summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorNeil Williams <codehelp@debian.org>2021-11-01 14:15:04 +0000
committerNeil Williams <codehelp@debian.org>2021-11-01 14:15:04 +0000
commit66e70d30c31784013369e5807dd63a303161250a (patch)
treee015c3c4a815724c02699a4432ddbe3065268140
parent894eb744a6a3fb73f376198543f38f9947c8548a (diff)
Process some NFUs
-rw-r--r--data/CVE/list.20219
1 files changed, 5 insertions, 4 deletions
diff --git a/data/CVE/list.2021 b/data/CVE/list.2021
index ef3e96ebd4..553d961abb 100644
--- a/data/CVE/list.2021
+++ b/data/CVE/list.2021
@@ -17733,7 +17733,7 @@ CVE-2021-3620
CVE-2021-35500
RESERVED
CVE-2021-35499 (The Web Reporting component of TIBCO Software Inc.'s TIBCO Nimbus cont ...)
- TODO: check
+ NOT-FOR-US: TIBCO
CVE-2021-35498 (The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX, ...)
NOT-FOR-US: TIBCO
CVE-2021-35497 (The FTL Server (tibftlserver) and Docker images containing tibftlserve ...)
@@ -46645,15 +46645,16 @@ CVE-2021-23454
CVE-2021-23453
RESERVED
CVE-2021-23452 (This affects all versions of package x-assign. The global proto object ...)
- TODO: check
+ NOT-FOR-US: x-assign JS
CVE-2021-23451
RESERVED
CVE-2021-23450
RESERVED
CVE-2021-23449 (This affects the package vm2 before 3.9.4 via a Prototype Pollution at ...)
- TODO: check
+ NOT-FOR-US: vm2 JS
+ NOTE: https://github.com/patriksimek/vm2
CVE-2021-23448 (All versions of package config-handler are vulnerable to Prototype Pol ...)
- TODO: check
+ NOT-FOR-US: config-handler JS
CVE-2021-23447 (This affects the package teddy before 0.5.9. A type confusion vulnerab ...)
NOT-FOR-US: teddy templating engine
CVE-2021-23446 (The package handsontable before 10.0.0; the package handsontable from ...)

© 2014-2024 Faster IT GmbH | imprint | privacy policy