Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
bb410c60 by security tracker role at 2019-03-11T20:10:23Z
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,9 +1,66 @@
+CVE-2019-9703
+ RESERVED
+CVE-2019-9702
+ RESERVED
+CVE-2019-9701
+ RESERVED
+CVE-2019-9700
+ RESERVED
+CVE-2019-9699
+ RESERVED
+CVE-2019-9698
+ RESERVED
+CVE-2019-9697
+ RESERVED
+CVE-2019-9696
+ RESERVED
+CVE-2019-9695
+ RESERVED
+CVE-2019-9694
+ RESERVED
+CVE-2019-9693 (In CMS Made Simple (CMSMS) before 2.2.10, an authenticated user
can ...)
+ TODO: check
+CVE-2019-9692 (class.showtime2_image.php in CMS Made Simple (CMSMS) before
2.2.10 does ...)
+ TODO: check
+CVE-2019-9691
+ RESERVED
+CVE-2019-9690
+ RESERVED
+CVE-2019-9689
+ RESERVED
+CVE-2019-9688 (sftnow through 2018-12-29 allows
index.php?g=Admin&m=User&a=add_post ...)
+ TODO: check
+CVE-2019-9687 (PoDoFo 0.9.6 has a heap-based buffer overflow in ...)
+ TODO: check
+CVE-2019-9686 (pacman before 5.1.3 allows directory traversal when installing
a remote ...)
+ TODO: check
+CVE-2019-9685
+ RESERVED
+CVE-2019-9684
+ RESERVED
+CVE-2019-9683
+ RESERVED
+CVE-2019-9682
+ RESERVED
+CVE-2019-9681
+ RESERVED
+CVE-2019-9680
+ RESERVED
+CVE-2019-9679
+ RESERVED
+CVE-2019-9678
+ RESERVED
+CVE-2019-9677
+ RESERVED
+CVE-2019-9676
+ RESERVED
CVE-2019-9675 (** DISPUTED ** An issue was discovered in PHP 7.x before 7.1.27
and ...)
+ {DSA-4403-1}
- php7.3 7.3.3-1 (unimportant)
- php7.0 <removed> (unimportant)
- php5 <removed> (unimportant)
- NOTE: Fixed in 7.1.27, 7.3.3
- NOTE: PHP Bug: https://bugs.php.net/bug.php?id=77586
+ NOTE: Fixed in 7.1.27, 7.3.3
+ NOTE: PHP Bug: https://bugs.php.net/bug.php?id=77586
CVE-2019-9674
RESERVED
CVE-2019-9673
@@ -34,8 +91,8 @@ CVE-2019-9661 (Stored XSS exists in YzmCMS 5.2 via the ...)
NOT-FOR-US: YzmCMS
CVE-2019-9660 (Stored XSS exists in YzmCMS 5.2 via the
admin/category/edit.html ...)
NOT-FOR-US: YzmCMS
-CVE-2019-9659
- RESERVED
+CVE-2019-9659 (The Chuango 433 MHz burglar-alarm product line uses static
codes in the ...)
+ TODO: check
CVE-2019-9658 (Checkstyle before 8.18 loads external DTDs by default. ...)
TODO: check
CVE-2019-9657
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/bb410c6067ec5f7b72f189cb258a1522870733d3
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/bb410c6067ec5f7b72f189cb258a1522870733d3
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
