[Git][security-tracker-team/security-tracker][master] automatic update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
99d3f87a by security tracker role at 2021-09-16T08:10:28+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,43 @@
+CVE-2021-41303
+	RESERVED
+CVE-2021-41302
+	RESERVED
+CVE-2021-41301
+	RESERVED
+CVE-2021-41300
+	RESERVED
+CVE-2021-41299
+	RESERVED
+CVE-2021-41298
+	RESERVED
+CVE-2021-41297
+	RESERVED
+CVE-2021-41296
+	RESERVED
+CVE-2021-41295
+	RESERVED
+CVE-2021-41294
+	RESERVED
+CVE-2021-41293
+	RESERVED
+CVE-2021-41292
+	RESERVED
+CVE-2021-41291
+	RESERVED
+CVE-2021-41290
+	RESERVED
+CVE-2021-41289
+	RESERVED
+CVE-2021-41288
+	RESERVED
+CVE-2021-41287
+	RESERVED
+CVE-2021-41286
+	RESERVED
+CVE-2021-3804
+	RESERVED
+CVE-2016-20012 (OpenSSH through 8.7 allows remote attackers, who have a suspicion that ...)
+	TODO: check
 CVE-2021-41285
 	RESERVED
 CVE-2021-41284
@@ -821,8 +861,8 @@ CVE-2021-40883
 	RESERVED
 CVE-2021-40882
 	RESERVED
-CVE-2021-40881
-	RESERVED
+CVE-2021-40881 (An issue in the BAT file parameters of PublicCMS v4.0 allows attackers ...)
+	TODO: check
 CVE-2021-40880
 	RESERVED
 CVE-2021-40879
@@ -1391,8 +1431,8 @@ CVE-2021-40641
 	RESERVED
 CVE-2021-40640
 	RESERVED
-CVE-2021-40639
-	RESERVED
+CVE-2021-40639 (Improper access control in Jfinal CMS 5.1.0 allows attackers to access ...)
+	TODO: check
 CVE-2021-40638
 	RESERVED
 CVE-2021-40637
@@ -4894,8 +4934,8 @@ CVE-2021-39130
 	RESERVED
 CVE-2021-39129
 	RESERVED
-CVE-2021-39128
-	RESERVED
+CVE-2021-39128 (Affected versions of Atlassian Jira Server or Data Center using the Ji ...)
+	TODO: check
 CVE-2021-39127
 	RESERVED
 CVE-2021-39126
@@ -7675,16 +7715,16 @@ CVE-2021-37915
 	RESERVED
 CVE-2021-37914 (In Argo Workflows through 3.1.3, if EXPRESSION_TEMPLATES is enabled an ...)
 	NOT-FOR-US: Argo Workflows
-CVE-2021-37913
-	RESERVED
-CVE-2021-37912
-	RESERVED
+CVE-2021-37913 (The HGiga OAKlouds mobile portal does not filter special characters of ...)
+	TODO: check
+CVE-2021-37912 (The HGiga OAKlouds mobile portal does not filter special characters of ...)
+	TODO: check
 CVE-2021-37911 (The management interface of BenQ smart wireless conference projector d ...)
 	NOT-FOR-US: BenQ smart wireless conference projector
 CVE-2021-37910
 	RESERVED
-CVE-2021-37909
-	RESERVED
+CVE-2021-37909 (WriteRegistry function in TSSServiSign component does not filter and v ...)
+	TODO: check
 CVE-2021-37908
 	RESERVED
 CVE-2021-37907
@@ -18954,10 +18994,10 @@ CVE-2021-33047
 	RESERVED
 CVE-2021-33046
 	RESERVED
-CVE-2021-33045
-	RESERVED
-CVE-2021-33044
-	RESERVED
+CVE-2021-33045 (The identity authentication bypass vulnerability found in some Dahua p ...)
+	TODO: check
+CVE-2021-33044 (The identity authentication bypass vulnerability found in some Dahua p ...)
+	TODO: check
 CVE-2020-36363 (Amazon AWS CloudFront TLSv1.2_2019 allows TLS_ECDHE_RSA_WITH_AES_128_C ...)
 	NOT-FOR-US: Amazon AWS CloudFront
 CVE-2021-3554
@@ -77982,14 +78022,14 @@ CVE-2020-21485
 	RESERVED
 CVE-2020-21484
 	RESERVED
-CVE-2020-21483
-	RESERVED
-CVE-2020-21482
-	RESERVED
-CVE-2020-21481
-	RESERVED
-CVE-2020-21480
-	RESERVED
+CVE-2020-21483 (An arbitrary file upload vulnerability in Jizhicms v1.5 allows attacke ...)
+	TODO: check
+CVE-2020-21482 (A cross-site scripting (XSS) vulnerability in RGCMS v1.06 allows attac ...)
+	TODO: check
+CVE-2020-21481 (An arbitrary file upload vulnerability in RGCMS v1.06 allows attackers ...)
+	TODO: check
+CVE-2020-21480 (An arbitrary file write vulnerability in RGCMS v1.06 allows attackers  ...)
+	TODO: check
 CVE-2020-21479
 	RESERVED
 CVE-2020-21478
@@ -78304,10 +78344,10 @@ CVE-2020-21324
 	RESERVED
 CVE-2020-21323
 	RESERVED
-CVE-2020-21322
-	RESERVED
-CVE-2020-21321
-	RESERVED
+CVE-2020-21322 (An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below a ...)
+	TODO: check
+CVE-2020-21321 (emlog v6.0 contains a Cross-Site Request Forgery (CSRF) via /admin/lin ...)
+	TODO: check
 CVE-2020-21320
 	RESERVED
 CVE-2020-21319



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99d3f87ac55b43f6791419bce981fc20a62ce8ce

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99d3f87ac55b43f6791419bce981fc20a62ce8ce
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210916/862f99e6/attachment.htm>