[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso carnil at debian.org
Fri Mar 5 20:25:14 GMT 2021 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
98f08e34 by Salvatore Bonaccorso at 2021-03-05T21:24:56+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2301,29 +2301,29 @@ CVE-2021-26973
 CVE-2021-26972
 	RESERVED
 CVE-2021-26971 (A remote authenticated arbitrary command execution vulnerability was d ...)
-	TODO: check
+	NOT-FOR-US: Aruba
 CVE-2021-26970 (A remote authenticated arbitrary command execution vulnerability was d ...)
-	TODO: check
+	NOT-FOR-US: Aruba
 CVE-2021-26969 (A remote authenticated authenticated xml external entity (xxe) vulnera ...)
-	TODO: check
+	NOT-FOR-US: Aruba
 CVE-2021-26968 (A remote authenticated stored cross-site scripting (xss) vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Aruba
 CVE-2021-26967 (A remote reflected cross-site scripting (xss) vulnerability was discov ...)
-	TODO: check
+	NOT-FOR-US: Aruba
 CVE-2021-26966 (A remote authenticated sql injection vulnerability was discovered in A ...)
-	TODO: check
+	NOT-FOR-US: Aruba
 CVE-2021-26965 (A remote authenticated sql injection vulnerability was discovered in A ...)
-	TODO: check
+	NOT-FOR-US: Aruba
 CVE-2021-26964 (A remote authentication restriction bypass vulnerability was discovere ...)
-	TODO: check
+	NOT-FOR-US: Aruba
 CVE-2021-26963 (A remote authenticated arbitrary command execution vulnerability was d ...)
-	TODO: check
+	NOT-FOR-US: Aruba
 CVE-2021-26962 (A remote authenticated arbitrary command execution vulnerability was d ...)
-	TODO: check
+	NOT-FOR-US: Aruba
 CVE-2021-26961 (A remote unauthenticated cross-site request forgery (csrf) vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: Aruba
 CVE-2021-26960 (A remote unauthenticated cross-site request forgery (csrf) vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: Aruba
 CVE-2021-26959
 	REJECTED
 CVE-2021-26958 (An issue was discovered in the xcb crate through 2021-02-04 for Rust.  ...)
@@ -2941,7 +2941,7 @@ CVE-2020-36241 (autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used
 CVE-2021-26706
 	RESERVED
 CVE-2021-26705 (An issue was discovered in SquareBox CatDV Server through 9.2. An atta ...)
-	TODO: check
+	NOT-FOR-US: SquareBox CatDV Server
 CVE-2021-26704 (EPrints 3.4.2 allows remote attackers to execute arbitrary commands vi ...)
 	NOT-FOR-US: EPrints
 CVE-2021-26703 (EPrints 3.4.2 allows remote attackers to read arbitrary files and poss ...)
@@ -14141,7 +14141,7 @@ CVE-2021-21727
 CVE-2021-21726
 	RESERVED
 CVE-2021-21725 (A ZTE product has an information leak vulnerability. An attacker with  ...)
-	TODO: check
+	NOT-FOR-US: ZTE
 CVE-2021-21724 (A ZTE product has a memory leak vulnerability. Due to the product's im ...)
 	NOT-FOR-US: ZTE
 CVE-2021-21723 (Some ZTE products have a DoS vulnerability. Due to the improper handli ...)
@@ -16946,7 +16946,7 @@ CVE-2020-35596
 CVE-2020-35595
 	RESERVED
 CVE-2020-35594 (Zoho ManageEngine ADManager Plus before 7066 allows XSS. ...)
-	TODO: check
+	NOT-FOR-US: Zoho ManageEngine
 CVE-2020-35593
 	RESERVED
 CVE-2020-35592 (Pi-hole 5.0, 5.1, and 5.1.1 allows XSS via the Options header to the a ...)
@@ -21650,7 +21650,7 @@ CVE-2020-29660 (A locking inconsistency issue was discovered in the tty subsyste
 CVE-2020-29659 (A buffer overflow in the web server of Flexense DupScout Enterprise 10 ...)
 	NOT-FOR-US: Flexense DupScout Enterprise
 CVE-2020-29658 (Zoho ManageEngine Application Control Plus before 100523 has an insecu ...)
-	TODO: check
+	NOT-FOR-US: Zoho ManageEngine
 CVE-2020-29657 (In JerryScript 2.3.0, there is an out-of-bounds read in main_print_unh ...)
 	- iotjs <unfixed> (bug #977736; unimportant)
 	NOTE: https://github.com/jerryscript-project/jerryscript/issues/4244
@@ -23625,7 +23625,7 @@ CVE-2020-29136 (In cPanel before 90.0.17, 2FA can be bypassed via a brute-force
 CVE-2020-29135 (cPanel before 90.0.17 has multiple instances of URL parameter injectio ...)
 	NOT-FOR-US: cPanel
 CVE-2020-29134 (TOTVS Fluig Luke 1.7.0 allows directory traversal via a base64 encoded ...)
-	TODO: check
+	NOT-FOR-US: TOTVS Fluig Luke
 CVE-2020-29133 (jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal  ...)
 	NOT-FOR-US: Coremail XT
 CVE-2020-29132
@@ -23850,7 +23850,7 @@ CVE-2020-29034
 CVE-2020-29033
 	RESERVED
 CVE-2020-29032 (Upload of Code Without Integrity Check vulnerability in firmware archi ...)
-	TODO: check
+	NOT-FOR-US: Secomea GateManager
 CVE-2020-29031 (An Insecure Direct Object Reference vulnerability exists in the web UI ...)
 	NOT-FOR-US: GateManager
 CVE-2020-29030
@@ -28734,7 +28734,7 @@ CVE-2020-28052 (An issue was discovered in Legion of the Bouncy Castle BC Java 1
 CVE-2020-28051
 	RESERVED
 CVE-2020-28050 (Zoho ManageEngine Desktop Central before build 10.0.647 allows a singl ...)
-	TODO: check
+	NOT-FOR-US: Zoho ManageEngine
 CVE-2020-28049 (An issue was discovered in SDDM before 0.19.0. It incorrectly starts t ...)
 	{DSA-4783-1 DLA-2436-1}
 	- sddm 0.19.0-1 (bug #973748)
@@ -85443,7 +85443,7 @@ CVE-2020-5150
 CVE-2020-5149
 	RESERVED
 CVE-2020-5148 (SonicWall SSO-agent default configuration uses NetAPI to probe the ass ...)
-	TODO: check
+	NOT-FOR-US: SonicWall
 CVE-2020-5147 (SonicWall NetExtender Windows client vulnerable to unquoted service pa ...)
 	NOT-FOR-US: SonicWall
 CVE-2020-5146 (A vulnerability in SonicWall SMA100 appliance allow an authenticated m ...)
@@ -99587,7 +99587,7 @@ CVE-2019-18632 (European Commission eIDAS-Node Integration Package before 2.3.1
 CVE-2019-18631 (The Windows component of Centrify Authentication and Privilege Elevati ...)
 	NOT-FOR-US: Centrify Authentication and Privilege Elevation Services
 CVE-2019-18630 (On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/ ...)
-	TODO: check
+	NOT-FOR-US: Xerox
 CVE-2019-18629 (Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C80 ...)
 	NOT-FOR-US: Xerox
 CVE-2019-18628 (Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C80 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/98f08e343ce738176dceb7427ef878799e633674

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/98f08e343ce738176dceb7427ef878799e633674
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210305/b7d6b1d0/attachment.htm>

More information about the debian-security-tracker-commits mailing list