Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 0030e1d8 by Salvatore Bonaccorso at 2018-01-04T23:18:05+01:00 Process more NFUs - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== --- a/data/CVE/list +++ b/data/CVE/list @@ -11,11 +11,11 @@ CVE-2018-5216 (Radiant CMS 1.1.4 has XSS via crafted Markdown input in the ...) CVE-2018-5215 (Fork CMS 5.0.7 has XSS in /private/en/pages/edit via the title ...) NOT-FOR-US: Fork CMS CVE-2018-5214 (The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via ...) - TODO: check + NOT-FOR-US: "Add Link to Facebook" plugin for WordPress CVE-2018-5213 (The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS ...) - TODO: check + NOT-FOR-US: Simple Download Monitor plugin for WordPress CVE-2018-5212 (The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS ...) - TODO: check + NOT-FOR-US: Simple Download Monitor plugin for WordPress CVE-2018-5211 RESERVED CVE-2018-5210 (On Samsung mobile devices with N(7.x) software and Exynos chipsets, ...) @@ -726,7 +726,7 @@ CVE-2017-1000497 (Pepperminty-Wiki version 0.15 is vulnerable to XXE attacks in CVE-2017-1000496 (Commsy version 9.0.0 is vulnerable to XXE attacks in the configuration ...) TODO: check CVE-2017-1000495 (QuickApps CMS version 2.0.0 is vulnerable to Stored Cross-site ...) - TODO: check + NOT-FOR-US: QuickApps CMS CVE-2017-1000494 (Uninitialized stack variable vulnerability in NameValueParserEndElt ...) TODO: check CVE-2017-1000490 (Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any ...) @@ -752,7 +752,7 @@ CVE-2017-1000481 (When you visit a page where you need to login, Plone 2.5-5.1rc CVE-2017-1000480 (Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when ...) TODO: check CVE-2017-1000479 (pfSense versions 2.4.1 and lower are vulnerable to clickjacking ...) - TODO: check + NOT-FOR-US: pfSense CVE-2017-1000478 (ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in ...) TODO: check CVE-2017-1000477 (XMLBundle version 0.1.7 is vulnerable to XXE attacks which can result ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0030e1d86fa5e2d55065cf9af9b6c539f58802df --- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0030e1d86fa5e2d55065cf9af9b6c539f58802df You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits