automatic update

1 files changed, 89 insertions, 29 deletions

diff --git a/data/CVE/2021.list b/data/CVE/2021.list
index 43d46747c7..9334da49d0 100644
--- a/data/CVE/2021.list
+++ b/data/CVE/2021.list
@@ -1,3 +1,63 @@
+CVE-2021-43203
+	RESERVED
+CVE-2021-43202
+	RESERVED
+CVE-2021-43201
+	RESERVED
+CVE-2021-43200
+	RESERVED
+CVE-2021-43199
+	RESERVED
+CVE-2021-43198
+	RESERVED
+CVE-2021-43197
+	RESERVED
+CVE-2021-43196
+	RESERVED
+CVE-2021-43195
+	RESERVED
+CVE-2021-43194
+	RESERVED
+CVE-2021-43193
+	RESERVED
+CVE-2021-43192
+	RESERVED
+CVE-2021-43191
+	RESERVED
+CVE-2021-43190
+	RESERVED
+CVE-2021-43189
+	RESERVED
+CVE-2021-43188
+	RESERVED
+CVE-2021-43187
+	RESERVED
+CVE-2021-43186
+	RESERVED
+CVE-2021-43185
+	RESERVED
+CVE-2021-43184
+	RESERVED
+CVE-2021-43183
+	RESERVED
+CVE-2021-43182
+	RESERVED
+CVE-2021-43181
+	RESERVED
+CVE-2021-43180
+	RESERVED
+CVE-2021-43179
+	RESERVED
+CVE-2021-43178
+	RESERVED
+CVE-2021-43177
+	RESERVED
+CVE-2021-43176
+	RESERVED
+CVE-2021-43175
+	RESERVED
+CVE-2021-3918
+	RESERVED
 CVE-2021-43174
 	RESERVED
 CVE-2021-43173
@@ -236,8 +296,8 @@ CVE-2021-43060
 	RESERVED
 CVE-2021-43059
 	RESERVED
-CVE-2021-43058
-	RESERVED
+CVE-2021-43058 (An open redirect vulnerability exists in Replicated Classic versions p ...)
+	TODO: check
 CVE-2021-3914
 	RESERVED
 CVE-2021-43057 (An issue was discovered in the Linux kernel before 5.14.8. A use-after ...)
@@ -4137,8 +4197,8 @@ CVE-2021-41312
 	RESERVED
 CVE-2021-41311
 	RESERVED
-CVE-2021-41310
-	RESERVED
+CVE-2021-41310 (Affected versions of Atlassian Jira Server and Data Center allow anony ...)
+	TODO: check
 CVE-2021-41309
 	RESERVED
 CVE-2021-41308 (Affected versions of Atlassian Jira Server and Data Center allow authe ...)
@@ -4415,8 +4475,8 @@ CVE-2021-41189 (DSpace is an open source turnkey repository application. In vers
 	NOT-FOR-US: DSpace
 CVE-2021-41188 (Shopware is open source e-commerce software. Versions prior to 5.7.6 c ...)
 	NOT-FOR-US: Shopware
-CVE-2021-41187
-	RESERVED
+CVE-2021-41187 (DHIS 2 is an information system for data capture, management, validati ...)
+	TODO: check
 CVE-2021-41186 (Fluentd collects events from various data sources and writes them to f ...)
 	- fluentd <itp> (bug #926692)
 CVE-2021-41185 (Mycodo is an environmental monitoring and regulation system. An exploi ...)
@@ -6053,8 +6113,8 @@ CVE-2021-40505
 	RESERVED
 CVE-2021-3766 (objection.js is vulnerable to Improperly Controlled Modification of Ob ...)
 	NOT-FOR-US: Node objection.js
-CVE-2021-3765
-	RESERVED
+CVE-2021-3765 (validator.js is vulnerable to Inefficient Regular Expression Complexit ...)
+	TODO: check
 CVE-2021-40504
 	RESERVED
 CVE-2021-40503
@@ -8693,8 +8753,8 @@ CVE-2021-39348 (The LearnPress WordPress plugin is vulnerable to Stored Cross-Si
 	NOT-FOR-US: WordPress plugin
 CVE-2021-39347 (The Stripe for WooCommerce WordPress plugin is missing a capability ch ...)
 	NOT-FOR-US: WordPress plugin
-CVE-2021-39346
-	RESERVED
+CVE-2021-39346 (The Google Maps Easy WordPress plugin is vulnerable to Stored Cross-Si ...)
+	TODO: check
 CVE-2021-39345 (The HAL WordPress plugin is vulnerable to Stored Cross-Site Scripting  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2021-39344 (The KJM Admin Notices WordPress plugin is vulnerable to Stored Cross-S ...)
@@ -8703,10 +8763,10 @@ CVE-2021-39343 (The MPL-Publisher WordPress plugin is vulnerable to Stored Cross
 	NOT-FOR-US: WordPress plugin
 CVE-2021-39342 (The Credova_Financial WordPress plugin discloses a site's associated C ...)
 	NOT-FOR-US: WordPress plugin
-CVE-2021-39341
-	RESERVED
-CVE-2021-39340
-	RESERVED
+CVE-2021-39341 (The OptinMonster WordPress plugin is vulnerable to sensitive informati ...)
+	TODO: check
+CVE-2021-39340 (The Notification WordPress plugin is vulnerable to Stored Cross-Site S ...)
+	TODO: check
 CVE-2021-39339 (The Telefication WordPress plugin is vulnerable to Open Proxy and Serv ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2021-39338 (The MyBB Cross-Poster WordPress plugin is vulnerable to Stored Cross-S ...)
@@ -8719,8 +8779,8 @@ CVE-2021-39335 (The WpGenius Job Listing WordPress plugin is vulnerable to Store
 	NOT-FOR-US: WordPress plugin
 CVE-2021-39334 (The Job Board Vanila WordPress plugin is vulnerable to Stored Cross-Si ...)
 	NOT-FOR-US: WordPress plugin
-CVE-2021-39333
-	RESERVED
+CVE-2021-39333 (The Hashthemes Demo Importer Plugin &lt;= 1.1.1 for WordPress containe ...)
+	TODO: check
 CVE-2021-39332 (The Business Manager WordPress plugin is vulnerable to Stored Cross-Si ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2021-39331
@@ -11133,8 +11193,8 @@ CVE-2021-38358 (The MoolaMojo WordPress plugin is vulnerable to Reflected Cross-
 	NOT-FOR-US: WordPress plugin
 CVE-2021-38357 (The SMS OVH WordPress plugin is vulnerable to Reflected Cross-Site Scr ...)
 	NOT-FOR-US: WordPress plugin
-CVE-2021-38356
-	RESERVED
+CVE-2021-38356 (The NextScripts: Social Networks Auto-Poster &lt;= 4.3.20 WordPress pl ...)
+	TODO: check
 CVE-2021-38355 (The Bug Library WordPress plugin is vulnerable to Reflected Cross-Site ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2021-38354 (The GNU-Mailman Integration WordPress plugin is vulnerable to Reflecte ...)
@@ -22071,8 +22131,8 @@ CVE-2021-33595 (A address bar spoofing vulnerability was discovered in Safe Brow
 	NOT-FOR-US: Safe Browser for iOS
 CVE-2021-33594 (An address bar spoofing vulnerability was discovered in Safe Browser f ...)
 	NOT-FOR-US: Safe Browser for Android
-CVE-2021-33593
-	RESERVED
+CVE-2021-33593 (Whale browser for iOS before 1.14.0 has an inconsistent user interface ...)
+	TODO: check
 CVE-2021-33592 (NAVER Toolbar before 4.0.30.323 allows remote attackers to execute arb ...)
 	NOT-FOR-US: NAVER Toolbar
 CVE-2021-33591 (An exposed remote debugging port in Naver Comic Viewer prior to 1.0.15 ...)
@@ -26479,10 +26539,10 @@ CVE-2021-31851
 	RESERVED
 CVE-2021-31850
 	RESERVED
-CVE-2021-31849
-	RESERVED
-CVE-2021-31848
-	RESERVED
+CVE-2021-31849 (SQL injection vulnerability in McAfee Data Loss Prevention (DLP) ePO e ...)
+	TODO: check
+CVE-2021-31848 (Cross site scripting (XSS) vulnerability in McAfee Data Loss Preventio ...)
+	TODO: check
 CVE-2021-31847 (Improper access control vulnerability in the repair process for McAfee ...)
 	NOT-FOR-US: McAfee
 CVE-2021-31846
@@ -40866,8 +40926,8 @@ CVE-2021-25975
 	RESERVED
 CVE-2021-25974
 	RESERVED
-CVE-2021-25973
-	RESERVED
+CVE-2021-25973 (In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Cont ...)
+	TODO: check
 CVE-2021-25972 (In Camaleon CMS, versions 2.1.2.0 to 2.6.0, are vulnerable to Server-S ...)
 	NOT-FOR-US: Camaleon CMS
 CVE-2021-25971 (In Camaleon CMS, versions 2.0.1 to 2.6.0 are vulnerable to an Uncaught ...)
@@ -42782,7 +42842,7 @@ CVE-2021-25221
 CVE-2021-25220
 	RESERVED
 CVE-2021-25219 (In BIND 9.3.0 -&gt; 9.11.35, 9.12.0 -&gt; 9.16.21, and versions 9.9.3- ...)
-	{DSA-4994-1}
+	{DSA-4994-1 DLA-2807-1}
 	- bind9 1:9.17.19-1
 	NOTE: https://kb.isc.org/docs/cve-2021-25219
 	NOTE: https://gitlab.isc.org/isc-projects/bind9/commit/8fe18c0566c41228a568157287f5a44f96d37662 (v9_16_22)
@@ -54794,8 +54854,8 @@ CVE-2021-20138
 	RESERVED
 CVE-2021-20137
 	RESERVED
-CVE-2021-20136
-	RESERVED
+CVE-2021-20136 (ManageEngine Log360 Builds &lt; 5235 are affected by an improper acces ...)
+	TODO: check
 CVE-2021-20135
 	RESERVED
 CVE-2021-20134