Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits: e7bef0e1 by Moritz Muehlenhoff at 2018-02-28T15:48:24+01:00 NFUs - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== --- a/data/CVE/list +++ b/data/CVE/list @@ -15714,7 +15714,7 @@ CVE-2018-1427 CVE-2018-1426 RESERVED CVE-2018-1425 (IBM Security Guardium Big Data Intelligence (SonarG) 3.1 uses weaker ...) - TODO: check + NOT-FOR-US: IBM Security Guardium Big Data Intelligence CVE-2018-1424 RESERVED CVE-2018-1423 @@ -15766,7 +15766,7 @@ CVE-2018-1401 (IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-sit CVE-2018-1400 RESERVED CVE-2018-1399 (IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5 and 5.0 is ...) - TODO: check + NOT-FOR-US: IBM Daeja ViewONE Professional CVE-2018-1398 RESERVED CVE-2018-1397 @@ -81742,7 +81742,7 @@ CVE-2016-6232 (Directory traversal vulnerability in KArchive before 5.24, as use NOTE: https://lists.debian.org/debian-lts/2016/07/msg00144.html NOTE: Fix: https://git.reviewboard.kde.org/r/128185/ CVE-2016-6217 (Cross-site scripting (XSS) vulnerability in Sophos PureMessage for ...) - TODO: check + NOT-FOR-US: Sophos CVE-2016-6216 RESERVED CVE-2016-6215 @@ -139800,7 +139800,7 @@ CVE-2014-4707 (Huawei Campus S7700 with software V200R001C00SPC300, ...) CVE-2014-4706 (Huawei Campus S3700HI with software V200R001C00SPC300; Campus S5700 ...) NOT-FOR-US: Huawei CVE-2014-4705 (Multiple heap-based buffer overflows in the eSap software platform in ...) - TODO: check + NOT-FOR-US: eSap CVE-2014-4704 RESERVED CVE-2013-7388 (Heap-based buffer overflow in paintlib, as used in Trimble SketchUp ...) @@ -141182,7 +141182,7 @@ CVE-2014-4147 CVE-2014-4146 REJECTED CVE-2014-4145 (Microsoft Internet Explorer 11 allows remote attackers to execute ...) - TODO: check + NOT-FOR-US: Microsoft Internet Explorer CVE-2014-4144 REJECTED CVE-2014-4143 (Microsoft Internet Explorer 6 through 11 allows remote attackers to ...) @@ -141248,7 +141248,7 @@ CVE-2014-4114 (Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, CVE-2014-4113 (win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 ...) NOT-FOR-US: Microsoft CVE-2014-4112 (Microsoft Internet Explorer 11 allows remote attackers to execute ...) - TODO: check + NOT-FOR-US: Microsoft Internet Explorer CVE-2014-4111 (Microsoft Internet Explorer 6 through 11 allows remote attackers to ...) NOT-FOR-US: Microsoft Internet Explorer CVE-2014-4110 (Microsoft Internet Explorer 6 through 11 allows remote attackers to ...) @@ -141340,7 +141340,7 @@ CVE-2014-4068 (The Response Group Service in Microsoft Lync Server 2010 and 2013 CVE-2014-4067 (Microsoft Internet Explorer 10 and 11 allows remote attackers to ...) NOT-FOR-US: Microsoft Internet Explorer CVE-2014-4066 (Microsoft Internet Explorer 11 allows remote attackers to execute ...) - TODO: check + NOT-FOR-US: Microsoft Internet Explorer CVE-2014-4065 (Microsoft Internet Explorer 6 through 11 allows remote attackers to ...) NOT-FOR-US: Microsoft Internet Explorer CVE-2014-4064 (The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server ...) @@ -141607,7 +141607,7 @@ CVE-2014-3973 (Multiple SQL injection vulnerabilities in FrontAccounting (FA) be [squeeze] - frontaccounting <no-dsa> (Minor issue) [wheezy] - frontaccounting <no-dsa> (Minor issue) CVE-2014-3972 (Directory traversal vulnerability in Apexis APM-J601-WS cameras with ...) - TODO: check + NOT-FOR-US: Apexis cameras CVE-2014-3971 (The CmdAuthenticate::_authenticateX509 function in ...) - mongodb <not-affected> (X.509 certifictate authentication introduced in 2.6.x) NOTE: https://jira.mongodb.org/browse/SERVER-13753 @@ -142501,7 +142501,7 @@ CVE-2014-3631 (The assoc_array_gc function in the associative-array implementati NOTE: Introduced by https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 (v3.13) NOTE: Fixed by http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95389b08d93d5c06ec63ab49bd732b0069b7c35e CVE-2014-3630 (XML external entity (XXE) vulnerability in the Java XML processing ...) - TODO: check + NOT-FOR-US: Play framework CVE-2014-3629 (XML external entity (XXE) vulnerability in the XML Exchange module in ...) - qpid-cpp <removed> (low; bug #772794) [wheezy] - qpid-cpp <no-dsa> (Minor issue) @@ -143769,7 +143769,7 @@ CVE-2014-3246 (SQL injection vulnerability in Collabtive 1.2 allows remote ...) CVE-2014-3245 RESERVED CVE-2014-3244 (XML external entity (XXE) vulnerability in the RSSDashlet dashlet in ...) - TODO: check + NOT-FOR-US: SugarCRM CVE-2014-3241 RESERVED CVE-2014-3240 @@ -143914,9 +143914,9 @@ CVE-2014-3210 (SQL injection vulnerability in dopbs-backend-forms.php in the Boo CVE-2014-3208 RESERVED CVE-2014-3206 (Seagate BlackArmor NAS allows remote attackers to execute arbitrary ...) - TODO: check + NOT-FOR-US: Seagate CVE-2014-3205 (backupmgt/pre_connect_check.php in Seagate BlackArmor NAS contains a ...) - TODO: check + NOT-FOR-US: Seagate CVE-2014-3204 (Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle ...) NOT-FOR-US: Unity CVE-2014-3203 (Unity before 7.2.1, as used in Ubuntu 14.04, does not properly ...) @@ -147159,7 +147159,7 @@ CVE-2014-2018 (Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 1 - icedove 24.2.0-1 [squeeze] - icedove <end-of-life> CVE-2014-2017 (CRLF injection vulnerability in OXID eShop Professional Edition before ...) - TODO: check + NOT-FOR-US: OXID eShop CVE-2014-2016 (Multiple cross-site scripting (XSS) vulnerabilities in OXID eShop ...) NOT-FOR-US: OXID eShop CVE-2014-2012 @@ -171504,7 +171504,7 @@ CVE-2012-6349 (Buffer overflow in the .mdb parser in Autonomy KeyView IDOL, as u CVE-2012-6348 (Centrify Deployment Manager 2.1.0.283, as distributed in Centrify ...) NOT-FOR-US: Centrify CVE-2012-6347 (Multiple cross-site scripting (XSS) vulnerabilities in Java number ...) - TODO: check + NOT-FOR-US: FortiGate CVE-2012-6346 (Multiple cross-site scripting (XSS) vulnerabilities in FortiWeb before ...) NOT-FOR-US: FortiWeb CVE-2012-6345 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e7bef0e1d7919823a01abaff9d4089423b9d935e --- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e7bef0e1d7919823a01abaff9d4089423b9d935e You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits