Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
ecb3eada by security tracker role at 2018-05-27T08:10:29+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,9 +1,27 @@
-CVE-2018-11496
-       RESERVED
-CVE-2018-11495
+CVE-2018-11505 (The Werewolf Online application 0.8.8 for Android allows 
attackers to ...)
+       TODO: check
+CVE-2018-11504 (The islist function in markdown.c in libmarkdown.a in DISCOUNT 
2.2.3a ...)
+       TODO: check
+CVE-2018-11503 (The isfootnote function in markdown.c in libmarkdown.a in 
DISCOUNT ...)
+       TODO: check
+CVE-2018-11502
        RESERVED
-CVE-2018-11494
+CVE-2018-11501 (PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via ...)
+       TODO: check
+CVE-2018-11500 (An issue was discovered in PublicCMS V4.0.20180210. There is a 
CSRF ...)
+       TODO: check
+CVE-2018-11499 (A use-after-free vulnerability exists in handle_error() in ...)
+       TODO: check
+CVE-2018-11498 (In Lizard v1.0 and LZ5 v2.0 (the prior release, before the 
product was ...)
+       TODO: check
+CVE-2018-11497
        RESERVED
+CVE-2018-11496 (In Long Range Zip (aka lrzip) 0.631, there is a use-after-free 
in ...)
+       TODO: check
+CVE-2018-11495 (OpenCart through 3.0.2.0 allows directory traversal in the 
editDownload ...)
+       TODO: check
+CVE-2018-11494 (The "program extension upload" feature in OpenCart 
through 3.0.2.0 has ...)
+       TODO: check
 CVE-2018-11493 (An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF 
...)
        NOT-FOR-US: WUZHI CMS
 CVE-2018-11492
@@ -6027,6 +6045,7 @@ CVE-2017-18249 (The add_free_nid function in 
fs/f2fs/node.c in the Linux kernel 
        [wheezy] - linux <not-affected> (Vulnerable code not present)
        NOTE: Fixed by: 
https://git.kernel.org/linus/30a61ddf8117c26ac5b295e1233eaa9629a94ca3
 CVE-2017-18248 (The add_job function in scheduler/ipp.c in CUPS before 2.2.6, 
when ...)
+       {DLA-1387-1}
        - cups 2.2.6-1
        NOTE: 
https://github.com/apple/cups/commit/49fa4983f25b64ec29d548ffa3b9782426007df3
        NOTE: https://github.com/apple/cups/issues/5143
@@ -13468,12 +13487,12 @@ CVE-2018-6412 (In the function sbusfb_ioctl_helper() 
in drivers/video/fbdev/sbus
        - linux <unfixed> (unimportant)
        NOTE: https://marc.info/?l=linux-fbdev&m=151734425901499&w=2
        NOTE: The issue only affects SPARC systems.
-CVE-2018-6411
-       RESERVED
-CVE-2018-6410
-       RESERVED
-CVE-2018-6409
-       RESERVED
+CVE-2018-6411 (An issue was discovered in Appnitro MachForm before 4.2.3. When 
the ...)
+       TODO: check
+CVE-2018-6410 (An issue was discovered in Appnitro MachForm before 4.2.3. 
There is a ...)
+       TODO: check
+CVE-2018-6409 (An issue was discovered in Appnitro MachForm before 4.2.3. The 
module ...)
+       TODO: check
 CVE-2018-6408 (An issue was discovered on Conceptronic CIPCAMPTIWL V3 
0.61.30.21 ...)
        NOT-FOR-US: CIPCAMPTIWL devices
 CVE-2018-6407 (An issue was discovered on Conceptronic CIPCAMPTIWL V3 
0.61.30.21 ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/ecb3eada3209efdaff1f5a9af4b17313b9a042ea

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/ecb3eada3209efdaff1f5a9af4b17313b9a042ea
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to