Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
76a64da9 by security tracker role at 2018-08-13T08:10:15Z
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -30945,12 +30945,12 @@ CVE-2018-3778 (Improper authorization in aedes
version <0.35.0 will publish a
TODO: check
CVE-2018-3777 (Insufficient URI encoding in restforce before 3.0.0 allows
attacker to ...)
NOT-FOR-US: restforce
-CVE-2018-3776
- RESERVED
-CVE-2018-3775
- RESERVED
-CVE-2018-3774
- RESERVED
+CVE-2018-3776 (Improper input validator in Nextcloud Server prior to 12.0.3
and ...)
+ TODO: check
+CVE-2018-3775 (Improper Authentication in Nextcloud Server prior to version
12.0.3 ...)
+ TODO: check
+CVE-2018-3774 (Incorrect parsing in url-parse <1.4.3 returns wrong hostname
which ...)
+ TODO: check
CVE-2018-3773 (There is a stored Cross-Site Scripting vulnerability in Open
Graph ...)
NOT-FOR-US: metascrape nodejs module
CVE-2018-3772 (Concatenating unsanitized user input in the `whereis` npm
module < ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/76a64da9f5d2938e1ae6df0079251de31c5fabf6
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/76a64da9f5d2938e1ae6df0079251de31c5fabf6
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
