summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2021-10-11 10:54:20 +0200
committerSalvatore Bonaccorso <carnil@debian.org>2021-10-11 10:54:42 +0200
commitb877ba972258bdb58933c706e4d384196dc6a960 (patch)
tree1cd39a2b44aeb05f0b79acfbb5b2b2c224b4f6bb
parent068d6c582d2bfbcad43811a66e8094237544391b (diff)
Process some more NFUs
-rw-r--r--data/CVE/list60
1 files changed, 30 insertions, 30 deletions
diff --git a/data/CVE/list b/data/CVE/list
index 969990c6c1..40c817a26f 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -12626,7 +12626,7 @@ CVE-2021-3652 [CRYPT password hash with asterisk allows any bind attempt to succ
NOTE: https://github.com/389ds/389-ds-base/commit/aeb90eb0c41fc48541d983f323c627b2e6c328c7 (master)
NOTE: https://github.com/389ds/389-ds-base/commit/c1926dfc6591b55c4d33f9944de4d7ebe077e964 (1.4.4.x)
CVE-2021-36767 (In Digi RealPort through 4.8.488.0, authentication relies on a challen ...)
- TODO: check
+ NOT-FOR-US: Digi RealPort
CVE-2021-36766 (Concrete5 through 8.5.5 deserializes Untrusted Data. The vulnerable co ...)
NOT-FOR-US: Concrete5
CVE-2021-36765 (In CODESYS EtherNetIP before 4.1.0.0, specific EtherNet/IP requests ma ...)
@@ -14523,11 +14523,11 @@ CVE-2021-35981 (Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.00
CVE-2021-35980
RESERVED
CVE-2021-35979 (An issue was discovered in Digi RealPort through 4.8.488.0. The 'encry ...)
- TODO: check
+ NOT-FOR-US: Digi RealPort
CVE-2021-35978
RESERVED
CVE-2021-35977 (An issue was discovered in Digi RealPort for Windows through 4.8.488.0 ...)
- TODO: check
+ NOT-FOR-US: Digi RealPort
CVE-2021-35976 (The feature to preview a website in Plesk Obsidian 18.0.0 through 18.0 ...)
NOT-FOR-US: Plesk Obsidian
CVE-2021-35975
@@ -19968,7 +19968,7 @@ CVE-2021-33605 (Improper check in CheckboxGroup in com.vaadin:vaadin-checkbox-fl
CVE-2021-33604 (URL encoding error in development mode handler in com.vaadin:flow-serv ...)
NOT-FOR-US: com.vaadin:flow-server
CVE-2021-33603 (A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atl ...)
- TODO: check
+ NOT-FOR-US: F-Secure
CVE-2021-33602 (A vulnerability affecting the F-Secure Antivirus engine was discovered ...)
NOT-FOR-US: F-Secure
CVE-2021-33601 (A vulnerability was discovered in the web user interface of F-Secure I ...)
@@ -34048,7 +34048,7 @@ CVE-2021-28131 (Impala sessions use a 16 byte secret to verify that the session
CVE-2021-28130 (Dr.Web Firewall 12.5.2.4160 on Windows incorrectly restricts applicati ...)
NOT-FOR-US: Dr.Web Firewall
CVE-2021-28129 (While working on Apache OpenOffice 4.1.8 a developer discovered that t ...)
- TODO: check
+ NOT-FOR-US: Apache OpenOffice
CVE-2021-28128 (In Strapi through 3.6.0, the admin panel allows the changing of one's ...)
NOT-FOR-US: Strapi
CVE-2021-28127 (An issue was discovered in Stormshield SNS through 4.2.1. A brute-forc ...)
@@ -39343,7 +39343,7 @@ CVE-2021-25968
CVE-2021-25967
RESERVED
CVE-2021-25966 (In &#8220;Orchard core CMS&#8221; application, versions 1.0.0-beta1-33 ...)
- TODO: check
+ NOT-FOR-US: Orchard CMS
CVE-2021-25965
RESERVED
CVE-2021-25964 (In &#8220;Calibre-web&#8221; application, v0.6.0 to v0.6.12, are vulne ...)
@@ -40650,55 +40650,55 @@ CVE-2021-25493 (Lack of boundary checking of a buffer in libSPenBase library of
CVE-2021-25492 (Lack of boundary checking of a buffer in libSPenBase library of Samsun ...)
NOT-FOR-US: Samsung
CVE-2021-25491 (A vulnerability in mfc driver prior to SMR Oct-2021 Release 1 allows m ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25490 (A keyblob downgrade attack in keymaster prior to SMR Oct-2021 Release ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25489 (Assuming radio permission is gained, missing input validation in modem ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25488 (Lack of boundary checking of a buffer in recv_data() of modem interfac ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25487 (Lack of boundary checking of a buffer in set_skb_priv() of modem inter ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25486 (Exposure of information vulnerability in ipcdump prior to SMR Oct-2021 ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25485 (Path traversal vulnerability in FactoryAirCommnadManger prior to SMR O ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25484 (Improper authentication in InputManagerService prior to SMR Oct-2021 R ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25483 (Lack of boundary checking of a buffer in livfivextractor library prior ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25482 (SQL injection vulnerabilities in CMFA framework prior to SMR Oct-2021 ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25481 (An improper error handling in Exynos CP booting driver prior to SMR Oc ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25480 (A lack of replay attack protection in GUTI REALLOCATION COMMAND messag ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25479 (A possible heap-based buffer overflow vulnerability in Exynos CP Chips ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25478 (A possible stack-based buffer overflow vulnerability in Exynos CP Chip ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25477 (An improper error handling in Mediatek RRC Protocol stack prior to SMR ...)
NOT-FOR-US: Mediatek
CVE-2021-25476 (An information disclosure vulnerability in Widevine TA log prior to SM ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25475 (A possible heap-based buffer overflow vulnerability in DSP kernel driv ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25474 (Assuming a shell privilege is gained, an improper exception handling f ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25473 (Assuming a shell privilege is gained, an improper exception handling f ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25472 (An improper access control vulnerability in BluetoothSettingsProvider ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25471 (A lack of replay attack protection in Security Mode Command process pr ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25470 (An improper caller check logic of SMC call in TEEGRIS secure OS prior ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25469 (A possible stack-based buffer overflow vulnerability in Widevine trust ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25468 (A possible guessing and confirming a byte memory vulnerability in Wide ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25467 (Assuming system privilege is gained, possible buffer overflow vulnerab ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2021-25466 (Improper scheme check vulnerability in Samsung Internet prior to versi ...)
NOT-FOR-US: Samsung
CVE-2021-25465 (An improper scheme check vulnerability in Samsung Themes prior to vers ...)

© 2014-2024 Faster IT GmbH | imprint | privacy policy