Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 34957123 by security tracker role at 2020-08-07T08:10:15+00:00 automatic update - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,7 @@ +CVE-2020-17376 + RESERVED +CVE-2020-17375 + RESERVED CVE-2020-17374 RESERVED CVE-2020-17373 @@ -2302,24 +2306,24 @@ CVE-2020-16229 (Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. P NOT-FOR-US: Advantech WebAccess CVE-2020-16228 RESERVED -CVE-2020-16227 - RESERVED +CVE-2020-16227 (Delta Electronics TPEditor Versions 1.97 and prior. An improper input ...) + TODO: check CVE-2020-16226 RESERVED -CVE-2020-16225 - RESERVED +CVE-2020-16225 (Delta Electronics TPEditor Versions 1.97 and prior. A write-what-where ...) + TODO: check CVE-2020-16224 RESERVED -CVE-2020-16223 - RESERVED +CVE-2020-16223 (Delta Electronics TPEditor Versions 1.97 and prior. A heap-based buffe ...) + TODO: check CVE-2020-16222 RESERVED -CVE-2020-16221 - RESERVED +CVE-2020-16221 (Delta Electronics TPEditor Versions 1.97 and prior. A stack-based buff ...) + TODO: check CVE-2020-16220 RESERVED -CVE-2020-16219 - RESERVED +CVE-2020-16219 (Delta Electronics TPEditor Versions 1.97 and prior. An out-of-bounds r ...) + TODO: check CVE-2020-16218 RESERVED CVE-2020-16217 (Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A doubl ...) @@ -3511,10 +3515,10 @@ CVE-2020-15704 [ppp ZDI-CAN-11504] - ppp <not-affected> (Ubuntu-specific issue, load_ppp_generic_if_needed.patch not used in Debian) CVE-2020-15703 RESERVED -CVE-2020-15702 - RESERVED -CVE-2020-15701 - RESERVED +CVE-2020-15702 (TOCTOU Race Condition vulnerability in apport allows a local attacker ...) + TODO: check +CVE-2020-15701 (An unhandled exception in check_ignored() in apport/report.py can be e ...) + TODO: check CVE-2020-15700 (An issue was discovered in Joomla! through 3.9.19. A missing token che ...) NOT-FOR-US: Joomla! CVE-2020-15699 (An issue was discovered in Joomla! through 3.9.19. Missing validation ...) @@ -4852,8 +4856,8 @@ CVE-2020-15138 RESERVED CVE-2020-15137 RESERVED -CVE-2020-15136 - RESERVED +CVE-2020-15136 (In ectd before versions 3.4.10 and 3.3.23, gateway TLS authentication ...) + TODO: check CVE-2020-15135 (save-server (npm package) before version 1.05 is affected by a CSRF vu ...) TODO: check CVE-2020-15134 (Faye before version 1.4.0, there is a lack of certification validation ...) @@ -4908,10 +4912,10 @@ CVE-2020-15117 (In Synergy before version 1.12.0, a Synergy server can be crashe NOTE: https://github.com/symless/synergy-core/security/advisories/GHSA-chfm-333q-gfpp CVE-2020-15116 RESERVED -CVE-2020-15115 - RESERVED -CVE-2020-15114 - RESERVED +CVE-2020-15115 (etcd before versions 3.3.23 and 3.4.10 does not perform any password l ...) + TODO: check +CVE-2020-15114 (In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simpl ...) + TODO: check CVE-2020-15113 (In etcd before versions 3.3.23 and 3.4.10, certain directory paths are ...) TODO: check CVE-2020-15112 (In etcd before versions 3.3.23 and 3.4.10, it is possible to have an e ...) @@ -12997,8 +13001,8 @@ CVE-2020-11939 (In nDPI through 3.2 Stable, the SSH protocol dissector has multi NOTE: https://securitylab.github.com/advisories/GHSL-2020-051_052-ntop-ndpi CVE-2020-11938 (In JetBrains TeamCity 2018.2 through 2019.2.1, a project administrator ...) NOT-FOR-US: JetBrains TeamCity -CVE-2020-11937 - RESERVED +CVE-2020-11937 (In whoopsie, parse_report() from whoopsie.c allows a local attacker to ...) + TODO: check CVE-2020-11936 RESERVED CVE-2020-11935 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/349571232be3234399cbeb9aedf51ce45a2eb94e -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/349571232be3234399cbeb9aedf51ce45a2eb94e You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits