Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3591f8df by security tracker role at 2018-10-09T20:11:22Z
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,241 @@
+CVE-2018-18188
+ RESERVED
+CVE-2018-18187
+ RESERVED
+CVE-2018-18186
+ RESERVED
+CVE-2018-18185
+ RESERVED
+CVE-2018-18184
+ RESERVED
+CVE-2018-18183
+ RESERVED
+CVE-2018-18182
+ RESERVED
+CVE-2018-18181
+ RESERVED
+CVE-2018-18180
+ RESERVED
+CVE-2018-18179
+ RESERVED
+CVE-2018-18178
+ RESERVED
+CVE-2018-18177
+ RESERVED
+CVE-2018-18176
+ RESERVED
+CVE-2018-18175
+ RESERVED
+CVE-2018-18174
+ RESERVED
+CVE-2018-18173
+ RESERVED
+CVE-2018-18172
+ RESERVED
+CVE-2018-18171
+ RESERVED
+CVE-2018-18170
+ RESERVED
+CVE-2018-18169
+ RESERVED
+CVE-2018-18168
+ RESERVED
+CVE-2018-18167
+ RESERVED
+CVE-2018-18166
+ RESERVED
+CVE-2018-18165
+ RESERVED
+CVE-2018-18164
+ RESERVED
+CVE-2018-18163
+ RESERVED
+CVE-2018-18162
+ RESERVED
+CVE-2018-18161
+ RESERVED
+CVE-2018-18160
+ RESERVED
+CVE-2018-18159
+ RESERVED
+CVE-2018-18158
+ RESERVED
+CVE-2018-18157
+ RESERVED
+CVE-2018-18156
+ RESERVED
+CVE-2018-18155
+ RESERVED
+CVE-2018-18154
+ RESERVED
+CVE-2018-18153
+ RESERVED
+CVE-2018-18152
+ RESERVED
+CVE-2018-18151
+ RESERVED
+CVE-2018-18150
+ RESERVED
+CVE-2018-18149
+ RESERVED
+CVE-2018-18148
+ RESERVED
+CVE-2018-18147
+ RESERVED
+CVE-2018-18146
+ RESERVED
+CVE-2018-18145
+ RESERVED
+CVE-2018-18144
+ RESERVED
+CVE-2018-18143
+ RESERVED
+CVE-2018-18142
+ RESERVED
+CVE-2018-18141
+ RESERVED
+CVE-2018-18140
+ RESERVED
+CVE-2018-18139
+ RESERVED
+CVE-2018-18138
+ RESERVED
+CVE-2018-18137
+ RESERVED
+CVE-2018-18136
+ RESERVED
+CVE-2018-18135
+ RESERVED
+CVE-2018-18134
+ RESERVED
+CVE-2018-18133
+ RESERVED
+CVE-2018-18132
+ RESERVED
+CVE-2018-18131
+ RESERVED
+CVE-2018-18130
+ RESERVED
+CVE-2018-18129
+ RESERVED
+CVE-2018-18128
+ RESERVED
+CVE-2018-18127
+ RESERVED
+CVE-2018-18126
+ RESERVED
+CVE-2018-18125
+ RESERVED
+CVE-2018-18124
+ RESERVED
+CVE-2018-18123
+ RESERVED
+CVE-2018-18122
+ RESERVED
+CVE-2018-18121
+ RESERVED
+CVE-2018-18120
+ RESERVED
+CVE-2018-18119
+ RESERVED
+CVE-2018-18118
+ RESERVED
+CVE-2018-18117
+ RESERVED
+CVE-2018-18116
+ RESERVED
+CVE-2018-18115
+ RESERVED
+CVE-2018-18114
+ RESERVED
+CVE-2018-18113
+ RESERVED
+CVE-2018-18112
+ RESERVED
+CVE-2018-18111
+ RESERVED
+CVE-2018-18110
+ RESERVED
+CVE-2018-18109
+ RESERVED
+CVE-2018-18108
+ RESERVED
+CVE-2018-18107
+ RESERVED
+CVE-2018-18106
+ RESERVED
+CVE-2018-18105
+ RESERVED
+CVE-2018-18104
+ RESERVED
+CVE-2018-18103
+ RESERVED
+CVE-2018-18102
+ RESERVED
+CVE-2018-18101
+ RESERVED
+CVE-2018-18100
+ RESERVED
+CVE-2018-18099
+ RESERVED
+CVE-2018-18098
+ RESERVED
+CVE-2018-18097
+ RESERVED
+CVE-2018-18096
+ RESERVED
+CVE-2018-18095
+ RESERVED
+CVE-2018-18094
+ RESERVED
+CVE-2018-18093
+ RESERVED
+CVE-2018-18092
+ RESERVED
+CVE-2018-18091
+ RESERVED
+CVE-2018-18090
+ RESERVED
+CVE-2018-18089
+ RESERVED
+CVE-2018-18088
+ RESERVED
+CVE-2018-18087
+ RESERVED
+CVE-2018-18086
+ RESERVED
+CVE-2018-18085
+ RESERVED
+CVE-2018-18084 (An issue was discovered in DuomiCMS 3.0. SQL injection exists
in the ...)
+ TODO: check
+CVE-2018-18083 (An issue was discovered in DuomiCMS 3.0. Remote PHP code
execution is ...)
+ TODO: check
+CVE-2018-18082 (XSS exists in Waimai Super Cms 20150505 via the fname
parameter to the ...)
+ TODO: check
+CVE-2018-18081
+ RESERVED
+CVE-2018-18080
+ RESERVED
+CVE-2018-18079
+ RESERVED
+CVE-2018-18078
+ RESERVED
+CVE-2018-18077
+ RESERVED
+CVE-2018-18076
+ RESERVED
+CVE-2018-18075 (WikidForum 2.20 has SQL Injection via the rpc.php
parent_post_id or ...)
+ TODO: check
+CVE-2018-18074 (The Requests package through 2.19.1 before 2018-09-14 for
Python sends ...)
+ TODO: check
+CVE-2018-18073
+ RESERVED
+CVE-2018-18072
+ RESERVED
+CVE-2018-18071 (An issue was discovered in the Daimler Mercedes-Benz Me app
2.11.0-846 ...)
+ TODO: check
+CVE-2018-18070 (An issue was discovered in Daimler Mercedes-Benz COMAND
17/13.0 50.12 ...)
+ TODO: check
CVE-2018-18069 (process_forms in the WPML (aka sitepress-multilingual-cms)
plugin ...)
NOT-FOR-US: Wordpress plugin
CVE-2018-18068
@@ -105,8 +343,8 @@ CVE-2018-18031
RESERVED
CVE-2018-18030
RESERVED
-CVE-2018-18029
- RESERVED
+CVE-2018-18029 (Navigate CMS has Stored XSS via the navigate.php Title field
in an ...)
+ TODO: check
CVE-2018-18028
RESERVED
CVE-2018-18027
@@ -6101,10 +6339,10 @@ CVE-2018-15545
RESERVED
CVE-2018-15544
RESERVED
-CVE-2018-15543
- RESERVED
-CVE-2018-15542
- RESERVED
+CVE-2018-15543 (** DISPUTED ** An issue was discovered in the
org.telegram.messenger ...)
+ TODO: check
+CVE-2018-15542 (** DISPUTED ** An issue was discovered in the
org.telegram.messenger ...)
+ TODO: check
CVE-2018-15541
RESERVED
CVE-2018-15540
@@ -8096,8 +8334,7 @@ CVE-2018-14651
RESERVED
CVE-2018-14650 (It was discovered that sos-collector does not properly set the
default ...)
NOT-FOR-US: sos-collector (not same as sosreport itself, additional
tool to sosreport)
-CVE-2018-14649
- RESERVED
+CVE-2018-14649 (It was found that ceph-isci-cli package as shipped by Red Hat
Ceph ...)
NOT-FOR-US: ceph-iscsi-cli
CVE-2018-14648 (A flaw was found in 389 Directory Server. A specially crafted
search ...)
- 389-ds-base <unfixed>
@@ -9698,10 +9935,10 @@ CVE-2018-14083 (LICA miniCMTS E8K(u/i/...) devices
allow remote attackers to obt
NOT-FOR-US: LICA miniCMTS E8K(u/i/...) devices
CVE-2018-14082 (PHP Scripts Mall JOB SITE (aka Job Portal) 3.0.1 has
Cross-site ...)
NOT-FOR-US: PHP Scripts Mall JOB SITE (aka Job Portal)
-CVE-2018-14081
- RESERVED
-CVE-2018-14080
- RESERVED
+CVE-2018-14081 (An issue was discovered on D-Link DIR-809 A1 through 1.09, A2
through ...)
+ TODO: check
+CVE-2018-14080 (An issue was discovered on D-Link DIR-809 A1 through 1.09, A2
through ...)
+ TODO: check
CVE-2018-14079 (Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized
remote ...)
NOT-FOR-US: Wi2be SMART HP WMT
CVE-2018-14078 (Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized
remote ...)
@@ -13589,18 +13826,18 @@ CVE-2018-12481 (The Olive Tree Ftp Server application
1.32 for Android has a &qu
NOT-FOR-US: Olive Tree Ftp Server application for Android
CVE-2018-12480
RESERVED
-CVE-2018-12479
- RESERVED
-CVE-2018-12478
- RESERVED
-CVE-2018-12477
- RESERVED
+CVE-2018-12479 (A Improper Input Validation vulnerability in Open Build
Service allows ...)
+ TODO: check
+CVE-2018-12478 (A Improper Input Validation vulnerability in Open Build
Service allows ...)
+ TODO: check
+CVE-2018-12477 (A Improper Neutralization of CRLF Sequences vulnerability in
Open ...)
+ TODO: check
CVE-2018-12476
RESERVED
CVE-2018-12475
RESERVED
-CVE-2018-12474
- RESERVED
+CVE-2018-12474 (Improper input validation in obs-service-tar_scm of Open Build
Service ...)
+ TODO: check
CVE-2018-12473 (A path traversal traversal vulnerability in
obs-service-tar_scm of ...)
NOT-FOR-US: obs-service-tar_scm of Open Build Service
CVE-2018-12472 (A improper authentication using the HOST header in SUSE Linux
SMT ...)
@@ -16291,7 +16528,7 @@ CVE-2018-11512 (Stored cross-site scripting (XSS)
vulnerability in the "Web
NOT-FOR-US: wityCMS
CVE-2018-11511 (The tree list functionality in the photo gallery application
in ...)
NOT-FOR-US: ASUSTOR ADM
-CVE-2018-11510 (ASUSTOR ADM 3.1.2.RHG1 and earlier uses the same default
root:admin ...)
+CVE-2018-11510 (The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an
unauthenticated ...)
NOT-FOR-US: ASUSTOR
CVE-2018-11509 (ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin
username and ...)
NOT-FOR-US: ASUSTOR ADM
@@ -25611,8 +25848,8 @@ CVE-2018-7930 (The Near Field Communication (NFC)
module in Mate 9 Huawei mobile
NOT-FOR-US: Mate 9 Huawei mobile phones
CVE-2018-7929 (Huawei Mate RS smartphones with the versions before NEO-AL00D
...)
NOT-FOR-US: Huawei
-CVE-2018-7928
- RESERVED
+CVE-2018-7928 (There is a security vulnerability which could lead to Factory
Reset ...)
+ TODO: check
CVE-2018-7927
RESERVED
CVE-2018-7926
@@ -42113,26 +42350,26 @@ CVE-2018-2477
RESERVED
CVE-2018-2476
RESERVED
-CVE-2018-2475
- RESERVED
-CVE-2018-2474
- RESERVED
+CVE-2018-2475 (Following the Gardener architecture, the Kubernetes apiserver
of a ...)
+ TODO: check
+CVE-2018-2474 (SAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version
2) ...)
+ TODO: check
CVE-2018-2473
RESERVED
-CVE-2018-2472
- RESERVED
-CVE-2018-2471
- RESERVED
-CVE-2018-2470
- RESERVED
-CVE-2018-2469
- RESERVED
-CVE-2018-2468
- RESERVED
-CVE-2018-2467
- RESERVED
-CVE-2018-2466
- RESERVED
+CVE-2018-2472 (SAP BusinessObjects Business Intelligence Platform 4.10 and
4.20 (Web ...)
+ TODO: check
+CVE-2018-2471 (Under certain conditions SAP BusinessObjects Business
Intelligence ...)
+ TODO: check
+CVE-2018-2470 (In SAP NetWeaver Application Server for ABAP, from 7.0 to 7.02,
7.30, ...)
+ TODO: check
+CVE-2018-2469 (Under certain conditions SAP Adaptive Server Enterprise (ASE),
...)
+ TODO: check
+CVE-2018-2468 (Under certain conditions the backup server in SAP Adaptive
Server ...)
+ TODO: check
+CVE-2018-2467 (In the Software Development Kit in SAP BusinessObjects BI
Platform ...)
+ TODO: check
+CVE-2018-2466 (In Impact and Lineage Analysis in SAP Data Services, version
4.2, the ...)
+ TODO: check
CVE-2018-2465 (SAP HANA (versions 1.0 and 2.0) Extended Application Services
classic ...)
NOT-FOR-US: SAP
CVE-2018-2464 (SAP WebDynpro Java, versions 7.20, 7.30, 7.31, 7.40, 7.50, does
not ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/3591f8df15dc8083c475766537b01815f5a1c729
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/3591f8df15dc8083c475766537b01815f5a1c729
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
