summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2021-02-03 21:49:17 +0100
committerSalvatore Bonaccorso <carnil@debian.org>2021-02-03 21:49:17 +0100
commiteff253a19c045d6c71777b5a9b4f093acc132182 (patch)
treeb23cc81794d46889fc1efc59d7fd5a2a62fd3593
parentf43ef6f90ac1ecbd354c905b9b425e4230f97e2c (diff)
Process some NFUs
-rw-r--r--data/CVE/2019.list2
-rw-r--r--data/CVE/2020.list22
-rw-r--r--data/CVE/2021.list6
3 files changed, 15 insertions, 15 deletions
diff --git a/data/CVE/2019.list b/data/CVE/2019.list
index 70856db57f..78becbe43e 100644
--- a/data/CVE/2019.list
+++ b/data/CVE/2019.list
@@ -11800,7 +11800,7 @@ CVE-2019-16270
CVE-2019-16269
RESERVED
CVE-2019-16268 (Zoho ManageEngine Remote Access Plus 10.0.259 allows HTML injection vi ...)
- TODO: check
+ NOT-FOR-US: Zoho ManageEngine Remote Access Plus
CVE-2019-16267
RESERVED
CVE-2019-16266
diff --git a/data/CVE/2020.list b/data/CVE/2020.list
index 49fb49195f..3db28422ca 100644
--- a/data/CVE/2020.list
+++ b/data/CVE/2020.list
@@ -1834,9 +1834,9 @@ CVE-2020-35484
CVE-2020-35483 (AnyDesk before 6.1.0 on Windows, when run in portable mode on a system ...)
NOT-FOR-US: AnyDesk
CVE-2020-35482 (SolarWinds Serv-U before 15.2.2 allows authenticated reflected XSS. ...)
- TODO: check
+ NOT-FOR-US: SolarWinds
CVE-2020-35481 (SolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro Injection ...)
- TODO: check
+ NOT-FOR-US: SolarWinds
CVE-2020-35480 (An issue was discovered in MediaWiki before 1.35.1. Missing users (acc ...)
{DSA-4816-1 DLA-2504-1}
- mediawiki 1:1.35.1-1
@@ -4539,7 +4539,7 @@ CVE-2020-28896 (Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure t
NOTE: https://gitlab.com/muttmua/mutt/-/commit/04b06aaa3e0cc0022b9b01dbca2863756ebbf59a
NOTE: https://github.com/neomutt/neomutt/commit/9c36717a3e2af1f2c1b7242035455ec8112b4b06
CVE-2020-28895 (In Wind River VxWorks, memory allocator has a possible overflow in cal ...)
- TODO: check
+ NOT-FOR-US: Wind River VxWorks
CVE-2020-28894
RESERVED
CVE-2020-28893
@@ -5030,7 +5030,7 @@ CVE-2020-28655
CVE-2020-28654
RESERVED
CVE-2020-28653 (Zoho ManageEngine OpManager Stable build before 125203 (and Released b ...)
- TODO: check
+ NOT-FOR-US: Zoho ManageEngine OpManager Stable
CVE-2020-28652
RESERVED
CVE-2020-28651
@@ -6133,7 +6133,7 @@ CVE-2020-28146
CVE-2020-28145
RESERVED
CVE-2020-28144 (Certain Moxa Inc products are affected by an improper restriction of o ...)
- TODO: check
+ NOT-FOR-US: Moxa
CVE-2020-28143
RESERVED
CVE-2020-28142
@@ -6480,7 +6480,7 @@ CVE-2020-28003
CVE-2020-28002 (In SonarQube 8.4.2.36762, an external attacker can achieve authenticat ...)
NOT-FOR-US: SonarQube
CVE-2020-28001 (SolarWinds Serv-U before 15.2.2 allows Authenticated Stored XSS. ...)
- TODO: check
+ NOT-FOR-US: SolarWinds
CVE-2020-28000
RESERVED
CVE-2020-27999
@@ -6494,7 +6494,7 @@ CVE-2020-27996 (An issue was discovered in SmartStoreNET before 4.0.1. It does n
CVE-2020-27995 (SQL Injection in Zoho ManageEngine Applications Manager 14 before 1456 ...)
NOT-FOR-US: Zoho ManageEngine
CVE-2020-27994 (SolarWinds Serv-U before 15.2.2 allows Authenticated Directory Travers ...)
- TODO: check
+ NOT-FOR-US: SolarWinds
CVE-2020-27993 (Hrsale 2.0.0 allows download?type=files&amp;filename=../ directory tra ...)
NOT-FOR-US: Hrsale
CVE-2020-27992 (Dr.Fone 3.0.0 allows local users to gain privileges via a Trojan horse ...)
@@ -50803,9 +50803,9 @@ CVE-2020-8591 (eG Manager 7.1.2 allows authentication bypass via a com.egurkha.E
CVE-2020-8590
RESERVED
CVE-2020-8589 (Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptib ...)
- TODO: check
+ NOT-FOR-US: Clustered Data ONTAP
CVE-2020-8588 (Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptib ...)
- TODO: check
+ NOT-FOR-US: Clustered Data ONTAP
CVE-2020-8587
RESERVED
CVE-2020-8586
@@ -64807,9 +64807,9 @@ CVE-2020-2509
CVE-2020-2508 (A command injection vulnerability has been reported to affect QTS and ...)
NOT-FOR-US: QNAP
CVE-2020-2507 (The vulnerability have been reported to affect earlier versions of QTS ...)
- TODO: check
+ NOT-FOR-US: QNAP
CVE-2020-2506 (The vulnerability have been reported to affect earlier versions of QTS ...)
- TODO: check
+ NOT-FOR-US: QNAP
CVE-2020-2505 (If exploited, this vulnerability could allow attackers to gain sensiti ...)
NOT-FOR-US: QNAP
CVE-2020-2504 (If exploited, this absolute path traversal vulnerability could allow a ...)
diff --git a/data/CVE/2021.list b/data/CVE/2021.list
index a05b3d01eb..3882d915f8 100644
--- a/data/CVE/2021.list
+++ b/data/CVE/2021.list
@@ -3359,11 +3359,11 @@ CVE-2021-25278
CVE-2021-25277
RESERVED
CVE-2021-25276 (In SolarWinds Serv-U before 15.2.2 Hotfix 1, there is a directory cont ...)
- TODO: check
+ NOT-FOR-US: SolarWinds
CVE-2021-25275 (SolarWinds Orion Platform before 2020.2.4, as used by various SolarWin ...)
- TODO: check
+ NOT-FOR-US: SolarWinds
CVE-2021-25274 (The Collector Service in SolarWinds Orion Platform before 2020.2.4 use ...)
- TODO: check
+ NOT-FOR-US: SolarWinds
CVE-2021-3159
RESERVED
CVE-2021-25273

© 2014-2024 Faster IT GmbH | imprint | privacy policy