Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
33aaec07 by security tracker role at 2020-03-14T08:10:20+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,19 @@
+CVE-2020-10566 (grub2-bhyve, as used in FreeBSD bhyve before revision 525916
2020-02-1 ...)
+ TODO: check
+CVE-2020-10565 (grub2-bhyve, as used in FreeBSD bhyve before revision 525916
2020-02-1 ...)
+ TODO: check
+CVE-2020-10564 (An issue was discovered in the File Upload plugin before
4.13.0 for Wo ...)
+ TODO: check
+CVE-2020-10563 (An issue was discovered in DEVOME GRR before 3.4.1c.
frmcontactlist.ph ...)
+ TODO: check
+CVE-2020-10562 (An issue was discovered in DEVOME GRR before 3.4.1c.
admin_edit_room.p ...)
+ TODO: check
+CVE-2020-10561
+ RESERVED
+CVE-2020-10560
+ RESERVED
+CVE-2020-10559
+ RESERVED
CVE-2020-10558
RESERVED
CVE-2020-10557
@@ -11899,8 +11915,8 @@ CVE-2020-5258 (In affected versions of dojo (NPM
package), the deepCopy method i
[buster] - dojo <no-dsa> (Minor issue)
NOTE:
https://github.com/dojo/dojo/security/advisories/GHSA-jxfh-8wgv-vfr2
NOTE:
https://github.com/dojo/dojo/commit/20a00afb68f5587946dc76fbeaa68c39bda2171d
-CVE-2020-5257
- RESERVED
+CVE-2020-5257 (In Administrate (rubygem) before version 0.13.0, when sorting
by attri ...)
+ TODO: check
CVE-2020-5256 (BookStack before version 0.25.5 has a vulnerability where a
user could ...)
NOT-FOR-US: BookStack
CVE-2020-5255
@@ -11948,8 +11964,8 @@ CVE-2020-5242 (openHAB before 2.5.2 allow a remote
attacker to use REST calls to
NOT-FOR-US: openHAB
CVE-2020-5241 (matestack-ui-core (RubyGem) before 0.7.4 is vulnerable to
XSS/Script i ...)
NOT-FOR-US: matestack-ui-core Ruby gem
-CVE-2020-5240
- RESERVED
+CVE-2020-5240 (In wagtail-2fa before 1.4.1, any user with access to the CMS
can view ...)
+ TODO: check
CVE-2020-5239 (In Mailu before version 1.7, an authenticated user can exploit
a vulne ...)
NOT-FOR-US: Mailu
CVE-2020-5238
@@ -26241,12 +26257,12 @@ CVE-2019-18580 (Dell EMC Storage Monitoring and
Reporting version 4.3.1 contains
NOT-FOR-US: EMC
CVE-2019-18579 (Settings for the Dell XPS 13 2-in-1 (7390) BIOS versions prior
to 1.1. ...)
NOT-FOR-US: Dell
-CVE-2019-18578
- RESERVED
-CVE-2019-18577
- RESERVED
-CVE-2019-18576
- RESERVED
+CVE-2019-18578 (Dell EMC XtremIO XMS versions prior to 6.3.0 contain a stored
cross-si ...)
+ TODO: check
+CVE-2019-18577 (Dell EMC XtremIO XMS versions prior to 6.3.0 contain an
incorrect perm ...)
+ TODO: check
+CVE-2019-18576 (Dell EMC XtremIO XMS versions prior to 6.3.0 contain an
information di ...)
+ TODO: check
CVE-2019-18575 (Dell Command Configure versions prior to 4.2.1 contain an
uncontrolled ...)
NOT-FOR-US: Dell Command Configure
CVE-2019-18574 (RSA Authentication Manager software versions prior to 8.4 P8
contain a ...)
@@ -70175,10 +70191,10 @@ CVE-2019-3772 (Spring Integration
(spring-integration-xml and spring-integration
NOT-FOR-US: Spring Integration
CVE-2019-3771
RESERVED
-CVE-2019-3770
- RESERVED
-CVE-2019-3769
- RESERVED
+CVE-2019-3770 (Dell Wyse Management Suite versions prior to 1.4.1 contain a
stored cr ...)
+ TODO: check
+CVE-2019-3769 (Dell Wyse Management Suite versions prior to 1.4.1 contain a
stored cr ...)
+ TODO: check
CVE-2019-3768 (RSA Authentication Manager versions prior to 8.4 P7 contain an
XML Ent ...)
NOT-FOR-US: RSA Authentication Manager
CVE-2019-3767 (Dell ImageAssist versions prior to 8.7.15 contain an
information discl ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/33aaec07fcd61bafa0c1c6bf4e27b40c52b0a43e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/33aaec07fcd61bafa0c1c6bf4e27b40c52b0a43e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
