+	NOT-FOR-US: Baxter Spectrum WBM
 CVE-2020-12046 (Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC’s firmwar ...)
 	NOT-FOR-US: Opto 22 SoftPAC Project
 CVE-2020-12045 (The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when ...)
-	TODO: check
+	NOT-FOR-US: Baxter Spectrum WBM
 CVE-2020-12044
 	RESERVED
 CVE-2020-12043 (The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when ...)
-	TODO: check
+	NOT-FOR-US: Baxter Spectrum WBM
 CVE-2020-12042 (Opto 22 SoftPAC Project Version 9.6 and prior. Paths specified within  ...)
 	NOT-FOR-US: Opto 22 SoftPAC Project
 CVE-2020-12041 (The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) teln ...)
-	TODO: check
+	NOT-FOR-US: Baxter Spectrum WBM
 CVE-2020-12040 (Sigma Spectrum Infusion System v's6.x (model 35700BAX) and Baxter Spec ...)
-	TODO: check
+	NOT-FOR-US: Sigma Spectrum Infusion System
 CVE-2020-12039 (Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v' ...)
 	TODO: check
 CVE-2020-12038 (Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4c7a0729b1f6ee1a2ba4146c6fe5cd01795022cd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4c7a0729b1f6ee1a2ba4146c6fe5cd01795022cd
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200630/74d9267e/attachment-0001.html>

More information about the debian-security-tracker-commits mailing list