[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso carnil at debian.org
Tue Mar 30 21:10:36 BST 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4f7ad7c8 by security tracker role at 2021-03-30T20:10:28+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,9 +1,459 @@
-CVE-2021-3476
+CVE-2021-3480
 	RESERVED
-CVE-2021-3475
+CVE-2021-3479
 	RESERVED
-CVE-2021-3474
+CVE-2021-3478
 	RESERVED
+CVE-2021-3477
+	RESERVED
+CVE-2021-29645
+	RESERVED
+CVE-2021-29644
+	RESERVED
+CVE-2021-29643
+	RESERVED
+CVE-2021-29642 (GistPad before 0.2.7 allows a crafted workspace folder to change the U ...)
+	TODO: check
+CVE-2021-29641
+	RESERVED
+CVE-2021-29640
+	RESERVED
+CVE-2021-29639
+	RESERVED
+CVE-2021-29638
+	RESERVED
+CVE-2021-29637
+	RESERVED
+CVE-2021-29636
+	RESERVED
+CVE-2021-29635
+	RESERVED
+CVE-2021-29634
+	RESERVED
+CVE-2021-29633
+	RESERVED
+CVE-2021-29632
+	RESERVED
+CVE-2021-29631
+	RESERVED
+CVE-2021-29630
+	RESERVED
+CVE-2021-29629
+	RESERVED
+CVE-2021-29628
+	RESERVED
+CVE-2021-29627
+	RESERVED
+CVE-2021-29626
+	RESERVED
+CVE-2021-29625
+	RESERVED
+CVE-2021-29624
+	RESERVED
+CVE-2021-29623
+	RESERVED
+CVE-2021-29622
+	RESERVED
+CVE-2021-29621
+	RESERVED
+CVE-2021-29620
+	RESERVED
+CVE-2021-29619
+	RESERVED
+CVE-2021-29618
+	RESERVED
+CVE-2021-29617
+	RESERVED
+CVE-2021-29616
+	RESERVED
+CVE-2021-29615
+	RESERVED
+CVE-2021-29614
+	RESERVED
+CVE-2021-29613
+	RESERVED
+CVE-2021-29612
+	RESERVED
+CVE-2021-29611
+	RESERVED
+CVE-2021-29610
+	RESERVED
+CVE-2021-29609
+	RESERVED
+CVE-2021-29608
+	RESERVED
+CVE-2021-29607
+	RESERVED
+CVE-2021-29606
+	RESERVED
+CVE-2021-29605
+	RESERVED
+CVE-2021-29604
+	RESERVED
+CVE-2021-29603
+	RESERVED
+CVE-2021-29602
+	RESERVED
+CVE-2021-29601
+	RESERVED
+CVE-2021-29600
+	RESERVED
+CVE-2021-29599
+	RESERVED
+CVE-2021-29598
+	RESERVED
+CVE-2021-29597
+	RESERVED
+CVE-2021-29596
+	RESERVED
+CVE-2021-29595
+	RESERVED
+CVE-2021-29594
+	RESERVED
+CVE-2021-29593
+	RESERVED
+CVE-2021-29592
+	RESERVED
+CVE-2021-29591
+	RESERVED
+CVE-2021-29590
+	RESERVED
+CVE-2021-29589
+	RESERVED
+CVE-2021-29588
+	RESERVED
+CVE-2021-29587
+	RESERVED
+CVE-2021-29586
+	RESERVED
+CVE-2021-29585
+	RESERVED
+CVE-2021-29584
+	RESERVED
+CVE-2021-29583
+	RESERVED
+CVE-2021-29582
+	RESERVED
+CVE-2021-29581
+	RESERVED
+CVE-2021-29580
+	RESERVED
+CVE-2021-29579
+	RESERVED
+CVE-2021-29578
+	RESERVED
+CVE-2021-29577
+	RESERVED
+CVE-2021-29576
+	RESERVED
+CVE-2021-29575
+	RESERVED
+CVE-2021-29574
+	RESERVED
+CVE-2021-29573
+	RESERVED
+CVE-2021-29572
+	RESERVED
+CVE-2021-29571
+	RESERVED
+CVE-2021-29570
+	RESERVED
+CVE-2021-29569
+	RESERVED
+CVE-2021-29568
+	RESERVED
+CVE-2021-29567
+	RESERVED
+CVE-2021-29566
+	RESERVED
+CVE-2021-29565
+	RESERVED
+CVE-2021-29564
+	RESERVED
+CVE-2021-29563
+	RESERVED
+CVE-2021-29562
+	RESERVED
+CVE-2021-29561
+	RESERVED
+CVE-2021-29560
+	RESERVED
+CVE-2021-29559
+	RESERVED
+CVE-2021-29558
+	RESERVED
+CVE-2021-29557
+	RESERVED
+CVE-2021-29556
+	RESERVED
+CVE-2021-29555
+	RESERVED
+CVE-2021-29554
+	RESERVED
+CVE-2021-29553
+	RESERVED
+CVE-2021-29552
+	RESERVED
+CVE-2021-29551
+	RESERVED
+CVE-2021-29550
+	RESERVED
+CVE-2021-29549
+	RESERVED
+CVE-2021-29548
+	RESERVED
+CVE-2021-29547
+	RESERVED
+CVE-2021-29546
+	RESERVED
+CVE-2021-29545
+	RESERVED
+CVE-2021-29544
+	RESERVED
+CVE-2021-29543
+	RESERVED
+CVE-2021-29542
+	RESERVED
+CVE-2021-29541
+	RESERVED
+CVE-2021-29540
+	RESERVED
+CVE-2021-29539
+	RESERVED
+CVE-2021-29538
+	RESERVED
+CVE-2021-29537
+	RESERVED
+CVE-2021-29536
+	RESERVED
+CVE-2021-29535
+	RESERVED
+CVE-2021-29534
+	RESERVED
+CVE-2021-29533
+	RESERVED
+CVE-2021-29532
+	RESERVED
+CVE-2021-29531
+	RESERVED
+CVE-2021-29530
+	RESERVED
+CVE-2021-29529
+	RESERVED
+CVE-2021-29528
+	RESERVED
+CVE-2021-29527
+	RESERVED
+CVE-2021-29526
+	RESERVED
+CVE-2021-29525
+	RESERVED
+CVE-2021-29524
+	RESERVED
+CVE-2021-29523
+	RESERVED
+CVE-2021-29522
+	RESERVED
+CVE-2021-29521
+	RESERVED
+CVE-2021-29520
+	RESERVED
+CVE-2021-29519
+	RESERVED
+CVE-2021-29518
+	RESERVED
+CVE-2021-29517
+	RESERVED
+CVE-2021-29516
+	RESERVED
+CVE-2021-29515
+	RESERVED
+CVE-2021-29514
+	RESERVED
+CVE-2021-29513
+	RESERVED
+CVE-2021-29512
+	RESERVED
+CVE-2021-29511
+	RESERVED
+CVE-2021-29510
+	RESERVED
+CVE-2021-29509
+	RESERVED
+CVE-2021-29508
+	RESERVED
+CVE-2021-29507
+	RESERVED
+CVE-2021-29506
+	RESERVED
+CVE-2021-29505
+	RESERVED
+CVE-2021-29504
+	RESERVED
+CVE-2021-29503
+	RESERVED
+CVE-2021-29502
+	RESERVED
+CVE-2021-29501
+	RESERVED
+CVE-2021-29500
+	RESERVED
+CVE-2021-29499
+	RESERVED
+CVE-2021-29498
+	RESERVED
+CVE-2021-29497
+	RESERVED
+CVE-2021-29496
+	RESERVED
+CVE-2021-29495
+	RESERVED
+CVE-2021-29494
+	RESERVED
+CVE-2021-29493
+	RESERVED
+CVE-2021-29492
+	RESERVED
+CVE-2021-29491
+	RESERVED
+CVE-2021-29490
+	RESERVED
+CVE-2021-29489
+	RESERVED
+CVE-2021-29488
+	RESERVED
+CVE-2021-29487
+	RESERVED
+CVE-2021-29486
+	RESERVED
+CVE-2021-29485
+	RESERVED
+CVE-2021-29484
+	RESERVED
+CVE-2021-29483
+	RESERVED
+CVE-2021-29482
+	RESERVED
+CVE-2021-29481
+	RESERVED
+CVE-2021-29480
+	RESERVED
+CVE-2021-29479
+	RESERVED
+CVE-2021-29478
+	RESERVED
+CVE-2021-29477
+	RESERVED
+CVE-2021-29476
+	RESERVED
+CVE-2021-29475
+	RESERVED
+CVE-2021-29474
+	RESERVED
+CVE-2021-29473
+	RESERVED
+CVE-2021-29472
+	RESERVED
+CVE-2021-29471
+	RESERVED
+CVE-2021-29470
+	RESERVED
+CVE-2021-29469
+	RESERVED
+CVE-2021-29468
+	RESERVED
+CVE-2021-29467
+	RESERVED
+CVE-2021-29466
+	RESERVED
+CVE-2021-29465
+	RESERVED
+CVE-2021-29464
+	RESERVED
+CVE-2021-29463
+	RESERVED
+CVE-2021-29462
+	RESERVED
+CVE-2021-29461
+	RESERVED
+CVE-2021-29460
+	RESERVED
+CVE-2021-29459
+	RESERVED
+CVE-2021-29458
+	RESERVED
+CVE-2021-29457
+	RESERVED
+CVE-2021-29456
+	RESERVED
+CVE-2021-29455
+	RESERVED
+CVE-2021-29454
+	RESERVED
+CVE-2021-29453
+	RESERVED
+CVE-2021-29452
+	RESERVED
+CVE-2021-29451
+	RESERVED
+CVE-2021-29450
+	RESERVED
+CVE-2021-29449
+	RESERVED
+CVE-2021-29448
+	RESERVED
+CVE-2021-29447
+	RESERVED
+CVE-2021-29446
+	RESERVED
+CVE-2021-29445
+	RESERVED
+CVE-2021-29444
+	RESERVED
+CVE-2021-29443
+	RESERVED
+CVE-2021-29442
+	RESERVED
+CVE-2021-29441
+	RESERVED
+CVE-2021-29440
+	RESERVED
+CVE-2021-29439
+	RESERVED
+CVE-2021-29438
+	RESERVED
+CVE-2021-29437
+	RESERVED
+CVE-2021-29436
+	RESERVED
+CVE-2021-29435
+	RESERVED
+CVE-2021-29434
+	RESERVED
+CVE-2021-29433
+	RESERVED
+CVE-2021-29432
+	RESERVED
+CVE-2021-29431
+	RESERVED
+CVE-2021-29430
+	RESERVED
+CVE-2021-29429
+	RESERVED
+CVE-2021-29428
+	RESERVED
+CVE-2021-29427
+	RESERVED
+CVE-2021-29426
+	RESERVED
+CVE-2021-29425
+	RESERVED
+CVE-2021-3476 (A flaw was found in OpenEXR's B44 uncompression functionality in versi ...)
+	TODO: check
+CVE-2021-3475 (There is a flaw in OpenEXR in versions before 3.0.0-beta. An attacker  ...)
+	TODO: check
+CVE-2021-3474 (There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted inp ...)
+	TODO: check
 CVE-2021-29424 (The Net::Netmask module before 2.0000 for Perl does not properly consi ...)
 	- libnet-netmask-perl <unfixed> (bug #986135)
 	NOTE: https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/
@@ -178,8 +628,8 @@ CVE-2021-29345
 	RESERVED
 CVE-2021-29344
 	RESERVED
-CVE-2021-29343
-	RESERVED
+CVE-2021-29343 (Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" p ...)
+	TODO: check
 CVE-2021-29342
 	RESERVED
 CVE-2021-29341
@@ -1085,8 +1535,8 @@ CVE-2021-28937 (The /password.html page of the Web management interface of the A
 	NOT-FOR-US: Acexy Wireless-N WiFi Repeater
 CVE-2021-28936 (The Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) Web management ...)
 	NOT-FOR-US: Acexy Wireless-N WiFi Repeater
-CVE-2021-28935
-	RESERVED
+CVE-2021-28935 (CMS Made Simple (CMSMS) 2.2.15 allows authenticated XSS via the /admin ...)
+	TODO: check
 CVE-2021-28934
 	RESERVED
 CVE-2021-28933
@@ -4870,28 +5320,28 @@ CVE-2021-27273 (This vulnerability allows remote attackers to execute arbitrary
 	NOT-FOR-US: Netgear
 CVE-2021-27272 (This vulnerability allows remote attackers to delete arbitrary files o ...)
 	NOT-FOR-US: Netgear
-CVE-2021-27271
-	RESERVED
-CVE-2021-27270
-	RESERVED
-CVE-2021-27269
-	RESERVED
-CVE-2021-27268
-	RESERVED
-CVE-2021-27267
-	RESERVED
-CVE-2021-27266
-	RESERVED
-CVE-2021-27265
-	RESERVED
-CVE-2021-27264
-	RESERVED
-CVE-2021-27263
-	RESERVED
-CVE-2021-27262
-	RESERVED
-CVE-2021-27261
-	RESERVED
+CVE-2021-27271 (This vulnerability allows remote attackers to execute arbitrary code o ...)
+	TODO: check
+CVE-2021-27270 (This vulnerability allows remote attackers to execute arbitrary code o ...)
+	TODO: check
+CVE-2021-27269 (This vulnerability allows remote attackers to execute arbitrary code o ...)
+	TODO: check
+CVE-2021-27268 (This vulnerability allows remote attackers to execute arbitrary code o ...)
+	TODO: check
+CVE-2021-27267 (This vulnerability allows remote attackers to execute arbitrary code o ...)
+	TODO: check
+CVE-2021-27266 (This vulnerability allows remote attackers to disclose sensitive infor ...)
+	TODO: check
+CVE-2021-27265 (This vulnerability allows remote attackers to disclose sensitive infor ...)
+	TODO: check
+CVE-2021-27264 (This vulnerability allows remote attackers to disclose sensitive infor ...)
+	TODO: check
+CVE-2021-27263 (This vulnerability allows remote attackers to disclose sensitive infor ...)
+	TODO: check
+CVE-2021-27262 (This vulnerability allows remote attackers to disclose sensitive infor ...)
+	TODO: check
+CVE-2021-27261 (This vulnerability allows remote attackers to execute arbitrary code o ...)
+	TODO: check
 CVE-2021-27260
 	RESERVED
 CVE-2021-27259
@@ -5686,8 +6136,7 @@ CVE-2021-26921 (In util/session/sessionmanager.go in Argo CD before 1.8.4, token
 	NOT-FOR-US: Argo CD
 CVE-2021-26920
 	RESERVED
-CVE-2021-26919
-	RESERVED
+CVE-2021-26919 (Apache Druid allows users to read data from other database systems usi ...)
 	- druid <itp> (bug #825797)
 CVE-2021-26918 (** DISPUTED ** The ProBot bot through 2021-02-08 for Discord might all ...)
 	NOT-FOR-US: ProBot bot
@@ -5962,8 +6411,8 @@ CVE-2021-26812
 	RESERVED
 CVE-2021-26811
 	RESERVED
-CVE-2021-26810
-	RESERVED
+CVE-2021-26810 (D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnera ...)
+	TODO: check
 CVE-2021-26809 (PHPGurukul Car Rental Project version 2.0 suffers from a remote shell  ...)
 	NOT-FOR-US: PHPGurukul Car Rental Project
 CVE-2021-26808
@@ -6486,8 +6935,8 @@ CVE-2021-26581
 	RESERVED
 CVE-2021-26580
 	RESERVED
-CVE-2021-26579
-	RESERVED
+CVE-2021-26579 (A security vulnerability in HPE Unified Data Management (UDM) could al ...)
+	TODO: check
 CVE-2021-26578 (A potential security vulnerability has been identified in HPE Network  ...)
 	NOT-FOR-US: HPE Network Orchestrator (NetO)
 CVE-2021-26577 (The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 Sy ...)
@@ -13964,8 +14413,8 @@ CVE-2021-23365
 	RESERVED
 CVE-2021-23364
 	RESERVED
-CVE-2021-23363
-	RESERVED
+CVE-2021-23363 (This affects the package kill-by-port before 0.0.2. If (attacker-contr ...)
+	TODO: check
 CVE-2021-23362 (The package hosted-git-info before 3.0.8 are vulnerable to Regular Exp ...)
 	- node-hosted-git-info 3.0.8-1
 	[buster] - node-hosted-git-info <no-dsa> (Minor issue)
@@ -17654,38 +18103,27 @@ CVE-2021-21640
 	RESERVED
 CVE-2021-21639
 	RESERVED
-CVE-2021-21638
-	RESERVED
+CVE-2021-21638 (A cross-site request forgery (CSRF) vulnerability in Jenkins Team Foun ...)
 	NOT-FOR-US: Jenkins plugin
-CVE-2021-21637
-	RESERVED
+CVE-2021-21637 (A missing permission check in Jenkins Team Foundation Server Plugin 5. ...)
 	NOT-FOR-US: Jenkins plugin
-CVE-2021-21636
-	RESERVED
+CVE-2021-21636 (A missing permission check in Jenkins Team Foundation Server Plugin 5. ...)
 	NOT-FOR-US: Jenkins plugin
-CVE-2021-21635
-	RESERVED
+CVE-2021-21635 (Jenkins REST List Parameter Plugin 1.3.0 and earlier does not escape a ...)
 	NOT-FOR-US: Jenkins plugin
-CVE-2021-21634
-	RESERVED
+CVE-2021-21634 (Jenkins Jabber (XMPP) notifier and control Plugin 1.41 and earlier sto ...)
 	NOT-FOR-US: Jenkins plugin
-CVE-2021-21633
-	RESERVED
+CVE-2021-21633 (A cross-site request forgery (CSRF) vulnerability in Jenkins OWASP Dep ...)
 	NOT-FOR-US: Jenkins plugin
-CVE-2021-21632
-	RESERVED
+CVE-2021-21632 (A missing permission check in Jenkins OWASP Dependency-Track Plugin 3. ...)
 	NOT-FOR-US: Jenkins plugin
-CVE-2021-21631
-	RESERVED
+CVE-2021-21631 (Jenkins Cloud Statistics Plugin 0.26 and earlier does not perform a pe ...)
 	NOT-FOR-US: Jenkins plugin
-CVE-2021-21630
-	RESERVED
+CVE-2021-21630 (Jenkins Extra Columns Plugin 1.22 and earlier does not escape paramete ...)
 	NOT-FOR-US: Jenkins plugin
-CVE-2021-21629
-	RESERVED
+CVE-2021-21629 (A cross-site request forgery (CSRF) vulnerability in Jenkins Build Wit ...)
 	NOT-FOR-US: Jenkins plugin
-CVE-2021-21628
-	RESERVED
+CVE-2021-21628 (Jenkins Build With Parameters Plugin 1.5 and earlier does not escape p ...)
 	NOT-FOR-US: Jenkins plugin
 CVE-2021-21627 (A cross-site request forgery (CSRF) vulnerability in Jenkins Libvirt A ...)
 	NOT-FOR-US: Jenkins plugin
@@ -19374,14 +19812,14 @@ CVE-2021-21414
 	RESERVED
 CVE-2021-21413
 	RESERVED
-CVE-2021-21412
-	RESERVED
+CVE-2021-21412 (Potential for arbitrary code execution in npm package @thi.ng/egf `#gp ...)
+	TODO: check
 CVE-2021-21411 (OAuth2-Proxy is an open source reverse proxy that provides authenticat ...)
 	TODO: check
 CVE-2021-21410
 	RESERVED
-CVE-2021-21409
-	RESERVED
+CVE-2021-21409 (Netty is an open-source, asynchronous event-driven network application ...)
+	TODO: check
 CVE-2021-21408
 	RESERVED
 CVE-2021-21407
@@ -19404,8 +19842,8 @@ CVE-2021-21400
 	RESERVED
 CVE-2021-21399
 	RESERVED
-CVE-2021-21398
-	RESERVED
+CVE-2021-21398 (PrestaShop is a fully scalable open source e-commerce solution. In Pre ...)
+	TODO: check
 CVE-2021-21397
 	RESERVED
 CVE-2021-21396 (wire-server is an open-source back end for Wire, a secure collaboratio ...)
@@ -21573,12 +22011,12 @@ CVE-2021-20522
 	RESERVED
 CVE-2021-20521
 	RESERVED
-CVE-2021-20520
-	RESERVED
+CVE-2021-20520 (IBM Jazz Foundation Products are vulnerable to cross-site scripting. T ...)
+	TODO: check
 CVE-2021-20519
 	RESERVED
-CVE-2021-20518
-	RESERVED
+CVE-2021-20518 (IBM Jazz Foundation Products are vulnerable to cross-site scripting. T ...)
+	TODO: check
 CVE-2021-20517
 	RESERVED
 CVE-2021-20516
@@ -21601,16 +22039,16 @@ CVE-2021-20508
 	RESERVED
 CVE-2021-20507
 	RESERVED
-CVE-2021-20506
-	RESERVED
+CVE-2021-20506 (IBM Jazz Foundation Products are vulnerable to cross-site scripting. T ...)
+	TODO: check
 CVE-2021-20505
 	RESERVED
-CVE-2021-20504
-	RESERVED
-CVE-2021-20503
-	RESERVED
-CVE-2021-20502
-	RESERVED
+CVE-2021-20504 (IBM Jazz Foundation Products are vulnerable to cross-site scripting. T ...)
+	TODO: check
+CVE-2021-20503 (IBM Jazz Foundation Products are vulnerable to cross-site scripting. T ...)
+	TODO: check
+CVE-2021-20502 (IBM Jazz Foundation Products are vulnerable to an XML External Entity  ...)
+	TODO: check
 CVE-2021-20501
 	RESERVED
 CVE-2021-20500
@@ -21649,8 +22087,8 @@ CVE-2021-20484
 	RESERVED
 CVE-2021-20483
 	RESERVED
-CVE-2021-20482
-	RESERVED
+CVE-2021-20482 (IBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to ...)
+	TODO: check
 CVE-2021-20481
 	RESERVED
 CVE-2021-20480
@@ -21719,8 +22157,8 @@ CVE-2021-20449
 	RESERVED
 CVE-2021-20448
 	RESERVED
-CVE-2021-20447
-	RESERVED
+CVE-2021-20447 (IBM Jazz Foundation Products are vulnerable to cross-site scripting. T ...)
+	TODO: check
 CVE-2021-20446 (IBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site  ...)
 	NOT-FOR-US: IBM
 CVE-2021-20445 (IBM Maximo for Civil Infrastructure 7.6.2 could allow a user to obtain ...)
@@ -21909,8 +22347,8 @@ CVE-2021-20354 (IBM WebSphere Application Server 8.0, 8.5, and 9.0 could allow a
 	NOT-FOR-US: IBM
 CVE-2021-20353 (IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable  ...)
 	NOT-FOR-US: IBM
-CVE-2021-20352
-	RESERVED
+CVE-2021-20352 (IBM Jazz Foundation Products are vulnerable to cross-site scripting. T ...)
+	TODO: check
 CVE-2021-20351 (IBM Engineering products are vulnerable to cross-site scripting. This  ...)
 	NOT-FOR-US: IBM
 CVE-2021-20350 (IBM Engineering products are vulnerable to cross-site scripting. This  ...)
@@ -61415,8 +61853,8 @@ CVE-2020-15077
 	RESERVED
 CVE-2020-15076
 	RESERVED
-CVE-2020-15075
-	RESERVED
+CVE-2020-15075 (OpenVPN Connect installer for macOS version 3.2.6 and older may corrup ...)
+	TODO: check
 CVE-2020-15074 (OpenVPN Access Server older than version 2.8.4 generates new user auth ...)
 	NOT-FOR-US: OpenVPN Access Server
 CVE-2020-15073 (An issue was discovered in phpList through 3.5.4. An XSS vulnerability ...)
@@ -89617,8 +90055,8 @@ CVE-2020-4946
 	RESERVED
 CVE-2020-4945
 	RESERVED
-CVE-2020-4944
-	RESERVED
+CVE-2020-4944 (IBM UrbanCode Deploy (UCD) 7.0.3.0, 7.0.4.0, 7.0.5.3, 7.0.5.4, 7.1.0.0 ...)
+	TODO: check
 CVE-2020-4943
 	RESERVED
 CVE-2020-4942 (IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to  ...)
@@ -89737,8 +90175,8 @@ CVE-2020-4886 (IBM InfoSphere Information Server 11.7 stores sensitive informati
 	NOT-FOR-US: IBM
 CVE-2020-4885
 	RESERVED
-CVE-2020-4884
-	RESERVED
+CVE-2020-4884 (IBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4, and 7.1.1.1 stores user c ...)
+	TODO: check
 CVE-2020-4883
 	RESERVED
 CVE-2020-4882 (IBM Planning Analytics 2.0 could be vulnerable to a Server-Side Reques ...)
@@ -89809,8 +90247,8 @@ CVE-2020-4850
 	RESERVED
 CVE-2020-4849 (IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.19 Interim Fix 7 could ...)
 	NOT-FOR-US: IBM
-CVE-2020-4848
-	RESERVED
+CVE-2020-4848 (IBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4, and 7.1.1.1 could allow a ...)
+	TODO: check
 CVE-2020-4847
 	RESERVED
 CVE-2020-4846 (IBM Security Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4f7ad7c89ced4d67e04fa2baaddf3b3266f84fd3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4f7ad7c89ced4d67e04fa2baaddf3b3266f84fd3
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210330/e297da4a/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list