Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
223eb76b by security tracker role at 2019-03-06T20:10:25Z
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,39 @@
+CVE-2019-9603 (MiniCMS 1.10 allows mc-admin/post.php?state=publish&delete=
CSRF to ...)
+ TODO: check
+CVE-2019-9602
+ RESERVED
+CVE-2019-9601 (The ApowerManager application through 3.1.7 for Android allows
remote ...)
+ TODO: check
+CVE-2019-9600 (The Olive Tree FTP Server (aka com.theolivetree.ftpserver)
application ...)
+ TODO: check
+CVE-2019-9599 (The AirDroid application through 4.2.1.6 for Android allows
remote ...)
+ TODO: check
+CVE-2019-9598
+ RESERVED
+CVE-2019-9597
+ RESERVED
+CVE-2019-9596
+ RESERVED
+CVE-2019-9595 (AppCMS 2.0.101 allows XSS via the upload/callback.php params
parameter. ...)
+ TODO: check
+CVE-2019-9594 (BlueCMS 1.6 allows SQL Injection via the user_id parameter in
an ...)
+ TODO: check
+CVE-2019-9593 (A reflected Cross-site scripting (XSS) vulnerability in
ShoreTel ...)
+ TODO: check
+CVE-2019-9592 (A reflected Cross-site scripting (XSS) vulnerability in
ShoreTel ...)
+ TODO: check
+CVE-2019-9591 (A reflected Cross-site scripting (XSS) vulnerability in
ShoreTel ...)
+ TODO: check
+CVE-2019-9590 (An issue was discovered on TENGCONTROL T-920 PLC v5.5 devices.
It ...)
+ TODO: check
+CVE-2019-9589 (There is a NULL pointer dereference vulnerability in ...)
+ TODO: check
+CVE-2019-9588 (There is an Invalid memory access in gAtomicIncrement() located
at ...)
+ TODO: check
+CVE-2019-9587 (There is a stack consumption issue in md5Round1() located in
Decrypt.cc ...)
+ TODO: check
+CVE-2019-9586
+ RESERVED
CVE-2019-9585
RESERVED
CVE-2019-9584
@@ -13146,8 +13182,7 @@ CVE-2019-3825 (A vulnerability was discovered in gdm
before 3.31.4. When timed l
[stretch] - gdm3 <no-dsa> (Minor issue)
[jessie] - gdm3 <ignored> (Minor issue)
NOTE: https://gitlab.gnome.org/GNOME/gdm/issues/460
-CVE-2019-3824 [Out of bound read in ldb_wildcard_compare]
- RESERVED
+CVE-2019-3824 (A flaw was found in the way an LDAP search expression could
crash the ...)
{DSA-4397-1 DLA-1699-1}
- ldb 2:1.5.1+really1.4.3-2
- samba <unfixed> (unimportant)
@@ -24632,8 +24667,7 @@ CVE-2019-0202
RESERVED
CVE-2019-0201
RESERVED
-CVE-2019-0200 [Denial of Service due to malformed AMQP 0-8 to 0-10 commands]
- RESERVED
+CVE-2019-0200 (A Denial of Service vulnerability was found in Apache Qpid
Broker-J ...)
- qpid-java <itp> (bug #840131)
CVE-2019-0199
RESERVED
@@ -24662,8 +24696,7 @@ CVE-2019-0189
RESERVED
CVE-2019-0188
RESERVED
-CVE-2019-0187 [Apache JMeter Missing client auth for RMI connection when
distributed test is used]
- RESERVED
+CVE-2019-0187 (Unauthenticated RCE is possible when JMeter is used in
distributed ...)
- jakarta-jmeter <undetermined>
NOTE: https://bz.apache.org/bugzilla/show_bug.cgi?id=62743
CVE-2019-0186
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/223eb76b09cea419c1e4331c1fd4f9eb3faee757
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/223eb76b09cea419c1e4331c1fd4f9eb3faee757
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
