Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits: 5a0661ce by Moritz Muehlenhoff at 2019-06-06T11:41:25Z NFUs - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -5839,25 +5839,25 @@ CVE-2019-10332 CVE-2019-10331 RESERVED CVE-2019-10330 (Jenkins Gitea Plugin 1.1.1 and earlier did not implement trusted revis ...) - TODO: check + NOT-FOR-US: Jenkins plugin CVE-2019-10329 (Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypte ...) - TODO: check + NOT-FOR-US: Jenkins plugin CVE-2019-10328 (Jenkins Pipeline Remote Loader Plugin 1.4 and earlier provided a custo ...) - TODO: check + NOT-FOR-US: Jenkins plugin CVE-2019-10327 (An XML external entities (XXE) vulnerability in Jenkins Pipeline Maven ...) - TODO: check + NOT-FOR-US: Jenkins plugin CVE-2019-10326 (A cross-site request forgery vulnerability in Jenkins Warnings NG Plug ...) - TODO: check + NOT-FOR-US: Jenkins plugin CVE-2019-10325 (A cross-site scripting vulnerability in Jenkins Warnings NG Plugin 5.0 ...) - TODO: check + NOT-FOR-US: Jenkins plugin CVE-2019-10324 (A cross-site request forgery vulnerability in Jenkins Artifactory Plug ...) - TODO: check + NOT-FOR-US: Jenkins plugin CVE-2019-10323 (A missing permission check in Jenkins Artifactory Plugin 3.2.2 and ear ...) - TODO: check + NOT-FOR-US: Jenkins plugin CVE-2019-10322 (A missing permission check in Jenkins Artifactory Plugin 3.2.2 and ear ...) - TODO: check + NOT-FOR-US: Jenkins plugin CVE-2019-10321 (A cross-site request forgery vulnerability in Jenkins Artifactory Plug ...) - TODO: check + NOT-FOR-US: Jenkins plugin CVE-2019-10320 (Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permi ...) NOT-FOR-US: Jenkins plugin CVE-2019-10319 (A missing permission check in Jenkins PAM Authentication Plugin 1.5 an ...) @@ -6718,7 +6718,7 @@ CVE-2019-10011 (ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS (aka Internet CVE-2019-10010 (Cross-site scripting (XSS) vulnerability in the PHP League CommonMark ...) NOT-FOR-US: PHP League CommonMark library CVE-2019-10009 (A Directory Traversal issue was discovered in the Web GUI in Titan FTP ...) - TODO: check + NOT-FOR-US: Titan FTP CVE-2019-10008 (Zoho ManageEngine ServiceDesk 9.3 allows session hijacking and privile ...) NOT-FOR-US: Zoho ManageEngine ServiceDesk CVE-2019-10007 @@ -7639,9 +7639,9 @@ CVE-2019-9885 CVE-2019-9884 RESERVED CVE-2019-9883 (Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerabi ...) - TODO: check + NOT-FOR-US: MailSherlock CVE-2019-9882 (Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerabi ...) - TODO: check + NOT-FOR-US: MailSherlock CVE-2019-9881 RESERVED CVE-2019-9880 @@ -94157,6 +94157,7 @@ CVE-2017-15124 (VNC server implementation in Quick Emulator (QEMU) 2.11.0 and ol NOTE: http://www.openwall.com/lists/oss-security/2017/12/19/4 CVE-2017-15123 RESERVED + NOT-FOR-US: CloudForms CVE-2017-15122 RESERVED CVE-2017-15121 (A non-privileged user is able to mount a fuse filesystem on RHEL 6 or ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5a0661ce878df6fd5b87a405c582ea5644a0394f -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5a0661ce878df6fd5b87a405c582ea5644a0394f You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits