[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Jul 15 09:10:39 BST 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c4a7ea31 by security tracker role at 2021-07-15T08:10:31+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,11 @@
+CVE-2021-36748
+	RESERVED
+CVE-2021-36747
+	RESERVED
+CVE-2021-36746
+	RESERVED
+CVE-2020-36420 (** UNSUPPORTED WHEN ASSIGNED ** Polipo through 1.1.1 allows denial of  ...)
+	TODO: check
 CVE-2021-36745
 	RESERVED
 CVE-2021-36744
@@ -3378,8 +3386,8 @@ CVE-2021-35213
 	RESERVED
 CVE-2021-35212
 	RESERVED
-CVE-2021-35211
-	RESERVED
+CVE-2021-35211 (Microsoft discovered a remote code execution (RCE) vulnerability in th ...)
+	TODO: check
 CVE-2020-36394 (pam_setquota.c in the pam_setquota module before 2020-05-29 for Linux- ...)
 	- pam <not-affected> (Vulnerable code introduced and fixed in v1.4.0)
 	NOTE: https://bugzilla.suse.com/show_bug.cgi?id=1171721
@@ -32880,8 +32888,8 @@ CVE-2021-22869
 	RESERVED
 CVE-2021-22868
 	RESERVED
-CVE-2021-22867
-	RESERVED
+CVE-2021-22867 (A path traversal vulnerability was identified in GitHub Enterprise Ser ...)
+	TODO: check
 CVE-2021-22866 (A UI misrepresentation vulnerability was identified in GitHub Enterpri ...)
 	NOT-FOR-US: GitHub Enterprise Server
 CVE-2021-22865 (An improper access control vulnerability was identified in GitHub Ente ...)
@@ -45347,8 +45355,8 @@ CVE-2020-29159 (An issue was discovered in Zammad before 3.5.1. The default sign
 	- zammad <itp> (bug #841355)
 CVE-2020-29158 (An issue was discovered in Zammad before 3.5.1. An Agent with Customer ...)
 	- zammad <itp> (bug #841355)
-CVE-2020-29157
-	RESERVED
+CVE-2020-29157 (An issue in RAONWIZ K Editor v2018.0.0.10 allows attackers to perform  ...)
+	TODO: check
 CVE-2020-29156 (The WooCommerce plugin before 4.7.0 for WordPress allows remote attack ...)
 	NOT-FOR-US: WooCommerce plugin for WordPress
 CVE-2020-29155
@@ -57748,7 +57756,7 @@ CVE-2020-25447
 	RESERVED
 CVE-2020-25446
 	RESERVED
-CVE-2020-25445 (Cross Site Scripting (XSS) vulnerability in Booking Core - Ultimate Bo ...)
+CVE-2020-25445 (The “Subscribe” feature in Ultimate Booking System Booking ...)
 	TODO: check
 CVE-2020-25444 (Cross Site Scripting (XSS) vulnerability in Booking Core - Ultimate Bo ...)
 	TODO: check
@@ -60768,8 +60776,8 @@ CVE-2020-24135 (A Reflected Cross Site Scripting (XSS) Vulnerability was discove
 	NOT-FOR-US: wmcs
 CVE-2020-24134
 	RESERVED
-CVE-2020-24133
-	RESERVED
+CVE-2020-24133 (A heap buffer overflow vulnerability in the r_asm_swf_disass function  ...)
+	TODO: check
 CVE-2020-24132
 	RESERVED
 CVE-2020-24131



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c4a7ea3152b44b6e49abb536bbdcc385b70796ec

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c4a7ea3152b44b6e49abb536bbdcc385b70796ec
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210715/0ec3b3aa/attachment.htm>


More information about the debian-security-tracker-commits mailing list