Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
07f1b3c0 by Salvatore Bonaccorso at 2019-02-20T05:34:41Z
Add Debian bug reference for zoneminder CVEs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1026,19 +1026,19 @@ CVE-2019-8431
CVE-2019-8430
RESERVED
CVE-2019-8429 (ZoneMinder before 1.32.3 has SQL Injection via the
ajax/status.php ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
CVE-2019-8428 (ZoneMinder before 1.32.3 has SQL Injection via the ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
CVE-2019-8427 (daemonControl in includes/functions.php in ZoneMinder before
1.32.3 ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
CVE-2019-8426 (skins/classic/views/controlcap.php in ZoneMinder before 1.32.3
has XSS ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
CVE-2019-8425 (includes/database.php in ZoneMinder before 1.32.3 has XSS in
the ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
CVE-2019-8424 (ZoneMinder before 1.32.3 has SQL Injection via the
ajax/status.php sort ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
CVE-2019-8423 (ZoneMinder through 1.32.3 has SQL Injection via the ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
CVE-2019-8422 (A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the
...)
NOT-FOR-US: PbootCMS
CVE-2019-8421 (upload/protected/modules/admini/views/post/index.php in BageCMS
through ...)
@@ -3509,88 +3509,88 @@ CVE-2019-7353 [Leak of Confidential Issue and Merge
Request Titles]
- gitlab <not-affected> (Only affects 11.7)
NOTE:
https://about.gitlab.com/2019/02/05/critical-security-release-gitlab-11-dot-7-dot-4-released/
CVE-2019-7352 (Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder
through ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2475
CVE-2019-7351 (Log Injection exists in ZoneMinder through 1.32.3, as an
attacker can ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2466
CVE-2019-7350 (Session fixation exists in ZoneMinder through 1.32.3, as an
attacker ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2471
CVE-2019-7349 (Reflected Cross Site Scripting (XSS) exists in ZoneMinder
through ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2465
CVE-2019-7348 (Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder
through ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2467
CVE-2019-7347 (A Time-of-check Time-of-use (TOCTOU) Race Condition exists in
...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2476
CVE-2019-7346 (A CSRF check issue exists in ZoneMinder through 1.32.3 as
whenever a ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2469
CVE-2019-7345 (Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder
through ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2468
CVE-2019-7344 (Reflected XSS exists in ZoneMinder through 1.32.3, allowing an
attacker ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2455
CVE-2019-7343 (Reflected - Cross Site Scripting (XSS) exists in ZoneMinder
through ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2464
CVE-2019-7342 (POST - Cross Site Scripting (XSS) exists in ZoneMinder through
1.32.3, ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2461
CVE-2019-7341 (Reflected - Cross Site Scripting (XSS) exists in ZoneMinder
through ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2463
CVE-2019-7340 (POST - Cross Site Scripting (XSS) exists in ZoneMinder through
1.32.3, ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2462
CVE-2019-7339 (POST - Cross Site Scripting (XSS) exists in ZoneMinder through
1.32.3, ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2460
CVE-2019-7338 (Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing
an ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2454
CVE-2019-7337 (Reflected Cross Site Scripting (XSS) exists in ZoneMinder
through ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2456
CVE-2019-7336 (Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder
through ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2457
CVE-2019-7335 (Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing
an ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2453
CVE-2019-7334 (Reflected Cross Site Scripting (XSS) exists in ZoneMinder
through ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2443
CVE-2019-7333 (Reflected Cross Site Scripting (XSS) exists in ZoneMinder
through ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2441
CVE-2019-7332 (Reflected Cross Site Scripting (XSS) exists in ZoneMinder
through ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2442
CVE-2019-7331 (Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder
through ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2451
CVE-2019-7330 (Reflected Cross Site Scripting (XSS) exists in ZoneMinder
through ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2448
CVE-2019-7329 (Reflected Cross Site Scripting (XSS) exists in ZoneMinder
through ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2446
CVE-2019-7328 (Reflected Cross Site Scripting (XSS) exists in ZoneMinder
through ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2449
CVE-2019-7327 (Reflected Cross Site Scripting (XSS) exists in ZoneMinder
through ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2447
CVE-2019-7326 (Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder
through ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2452
CVE-2019-7325 (Reflected Cross Site Scripting (XSS) exists in ZoneMinder
through ...)
- - zoneminder <unfixed>
+ - zoneminder <unfixed> (bug #922724)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2450
CVE-2019-7324 (app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in
pagination ...)
- kanboard <itp> (bug #790814)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/07f1b3c0072a2b945cfe130497ca82d45e2612dd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/07f1b3c0072a2b945cfe130497ca82d45e2612dd
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
