Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d31108b8 by Salvatore Bonaccorso at 2019-07-05T20:55:23Z
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -19465,9 +19465,9 @@ CVE-2019-5975
CVE-2019-5974 (Cross-site request forgery (CSRF) vulnerability in Contest
Gallery ver ...)
TODO: check
CVE-2019-5973 (Cross-site request forgery (CSRF) vulnerability in Online
Lesson Booki ...)
- TODO: check
+ NOT-FOR-US: Online Lesson Booking
CVE-2019-5972 (Cross-site scripting vulnerability in Online Lesson Booking
0.8.6 and ...)
- TODO: check
+ NOT-FOR-US: Online Lesson Booking
CVE-2019-5971 (Cross-site request forgery (CSRF) vulnerability in Attendance
Manager ...)
TODO: check
CVE-2019-5970 (Cross-site scripting vulnerability in Attendance Manager 0.5.6
and ear ...)
@@ -19477,19 +19477,19 @@ CVE-2019-5969 (Open redirect vulnerability in GROWI
v3.4.6 and earlier allows re
CVE-2019-5968 (Cross-site request forgery (CSRF) vulnerability in GROWI v3.4.6
and ea ...)
TODO: check
CVE-2019-5967 (Cross-site scripting vulnerability in Joruri CMS 2017 Release2
and ear ...)
- TODO: check
+ NOT-FOR-US: Joruri CMS
CVE-2019-5966 (Joruri Mail 2.1.4 and earlier does not properly manage
sessions, which ...)
- TODO: check
+ NOT-FOR-US: Joruri Mail
CVE-2019-5965 (Open redirect vulnerability in Joruri Mail 2.1.4 and earlier
allows re ...)
- TODO: check
+ NOT-FOR-US: Joruri Mail
CVE-2019-5964 (iDoors Reader 2.10.17 and earlier allows an attacker on the
same netwo ...)
TODO: check
CVE-2019-5963 (Cross-site request forgery (CSRF) vulnerability in Zoho SalesIQ
1.0.8 ...)
- TODO: check
+ NOT-FOR-US: Zoho SalesIQ
CVE-2019-5962 (Cross-site scripting vulnerability in Zoho SalesIQ 1.0.8 and
earlier a ...)
- TODO: check
+ NOT-FOR-US: Zoho SalesIQ
CVE-2019-5961 (The Android App 'Tootdon for Mastodon' version 3.4.1 and
earlier does ...)
- TODO: check
+ NOT-FOR-US: Android App 'Tootdon for Mastodon'
CVE-2019-5960 (Cross-site request forgery (CSRF) vulnerability in WP Open
Graph 1.6.1 ...)
TODO: check
CVE-2019-5959
@@ -50162,7 +50162,7 @@ CVE-2018-14028 (In WordPress 4.9.7, plugins uploaded
via the admin area are not
NOTE: https://core.trac.wordpress.org/ticket/44710
NOTE:
https://rastating.github.io/unrestricted-file-upload-via-plugin-uploader-in-wordpress/
CVE-2018-14027 (Digisol Wireless Wifi Home Router HR-3300 allows XSS via the
userid or ...)
- TODO: check
+ NOT-FOR-US: Digisol Wireless Wifi Home Router HR-3300
CVE-2018-14026
RESERVED
CVE-2018-14025
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/d31108b85b67d108aac743d954c73703425115f5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/d31108b85b67d108aac743d954c73703425115f5
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
