[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso
carnil at debian.org
Wed Feb 17 09:14:24 GMT 2021
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
75a6c828 by Salvatore Bonaccorso at 2021-02-17T10:13:53+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -324,7 +324,7 @@ CVE-2021-27205 (Telegram before 7.4 (212543) Stable on macOS stores the local co
CVE-2021-27204 (Telegram before 7.4 (212543) Stable on macOS stores the local passcode ...)
NOT-FOR-US: Telegram for MacOS
CVE-2021-27203 (In Dekart Private Disk 2.15, invalid use of the Type3 user buffer for ...)
- TODO: check
+ NOT-FOR-US: Dekart Private Disk
CVE-2021-27202
RESERVED
CVE-2021-XXXX [several security fixes: PHP injections, XSS and secrets stored in session file]
@@ -534,13 +534,13 @@ CVE-2021-3405
- libebml <unfixed> (bug #982597)
NOTE: https://github.com/Matroska-Org/libebml/issues/74
CVE-2021-27104 (Accellion FTA 9_12_370 and earlier is affected by OS command execution ...)
- TODO: check
+ NOT-FOR-US: Accellion FTA
CVE-2021-27103 (Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted P ...)
- TODO: check
+ NOT-FOR-US: Accellion FTA
CVE-2021-27102 (Accellion FTA 9_12_411 and earlier is affected by OS command execution ...)
- TODO: check
+ NOT-FOR-US: Accellion FTA
CVE-2021-27101 (Accellion FTA 9_12_370 and earlier is affected by SQL injection via a ...)
- TODO: check
+ NOT-FOR-US: Accellion FTA
CVE-2021-27100
RESERVED
CVE-2021-27099
@@ -16254,11 +16254,11 @@ CVE-2021-20657
CVE-2021-20656
RESERVED
CVE-2021-20655 (FileZen (V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2) allows a remote attack ...)
- TODO: check
+ NOT-FOR-US: FileZen
CVE-2021-20654 (Wekan, open source kanban board system, between version 3.12 and 4.11, ...)
NOT-FOR-US: Wekan
CVE-2021-20653 (Calsos CSDJ (CSDJ-B 01.08.00 and earlier, CSDJ-H 01.08.00 and earlier, ...)
- TODO: check
+ NOT-FOR-US: Calsos CSDJ
CVE-2021-20652 (Cross-site request forgery (CSRF) vulnerability in Name Directory 1.17 ...)
NOT-FOR-US: Name Directory
CVE-2021-20651 (Directory traversal vulnerability in ELECOM File Manager all versions ...)
@@ -17623,23 +17623,23 @@ CVE-2021-20077
CVE-2021-20076
RESERVED
CVE-2021-20075 (Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for pr ...)
- TODO: check
+ NOT-FOR-US: Racom's MIDGE Firmware
CVE-2021-20074 (Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users ...)
- TODO: check
+ NOT-FOR-US: Racom's MIDGE Firmware
CVE-2021-20073 (Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for cr ...)
- TODO: check
+ NOT-FOR-US: Racom's MIDGE Firmware
CVE-2021-20072 (Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attack ...)
- TODO: check
+ NOT-FOR-US: Racom's MIDGE Firmware
CVE-2021-20071 (Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attack ...)
- TODO: check
+ NOT-FOR-US: Racom's MIDGE Firmware
CVE-2021-20070 (Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attack ...)
- TODO: check
+ NOT-FOR-US: Racom's MIDGE Firmware
CVE-2021-20069 (Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attack ...)
- TODO: check
+ NOT-FOR-US: Racom's MIDGE Firmware
CVE-2021-20068 (Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attack ...)
- TODO: check
+ NOT-FOR-US: Racom's MIDGE Firmware
CVE-2021-20067 (Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attack ...)
- TODO: check
+ NOT-FOR-US: Racom's MIDGE Firmware
CVE-2021-20066 (JSDom improperly allows the loading of local resources, which allows f ...)
TODO: check
CVE-2020-35547 (A library index page in NuPoint Messenger in Mitel MiCollab before 9.2 ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/75a6c828409c689317205335544f2b1c331f9563
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/75a6c828409c689317205335544f2b1c331f9563
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210217/d5407b3c/attachment.html>
More information about the debian-security-tracker-commits
mailing list