[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Oct 23 09:10:26 BST 2021 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1d2d4aac by security tracker role at 2021-10-23T08:10:17+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,19 @@
+CVE-2021-42852
+	RESERVED
+CVE-2021-42851
+	RESERVED
+CVE-2021-42850
+	RESERVED
+CVE-2021-42849
+	RESERVED
+CVE-2021-42848
+	RESERVED
+CVE-2021-3899
+	RESERVED
+CVE-2021-3898
+	RESERVED
+CVE-2021-3897
+	RESERVED
 CVE-2021-42847
 	RESERVED
 CVE-2021-42846
@@ -219,32 +235,32 @@ CVE-2021-3895
 	RESERVED
 CVE-2021-23192
 	RESERVED
-CVE-2020-36502
-	RESERVED
-CVE-2020-36501
-	RESERVED
+CVE-2020-36502 (Swift File Transfer Mobile v1.1.2 was discovered to contain a cross-si ...)
+	TODO: check
+CVE-2020-36501 (Multiple cross-site scripting (XSS) vulnerabilities in the Support mod ...)
+	TODO: check
 CVE-2020-36500
 	RESERVED
-CVE-2020-36499
-	RESERVED
-CVE-2020-36498
-	RESERVED
-CVE-2020-36497
-	RESERVED
-CVE-2020-36496
-	RESERVED
-CVE-2020-36495
-	RESERVED
-CVE-2020-36494
-	RESERVED
-CVE-2020-36493
-	RESERVED
-CVE-2020-36492
-	RESERVED
-CVE-2020-36491
-	RESERVED
-CVE-2020-36490
-	RESERVED
+CVE-2020-36499 (TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to cont ...)
+	TODO: check
+CVE-2020-36498 (Macrob7 Macs Framework Content Management System - 1.14f contains a cr ...)
+	TODO: check
+CVE-2020-36497 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripti ...)
+	TODO: check
+CVE-2020-36496 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripti ...)
+	TODO: check
+CVE-2020-36495 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripti ...)
+	TODO: check
+CVE-2020-36494 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripti ...)
+	TODO: check
+CVE-2020-36493 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripti ...)
+	TODO: check
+CVE-2020-36492 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripti ...)
+	TODO: check
+CVE-2020-36491 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripti ...)
+	TODO: check
+CVE-2020-36490 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripti ...)
+	TODO: check
 CVE-2021-XXXX [RUSTSEC-2020-0159: Potential segfault in localtime_r invocations]
 	- rust-chrono <unfixed> (bug #996913)
 	NOTE: https://rustsec.org/advisories/RUSTSEC-2020-0159.html
@@ -1988,14 +2004,14 @@ CVE-2021-42394
 	RESERVED
 CVE-2021-42393
 	RESERVED
-CVE-2020-36489
-	RESERVED
-CVE-2020-36488
-	RESERVED
+CVE-2020-36489 (Dropouts Technologies LLP Air Share v1.2 was discovered to contain a c ...)
+	TODO: check
+CVE-2020-36488 (An issue in the FTP server of Sky File v2.1.0 allows attackers to perf ...)
+	TODO: check
 CVE-2020-36487
 	RESERVED
-CVE-2020-36486
-	RESERVED
+CVE-2020-36486 (Swift File Transfer Mobile v1.1.2 and below was discovered to contain  ...)
+	TODO: check
 CVE-2021-42392
 	RESERVED
 CVE-2021-42391
@@ -2088,8 +2104,8 @@ CVE-2021-42348
 	RESERVED
 CVE-2021-42347
 	RESERVED
-CVE-2020-36485
-	RESERVED
+CVE-2020-36485 (Portable Ltd Playable v9.18 was discovered to contain an arbitrary fil ...)
+	TODO: check
 CVE-2021-42346
 	RESERVED
 CVE-2021-42345
@@ -2511,8 +2527,8 @@ CVE-2021-42260 (TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::
 	NOTE: https://sourceforge.net/p/tinyxml/bugs/141/
 CVE-2021-42259
 	RESERVED
-CVE-2021-42258
-	RESERVED
+CVE-2021-42258 (BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL i ...)
+	TODO: check
 CVE-2021-42257 (check_smart before 6.9.1 allows unintended drive access by an unprivil ...)
 	NOT-FOR-US: check_smart Icinga plugin
 CVE-2021-42256
@@ -62833,36 +62849,36 @@ CVE-2020-28971 (An issue was discovered on Western Digital My Cloud OS 5 devices
 	NOT-FOR-US: Western Digital My Cloud OS 5 devices
 CVE-2020-28970 (An issue was discovered on Western Digital My Cloud OS 5 devices befor ...)
 	NOT-FOR-US: Western Digital My Cloud OS 5 devices
-CVE-2020-28969
-	RESERVED
-CVE-2020-28968
-	RESERVED
-CVE-2020-28967
-	RESERVED
+CVE-2020-28969 (Aplioxio PDF ShapingUp 5.0.0.139 contains a buffer overflow which allo ...)
+	TODO: check
+CVE-2020-28968 (Draytek VigorAP 1000C contains a stored cross-site scripting (XSS) vul ...)
+	TODO: check
+CVE-2020-28967 (FlashGet v1.9.6 was discovered to contain a buffer overflow in the 'cu ...)
+	TODO: check
 CVE-2020-28966
 	RESERVED
 CVE-2020-28965
 	RESERVED
-CVE-2020-28964
-	RESERVED
-CVE-2020-28963
-	RESERVED
+CVE-2020-28964 (Internet Download Manager 6.37.11.1 was discovered to contain a stack  ...)
+	TODO: check
+CVE-2020-28963 (Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was discovered to  ...)
+	TODO: check
 CVE-2020-28962
 	RESERVED
-CVE-2020-28961
-	RESERVED
-CVE-2020-28960
-	RESERVED
+CVE-2020-28961 (Perfex CRM v2.4.4 was discovered to contain a stored cross-site script ...)
+	TODO: check
+CVE-2020-28960 (Chichen Tech CMS v1.0 was discovered to contain multiple SQL injection ...)
+	TODO: check
 CVE-2020-28959
 	RESERVED
 CVE-2020-28958
 	RESERVED
-CVE-2020-28957
-	RESERVED
-CVE-2020-28956
-	RESERVED
-CVE-2020-28955
-	RESERVED
+CVE-2020-28957 (Multiple cross-site scripting (XSS) vulnerabilities in the Customer Ad ...)
+	TODO: check
+CVE-2020-28956 (Multiple cross-site scripting (XSS) vulnerabilities in the Sales modul ...)
+	TODO: check
+CVE-2020-28955 (SugarCRM v6.5.18 was discovered to contain a cross-site scripting (XSS ...)
+	TODO: check
 CVE-2020-28954 (web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 la ...)
 	NOT-FOR-US: BigBlueButton
 CVE-2020-28953 (In BigBlueButton before 2.2.29, a user can vote more than once in a si ...)
@@ -80219,58 +80235,58 @@ CVE-2020-23063
 	RESERVED
 CVE-2020-23062
 	RESERVED
-CVE-2020-23061
-	RESERVED
-CVE-2020-23060
-	RESERVED
+CVE-2020-23061 (Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contai ...)
+	TODO: check
+CVE-2020-23060 (Internet Download Manager 6.37.11.1 was discovered to contain a stack  ...)
+	TODO: check
 CVE-2020-23059
 	RESERVED
-CVE-2020-23058
-	RESERVED
+CVE-2020-23058 (An issue in the authentication mechanism in Nong Ge File Explorer v1.4 ...)
+	TODO: check
 CVE-2020-23057
 	RESERVED
 CVE-2020-23056
 	RESERVED
-CVE-2020-23055
-	RESERVED
-CVE-2020-23054
-	RESERVED
+CVE-2020-23055 (ANCOM WLAN Controller (Wireless Series & Hotspot) WLC-1000 & W ...)
+	TODO: check
+CVE-2020-23054 (A cross-site scripting (XSS) vulnerability in NSK User Agent String Sw ...)
+	TODO: check
 CVE-2020-23053
 	RESERVED
-CVE-2020-23052
-	RESERVED
-CVE-2020-23051
-	RESERVED
-CVE-2020-23050
-	RESERVED
-CVE-2020-23049
-	RESERVED
-CVE-2020-23048
-	RESERVED
-CVE-2020-23047
-	RESERVED
-CVE-2020-23046
-	RESERVED
-CVE-2020-23045
-	RESERVED
-CVE-2020-23044
-	RESERVED
-CVE-2020-23043
-	RESERVED
-CVE-2020-23042
-	RESERVED
-CVE-2020-23041
-	RESERVED
-CVE-2020-23040
-	RESERVED
-CVE-2020-23039
-	RESERVED
-CVE-2020-23038
-	RESERVED
-CVE-2020-23037
-	RESERVED
-CVE-2020-23036
-	RESERVED
+CVE-2020-23052 (Catalyst IT Ltd Mahara CMS v19.10.2 was discovered to contain multiple ...)
+	TODO: check
+CVE-2020-23051 (Phpgurukul User Registration & User Management System v2.0 was dis ...)
+	TODO: check
+CVE-2020-23050 (TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to cont ...)
+	TODO: check
+CVE-2020-23049 (Fork CMS Content Management System v5.8.0 was discovered to contain a  ...)
+	TODO: check
+CVE-2020-23048 (SeedDMS Content Management System v6.0.7 contains a persistent cross-s ...)
+	TODO: check
+CVE-2020-23047 (Macrob7 Macs Framework Content Management System - 1.14f was discovere ...)
+	TODO: check
+CVE-2020-23046 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripti ...)
+	TODO: check
+CVE-2020-23045 (Macrob7 Macs Framework Content Management System - 1.14f was discovere ...)
+	TODO: check
+CVE-2020-23044 (DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripti ...)
+	TODO: check
+CVE-2020-23043 (Tran Tu Air Sender v1.0.2 was discovered to contain an arbitrary file  ...)
+	TODO: check
+CVE-2020-23042 (Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contai ...)
+	TODO: check
+CVE-2020-23041 (Dropouts Technologies LLP Air Share v1.2 was discovered to contain a c ...)
+	TODO: check
+CVE-2020-23040 (Sky File v2.1.0 contains a directory traversal vulnerability in the FT ...)
+	TODO: check
+CVE-2020-23039 (Folder Lock v3.4.5 was discovered to contain a stored cross-site scrip ...)
+	TODO: check
+CVE-2020-23038 (Swift File Transfer Mobile v1.1.2 and below was discovered to contain  ...)
+	TODO: check
+CVE-2020-23037 (Portable Ltd Playable v9.18 contains a code injection vulnerability in ...)
+	TODO: check
+CVE-2020-23036 (MEDIA NAVI Inc SMACom v1.2 was discovered to contain an insecure sessi ...)
+	TODO: check
 CVE-2020-23035
 	RESERVED
 CVE-2020-23034



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d2d4aac7623ffc3838a427125efc0b562e07844

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d2d4aac7623ffc3838a427125efc0b562e07844
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211023/034b15b2/attachment.htm>

More information about the debian-security-tracker-commits mailing list