Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b35b316f by Salvatore Bonaccorso at 2019-05-24T20:41:17Z
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -13,7 +13,7 @@ CVE-2019-12316
CVE-2019-12315 (Samsung SCX-824 printers allow a reflected
Cross-Site-Scripting (XSS) ...)
TODO: check
CVE-2019-12314 (Deltek Maconomy 2.2.5 is prone to local file inclusion via
absolute pa ...)
- TODO: check
+ NOT-FOR-US: Deltek Maconomy
CVE-2019-12313 (XSS exists in Shave before 2.5.3 because output encoding is
mishandled ...)
TODO: check
CVE-2019-12312 (In Libreswan before 3.28, an assertion failure can lead to a
pluto IKE ...)
@@ -23,7 +23,7 @@ CVE-2017-18375 (Ampache 3.8.3 allows PHP Object Instantiation
via democratic.aja
CVE-2016-10759 (The Xinha plugin in Precurio 2.1 allows Directory Traversal,
with resu ...)
TODO: check
CVE-2016-10758 (PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated by
a .php f ...)
- TODO: check
+ NOT-FOR-US: PHPKIT
CVE-2016-10757 (In Redaxo 5.2.0, the cron management of the admin panel
suffers from C ...)
TODO: check
CVE-2016-10756 (Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File
Upload becaus ...)
@@ -31,9 +31,9 @@ CVE-2016-10756 (Kliqqi 3.0.0.5 allows CSRF with resultant
Arbitrary File Upload
CVE-2016-10755 (AbanteCart 1.2.8 allows SQL Injection via the source_language
paramete ...)
TODO: check
CVE-2016-10754 (modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL
injection ...)
- TODO: check
+ NOT-FOR-US: Vtiger CRM
CVE-2016-10753 (e107 2.1.2 allows PHP Object Injection with resultant SQL
injection, b ...)
- TODO: check
+ NOT-FOR-US: e107
CVE-2016-10752 (serendipity_moveMediaDirectory in Serendipity 2.0.3 allows
remote atta ...)
TODO: check
CVE-2016-10751 (osClass 3.6.1 allows oc-admin/plugins.php Directory Traversal
via the ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/b35b316f5ac05d05f2394c29e976b143b520f215
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/b35b316f5ac05d05f2394c29e976b143b520f215
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
