Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a25c4b07 by security tracker role at 2018-05-28T20:10:21+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,4 +1,22 @@
-CVE-2018-11508 [compat: fix 4-byte infoleak via uninitialized struct field]
+CVE-2018-11517 (mySCADA myPRO 7 allows remote attackers to discover all
ProjectIDs in a ...)
+ TODO: check
+CVE-2018-11516 (The vlc_demux_chained_Delete function in input/demux_chained.c
in ...)
+ TODO: check
+CVE-2018-11515 (The wpForo plugin through 2018-02-05 for WordPress has SQL
Injection ...)
+ TODO: check
+CVE-2018-11514 (PHP Scripts Mall Naukri Clone Script through 3.0.3 allows
Unrestricted ...)
+ TODO: check
+CVE-2018-11513
+ RESERVED
+CVE-2018-11512 (Stored cross-site scripting (XSS) vulnerability in the
"Website's name" ...)
+ TODO: check
+CVE-2018-11511
+ RESERVED
+CVE-2018-11510
+ RESERVED
+CVE-2018-11509
+ RESERVED
+CVE-2018-11508 (The compat_get_timex function in kernel/compat.c in the Linux
kernel ...)
- linux 4.16.12-1
[stretch] - linux <not-affected> (Vulnerable code introduced later)
[jessie] - linux <not-affected> (Vulnerable code introduced later)
@@ -175,8 +193,8 @@ CVE-2018-11432
RESERVED
CVE-2018-11431
RESERVED
-CVE-2018-11430
- RESERVED
+CVE-2018-11430 (An issue was discovered in the Moderator Log Notes plugin 1.1
for MyBB. ...)
+ TODO: check
CVE-2018-11429
RESERVED
CVE-2018-11428
@@ -518,8 +536,8 @@ CVE-2018-11311 (A hardcoded FTP username of myscada and
password of Vikuk63 in .
NOT-FOR-US: mySCADA
CVE-2018-11310
RESERVED
-CVE-2018-11309
- RESERVED
+CVE-2018-11309 (Blind SQL injection in coupon_code in the MemberMouse plugin
2.2.8 and ...)
+ TODO: check
CVE-2018-11308
RESERVED
CVE-2018-11307
@@ -1919,8 +1937,8 @@ CVE-2018-10733 (There is a heap-based buffer over-read in
the function ...)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1574844
NOTE:
https://git.gnome.org/browse/libgxps/commit/?id=b458226e162fe1ffe7acb4230c114a52ada5131b
NOTE:
https://git.gnome.org/browse/libgxps/commit/?id=133fe2a96e020d4ca65c6f64fb28a404050ebbfd
-CVE-2018-10732
- RESERVED
+CVE-2018-10732 (The REST API in Dataiku DSS before 4.2.3 allows remote
attackers to ...)
+ TODO: check
CVE-2018-10731 (All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx
products ...)
NOT-FOR-US: Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products
CVE-2018-10730 (All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx
products ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/a25c4b07d11140f359abab62ca784a9d14805789
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/a25c4b07d11140f359abab62ca784a9d14805789
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
