[Git][security-tracker-team/security-tracker][master] Process several NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Aug 6 21:36:57 BST 2021 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4f0a65a3 by Salvatore Bonaccorso at 2021-08-06T22:36:32+02:00
Process several NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3,13 +3,13 @@ CVE-2021-38154
 CVE-2021-38153
 	RESERVED
 CVE-2021-38152 (index.php/appointment/insert_patient_add_appointment in Chikitsa Patie ...)
-	TODO: check
+	NOT-FOR-US: Chikitsa Patient Management System
 CVE-2021-38151 (index.php/appointment/todos in Chikitsa Patient Management System 2.0. ...)
-	TODO: check
+	NOT-FOR-US: Chikitsa Patient Management System
 CVE-2021-38150
 	RESERVED
 CVE-2021-38149 (index.php/admin/add_user in Chikitsa Patient Management System 2.0.0 a ...)
-	TODO: check
+	NOT-FOR-US: Chikitsa Patient Management System
 CVE-2021-38148
 	RESERVED
 CVE-2021-38147
@@ -33,9 +33,9 @@ CVE-2021-38139
 CVE-2021-38138 (OneNav beta 0.9.12 allows XSS via the Add Link feature. NOTE: the vend ...)
 	NOT-FOR-US: OneNav
 CVE-2021-38137 (Corero SecureWatch Managed Services 9.7.2.0020 does not correctly chec ...)
-	TODO: check
+	NOT-FOR-US: Corero SecureWatch Managed Services
 CVE-2021-38136 (Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path T ...)
-	TODO: check
+	NOT-FOR-US: Corero SecureWatch Managed Services
 CVE-2021-3688
 	RESERVED
 CVE-2021-38135
@@ -1642,7 +1642,7 @@ CVE-2021-37390
 CVE-2021-37389
 	RESERVED
 CVE-2021-37388 (A buffer overflow in D-Link DIR-615 C2 3.03WW. The ping_ipaddr paramet ...)
-	TODO: check
+	NOT-FOR-US:  D-Link
 CVE-2021-37387
 	RESERVED
 CVE-2021-37386
@@ -1656,7 +1656,7 @@ CVE-2021-37383
 CVE-2021-37382
 	RESERVED
 CVE-2021-37381 (Southsoft GMIS 5.0 is vulnerable to CSRF attacks. Attackers can access ...)
-	TODO: check
+	NOT-FOR-US: Southsoft GMIS
 CVE-2021-37380
 	RESERVED
 CVE-2021-37379
@@ -3194,13 +3194,13 @@ CVE-2021-36710
 CVE-2021-36709
 	RESERVED
 CVE-2021-36708 (In ProLink PRC2402M V1.0.18 and older, the set_sys_init function in th ...)
-	TODO: check
+	NOT-FOR-US: ProLink
 CVE-2021-36707 (In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in th ...)
-	TODO: check
+	NOT-FOR-US: ProLink
 CVE-2021-36706 (In ProLink PRC2402M V1.0.18 and older, the set_sys_cmd function in the ...)
-	TODO: check
+	NOT-FOR-US: ProLink
 CVE-2021-36705 (In ProLink PRC2402M V1.0.18 and older, the set_TR069 function in the a ...)
-	TODO: check
+	NOT-FOR-US: ProLink
 CVE-2021-36704
 	RESERVED
 CVE-2021-36703 (The "blog title" field in the "Settings" menu "config" page of "dashbo ...)
@@ -3702,9 +3702,9 @@ CVE-2021-36457
 CVE-2021-36456
 	RESERVED
 CVE-2021-36455 (SQL Injection vulnerability in Naviwebs Navigate CMS 2.9 via the quick ...)
-	TODO: check
+	NOT-FOR-US: Naviwebs Navigate CMS
 CVE-2021-36454 (Cross Site Scripting (XSS) vulnerability in Naviwebs Navigate Cms 2.9  ...)
-	TODO: check
+	NOT-FOR-US: Naviwebs Navigate CMS
 CVE-2021-36453
 	RESERVED
 CVE-2021-36452
@@ -3928,7 +3928,7 @@ CVE-2021-36353
 CVE-2021-36352
 	RESERVED
 CVE-2021-36351 (SQL Injection Vulnerability in Care2x Open Source Hospital Information ...)
-	TODO: check
+	NOT-FOR-US: Care2x Open Source Hospital Information Management
 CVE-2021-3640 [Linux kernel: UAF in sco_send_frame function]
 	RESERVED
 	- linux <unfixed>
@@ -12648,7 +12648,7 @@ CVE-2021-32599
 CVE-2021-32598 (An improper neutralization of CRLF sequences in HTTP headers ('HTTP Re ...)
 	NOT-FOR-US: FortiGuard
 CVE-2021-32597 (Multiple improper neutralization of input during web page generation ( ...)
-	TODO: check
+	NOT-FOR-US: Fortiguard
 CVE-2021-32596 (A use of one-way hash with a predictable salt vulnerability in the pas ...)
 	NOT-FOR-US: FortiPortal
 CVE-2021-32595
@@ -12668,7 +12668,7 @@ CVE-2021-32589
 CVE-2021-32588
 	RESERVED
 CVE-2021-32587 (An improper access control vulnerability in FortiManager and FortiAnal ...)
-	TODO: check
+	NOT-FOR-US: Fortiguard
 CVE-2021-32586
 	RESERVED
 CVE-2021-32585
@@ -26558,9 +26558,9 @@ CVE-2021-27001
 CVE-2021-27000
 	RESERVED
 CVE-2021-26999 (NetApp Cloud Manager versions prior to 3.9.9 log sensitive information ...)
-	TODO: check
+	NOT-FOR-US: NetApp Cloud Manager
 CVE-2021-26998 (NetApp Cloud Manager versions prior to 3.9.9 log sensitive information ...)
-	TODO: check
+	NOT-FOR-US: NetApp Cloud Manager
 CVE-2021-26997 (E-Series SANtricity OS Controller Software 11.x versions prior to 11.7 ...)
 	NOT-FOR-US: E-Series SANtricity OS Controller Software
 CVE-2021-26996 (E-Series SANtricity OS Controller Software 11.x versions prior to 11.7 ...)
@@ -38825,11 +38825,11 @@ CVE-2021-21794 (An out-of-bounds write vulnerability exists in the TIF bits_per_
 CVE-2021-21793 (An out-of-bounds write vulnerability exists in the JPG sof_nb_comp hea ...)
 	NOT-FOR-US: Accusoft ImageGear
 CVE-2021-21792 (An information disclosure vulnerability exists in the the way IOBit Ad ...)
-	TODO: check
+	NOT-FOR-US: IOBit
 CVE-2021-21791 (An information disclosure vulnerability exists in the the way IOBit Ad ...)
-	TODO: check
+	NOT-FOR-US: IOBit
 CVE-2021-21790 (An information disclosure vulnerability exists in the the way IOBit Ad ...)
-	TODO: check
+	NOT-FOR-US: IOBit
 CVE-2021-21789 (A privilege escalation vulnerability exists in the way IOBit Advanced  ...)
 	NOT-FOR-US: IOBit
 CVE-2021-21788 (A privilege escalation vulnerability exists in the way IOBit Advanced  ...)
@@ -38839,7 +38839,7 @@ CVE-2021-21787 (A privilege escalation vulnerability exists in the way IOBit Adv
 CVE-2021-21786 (A privilege escalation vulnerability exists in the IOCTL 0x9c406144 ha ...)
 	NOT-FOR-US: IOBit
 CVE-2021-21785 (An information disclosure vulnerability exists in the IOCTL 0x9c40a148 ...)
-	TODO: check
+	NOT-FOR-US: IOBit
 CVE-2021-21784 (An out-of-bounds write vulnerability exists in the JPG format SOF mark ...)
 	NOT-FOR-US: Accusoft ImageGear
 CVE-2021-21783 (A code execution vulnerability exists in the WS-Addressing plugin func ...)
@@ -43154,19 +43154,19 @@ CVE-2021-20600
 CVE-2021-20599
 	RESERVED
 CVE-2021-20598 (Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubis ...)
-	TODO: check
+	NOT-FOR-US: Mitsubishi
 CVE-2021-20597 (Insufficiently Protected Credentials vulnerability in Mitsubishi Elect ...)
-	TODO: check
+	NOT-FOR-US: Mitsubishi
 CVE-2021-20596 (NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version ...)
 	NOT-FOR-US: Mitsubishi
 CVE-2021-20595 (Improper Restriction of XML External Entity Reference vulnerability in ...)
 	NOT-FOR-US: Mitsubishi
 CVE-2021-20594 (Exposure of Sensitive Information to an Unauthorized Actor vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: Mitsubishi
 CVE-2021-20593 (Incorrect Implementation of Authentication Algorithm in Mitsubishi Ele ...)
 	NOT-FOR-US: Mitsubishi
 CVE-2021-20592 (Missing synchronization vulnerability in GOT2000 series GT27 model com ...)
-	TODO: check
+	NOT-FOR-US: Mitsubishi
 CVE-2021-20591 (Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric ...)
 	NOT-FOR-US: Mitsubishi
 CVE-2021-20590 (Improper authentication vulnerability in GOT2000 series GT27 model VNC ...)
@@ -75668,7 +75668,7 @@ CVE-2020-18695
 CVE-2020-18694 (Cross Site Request Forgery (CSRF) in IgnitedCMS v1.0 allows remote att ...)
 	TODO: check
 CVE-2020-18693 (Cross Site Scripting (XSS) in MineWebCMS v1.7.0 allows remote attacker ...)
-	TODO: check
+	NOT-FOR-US: MineWebCMS
 CVE-2020-18692
 	RESERVED
 CVE-2020-18691



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4f0a65a3068a308b7c7166c8bef9a7f1ca334369

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4f0a65a3068a308b7c7166c8bef9a7f1ca334369
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210806/147d86a8/attachment.htm>

More information about the debian-security-tracker-commits mailing list