Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
af8607f1 by Moritz Muehlenhoff at 2018-07-13T17:14:12+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -9,19 +9,19 @@ CVE-2018-14036 [accountservice: insufficient path check in
user_change_icon_file
NOTE: https://bugs.freedesktop.org/show_bug.cgi?id=107085
NOTE:
https://cgit.freedesktop.org/accountsservice/commit/?id=f9abd359f71a5bce421b9ae23432f539a067847a
CVE-2018-14035 (An issue was discovered in the HDF HDF5 1.8.20 library. There
is a ...)
- TODO: check
+ - hdf5 <undetermined>
CVE-2018-14034 (An issue was discovered in the HDF HDF5 1.8.20 library. There
is an out ...)
- TODO: check
+ - hdf5 <undetermined>
CVE-2018-14033 (An issue was discovered in the HDF HDF5 1.8.20 library. There
is a ...)
- TODO: check
+ - hdf5 <undetermined>
CVE-2018-14032 (An issue was discovered in the HDF HDF5 1.8.20 library. There
is a ...)
- TODO: check
+ - hdf5 <undetermined>
CVE-2018-14031 (An issue was discovered in the HDF HDF5 1.8.20 library. There
is a ...)
- TODO: check
+ - hdf5 <undetermined>
CVE-2018-14030
RESERVED
CVE-2018-14029 (CSRF vulnerability in admin/user/edit in Creatiwity wityCMS
0.6.2 ...)
- TODO: check
+ NOT-FOR-US: Creatiwity wityCMS
CVE-2018-14028
RESERVED
CVE-2018-14027
@@ -391,7 +391,7 @@ CVE-2018-13852
CVE-2018-13851
RESERVED
CVE-2018-13850 (The "Firebase Cloud Messaging (FCM) + Advance Admin
Panel" component ...)
- TODO: check
+ NOT-FOR-US: Firebase Cloud Messaging
CVE-2018-13849 (edit_requests.php in yTakkar Instagram-clone through
2018-04-23 has XSS ...)
NOT-FOR-US: yTakkar Instagram-clone
CVE-2018-13848 (An issue has been found in Bento4 1.5.1-624. It is a SEGV in
...)
@@ -434,7 +434,7 @@ CVE-2018-13835
CVE-2018-13834
RESERVED
CVE-2018-13833 (An issue was discovered in cmft through 2017-09-24. The ...)
- TODO: check
+ NOT-FOR-US: cmft
CVE-2018-13832
RESERVED
CVE-2018-13831
@@ -512,7 +512,7 @@ CVE-2018-13796 (Unspecified vulnerability in Mailman before
2.1.28 has unknown i
NOTE: Fixed in 2.1.28
NOTE:
https://mail.python.org/pipermail/mailman-users/2018-July/083536.html
CVE-2016-10726 (The XMLUI feature in DSpace before 3.6, 4.x before 4.5, and
5.x before ...)
- TODO: check
+ NOT-FOR-US: DSpave
CVE-2018-13797 (The macaddress module before 0.2.9 for Node.js is prone to an
arbitrary ...)
- node-macaddress 0.2.9-1 (unimportant)
NOTE: https://github.com/scravy/node-macaddress/pull/20
@@ -2143,7 +2143,7 @@ CVE-2018-13036
CVE-2018-13035
RESERVED
CVE-2018-13034 (Directory traversal in Jester web framework 0.2.0 allows
remote ...)
- TODO: check
+ NOT-FOR-US: Jester web framework
CVE-2018-13033 (The Binary File Descriptor (BFD) library (aka libbfd), as
distributed ...)
- binutils <unfixed> (low)
[stretch] - binutils <ignored> (Minor issue)
@@ -3209,7 +3209,7 @@ CVE-2018-1000500 (Busybox contains a Missing SSL
certificate validation vulnerab
NOTE: Starting with 1:1.27.2-3 in unstable wget emmits a message that
certificate
NOTE: verification is not implemented.
CVE-2018-1000404 (Jenkins project Jenkins AWS CodeBuild Plugin version 0.26
and earlier ...)
- TODO: check
+ NOT-FOR-US: Jenkins plugin
CVE-2018-12637
RESERVED
CVE-2018-12636 (The iThemes Security (better-wp-security) plugin before 7.0.3
for ...)
@@ -3281,11 +3281,11 @@ CVE-2018-12609
CVE-2018-12608
RESERVED
CVE-2018-1000403 (Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19
and earlier ...)
- TODO: check
+ NOT-FOR-US: Jenkins plugin
CVE-2018-1000402 (Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19
and earlier ...)
- TODO: check
+ NOT-FOR-US: Jenkins plugin
CVE-2018-1000401 (Jenkins project Jenkins AWS CodePipeline Plugin version 0.36
and ...)
- TODO: check
+ NOT-FOR-US: Jenkins plugin
CVE-2018-12607 [gitlab: Persistent XSS in charts]
RESERVED
- gitlab <unfixed> (bug #902726)
@@ -3653,7 +3653,7 @@ CVE-2018-12465 (An OS command injection vulnerability in
the web administration
CVE-2018-12464 (A SQL injection vulnerability in the web administration and
quarantine ...)
NOT-FOR-US: Micro Focus
CVE-2018-12463 (An XML external entity (XXE) vulnerability in Fortify Software
...)
- TODO: check
+ NOT-FOR-US: Fortify
CVE-2018-12462 (NetIQ iManager 3.1.1 addresses potential XSS vulnerabilities.
...)
NOT-FOR-US: NetIQ iManager
CVE-2018-12461 (Fixed issues with NetIQ eDirectory prior to 9.1.1 when
checking ...)
@@ -9541,7 +9541,7 @@ CVE-2018-10198 (An issue was discovered in OTRS 6.0.x
before 6.0.7. An attacker
NOTE:
https://github.com/OTRS/otrs/commit/9f5f09e4eef283c2f38c003ba0685b77234750d1
NOTE:
https://community.otrs.com/security-advisory-2018-01-security-update-for-otrs-framework
CVE-2018-10197 (There is a time-based blind SQL injection vulnerability in the
Access ...)
- TODO: check
+ NOT-FOR-US: ELO
CVE-2018-10196 (NULL pointer dereference vulnerability in the rebuild_vlists
function ...)
- graphviz <unfixed> (low; bug #898841)
[stretch] - graphviz <no-dsa> (Minor issue)
@@ -14171,7 +14171,7 @@ CVE-2018-8328
CVE-2018-8327 (A remote code execution vulnerability exists in PowerShell
Editor ...)
NOT-FOR-US: Microsoft
CVE-2018-8326 (A cross-site-scripting (XSS) vulnerability exists when an open
source ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2018-8325 (An information disclosure vulnerability exists when Microsoft
Edge ...)
NOT-FOR-US: Microsoft
CVE-2018-8324 (An information disclosure vulnerability exists when Microsoft
Edge ...)
@@ -14185,7 +14185,7 @@ CVE-2018-8321
CVE-2018-8320
RESERVED
CVE-2018-8319 (A Security Feature Bypass vulnerability exists in MSR
JavaScript ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2018-8318
RESERVED
CVE-2018-8317
@@ -14201,7 +14201,7 @@ CVE-2018-8313 (An elevation of privilege vulnerability
exists in the way that th
CVE-2018-8312 (A remote code execution vulnerability exists when Microsoft
Access ...)
NOT-FOR-US: Microsoft
CVE-2018-8311 (A remote code execution vulnerability exists when Skype for
Business ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2018-8310 (A tampering vulnerability exists when Microsoft Outlook does
not ...)
NOT-FOR-US: Microsoft
CVE-2018-8309 (A denial of service vulnerability exists when Windows
improperly ...)
@@ -14227,7 +14227,7 @@ CVE-2018-8300 (A remote code execution vulnerability
exists in Microsoft SharePo
CVE-2018-8299 (An elevation of privilege vulnerability exists when Microsoft
...)
NOT-FOR-US: Microsoft
CVE-2018-8298 (A remote code execution vulnerability exists in the way that
the ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2018-8297 (An information disclosure vulnerability exists when Microsoft
Edge ...)
NOT-FOR-US: Microsoft
CVE-2018-8296 (A remote code execution vulnerability exists in the way that
the ...)
@@ -14235,7 +14235,7 @@ CVE-2018-8296 (A remote code execution vulnerability
exists in the way that the
CVE-2018-8295
RESERVED
CVE-2018-8294 (A remote code execution vulnerability exists in the way that
the ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2018-8293
RESERVED
CVE-2018-8292
@@ -14251,19 +14251,19 @@ CVE-2018-8288 (A remote code execution vulnerability
exists in the way the scrip
CVE-2018-8287 (A remote code execution vulnerability exists in the way the
scripting ...)
NOT-FOR-US: Microsoft
CVE-2018-8286 (A remote code execution vulnerability exists in the way that
the ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2018-8285
RESERVED
CVE-2018-8284 (A remote code execution vulnerability exists when the Microsoft
.NET ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2018-8283 (A remote code execution vulnerability exists in the way that
the ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2018-8282 (An elevation of privilege vulnerability exists in Windows when
the ...)
NOT-FOR-US: Microsoft
CVE-2018-8281 (A remote code execution vulnerability exists in Microsoft
Office ...)
NOT-FOR-US: Microsoft
CVE-2018-8280 (A remote code execution vulnerability exists in the way that
the ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2018-8279 (A remote code execution vulnerability exists when Microsoft
Edge ...)
NOT-FOR-US: Microsoft
CVE-2018-8278 (A spoofing vulnerability exists when Microsoft Edge improperly
handles ...)
@@ -14303,7 +14303,7 @@ CVE-2018-8262 (A remote code execution vulnerability
exists when Microsoft Edge
CVE-2018-8261
RESERVED
CVE-2018-8260 (A Remote Code Execution vulnerability exists in .NET software
when the ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2018-8259
RESERVED
CVE-2018-8258
@@ -14339,7 +14339,7 @@ CVE-2018-8244 (An elevation of privilege vulnerability
exists when Microsoft Out
CVE-2018-8243 (A remote code execution vulnerability exists in the way that
the ...)
NOT-FOR-US: Microsoft
CVE-2018-8242 (A remote code execution vulnerability exists in the way that
the ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2018-8241
RESERVED
CVE-2018-8240
@@ -14347,7 +14347,7 @@ CVE-2018-8240
CVE-2018-8239 (An information disclosure vulnerability exists when the Windows
GDI ...)
NOT-FOR-US: Microsoft
CVE-2018-8238 (A security feature bypass vulnerability exists when Skype for
Business ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2018-8237
RESERVED
CVE-2018-8236 (A remote code execution vulnerability exists when Microsoft
Edge ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/af8607f1ee87c4beb92e541efdae48f570a91762
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/af8607f1ee87c4beb92e541efdae48f570a91762
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
