[Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff
jmm at debian.org
Mon Oct 19 15:34:41 BST 2020
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
ab9bb159 by Moritz Muehlenhoff at 2020-10-19T16:34:25+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -46026,7 +46026,7 @@ CVE-2020-7746
CVE-2020-7745
RESERVED
CVE-2020-7744 (This affects all versions of package com.mintegral.msdk:alphab. The An ...)
- TODO: check
+ NOT-FOR-US: com.mintegral.msdk:alphab
CVE-2020-7743 (The package mathjs before 7.5.1 are vulnerable to Prototype Pollution ...)
NOT-FOR-US: Node mathjs
CVE-2020-7742 (This affects the package simpl-schema before 1.10.2. ...)
@@ -56404,7 +56404,7 @@ CVE-2019-19886 (Trustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to
NOTE: https://github.com/SpiderLabs/ModSecurity/pull/2202
NOTE: https://github.com/SpiderLabs/ModSecurity/commit/7ba77631f9a37e0680d23ee57c455c6a35c65cb9
CVE-2019-19885 (In Bender COMTRAXX, user authorization is validated for most, but not ...)
- TODO: check
+ NOT-FOR-US: Bender COMTRAXX
CVE-2019-19884
RESERVED
CVE-2019-19883
@@ -61628,7 +61628,7 @@ CVE-2019-19515 (Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in w
CVE-2019-19514 (Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in basic r ...)
NOT-FOR-US: Ayision
CVE-2019-19513 (The BASSMIDI plugin 2.4.12.1 for Un4seen BASS Audio Library on Windows ...)
- TODO: check
+ NOT-FOR-US: BASS Audio Library
CVE-2020-1924
RESERVED
CVE-2020-1923
@@ -64278,11 +64278,11 @@ CVE-2019-18797 (LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operator
[stretch] - libsass <no-dsa> (Minor issue)
NOTE: https://github.com/sass/libsass/issues/3000
CVE-2019-18796 (The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamC ...)
- TODO: check
+ NOT-FOR-US: BASS Audio Library
CVE-2019-18795 (The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamC ...)
- TODO: check
+ NOT-FOR-US: BASS Audio Library
CVE-2019-18794 (The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamC ...)
- TODO: check
+ NOT-FOR-US: BASS Audio Library
CVE-2019-18793 (Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/inde ...)
NOT-FOR-US: Parallels Plesk Panel
CVE-2017-18639 (Progress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab9bb1592c883be86c331b372e59d2b713727bd8
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ab9bb1592c883be86c331b372e59d2b713727bd8
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201019/41af4719/attachment.html>
More information about the debian-security-tracker-commits
mailing list