[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9e8da60e by Salvatore Bonaccorso at 2021-04-26T10:39:40+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -163,7 +163,7 @@ CVE-2021-31728
 CVE-2021-31727
 	RESERVED
 CVE-2021-31726 (Akuvox C315 115.116.2613 allows remote command Injection via the cfgd_ ...)
-	TODO: check
+	NOT-FOR-US: Akuvox
 CVE-2021-31725
 	RESERVED
 CVE-2021-31724
@@ -26834,15 +26834,15 @@ CVE-2021-20714
 CVE-2021-20713
 	RESERVED
 CVE-2021-20712 (Improper access control vulnerability in NEC Aterm WG2600HS firmware V ...)
-	TODO: check
+	NOT-FOR-US: Aterm firmware
 CVE-2021-20711 (Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker to exe ...)
-	TODO: check
+	NOT-FOR-US: Aterm firmware
 CVE-2021-20710 (Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.5.1 ...)
-	TODO: check
+	NOT-FOR-US: Aterm firmware
 CVE-2021-20709 (Improper validation of integrity check value vulnerability in NEC Ater ...)
-	TODO: check
+	NOT-FOR-US: Aterm firmware
 CVE-2021-20708 (NEC Aterm devices (Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm ...)
-	TODO: check
+	NOT-FOR-US: Aterm firmware
 CVE-2021-20707
 	RESERVED
 CVE-2021-20706
@@ -26864,15 +26864,15 @@ CVE-2021-20699
 CVE-2021-20698
 	RESERVED
 CVE-2021-20697 (Missing authentication for critical function in DAP-1880AC firmware ve ...)
-	TODO: check
+	NOT-FOR-US: DAP-1880AC firmware
 CVE-2021-20696 (DAP-1880AC firmware version 1.21 and earlier allows a remote authentic ...)
-	TODO: check
+	NOT-FOR-US: DAP-1880AC firmware
 CVE-2021-20695 (Improper following of a certificate's chain of trust vulnerability in  ...)
-	TODO: check
+	NOT-FOR-US: DAP-1880AC firmware
 CVE-2021-20694 (Improper access control vulnerability in DAP-1880AC firmware version 1 ...)
-	TODO: check
+	NOT-FOR-US: DAP-1880AC firmware
 CVE-2021-20693 (Improper access control vulnerability in Gurunavi App for Android ver. ...)
-	TODO: check
+	NOT-FOR-US: Gurunavi App for Android and iOS
 CVE-2021-20692 (Directory traversal vulnerability in Archive collectively operation ut ...)
 	NOT-FOR-US: Enkisoft
 CVE-2021-20691 (Cross-site scripting vulnerability in Yomi-Search Ver4.22 allows remot ...)
@@ -26898,7 +26898,7 @@ CVE-2021-20682 (baserCMS versions prior to 4.4.5 allows a remote attacker with a
 CVE-2021-20681 (Improper neutralization of JavaScript input in the page editing functi ...)
 	NOT-FOR-US: baserCMS
 CVE-2021-20680 (Cross-site scripting vulnerability in NEC Aterm devices (Aterm WG1900H ...)
-	TODO: check
+	NOT-FOR-US: Aterm firmware
 CVE-2021-20679 (Fuji Xerox multifunction devices and printers (DocuCentre-VII C7773/C6 ...)
 	NOT-FOR-US: Fuji
 CVE-2021-20678 (SQL injection vulnerability in the Paid Memberships Pro versions prior ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9e8da60ebd1732c1828be66d77eaa0b96131ca85

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9e8da60ebd1732c1828be66d77eaa0b96131ca85
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210426/4e271682/attachment.htm>