Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 2e15bee4 by Salvatore Bonaccorso at 2019-11-19T20:00:25Z Process more NFUs - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -246,7 +246,7 @@ CVE-2019-19012 (An integer overflow in the search_in_range function in regexec.c - libonig <unfixed> (bug #944959) NOTE: https://github.com/kkos/oniguruma/issues/164 CVE-2019-19011 (MiniUPnP ngiflib 0.4 has a NULL pointer dereference in GifIndexToTrueC ...) - TODO: check + NOT-FOR-US: ngiflib CVE-2019-19010 (Eval injection in the Math plugin of Limnoria (before 2019.11.09) and ...) - limnoria 2019.11.09-1 [buster] - limnoria <no-dsa> (Minor issue, can be fixed via point release) @@ -27405,7 +27405,7 @@ CVE-2019-10766 CVE-2019-10765 RESERVED CVE-2019-10764 (In elliptic-php versions priot to 1.0.6, Timing attacks might be possi ...) - TODO: check + NOT-FOR-US: elliptic-php CVE-2019-10763 (pimcore/pimcore before 6.3.0 is vulnerable to SQL Injection. An attack ...) NOT-FOR-US: Pimcore CVE-2019-10762 (columnQuote in medoo before 1.7.5 allows remote attackers to perform a ...) @@ -40860,7 +40860,7 @@ CVE-2018-20689 CVE-2018-20688 RESERVED CVE-2018-20687 (An XML external entity (XXE) vulnerability in CommandCenterWebServices ...) - TODO: check + NOT-FOR-US: Raritan CommandCenter Secure Gateway CVE-2018-20686 RESERVED CVE-2018-20684 (In WinSCP before 5.14 beta, due to missing validation, the scp impleme ...) @@ -42057,7 +42057,7 @@ CVE-2019-5690 (NVIDIA Windows GPU Display Driver, all versions, contains a vulne CVE-2019-5689 (NVIDIA GeForce Experience, all versions prior to 3.20.1, contains a vu ...) NOT-FOR-US: NVIDIA GeForce Experience CVE-2019-5688 (NVIDIA NVFlash, NVUFlash Tool prior to v5.588.0 and GPUModeSwitch Tool ...) - TODO: check + NOT-FOR-US: NVIDIA CVE-2019-5687 (NVIDIA Windows GPU Display Driver (all versions) contains a vulnerabil ...) NOT-FOR-US: NVIDIA Windows driver CVE-2019-5686 (NVIDIA Windows GPU Display Driver (all versions) contains a vulnerabil ...) @@ -43343,9 +43343,9 @@ CVE-2019-5104 CVE-2019-5103 RESERVED CVE-2019-5102 (An exploitable information leak vulnerability exists in the ustream-ss ...) - TODO: check + NOT-FOR-US: ustream-ssl library of OpenWrt CVE-2019-5101 (An exploitable information leak vulnerability exists in the ustream-ss ...) - TODO: check + NOT-FOR-US: ustream-ssl library of OpenWrt CVE-2019-5100 (An exploitable integer overflow vulnerability exists in the BMP header ...) NOT-FOR-US: LEADTOOLS CVE-2019-5099 (An exploitable integer underflow vulnerability exists in the CMP-parsi ...) @@ -74105,7 +74105,7 @@ CVE-2018-13258 (Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provi NOTE: https://lists.wikimedia.org/pipermail/wikitech-l/2018-September/090849.html NOTE: https://phabricator.wikimedia.org/T199029 CVE-2018-13257 (The bb-auth-provider-cas authentication module within Blackboard Learn ...) - TODO: check + NOT-FOR-US: Blackboard Learn CVE-2018-13256 (PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or fir ...) NOT-FOR-US: PHP Scripts Mall Auditor Website CVE-2018-13255 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2e15bee4ea19e7991bc7aff543f9d748e28bfd5a -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2e15bee4ea19e7991bc7aff543f9d748e28bfd5a You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits