Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
72c1f08d by security tracker role at 2018-01-23T09:10:17+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,3 +1,113 @@
+CVE-2018-6029 (The copy function in application/admin/controller/Article.php
in ...)
+ TODO: check
+CVE-2018-6028
+ RESERVED
+CVE-2018-6027
+ RESERVED
+CVE-2018-6026
+ RESERVED
+CVE-2018-6025
+ RESERVED
+CVE-2018-6024
+ RESERVED
+CVE-2018-6023
+ RESERVED
+CVE-2018-6022 (Directory traversal vulnerability in ...)
+ TODO: check
+CVE-2018-6021
+ RESERVED
+CVE-2018-6020
+ RESERVED
+CVE-2018-6019
+ RESERVED
+CVE-2018-6018
+ RESERVED
+CVE-2018-6017
+ RESERVED
+CVE-2018-6016
+ RESERVED
+CVE-2018-6015
+ RESERVED
+CVE-2018-6014 (Subsonic v6.1.3 has an insecure allow-access-from
domain="*" Flash ...)
+ TODO: check
+CVE-2018-6013 (Cross-site scripting (XSS) in BigTree 4.2.19 allows any remote
users to ...)
+ TODO: check
+CVE-2018-6012
+ RESERVED
+CVE-2018-6011
+ RESERVED
+CVE-2018-6010 (In Yii Framework 2.x before 2.0.14, remote attackers could
obtain ...)
+ TODO: check
+CVE-2018-6009 (In Yii Framework 2.x before 2.0.14, the switchIdentity function
in ...)
+ TODO: check
+CVE-2018-6008
+ RESERVED
+CVE-2018-6007
+ RESERVED
+CVE-2018-6006
+ RESERVED
+CVE-2018-6005
+ RESERVED
+CVE-2018-6004
+ RESERVED
+CVE-2017-18074
+ RESERVED
+CVE-2017-18073
+ RESERVED
+CVE-2017-18072
+ RESERVED
+CVE-2017-18071
+ RESERVED
+CVE-2017-18070
+ RESERVED
+CVE-2017-18069
+ RESERVED
+CVE-2017-18068
+ RESERVED
+CVE-2017-18067
+ RESERVED
+CVE-2017-18066
+ RESERVED
+CVE-2017-18065
+ RESERVED
+CVE-2017-18064
+ RESERVED
+CVE-2017-18063
+ RESERVED
+CVE-2017-18062
+ RESERVED
+CVE-2017-18061
+ RESERVED
+CVE-2017-18060
+ RESERVED
+CVE-2017-18059
+ RESERVED
+CVE-2017-18058
+ RESERVED
+CVE-2017-18057
+ RESERVED
+CVE-2017-18056
+ RESERVED
+CVE-2017-18055
+ RESERVED
+CVE-2017-18054
+ RESERVED
+CVE-2017-18053
+ RESERVED
+CVE-2017-18052
+ RESERVED
+CVE-2017-18051
+ RESERVED
+CVE-2017-18050
+ RESERVED
+CVE-2017-18049 (In the CSV export feature of SilverStripe before 3.5.6, 3.6.x
before ...)
+ TODO: check
+CVE-2017-18048 (Monstra CMS 3.0.4 allows users to upload arbitrary files,
which leads ...)
+ TODO: check
+CVE-2017-1000417 (MatrixSSL version 3.7.2 adopts a collision-prone OID
comparison logic ...)
+ TODO: check
+CVE-2017-1000416 (axTLS version 1.5.3 has a coding error in the ASN.1 parser
resulting ...)
+ TODO: check
CVE-2018-6003 (An issue was discovered in the _asn1_decode_simple_ber function
in ...)
TODO: check
CVE-2018-6002 (The Soundy Background Music plugin 3.9 and below for WordPress
has ...)
@@ -717,7 +827,7 @@ CVE-2018-1000003 (Improper input validation bugs in DNSSEC
validators components
CVE-2018-1000002 (Improper input validation bugs in DNSSEC validators
components in Knot ...)
- knot-recursor 1.5.2-1
CVE-2018-5704 (Open On-Chip Debugger (OpenOCD) 0.10.0 does not block attempts
to use ...)
- {DLA-1253-1}
+ {DSA-4093-1 DLA-1253-1}
- openocd 0.10.0-4 (bug #887488)
NOTE: https://sourceforge.net/p/openocd/mailman/message/36188041/
NOTE: http://openocd.zylin.com/4330
@@ -2635,7 +2745,7 @@ CVE-2017-1000482 (A member of the Plone 2.5-5.1rc1 site
could set javascript in
CVE-2017-1000481 (When you visit a page where you need to login, Plone
2.5-5.1rc1 sends ...)
NOT-FOR-US: Plone
CVE-2017-1000480 (Smarty 3 before 3.1.32 is vulnerable to a PHP code injection
when ...)
- {DLA-1249-1}
+ {DSA-4094-1 DLA-1249-1}
- smarty <removed>
- smarty3 3.1.31+20161214.1.c7d42e4+selfpack1-3 (bug #886460)
NOTE:
https://github.com/smarty-php/smarty/commit/614ad1f8b9b00086efc123e49b7bb8efbfa81b61
@@ -12226,10 +12336,10 @@ CVE-2017-17409 (This vulnerability allows remote
attackers to execute arbitrary
NOT-FOR-US: Bitdefender Internet Security 2018
CVE-2017-17408 (This vulnerability allows remote attackers to execute
arbitrary code ...)
NOT-FOR-US: Bitdefender Internet Security 2018
-CVE-2017-17407
- RESERVED
-CVE-2017-17406
- RESERVED
+CVE-2017-17407 (This vulnerability allows remote attackers to execute
arbitrary code ...)
+ TODO: check
+CVE-2017-17406 (This vulnerability allows remote attackers to execute
arbitrary code ...)
+ TODO: check
CVE-2017-17405 (Ruby before 2.4.3 allows Net::FTP command injection.
Net::FTP#get, ...)
{DLA-1222-1 DLA-1221-1}
- ruby2.5 2.5.0~rc1-1 (bug #884437)
@@ -13477,8 +13587,8 @@ CVE-2018-0864
RESERVED
CVE-2018-0863
RESERVED
-CVE-2018-0862
- RESERVED
+CVE-2018-0862 (Equation Editor in Microsoft Office 2003, Microsoft Office
2007, ...)
+ TODO: check
CVE-2018-0861
RESERVED
CVE-2018-0860
@@ -13503,16 +13613,16 @@ CVE-2018-0851
RESERVED
CVE-2018-0850
RESERVED
-CVE-2018-0849
- RESERVED
-CVE-2018-0848
- RESERVED
+CVE-2018-0849 (Equation Editor in Microsoft Office 2003, Microsoft Office
2007, ...)
+ TODO: check
+CVE-2018-0848 (Equation Editor in Microsoft Office 2003, Microsoft Office
2007, ...)
+ TODO: check
CVE-2018-0847
RESERVED
CVE-2018-0846
RESERVED
-CVE-2018-0845
- RESERVED
+CVE-2018-0845 (Equation Editor in Microsoft Office 2003, Microsoft Office
2007, ...)
+ TODO: check
CVE-2018-0844
RESERVED
CVE-2018-0843
@@ -16876,48 +16986,48 @@ CVE-2017-16611 (In libXfont before 1.5.4 and
libXfont2 before 2.0.3, a local att
NOTE: (for 1.5.x):
https://cgit.freedesktop.org/xorg/lib/libXfont/commit/?h=libXfont-1.5-branch&id=5ed8ac0e4f063825b8ecda48e9a111d3ce92e825
NOTE:
https://marc.info/?l=freedesktop-xorg-announce&m=151188049718337&w=2
NOTE:
https://marc.info/?l=freedesktop-xorg-announce&m=151188044218304&w=2
-CVE-2017-16610
- RESERVED
-CVE-2017-16609
- RESERVED
-CVE-2017-16608
- RESERVED
-CVE-2017-16607
- RESERVED
-CVE-2017-16606
- RESERVED
-CVE-2017-16605
- RESERVED
-CVE-2017-16604
- RESERVED
-CVE-2017-16603
- RESERVED
-CVE-2017-16602
- RESERVED
-CVE-2017-16601
- RESERVED
-CVE-2017-16600
- RESERVED
-CVE-2017-16599
- RESERVED
-CVE-2017-16598
- RESERVED
-CVE-2017-16597
- RESERVED
-CVE-2017-16596
- RESERVED
-CVE-2017-16595
- RESERVED
-CVE-2017-16594
- RESERVED
-CVE-2017-16593
- RESERVED
-CVE-2017-16592
- RESERVED
-CVE-2017-16591
- RESERVED
-CVE-2017-16590
- RESERVED
+CVE-2017-16610 (This vulnerability allows remote attackers to execute
arbitrary code ...)
+ TODO: check
+CVE-2017-16609 (This vulnerability allows remote attackers to disclose
sensitive ...)
+ TODO: check
+CVE-2017-16608 (This vulnerability allows remote attackers to execute
arbitrary code ...)
+ TODO: check
+CVE-2017-16607 (This vulnerability allows remote attackers to disclose
sensitive ...)
+ TODO: check
+CVE-2017-16606 (This vulnerability allows remote attackers to execute code by
creating ...)
+ TODO: check
+CVE-2017-16605 (This vulnerability allows remote attackers to overwrite
arbitrary ...)
+ TODO: check
+CVE-2017-16604 (This vulnerability allows remote attackers to overwrite
arbitrary ...)
+ TODO: check
+CVE-2017-16603 (This vulnerability allows remote attackers to execute code by
creating ...)
+ TODO: check
+CVE-2017-16602 (This vulnerability allows remote attackers to execute
arbitrary code ...)
+ TODO: check
+CVE-2017-16601 (This vulnerability allows remote attackers to overwrite
arbitrary ...)
+ TODO: check
+CVE-2017-16600 (This vulnerability allows remote attackers to overwrite files
on ...)
+ TODO: check
+CVE-2017-16599 (This vulnerability allows remote attackers to delete arbitrary
files ...)
+ TODO: check
+CVE-2017-16598 (This vulnerability allows remote attackers to execute code by
...)
+ TODO: check
+CVE-2017-16597 (This vulnerability allows remote attackers to execute
arbitrary code ...)
+ TODO: check
+CVE-2017-16596 (This vulnerability allows remote attackers to disclose
sensitive ...)
+ TODO: check
+CVE-2017-16595 (This vulnerability allows remote attackers to disclose
sensitive ...)
+ TODO: check
+CVE-2017-16594 (This vulnerability allows remote attackers to create arbitrary
files ...)
+ TODO: check
+CVE-2017-16593 (This vulnerability allows remote attackers to delete arbitrary
files ...)
+ TODO: check
+CVE-2017-16592 (This vulnerability allows remote attackers to disclose
sensitive ...)
+ TODO: check
+CVE-2017-16591 (This vulnerability allows remote attackers to disclose
sensitive ...)
+ TODO: check
+CVE-2017-16590 (This vulnerability allows remote attackers to bypass
authentication on ...)
+ TODO: check
CVE-2017-16589 (This vulnerability allows remote attackers to disclose
sensitive ...)
NOT-FOR-US: Foxit Reader
CVE-2017-16588 (This vulnerability allows remote attackers to disclose
sensitive ...)
@@ -79257,8 +79367,7 @@ CVE-2016-5347 (In all Qualcomm products with Android
releases from CAF using the
CVE-2016-5346
RESERVED
NOT-FOR-US: Qualcomm driver for Android
-CVE-2016-5345
- RESERVED
+CVE-2016-5345 (Buffer overflow in the Qualcomm radio driver in Android before
...)
NOT-FOR-US: Qualcomm radio driver for Android
CVE-2016-5344 (Multiple integer overflows in the MDSS driver for the Linux
kernel ...)
- linux <not-affected> (Android-specific kernel patch)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/72c1f08d27c453f664a7906fe25d04535209262d
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/72c1f08d27c453f664a7906fe25d04535209262d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
