Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: c7e3c2d4 by Salvatore Bonaccorso at 2018-12-06T08:50:35Z Process some NFUs - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,5 +1,5 @@ CVE-2018-19907 (A Server-Side Template Injection issue was discovered in Crafter CMS ...) - TODO: check + NOT-FOR-US: Crafter CMS CVE-2018-19906 RESERVED CVE-2018-19905 @@ -17,19 +17,19 @@ CVE-2018-19900 CVE-2018-19899 RESERVED CVE-2018-19898 (ThinkCMF X2.2.2 has SQL Injection via the method edit_post in ...) - TODO: check + NOT-FOR-US: ThinkCMF CVE-2018-19897 (ThinkCMF X2.2.2 has SQL Injection via the function _listorders() in ...) - TODO: check + NOT-FOR-US: ThinkCMF CVE-2018-19896 (ThinkCMF X2.2.2 has SQL Injection via the function delete() in ...) - TODO: check + NOT-FOR-US: ThinkCMF CVE-2018-19895 (ThinkCMF X2.2.2 has SQL Injection via the function edit_post() in ...) - TODO: check + NOT-FOR-US: ThinkCMF CVE-2018-19894 (ThinkCMF X2.2.2 has SQL Injection via the functions check() and ...) - TODO: check + NOT-FOR-US: ThinkCMF CVE-2018-19893 (SearchController.php in PbootCMS 1.2.1 has SQL injection via the ...) - TODO: check + NOT-FOR-US: PbootCMS CVE-2018-19892 (DomainMOD through 4.11.01 has XSS via the admin/dw/add-server.php ...) - TODO: check + NOT-FOR-US: DomainMOD CVE-2018-19891 (An invalid memory address dereference was discovered in the huffcode ...) TODO: check CVE-2018-19890 (An invalid memory address dereference was discovered in the huffcode ...) @@ -356,9 +356,9 @@ CVE-2018-19755 (There is an illegal address access at asm/preproc.c (function: . NOTE: https://bugzilla.nasm.us/show_bug.cgi?id=3392528 NOTE: https://repo.or.cz/nasm.git/commit/3079f7966dbed4497e36d5067cbfd896a90358cb CVE-2018-19754 (Tarantella Enterprise before 3.11 allows bypassing Access Control. ...) - TODO: check + NOT-FOR-US: Tarantella Enterprise CVE-2018-19753 (Tarantella Enterprise before 3.11 allows Directory Traversal. ...) - TODO: check + NOT-FOR-US: Tarantella Enterprise CVE-2018-19752 (DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php ...) NOT-FOR-US: DomainMOD CVE-2018-19751 (DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php ...) @@ -578,7 +578,7 @@ CVE-2018-19652 CVE-2018-19651 (admin/functions/remote.php in Interspire Email Marketer through 6.1.6 ...) NOT-FOR-US: Interspire Email Marketer CVE-2018-19650 (Local attackers can trigger a stack-based buffer overflow on ...) - TODO: check + NOT-FOR-US: Antiy-AVL ATool security management CVE-2019-1564 RESERVED CVE-2019-1563 @@ -5208,7 +5208,7 @@ CVE-2018-18993 (Two stack-based buffer overflow vulnerabilities have been discov CVE-2018-18992 RESERVED CVE-2018-18991 (Reflected cross-site scripting (non-persistent) in SCADA WebServer ...) - TODO: check + NOT-FOR-US: SCADA WebServer CVE-2018-18990 RESERVED CVE-2018-18989 (In CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and ...) @@ -10734,9 +10734,9 @@ CVE-2018-16802 (An issue was discovered in Artifex Ghostscript before 9.25. Inco NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=643b24dbd002fb9c131313253c307cf3951b3d47 NOTE: https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=5812b1b78fc4d36fdc293b7859de69241140d590 CVE-2018-16792 (SolarWinds SFTP/SCP server through 2018-09-10 is vulnerable to XXE via ...) - TODO: check + NOT-FOR-US: SolarWinds SFTP/SCP server CVE-2018-16791 (In SolarWinds SFTP/SCP Server through 2018-09-10, the configuration ...) - TODO: check + NOT-FOR-US: SolarWinds SFTP/SCP server CVE-2018-16790 (_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in ...) - libbson <unfixed> (bug #913896) [stretch] - libbson <no-dsa> (Minor issue) @@ -13351,7 +13351,7 @@ CVE-2018-15775 CVE-2018-15774 RESERVED CVE-2018-15773 (Dell Encryption (formerly Dell Data Protection | Encryption) v10.1.0 ...) - TODO: check + NOT-FOR-US: Dell CVE-2018-15772 (Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for ...) NOT-FOR-US: EMC RecoverPoint CVE-2018-15771 (Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/c7e3c2d4c5a74012605ce1d836938083be2915ab -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/c7e3c2d4c5a74012605ce1d836938083be2915ab You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits