[Git][security-tracker-team/security-tracker][master] Process some more NFUs

Salvatore Bonaccorso carnil at debian.org
Wed Mar 31 21:44:51 BST 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
726391e7 by Salvatore Bonaccorso at 2021-03-31T22:44:20+02:00
Process some more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
 CVE-2021-29663 (CourseMS (aka Course Registration Management System) 2.1 is affected b ...)
-	TODO: check
+	NOT-FOR-US: CourseMS (aka Course Registration Management System)
 CVE-2021-29661
 	RESERVED
 CVE-2021-29660
@@ -7,7 +7,7 @@ CVE-2021-29660
 CVE-2021-29659
 	RESERVED
 CVE-2021-29658 (The unofficial vscode-rufo extension before 0.0.4 for Visual Studio Co ...)
-	TODO: check
+	NOT-FOR-US: vscode-rufo extension for Visual Studio Code
 CVE-2021-29657
 	RESERVED
 CVE-2021-29656
@@ -3086,7 +3086,7 @@ CVE-2021-28247 (** UNSUPPORTED WHEN ASSIGNED ** CA eHealth Performance Manager t
 CVE-2021-28246 (** UNSUPPORTED WHEN ASSIGNED ** CA eHealth Performance Manager through ...)
 	NOT-FOR-US: CA eHealth Performance Manager
 CVE-2021-28245 (PbootCMS 3.0.4 contains a SQL injection vulnerability through index.ph ...)
-	TODO: check
+	NOT-FOR-US: PbootCMS
 CVE-2021-28244
 	RESERVED
 CVE-2021-28243
@@ -41645,7 +41645,7 @@ CVE-2020-24638 (Multiple authenticated remote command executions are possible in
 CVE-2020-24637 (Two vulnerabilities in ArubaOS GRUB2 implementation allows for an atta ...)
 	NOT-FOR-US: ArubaOS GRUB2 implementation (CVE specific to ArubaOS)
 CVE-2020-24636 (A remote execution of arbitrary commands vulnerability was discovered  ...)
-	TODO: check
+	NOT-FOR-US: Aruba
 CVE-2020-24635 (A remote execution of arbitrary commands vulnerability was discovered  ...)
 	NOT-FOR-US: Aruba
 CVE-2020-24634 (An attacker is able to remotely inject arbitrary commands by sending e ...)
@@ -49973,7 +49973,7 @@ CVE-2020-20547
 CVE-2020-20546
 	RESERVED
 CVE-2020-20545 (Cross-Site Scripting (XSS) vulnerability in Zhiyuan G6 Government Coll ...)
-	TODO: check
+	NOT-FOR-US: Zhiyuan G6 Government Collaboration System
 CVE-2020-20544
 	RESERVED
 CVE-2020-20543



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/726391e75810fd1e8b0e822e2cc0db84e2bdb046

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/726391e75810fd1e8b0e822e2cc0db84e2bdb046
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210331/a5a8d716/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list