automatic update

1 files changed, 240 insertions, 28 deletions

diff --git a/data/CVE/list.2020 b/data/CVE/list.2020
index 34fa37fa97..df58961b0d 100644
--- a/data/CVE/list.2020
+++ b/data/CVE/list.2020
@@ -1,3 +1,219 @@
+CVE-2020-13360
+	RESERVED
+CVE-2020-13359
+	RESERVED
+CVE-2020-13358
+	RESERVED
+CVE-2020-13357
+	RESERVED
+CVE-2020-13356
+	RESERVED
+CVE-2020-13355
+	RESERVED
+CVE-2020-13354
+	RESERVED
+CVE-2020-13353
+	RESERVED
+CVE-2020-13352
+	RESERVED
+CVE-2020-13351
+	RESERVED
+CVE-2020-13350
+	RESERVED
+CVE-2020-13349
+	RESERVED
+CVE-2020-13348
+	RESERVED
+CVE-2020-13347
+	RESERVED
+CVE-2020-13346
+	RESERVED
+CVE-2020-13345
+	RESERVED
+CVE-2020-13344
+	RESERVED
+CVE-2020-13343
+	RESERVED
+CVE-2020-13342
+	RESERVED
+CVE-2020-13341
+	RESERVED
+CVE-2020-13340
+	RESERVED
+CVE-2020-13339
+	RESERVED
+CVE-2020-13338
+	RESERVED
+CVE-2020-13337
+	RESERVED
+CVE-2020-13336
+	RESERVED
+CVE-2020-13335
+	RESERVED
+CVE-2020-13334
+	RESERVED
+CVE-2020-13333
+	RESERVED
+CVE-2020-13332
+	RESERVED
+CVE-2020-13331
+	RESERVED
+CVE-2020-13330
+	RESERVED
+CVE-2020-13329
+	RESERVED
+CVE-2020-13328
+	RESERVED
+CVE-2020-13327
+	RESERVED
+CVE-2020-13326
+	RESERVED
+CVE-2020-13325
+	RESERVED
+CVE-2020-13324
+	RESERVED
+CVE-2020-13323
+	RESERVED
+CVE-2020-13322
+	RESERVED
+CVE-2020-13321
+	RESERVED
+CVE-2020-13320
+	RESERVED
+CVE-2020-13319
+	RESERVED
+CVE-2020-13318
+	RESERVED
+CVE-2020-13317
+	RESERVED
+CVE-2020-13316
+	RESERVED
+CVE-2020-13315
+	RESERVED
+CVE-2020-13314
+	RESERVED
+CVE-2020-13313
+	RESERVED
+CVE-2020-13312
+	RESERVED
+CVE-2020-13311
+	RESERVED
+CVE-2020-13310
+	RESERVED
+CVE-2020-13309
+	RESERVED
+CVE-2020-13308
+	RESERVED
+CVE-2020-13307
+	RESERVED
+CVE-2020-13306
+	RESERVED
+CVE-2020-13305
+	RESERVED
+CVE-2020-13304
+	RESERVED
+CVE-2020-13303
+	RESERVED
+CVE-2020-13302
+	RESERVED
+CVE-2020-13301
+	RESERVED
+CVE-2020-13300
+	RESERVED
+CVE-2020-13299
+	RESERVED
+CVE-2020-13298
+	RESERVED
+CVE-2020-13297
+	RESERVED
+CVE-2020-13296
+	RESERVED
+CVE-2020-13295
+	RESERVED
+CVE-2020-13294
+	RESERVED
+CVE-2020-13293
+	RESERVED
+CVE-2020-13292
+	RESERVED
+CVE-2020-13291
+	RESERVED
+CVE-2020-13290
+	RESERVED
+CVE-2020-13289
+	RESERVED
+CVE-2020-13288
+	RESERVED
+CVE-2020-13287
+	RESERVED
+CVE-2020-13286
+	RESERVED
+CVE-2020-13285
+	RESERVED
+CVE-2020-13284
+	RESERVED
+CVE-2020-13283
+	RESERVED
+CVE-2020-13282
+	RESERVED
+CVE-2020-13281
+	RESERVED
+CVE-2020-13280
+	RESERVED
+CVE-2020-13279
+	RESERVED
+CVE-2020-13278
+	RESERVED
+CVE-2020-13277
+	RESERVED
+CVE-2020-13276
+	RESERVED
+CVE-2020-13275
+	RESERVED
+CVE-2020-13274
+	RESERVED
+CVE-2020-13273
+	RESERVED
+CVE-2020-13272
+	RESERVED
+CVE-2020-13271
+	RESERVED
+CVE-2020-13270
+	RESERVED
+CVE-2020-13269
+	RESERVED
+CVE-2020-13268
+	RESERVED
+CVE-2020-13267
+	RESERVED
+CVE-2020-13266
+	RESERVED
+CVE-2020-13265
+	RESERVED
+CVE-2020-13264
+	RESERVED
+CVE-2020-13263
+	RESERVED
+CVE-2020-13262
+	RESERVED
+CVE-2020-13261
+	RESERVED
+CVE-2020-13260
+	RESERVED
+CVE-2020-13259
+	RESERVED
+CVE-2020-13258 (Contentful through 2020-05-21 for Python allows reflected XSS, as demo ...)
+	TODO: check
+CVE-2020-13257
+	RESERVED
+CVE-2020-13256
+	RESERVED
+CVE-2020-13255
+	RESERVED
+CVE-2020-13254
+	RESERVED
+CVE-2020-13253
+	RESERVED
 CVE-2020-13252 (Centreon before 19.04.15 allows remote attackers to execute arbitrary  ...)
 	TODO: check
 CVE-2020-13251
@@ -283,20 +499,17 @@ CVE-2020-13116
 	RESERVED
 CVE-2020-13115
 	RESERVED
-CVE-2020-13114 [Add a failsafe on the maximum number of Canon MakerNote subtags]
-	RESERVED
+CVE-2020-13114 (An issue was discovered in libexif before 0.6.22. An unrestricted size ...)
 	- libexif <unfixed>
 	[buster] - libexif <no-dsa> (Minor issue)
 	[stretch] - libexif <no-dsa> (Minor issue)
 	NOTE: https://github.com/libexif/libexif/commit/e6a38a1a23ba94d139b1fa2cd4519fdcfe3c9bab (0.6.22)
-CVE-2020-13113 [Ensure the MakerNote data pointers are initialized with NULL]
-	RESERVED
+CVE-2020-13113 (An issue was discovered in libexif before 0.6.22. Use of uninitialized ...)
 	- libexif <unfixed>
 	[buster] - libexif <no-dsa> (Minor issue)
 	[stretch] - libexif <no-dsa> (Minor issue)
 	NOTE: https://github.com/libexif/libexif/commit/ec412aa4583ad71ecabb967d3c77162760169d1f (0.6.22)
-CVE-2020-13112 [Fix MakerNote tag size overflow issues at read time]
-	RESERVED
+CVE-2020-13112 (An issue was discovered in libexif before 0.6.22. Several buffer over- ...)
 	- libexif <unfixed>
 	[buster] - libexif <no-dsa> (Minor issue)
 	[stretch] - libexif <no-dsa> (Minor issue)
@@ -864,7 +1077,7 @@ CVE-2020-12834 (eQ-3 Homematic Central Control Unit (CCU)2 through 2.51.6 and CC
 	NOT-FOR-US: eQ-3 Homematic Central Control Unit
 CVE-2020-12833
 	RESERVED
-CVE-2020-12832 (The simple-file-list plugin before 4.2.8 for WordPress mishandles a .. ...)
+CVE-2020-12832 (WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerabi ...)
 	NOT-FOR-US: simple-file-list plugin for WordPress
 CVE-2020-12831 (** DISPUTED ** An issue was discovered in FRRouting FRR (aka Free Rang ...)
 	- frr <unfixed> (unimportant)
@@ -879,8 +1092,8 @@ CVE-2020-12829
 	[stretch] - qemu <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1808510
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1786026
-CVE-2020-12828
-	RESERVED
+CVE-2020-12828 (An issue was discovered in AnchorFree VPN SDK before 1.3.3.218. The VP ...)
+	TODO: check
 CVE-2020-12827
 	RESERVED
 CVE-2020-12826 (A signal access-control issue was discovered in the Linux kernel befor ...)
@@ -1782,8 +1995,8 @@ CVE-2020-12433
 	RESERVED
 CVE-2020-12432
 	RESERVED
-CVE-2020-12431
-	RESERVED
+CVE-2020-12431 (A Windows privilege change issue was discovered in Splashtop Software  ...)
+	TODO: check
 CVE-2020-12430 (An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_dri ...)
 	[experimental] - libvirt 6.2.0-1
 	- libvirt <unfixed> (low; bug #959447)
@@ -3486,7 +3699,7 @@ CVE-2020-11712 (Open Upload through 0.4.3 allows XSS via index.php?action=u and
 	NOT-FOR-US: Open Upload
 CVE-2020-11711
 	RESERVED
-CVE-2020-11710 (An issue was discovered in docker-kong (for Kong) through 2.0.3. The a ...)
+CVE-2020-11710 (** DISPUTED ** An issue was discovered in docker-kong (for Kong) throu ...)
 	NOT-FOR-US: docker-kong
 CVE-2020-11709 (cpp-httplib through 0.5.8 does not filter \r\n in parameters passed in ...)
 	- chromium <unfixed>
@@ -5791,8 +6004,7 @@ CVE-2020-10740
 CVE-2020-10739
 	RESERVED
 	NOT-FOR-US: envoy proxy (not the same as itp'ed envoy, #758651)
-CVE-2020-10738
-	RESERVED
+CVE-2020-10738 (A flaw was found in Moodle versions 3.8 before 3.8.3, 3.7 before 3.7.6 ...)
 	- moodle <removed>
 CVE-2020-10737 [oddjob: race condition in oddjob_selinux_mkdir function in mkhomedir.c can lead to symlink attack]
 	RESERVED
@@ -9562,8 +9774,8 @@ CVE-2020-9071
 	RESERVED
 CVE-2020-9070 (Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205( ...)
 	NOT-FOR-US: Huawei
-CVE-2020-9069
-	RESERVED
+CVE-2020-9069 (There is an information leakage vulnerability in some Huawei products. ...)
+	TODO: check
 CVE-2020-9068 (Huawei AR3200 products with versions of V200R007C00SPC900, V200R007C00 ...)
 	NOT-FOR-US: Huawei
 CVE-2020-9067 (There is a buffer overflow vulnerability in some Huawei products. The  ...)
@@ -9610,8 +9822,8 @@ CVE-2020-9047
 	RESERVED
 CVE-2020-9046
 	RESERVED
-CVE-2020-9045
-	RESERVED
+CVE-2020-9045 (During installation or upgrade to Software House C&#8226;CURE 9000 v2. ...)
+	TODO: check
 CVE-2020-9044 (XXE vulnerability exists in the Metasys family of product Web Services ...)
 	NOT-FOR-US: Johnson Controls
 CVE-2020-9043 (The wpCentral plugin before 1.5.1 for WordPress allows disclosure of t ...)
@@ -10669,8 +10881,8 @@ CVE-2020-8574
 	RESERVED
 CVE-2020-8573
 	RESERVED
-CVE-2020-8572
-	RESERVED
+CVE-2020-8572 (Element OS prior to version 12.0 and Element HealthTools prior to vers ...)
+	TODO: check
 CVE-2020-8571 (StorageGRID (formerly StorageGRID Webscale) versions 10.0.0 through 11 ...)
 	NOT-FOR-US: StorageGRID
 CVE-2020-8570
@@ -12324,8 +12536,8 @@ CVE-2020-7810
 	RESERVED
 CVE-2020-7809 (ALSong 3.46 and earlier version contain a Document Object Model (DOM)  ...)
 	NOT-FOR-US: ALSong
-CVE-2020-7808
-	RESERVED
+CVE-2020-7808 (In RAONWIZ K Upload v2018.0.2.51 and prior, automatic update processin ...)
+	TODO: check
 CVE-2020-7807
 	RESERVED
 CVE-2020-7806 (Tobesoft Xplatform 9.2.2.250 and earlier version have an arbitrary cod ...)
@@ -12630,8 +12842,8 @@ CVE-2020-7657
 	RESERVED
 CVE-2020-7656 (jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load ...)
 	TODO: check
-CVE-2020-7655
-	RESERVED
+CVE-2020-7655 (netius prior to 1.17.58 is vulnerable to HTTP Request Smuggling. HTTP  ...)
+	TODO: check
 CVE-2020-7654
 	RESERVED
 CVE-2020-7653
@@ -17029,8 +17241,8 @@ CVE-2020-5754
 	RESERVED
 CVE-2020-5753 (Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and u ...)
 	TODO: check
-CVE-2020-5752
-	RESERVED
+CVE-2020-5752 (Relative path traversal in Druva inSync Windows Client 6.6.3 allows a  ...)
+	TODO: check
 CVE-2020-5751 (Insufficient output sanitization in TCExam 14.2.2 allows a remote, aut ...)
 	NOT-FOR-US: TCExam
 CVE-2020-5750 (Insufficient output sanitization in TCExam 14.2.2 allows a remote, una ...)
@@ -25472,8 +25684,8 @@ CVE-2020-1801 (There is an improper authentication vulnerability in several smar
 	NOT-FOR-US: Huawei
 CVE-2020-1800 (HUAWEI smartphones P30 with versions earlier than 10.0.0.185(C00E85R1P ...)
 	NOT-FOR-US: Huawei
-CVE-2020-1799
-	RESERVED
+CVE-2020-1799 (E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00 ...)
+	TODO: check
 CVE-2020-1798
 	RESERVED
 CVE-2020-1797