Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 07f1b3c0 by Salvatore Bonaccorso at 2019-02-20T05:34:41Z Add Debian bug reference for zoneminder CVEs - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1026,19 +1026,19 @@ CVE-2019-8431 CVE-2019-8430 RESERVED CVE-2019-8429 (ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) CVE-2019-8428 (ZoneMinder before 1.32.3 has SQL Injection via the ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) CVE-2019-8427 (daemonControl in includes/functions.php in ZoneMinder before 1.32.3 ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) CVE-2019-8426 (skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) CVE-2019-8425 (includes/database.php in ZoneMinder before 1.32.3 has XSS in the ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) CVE-2019-8424 (ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) CVE-2019-8423 (ZoneMinder through 1.32.3 has SQL Injection via the ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) CVE-2019-8422 (A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the ...) NOT-FOR-US: PbootCMS CVE-2019-8421 (upload/protected/modules/admini/views/post/index.php in BageCMS through ...) @@ -3509,88 +3509,88 @@ CVE-2019-7353 [Leak of Confidential Issue and Merge Request Titles] - gitlab <not-affected> (Only affects 11.7) NOTE: https://about.gitlab.com/2019/02/05/critical-security-release-gitlab-11-dot-7-dot-4-released/ CVE-2019-7352 (Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2475 CVE-2019-7351 (Log Injection exists in ZoneMinder through 1.32.3, as an attacker can ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2466 CVE-2019-7350 (Session fixation exists in ZoneMinder through 1.32.3, as an attacker ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2471 CVE-2019-7349 (Reflected Cross Site Scripting (XSS) exists in ZoneMinder through ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2465 CVE-2019-7348 (Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2467 CVE-2019-7347 (A Time-of-check Time-of-use (TOCTOU) Race Condition exists in ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2476 CVE-2019-7346 (A CSRF check issue exists in ZoneMinder through 1.32.3 as whenever a ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2469 CVE-2019-7345 (Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2468 CVE-2019-7344 (Reflected XSS exists in ZoneMinder through 1.32.3, allowing an attacker ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2455 CVE-2019-7343 (Reflected - Cross Site Scripting (XSS) exists in ZoneMinder through ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2464 CVE-2019-7342 (POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2461 CVE-2019-7341 (Reflected - Cross Site Scripting (XSS) exists in ZoneMinder through ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2463 CVE-2019-7340 (POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2462 CVE-2019-7339 (POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2460 CVE-2019-7338 (Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2454 CVE-2019-7337 (Reflected Cross Site Scripting (XSS) exists in ZoneMinder through ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2456 CVE-2019-7336 (Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2457 CVE-2019-7335 (Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2453 CVE-2019-7334 (Reflected Cross Site Scripting (XSS) exists in ZoneMinder through ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2443 CVE-2019-7333 (Reflected Cross Site Scripting (XSS) exists in ZoneMinder through ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2441 CVE-2019-7332 (Reflected Cross Site Scripting (XSS) exists in ZoneMinder through ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2442 CVE-2019-7331 (Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2451 CVE-2019-7330 (Reflected Cross Site Scripting (XSS) exists in ZoneMinder through ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2448 CVE-2019-7329 (Reflected Cross Site Scripting (XSS) exists in ZoneMinder through ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2446 CVE-2019-7328 (Reflected Cross Site Scripting (XSS) exists in ZoneMinder through ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2449 CVE-2019-7327 (Reflected Cross Site Scripting (XSS) exists in ZoneMinder through ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2447 CVE-2019-7326 (Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2452 CVE-2019-7325 (Reflected Cross Site Scripting (XSS) exists in ZoneMinder through ...) - - zoneminder <unfixed> + - zoneminder <unfixed> (bug #922724) NOTE: https://github.com/ZoneMinder/zoneminder/issues/2450 CVE-2019-7324 (app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination ...) - kanboard <itp> (bug #790814) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/07f1b3c0072a2b945cfe130497ca82d45e2612dd -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/07f1b3c0072a2b945cfe130497ca82d45e2612dd You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits