summaryrefslogtreecommitdiffstats
path: root/data/CVE/2020.list
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2021-11-15 09:42:17 +0100
committerSalvatore Bonaccorso <carnil@debian.org>2021-11-15 09:42:17 +0100
commite92a4271cb759250ddd845b5559432bcef55e713 (patch)
treeac9765bd0f971b3221fea3ede07101e33477c2d1 /data/CVE/2020.list
parent300ba705a0e1eee4cab80aa5a0817f325fcb3914 (diff)
Add CVE-2020-14424/cacti
Diffstat (limited to 'data/CVE/2020.list')
-rw-r--r--data/CVE/2020.list4
1 files changed, 3 insertions, 1 deletions
diff --git a/data/CVE/2020.list b/data/CVE/2020.list
index 507f3cb57c..6be10660ee 100644
--- a/data/CVE/2020.list
+++ b/data/CVE/2020.list
@@ -38085,7 +38085,9 @@ CVE-2020-14426 (Certain NETGEAR devices are affected by disclosure of administra
CVE-2020-14425 (Foxit Reader before 10.0 allows Remote Command Execution via the app.o ...)
NOT-FOR-US: Foxit Reader
CVE-2020-14424 (Cacti before 1.2.18 allows remote attackers to trigger XSS via templat ...)
- TODO: check
+ - cacti <unfixed>
+ NOTE: https://github.com/Cacti/cacti/pull/4261
+ NOTE: https://github.com/Cacti/cacti/commit/d12800ab479ad95a091bc577f28fd99ec95eb64c (release/1.2.18)
CVE-2020-14423 (Convos before 4.20 does not properly generate a random secret in Core/ ...)
NOT-FOR-US: Convos
CVE-2020-14422 (Lib/ipaddress.py in Python through 3.8.3 improperly computes hash valu ...)

© 2014-2024 Faster IT GmbH | imprint | privacy policy