summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorNeil Williams <codehelp@debian.org>2021-11-01 14:15:04 +0000
committerNeil Williams <codehelp@debian.org>2021-11-01 14:15:04 +0000
commitc34c130b3ccac97fb62a2962724dddfb3e586872 (patch)
treef8963c285777543bf1f2f266c9653e4bcbf79e61
parent842dd46e1df835d7aa7cb4476889de65c86dfc46 (diff)
Process some NFUs
-rw-r--r--data/CVE/2021.list9
1 files changed, 5 insertions, 4 deletions
diff --git a/data/CVE/2021.list b/data/CVE/2021.list
index ef3e96ebd4..553d961abb 100644
--- a/data/CVE/2021.list
+++ b/data/CVE/2021.list
@@ -17733,7 +17733,7 @@ CVE-2021-3620
CVE-2021-35500
RESERVED
CVE-2021-35499 (The Web Reporting component of TIBCO Software Inc.'s TIBCO Nimbus cont ...)
- TODO: check
+ NOT-FOR-US: TIBCO
CVE-2021-35498 (The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX, ...)
NOT-FOR-US: TIBCO
CVE-2021-35497 (The FTL Server (tibftlserver) and Docker images containing tibftlserve ...)
@@ -46645,15 +46645,16 @@ CVE-2021-23454
CVE-2021-23453
RESERVED
CVE-2021-23452 (This affects all versions of package x-assign. The global proto object ...)
- TODO: check
+ NOT-FOR-US: x-assign JS
CVE-2021-23451
RESERVED
CVE-2021-23450
RESERVED
CVE-2021-23449 (This affects the package vm2 before 3.9.4 via a Prototype Pollution at ...)
- TODO: check
+ NOT-FOR-US: vm2 JS
+ NOTE: https://github.com/patriksimek/vm2
CVE-2021-23448 (All versions of package config-handler are vulnerable to Prototype Pol ...)
- TODO: check
+ NOT-FOR-US: config-handler JS
CVE-2021-23447 (This affects the package teddy before 0.5.9. A type confusion vulnerab ...)
NOT-FOR-US: teddy templating engine
CVE-2021-23446 (The package handsontable before 10.0.0; the package handsontable from ...)

© 2014-2024 Faster IT GmbH | imprint | privacy policy