Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
278af59b by security tracker role at 2019-01-16T08:10:28Z
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,267 @@
+CVE-2019-6446 (An issue was discovered in NumPy 1.16.0 and earlier. It uses
the pickle ...)
+ TODO: check
+CVE-2019-6445 (An issue was discovered in NTPsec before 1.1.3. An
authenticated ...)
+ TODO: check
+CVE-2019-6444 (An issue was discovered in NTPsec before 1.1.3.
process_control() in ...)
+ TODO: check
+CVE-2019-6443 (An issue was discovered in NTPsec before 1.1.3. Because of a
bug in ...)
+ TODO: check
+CVE-2019-6442 (An issue was discovered in NTPsec before 1.1.3. An
authenticated ...)
+ TODO: check
+CVE-2019-6441
+ RESERVED
+CVE-2019-6440 (Zemana AntiMalware before 3.0.658 Beta mishandles update logic.
...)
+ TODO: check
+CVE-2019-6439 (examples/benchmark/tls_bench.c in a benchmark tool in wolfSSL
through ...)
+ TODO: check
+CVE-2019-6438
+ RESERVED
+CVE-2019-6437
+ RESERVED
+CVE-2019-6436
+ RESERVED
+CVE-2019-6435
+ RESERVED
+CVE-2019-6434
+ RESERVED
+CVE-2019-6433
+ RESERVED
+CVE-2019-6432
+ RESERVED
+CVE-2019-6431
+ RESERVED
+CVE-2019-6430
+ RESERVED
+CVE-2019-6429
+ RESERVED
+CVE-2019-6428
+ RESERVED
+CVE-2019-6427
+ RESERVED
+CVE-2019-6426
+ RESERVED
+CVE-2019-6425
+ RESERVED
+CVE-2019-6424
+ RESERVED
+CVE-2019-6423
+ RESERVED
+CVE-2019-6422
+ RESERVED
+CVE-2019-6421
+ RESERVED
+CVE-2019-6420
+ RESERVED
+CVE-2019-6419
+ RESERVED
+CVE-2019-6418
+ RESERVED
+CVE-2019-6417
+ RESERVED
+CVE-2019-6416
+ RESERVED
+CVE-2019-6415
+ RESERVED
+CVE-2019-6414
+ RESERVED
+CVE-2019-6413
+ RESERVED
+CVE-2019-6412
+ RESERVED
+CVE-2019-6411
+ RESERVED
+CVE-2019-6410
+ RESERVED
+CVE-2019-6409
+ RESERVED
+CVE-2019-6408
+ RESERVED
+CVE-2019-6407
+ RESERVED
+CVE-2019-6406
+ RESERVED
+CVE-2019-6405
+ RESERVED
+CVE-2019-6404
+ RESERVED
+CVE-2019-6403
+ RESERVED
+CVE-2019-6402
+ RESERVED
+CVE-2019-6401
+ RESERVED
+CVE-2019-6400
+ RESERVED
+CVE-2019-6399
+ RESERVED
+CVE-2019-6398
+ RESERVED
+CVE-2019-6397
+ RESERVED
+CVE-2019-6396
+ RESERVED
+CVE-2019-6395
+ RESERVED
+CVE-2019-6394
+ RESERVED
+CVE-2019-6393
+ RESERVED
+CVE-2019-6392
+ RESERVED
+CVE-2019-6391
+ RESERVED
+CVE-2019-6390
+ RESERVED
+CVE-2019-6389
+ RESERVED
+CVE-2019-6388
+ RESERVED
+CVE-2019-6387
+ RESERVED
+CVE-2019-6386
+ RESERVED
+CVE-2019-6385
+ RESERVED
+CVE-2019-6384
+ RESERVED
+CVE-2019-6383
+ RESERVED
+CVE-2019-6382
+ RESERVED
+CVE-2019-6381
+ RESERVED
+CVE-2019-6380
+ RESERVED
+CVE-2019-6379
+ RESERVED
+CVE-2019-6378
+ RESERVED
+CVE-2019-6377
+ RESERVED
+CVE-2019-6376
+ RESERVED
+CVE-2019-6375
+ RESERVED
+CVE-2019-6374
+ RESERVED
+CVE-2019-6373
+ RESERVED
+CVE-2019-6372
+ RESERVED
+CVE-2019-6371
+ RESERVED
+CVE-2019-6370
+ RESERVED
+CVE-2019-6369
+ RESERVED
+CVE-2019-6368
+ RESERVED
+CVE-2019-6367
+ RESERVED
+CVE-2019-6366
+ RESERVED
+CVE-2019-6365
+ RESERVED
+CVE-2019-6364
+ RESERVED
+CVE-2019-6363
+ RESERVED
+CVE-2019-6362
+ RESERVED
+CVE-2019-6361
+ RESERVED
+CVE-2019-6360
+ RESERVED
+CVE-2019-6359
+ RESERVED
+CVE-2019-6358
+ RESERVED
+CVE-2019-6357
+ RESERVED
+CVE-2019-6356
+ RESERVED
+CVE-2019-6355
+ RESERVED
+CVE-2019-6354
+ RESERVED
+CVE-2019-6353
+ RESERVED
+CVE-2019-6352
+ RESERVED
+CVE-2019-6351
+ RESERVED
+CVE-2019-6350
+ RESERVED
+CVE-2019-6349
+ RESERVED
+CVE-2019-6348
+ RESERVED
+CVE-2019-6347
+ RESERVED
+CVE-2019-6346
+ RESERVED
+CVE-2019-6345
+ RESERVED
+CVE-2019-6344
+ RESERVED
+CVE-2019-6343
+ RESERVED
+CVE-2019-6342
+ RESERVED
+CVE-2019-6341
+ RESERVED
+CVE-2019-6340
+ RESERVED
+CVE-2019-6339
+ RESERVED
+CVE-2019-6338
+ RESERVED
+CVE-2019-6337
+ RESERVED
+CVE-2019-6336
+ RESERVED
+CVE-2019-6335
+ RESERVED
+CVE-2019-6334
+ RESERVED
+CVE-2019-6333
+ RESERVED
+CVE-2019-6332
+ RESERVED
+CVE-2019-6331
+ RESERVED
+CVE-2019-6330
+ RESERVED
+CVE-2019-6329
+ RESERVED
+CVE-2019-6328
+ RESERVED
+CVE-2019-6327
+ RESERVED
+CVE-2019-6326
+ RESERVED
+CVE-2019-6325
+ RESERVED
+CVE-2019-6324
+ RESERVED
+CVE-2019-6323
+ RESERVED
+CVE-2019-6322
+ RESERVED
+CVE-2019-6321
+ RESERVED
+CVE-2019-6320
+ RESERVED
+CVE-2019-6319
+ RESERVED
+CVE-2019-6318
+ RESERVED
+CVE-2018-20720 (ABB Relion 630 devices 1.1 before 1.1.0.C0, 1.2 before
1.2.0.B3, and ...)
+ TODO: check
+CVE-2016-10738 (Zenbership v107 has CSRF via admin/cp-functions/event-add.php.
...)
+ TODO: check
+CVE-2016-10737 (Serendipity 2.0.4 has XSS via the serendipity_admin.php ...)
+ TODO: check
CVE-2019-XXXX [instability and crash due to crafted message flooding]
- mumble 1.3.0~git20190114.9fcc588+dfsg-1 (bug #919249)
NOTE: https://github.com/mumble-voip/mumble/issues/3505
@@ -154,14 +418,14 @@ CVE-2019-6266
RESERVED
CVE-2019-6265
RESERVED
-CVE-2019-6264
- RESERVED
-CVE-2019-6263
- RESERVED
-CVE-2019-6262
- RESERVED
-CVE-2019-6261
- RESERVED
+CVE-2019-6264 (An issue was discovered in Joomla! before 3.9.2. Inadequate
escaping in ...)
+ TODO: check
+CVE-2019-6263 (An issue was discovered in Joomla! before 3.9.2. Inadequate
checks of ...)
+ TODO: check
+CVE-2019-6262 (An issue was discovered in Joomla! before 3.9.2. Inadequate
checks of ...)
+ TODO: check
+CVE-2019-6261 (An issue was discovered in Joomla! before 3.9.2. Inadequate
escaping in ...)
+ TODO: check
CVE-2019-6260
RESERVED
CVE-2019-6259 (An issue was discovered in idreamsoft iCMS V7.0.13. There is
SQL ...)
@@ -5863,14 +6127,14 @@ CVE-2019-3559
RESERVED
CVE-2019-3558
RESERVED
-CVE-2019-3557
- RESERVED
+CVE-2019-3557 (The implementations of streams for bz2 and php://output
improperly ...)
+ TODO: check
CVE-2019-3556
RESERVED
CVE-2019-3555
RESERVED
-CVE-2019-3554
- RESERVED
+CVE-2019-3554 (Wangle's AcceptRoutingHandler incorrectly casts a socket when
...)
+ TODO: check
CVE-2019-3553
RESERVED
CVE-2019-3552
@@ -19439,66 +19703,66 @@ CVE-2019-0032
RESERVED
CVE-2019-0031
RESERVED
-CVE-2019-0030
- RESERVED
-CVE-2019-0029
- RESERVED
+CVE-2019-0030 (Juniper ATP uses DES and a hardcoded salt for password hashing,
...)
+ TODO: check
+CVE-2019-0029 (Juniper ATP Series Splunk credentials are logged in a file
readable by ...)
+ TODO: check
CVE-2019-0028
RESERVED
-CVE-2019-0027
- RESERVED
-CVE-2019-0026
- RESERVED
-CVE-2019-0025
- RESERVED
-CVE-2019-0024
- RESERVED
-CVE-2019-0023
- RESERVED
-CVE-2019-0022
- RESERVED
-CVE-2019-0021
- RESERVED
-CVE-2019-0020
- RESERVED
+CVE-2019-0027 (A persistent cross-site scripting (XSS) vulnerability in the
Snort ...)
+ TODO: check
+CVE-2019-0026 (A persistent cross-site scripting (XSS) vulnerability in the
Zone ...)
+ TODO: check
+CVE-2019-0025 (A persistent cross-site scripting (XSS) vulnerability in RADIUS
...)
+ TODO: check
+CVE-2019-0024 (A persistent cross-site scripting (XSS) vulnerability in the
Email ...)
+ TODO: check
+CVE-2019-0023 (A persistent cross-site scripting (XSS) vulnerability in the
Golden VM ...)
+ TODO: check
+CVE-2019-0022 (Juniper ATP ships with hard coded credentials in the Cyphort
Core ...)
+ TODO: check
+CVE-2019-0021 (On Juniper ATP, secret passphrase CLI inputs, such as "set
mcm", are ...)
+ TODO: check
+CVE-2019-0020 (Juniper ATP ships with hard coded credentials in the Web
Collector ...)
+ TODO: check
CVE-2019-0019
RESERVED
-CVE-2019-0018
- RESERVED
-CVE-2019-0017
- RESERVED
-CVE-2019-0016
- RESERVED
-CVE-2019-0015
- RESERVED
-CVE-2019-0014
- RESERVED
-CVE-2019-0013
- RESERVED
-CVE-2019-0012
- RESERVED
-CVE-2019-0011
- RESERVED
-CVE-2019-0010
- RESERVED
-CVE-2019-0009
- RESERVED
+CVE-2019-0018 (A persistent cross-site scripting (XSS) vulnerability in the
file ...)
+ TODO: check
+CVE-2019-0017 (The Junos Space application, which allows Device Image files to
be ...)
+ TODO: check
+CVE-2019-0016 (A malicious authenticated user may be able to delete a device
from the ...)
+ TODO: check
+CVE-2019-0015 (A vulnerability in the SRX Series Service Gateway allows
deleted ...)
+ TODO: check
+CVE-2019-0014 (On QFX and PTX Series, receipt of a malformed packet for J-Flow
...)
+ TODO: check
+CVE-2019-0013 (The routing protocol daemon (RPD) process will crash and
restart when ...)
+ TODO: check
+CVE-2019-0012 (A Denial of Service (DoS) vulnerability in BGP in Juniper
Networks ...)
+ TODO: check
+CVE-2019-0011 (The Junos OS kernel crashes after processing a specific
incoming ...)
+ TODO: check
+CVE-2019-0010 (An SRX Series Service Gateway configured for Unified Threat
Management ...)
+ TODO: check
+CVE-2019-0009 (On EX2300 and EX3400 series, high disk I/O operations may
disrupt the ...)
+ TODO: check
CVE-2019-0008
RESERVED
-CVE-2019-0007
- RESERVED
-CVE-2019-0006
- RESERVED
-CVE-2019-0005
- RESERVED
-CVE-2019-0004
- RESERVED
-CVE-2019-0003
- RESERVED
-CVE-2019-0002
- RESERVED
-CVE-2019-0001
- RESERVED
+CVE-2019-0007 (The vMX Series software uses a predictable IP ID Sequence
Number. This ...)
+ TODO: check
+CVE-2019-0006 (A certain crafted HTTP packet can trigger an uninitialized
function ...)
+ TODO: check
+CVE-2019-0005 (On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall
filter ...)
+ TODO: check
+CVE-2019-0004 (On Juniper ATP, the API key and the device key are logged in a
file ...)
+ TODO: check
+CVE-2019-0003 (When a specific BGP flowspec configuration is enabled and upon
receipt ...)
+ TODO: check
+CVE-2019-0002 (On EX2300 and EX3400 series, stateless firewall filter
configuration ...)
+ TODO: check
+CVE-2019-0001 (Receipt of a malformed packet on MX Series devices with dynamic
vlan ...)
+ TODO: check
CVE-2018-18250 (Icinga Web 2 before 2.6.2 allows parameters that break
navigation ...)
- icingaweb2 2.6.2-1
NOTE:
https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180030.txt
@@ -26558,8 +26822,8 @@ CVE-2018-15465 (A vulnerability in the authorization
subsystem of Cisco Adaptive
NOT-FOR-US: Cisco
CVE-2018-15464 (A vulnerability in Cisco 900 Series Aggregation Services
Router (ASR) ...)
NOT-FOR-US: Cisco
-CVE-2018-15463
- RESERVED
+CVE-2018-15463 (A vulnerability in the web-based management interface of Cisco
...)
+ TODO: check
CVE-2018-15462
RESERVED
CVE-2018-15461 (A vulnerability in the MyWebex component of Cisco Webex
Business Suite ...)
@@ -26604,8 +26868,8 @@ CVE-2018-15442 (A vulnerability in the update service
of Cisco Webex Meetings De
NOT-FOR-US: Cisco
CVE-2018-15441 (A vulnerability in the web framework code of Cisco Prime
License ...)
NOT-FOR-US: Cisco
-CVE-2018-15440
- RESERVED
+CVE-2018-15440 (A vulnerability in the web-based management interface of Cisco
...)
+ TODO: check
CVE-2018-15439 (A vulnerability in the Cisco Small Business Switches software
could ...)
NOT-FOR-US: Cisco
CVE-2018-15438 (A vulnerability in the web-based management interface of Cisco
Prime ...)
@@ -28411,8 +28675,7 @@ CVE-2018-14663 (An issue has been found in PowerDNS
DNSDist before 1.3.3 allowin
- dnsdist 1.3.3-1 (bug #913231)
[stretch] - dnsdist <no-dsa> (Minor issue)
NOTE:
https://dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2018-08.html
-CVE-2018-14662 [authenticated user with read only permissions can steal
dm-crypt / LUKS key]
- RESERVED
+CVE-2018-14662 (It was found Ceph versions before 13.2.4 that authenticated
ceph users ...)
- ceph <unfixed>
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1637327
NOTE:
https://github.com/ceph/ceph/commit/a2acedd2a7e12d58af6db35edbd8a9d29c557578
@@ -47176,8 +47439,8 @@ CVE-2018-7605
RESERVED
CVE-2018-7604
RESERVED
-CVE-2018-7603
- RESERVED
+CVE-2018-7603 (In Drupal's 3rd party module search auto complete prior to
versions ...)
+ TODO: check
CVE-2018-7602 (A remote code execution vulnerability exists within multiple
...)
{DSA-4180-1 DLA-1365-1}
- drupal7 <removed> (bug #896701)
@@ -51338,8 +51601,8 @@ CVE-2018-6347 (An issue in the Proxygen handling of
HTTP2 parsing of headers/tra
NOT-FOR-US: Facebook Proxygen
CVE-2018-6346 (A potential denial-of-service issue in the Proxygen handling of
...)
NOT-FOR-US: Facebook Proxygen
-CVE-2018-6345
- RESERVED
+CVE-2018-6345 (The function number_format is vulnerable to a heap overflow
issue when ...)
+ TODO: check
CVE-2018-6344 (A heap corruption in WhatsApp can be caused by a malformed RTP
packet ...)
NOT-FOR-US: Whatsapp
CVE-2018-6343 (Proxygen fails to validate that a secondary auth manager is set
before ...)
@@ -101529,8 +101792,7 @@ CVE-2017-6926 (In Drupal versions 8.4.x versions
before 8.4.5 users with permiss
CVE-2017-6925 (In versions of Drupal 8 core prior to 8.3.7; There is a
vulnerability ...)
- drupal8 <itp> (bug #756305)
NOTE: https://www.drupal.org/SA-CORE-2017-004
-CVE-2017-6924 [REST API can bypass comment approval - Access Bypass]
- RESERVED
+CVE-2017-6924 (In Drupal 8 prior to 8.3.7; When using the REST API, users
without the ...)
- drupal8 <itp> (bug #756305)
NOTE: https://www.drupal.org/SA-CORE-2017-004
CVE-2017-6923 [Views - Access Bypass]
@@ -101544,8 +101806,7 @@ CVE-2017-6922 [Files uploaded by anonymous users into
a private file system can
- drupal7 7.56-1 (bug #865498)
NOTE: https://www.drupal.org/SA-CORE-2017-003
NOTE:
http://cgit.drupalcode.org/drupal/diff/?h=7.x&id=600c1346ed976e6f35fc2b0f907a7837f0f7c145&id2=9eebe462d1e93e785e6c028dc6cf689623c4d936
-CVE-2017-6921 [File REST resource does not properly validate]
- RESERVED
+CVE-2017-6921 (In Drupal 8 prior to 8.3.4; The file REST resource does not
properly ...)
- drupal8 <itp> (bug #756305)
NOTE: https://www.drupal.org/SA-CORE-2017-003
CVE-2017-6920 (Drupal core 8 before versions 8.3.4 allows remote attackers to
execute ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/278af59bf22dd03414023022808dd4eab246c0fc
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/278af59bf22dd03414023022808dd4eab246c0fc
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
