[Git][security-tracker-team/security-tracker][master] automatic update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6ca6cb7d by security tracker role at 2021-07-10T08:10:23+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,4 +1,12 @@
-CVE-2021-36367
+CVE-2021-36371 (Emissary-Ingress (formerly Ambassador API Gateway) through 1.13.9 allo ...)
+	TODO: check
+CVE-2021-36370
+	RESERVED
+CVE-2021-36369
+	RESERVED
+CVE-2021-36368
+	RESERVED
+CVE-2021-36367 (PuTTY through 0.75 proceeds with establishing an SSH session even if i ...)
 	- putty <unfixed>
 	[bullseye] - putty <no-dsa> (Minor issue)
 	[buster] - putty <no-dsa> (Minor issue)
@@ -2268,14 +2276,14 @@ CVE-2021-35363
 	RESERVED
 CVE-2021-35362
 	RESERVED
-CVE-2021-35361
-	RESERVED
-CVE-2021-35360
-	RESERVED
+CVE-2021-35361 (A reflected cross site scripting (XSS) vulnerability in dotAdmin/#/c/l ...)
+	TODO: check
+CVE-2021-35360 (A reflected cross site scripting (XSS) vulnerability in dotAdmin/#/c/c ...)
+	TODO: check
 CVE-2021-35359
 	RESERVED
-CVE-2021-35358
-	RESERVED
+CVE-2021-35358 (A stored cross site scripting (XSS) vulnerability in dotAdmin/#/c/c_Im ...)
+	TODO: check
 CVE-2021-35357
 	RESERVED
 CVE-2021-35356
@@ -35382,14 +35390,14 @@ CVE-2020-35989
 	RESERVED
 CVE-2020-35988
 	RESERVED
-CVE-2020-35987
-	RESERVED
-CVE-2020-35986
-	RESERVED
-CVE-2020-35985
-	RESERVED
-CVE-2020-35984
-	RESERVED
+CVE-2020-35987 (A stored cross site scripting (XSS) vulnerability in the 'Entities Lis ...)
+	TODO: check
+CVE-2020-35986 (A stored cross site scripting (XSS) vulnerability in the 'Users Access ...)
+	TODO: check
+CVE-2020-35985 (A stored cross site scripting (XSS) vulnerability in the 'Global Lists ...)
+	TODO: check
+CVE-2020-35984 (A stored cross site scripting (XSS) vulnerability in the 'Users Alerts ...)
+	TODO: check
 CVE-2020-35983
 	RESERVED
 CVE-2020-35982 (An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an i ...)
@@ -40471,8 +40479,8 @@ CVE-2021-20026 (A vulnerability in the SonicWall NSM On-Prem product allows an a
 	NOT-FOR-US: SonicWall
 CVE-2021-20025 (SonicWall Email Security Virtual Appliance version 10.0.9 and earlier  ...)
 	NOT-FOR-US: SonicWall
-CVE-2021-20024
-	RESERVED
+CVE-2021-20024 (Multiple Out-of-Bound read vulnerability in SonicWall Switch when hand ...)
+	TODO: check
 CVE-2021-20023 (SonicWall Email Security version 10.0.9.x contains a vulnerability tha ...)
 	NOT-FOR-US: SonicWall
 CVE-2021-20022 (SonicWall Email Security version 10.0.9.x contains a vulnerability tha ...)
@@ -55575,16 +55583,16 @@ CVE-2020-25881
 	RESERVED
 CVE-2020-25880
 	RESERVED
-CVE-2020-25879
-	RESERVED
-CVE-2020-25878
-	RESERVED
-CVE-2020-25877
-	RESERVED
-CVE-2020-25876
-	RESERVED
-CVE-2020-25875
-	RESERVED
+CVE-2020-25879 (A stored cross site scripting (XSS) vulnerability in the 'Manage Users ...)
+	TODO: check
+CVE-2020-25878 (A stored cross site scripting (XSS) vulnerability in the 'Admin-Tools' ...)
+	TODO: check
+CVE-2020-25877 (A stored cross site scripting (XSS) vulnerability in the 'Add Page' fe ...)
+	TODO: check
+CVE-2020-25876 (A stored cross site scripting (XSS) vulnerability in the 'Pages' featu ...)
+	TODO: check
+CVE-2020-25875 (A stored cross site scripting (XSS) vulnerability in the 'Smileys' fea ...)
+	TODO: check
 CVE-2020-25874
 	RESERVED
 CVE-2020-25873
@@ -56937,14 +56945,14 @@ CVE-2020-25396
 	RESERVED
 CVE-2020-25395
 	RESERVED
-CVE-2020-25394
-	RESERVED
+CVE-2020-25394 (A stored cross site scripting (XSS) vulnerability in moziloCMS 2.0 all ...)
+	TODO: check
 CVE-2020-25393
 	RESERVED
-CVE-2020-25392
-	RESERVED
-CVE-2020-25391
-	RESERVED
+CVE-2020-25392 (A cross site scripting (XSS) vulnerability in CSZ CMS 1.2.9 allows att ...)
+	TODO: check
+CVE-2020-25391 (A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers ...)
+	TODO: check
 CVE-2020-25390
 	RESERVED
 CVE-2020-25389



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6ca6cb7d31b2cd756da413f4c588d9d68e2852cf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6ca6cb7d31b2cd756da413f4c588d9d68e2852cf
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210710/efb6eb89/attachment.htm>