Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: dc54ad1f by Salvatore Bonaccorso at 2021-09-23T22:33:09+02:00 Process more NFUs - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -307,7 +307,7 @@ CVE-2021-41430 CVE-2021-41429 RESERVED CVE-2021-41428 (Insecure permissions in Update Manager <= 5.8.0.2300 and DFL <= ...) - TODO: check + NOT-FOR-US: DATEV CVE-2021-41427 RESERVED CVE-2021-41426 @@ -402,7 +402,7 @@ CVE-2021-41383 (setup.cgi on NETGEAR R6020 1.0.0.48 devices allows an admin to e CVE-2021-41382 (Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server managem ...) NOT-FOR-US: Plastic SCM CVE-2021-41381 (Payara Micro Community 5.2021.6 and below allows Directory Traversal. ...) - TODO: check + NOT-FOR-US: Payara Micro Community CVE-2021-3816 RESERVED CVE-2021-41380 (RealVNC Viewer 6.21.406 allows remote VNC servers to cause a denial of ...) @@ -10788,9 +10788,9 @@ CVE-2021-36875 CVE-2021-36874 RESERVED CVE-2021-36873 (Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in W ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2021-36872 (Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in W ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2021-36871 (Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabi ...) NOT-FOR-US: Wordpress plugin CVE-2021-36870 (Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabi ...) @@ -10888,7 +10888,7 @@ CVE-2021-36825 CVE-2021-36824 RESERVED CVE-2021-36823 (Authenticated Stored Cross-Site Scripting (XSS) vulnerability in WordP ...) - TODO: check + NOT-FOR-US: WordPress plugin CVE-2021-36822 RESERVED CVE-2021-36821 @@ -35641,7 +35641,7 @@ CVE-2021-26796 CVE-2021-26795 RESERVED CVE-2021-26794 (Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows ...) - TODO: check + NOT-FOR-US: FrogCMS SentCMS CVE-2021-26793 RESERVED CVE-2021-26792 @@ -44716,15 +44716,15 @@ CVE-2021-22955 CVE-2021-22954 RESERVED CVE-2021-22953 (A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to c ...) - TODO: check + NOT-FOR-US: Concrete CMS CVE-2021-22952 (A vulnerability found in UniFi Talk application V1.12.3 and earlier pe ...) TODO: check CVE-2021-22951 RESERVED CVE-2021-22950 (Concrete CMS prior to 8.5.6 had a CSFR vulnerability allowing attachme ...) - TODO: check + NOT-FOR-US: Concrete CMS CVE-2021-22949 (A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to d ...) - TODO: check + NOT-FOR-US: Concrete CMS CVE-2021-22948 (Vulnerability in the generation of session IDs in revive-adserver < ...) TODO: check CVE-2021-22947 [STARTTLS protocol injection via MITM] @@ -44755,7 +44755,7 @@ CVE-2021-22942 [ossible Open Redirect in Host Authorization Middleware] [stretch] - rails <not-affected> (Vulnerable code not present) NOTE: https://www.openwall.com/lists/oss-security/2021/08/20/1 CVE-2021-22941 (Improper Access Control in Citrix ShareFile storage zones controller b ...) - TODO: check + NOT-FOR-US: Citrix CVE-2021-22940 (Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use aft ...) - nodejs 12.22.5~dfsg-1 [bullseye] - nodejs <not-affected> (Incomplete fix for CVE-2021-22930 not applied) @@ -46348,7 +46348,7 @@ CVE-2021-22278 CVE-2021-22277 RESERVED CVE-2021-22276 (The vulnerability allows a successful attacker to bypass the integrity ...) - TODO: check + NOT-FOR-US: ABB CVE-2021-22275 RESERVED CVE-2021-22274 @@ -46939,37 +46939,37 @@ CVE-2021-22022 (The vRealize Operations Manager API (8.x prior to 8.5) contains CVE-2021-22021 (VMware vRealize Log Insight (8.x prior to 8.4) contains a Cross Site S ...) NOT-FOR-US: VMware CVE-2021-22020 (The vCenter Server contains a denial-of-service vulnerability in the A ...) - TODO: check + NOT-FOR-US: VMWare CVE-2021-22019 (The vCenter Server contains a denial-of-service vulnerability in VAPI ...) - TODO: check + NOT-FOR-US: VMWare CVE-2021-22018 (The vCenter Server contains an arbitrary file deletion vulnerability i ...) - TODO: check + NOT-FOR-US: VMWare CVE-2021-22017 (Rhttproxy as used in vCenter Server contains a vulnerability due to im ...) - TODO: check + NOT-FOR-US: VMWare CVE-2021-22016 (The vCenter Server contains a reflected cross-site scripting vulnerabi ...) - TODO: check + NOT-FOR-US: VMWare CVE-2021-22015 (The vCenter Server contains multiple local privilege escalation vulner ...) - TODO: check + NOT-FOR-US: VMWare CVE-2021-22014 (The vCenter Server contains an authenticated code execution vulnerabil ...) - TODO: check + NOT-FOR-US: VMWare CVE-2021-22013 (The vCenter Server contains a file path traversal vulnerability leadin ...) - TODO: check + NOT-FOR-US: VMWare CVE-2021-22012 (The vCenter Server contains an information disclosure vulnerability du ...) - TODO: check + NOT-FOR-US: VMWare CVE-2021-22011 (vCenter Server contains an unauthenticated API endpoint vulnerability ...) - TODO: check + NOT-FOR-US: VMWare CVE-2021-22010 (The vCenter Server contains a denial-of-service vulnerability in VPXD ...) - TODO: check + NOT-FOR-US: VMWare CVE-2021-22009 (The vCenter Server contains multiple denial-of-service vulnerabilities ...) - TODO: check + NOT-FOR-US: VMWare CVE-2021-22008 (The vCenter Server contains an information disclosure vulnerability in ...) - TODO: check + NOT-FOR-US: VMWare CVE-2021-22007 (The vCenter Server contains a local information disclosure vulnerabili ...) - TODO: check + NOT-FOR-US: VMWare CVE-2021-22006 (The vCenter Server contains a reverse proxy bypass vulnerability due t ...) - TODO: check + NOT-FOR-US: VMWare CVE-2021-22005 (The vCenter Server contains an arbitrary file upload vulnerability in ...) - TODO: check + NOT-FOR-US: VMWare CVE-2021-22004 (An issue was discovered in SaltStack Salt before 3003.3. The salt mini ...) - salt <unfixed> (bug #994016) NOTE: https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/ @@ -46995,7 +46995,7 @@ CVE-2021-21995 (OpenSLP as used in ESXi has a denial-of-service vulnerability du CVE-2021-21994 (SFCB (Small Footprint CIM Broker) as used in ESXi has an authenticatio ...) NOT-FOR-US: VMware CVE-2021-21993 (The vCenter Server contains an SSRF (Server Side Request Forgery) vuln ...) - TODO: check + NOT-FOR-US: VMWare CVE-2021-21992 (The vCenter Server contains a denial-of-service vulnerability due to i ...) NOT-FOR-US: VMware CVE-2021-21991 (The vCenter Server contains a local privilege escalation vulnerability ...) @@ -47171,7 +47171,7 @@ CVE-2021-21915 CVE-2021-21914 RESERVED CVE-2021-21913 (An information disclosure vulnerability exists in the WiFi Smart Mesh ...) - TODO: check + NOT-FOR-US: D-LINK CVE-2021-21912 RESERVED CVE-2021-21911 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dc54ad1f11cfb0b19bf6307f1a9774dc8a1d25f2 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dc54ad1f11cfb0b19bf6307f1a9774dc8a1d25f2 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits