Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c5e603b8 by security tracker role at 2019-10-04T20:10:26Z
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,4 +1,102 @@
-CVE-2019-17133 [cfg80211: wext: Reject malformed SSID elements]
+CVE-2019-17179 (XSS in library/custom_template/add_template.php in OpenEMR
through 5.0 ...)
+ TODO: check
+CVE-2019-17178 (HuffmanTree_makeFromFrequencies in lodepng.c in LodePNG
through 2019-0 ...)
+ TODO: check
+CVE-2019-17177 (libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x
through 2.0 ...)
+ TODO: check
+CVE-2019-17176
+ RESERVED
+CVE-2019-17175 (joyplus-cms 1.6.0 allows manager/admin_pic.php?rootpath=
absolute path ...)
+ TODO: check
+CVE-2019-17174
+ RESERVED
+CVE-2019-17173
+ RESERVED
+CVE-2019-17172
+ RESERVED
+CVE-2019-17171
+ RESERVED
+CVE-2019-17170
+ RESERVED
+CVE-2019-17169
+ RESERVED
+CVE-2019-17168
+ RESERVED
+CVE-2019-17167
+ RESERVED
+CVE-2019-17166
+ RESERVED
+CVE-2019-17165
+ RESERVED
+CVE-2019-17164
+ RESERVED
+CVE-2019-17163
+ RESERVED
+CVE-2019-17162
+ RESERVED
+CVE-2019-17161
+ RESERVED
+CVE-2019-17160
+ RESERVED
+CVE-2019-17159
+ RESERVED
+CVE-2019-17158
+ RESERVED
+CVE-2019-17157
+ RESERVED
+CVE-2019-17156
+ RESERVED
+CVE-2019-17155
+ RESERVED
+CVE-2019-17154
+ RESERVED
+CVE-2019-17153
+ RESERVED
+CVE-2019-17152
+ RESERVED
+CVE-2019-17151
+ RESERVED
+CVE-2019-17150
+ RESERVED
+CVE-2019-17149
+ RESERVED
+CVE-2019-17148
+ RESERVED
+CVE-2019-17147
+ RESERVED
+CVE-2019-17146
+ RESERVED
+CVE-2019-17145
+ RESERVED
+CVE-2019-17144
+ RESERVED
+CVE-2019-17143
+ RESERVED
+CVE-2019-17142
+ RESERVED
+CVE-2019-17141
+ RESERVED
+CVE-2019-17140
+ RESERVED
+CVE-2019-17139
+ RESERVED
+CVE-2019-17138
+ RESERVED
+CVE-2019-17137
+ RESERVED
+CVE-2019-17136
+ RESERVED
+CVE-2019-17135
+ RESERVED
+CVE-2019-17134
+ RESERVED
+CVE-2019-17132 (vBulletin through 5.5.4 mishandles custom avatars. ...)
+ TODO: check
+CVE-2019-17131 (vBulletin before 5.5.4 allows clickjacking. ...)
+ TODO: check
+CVE-2019-17130 (vBulletin through 5.5.4 mishandles external URLs within the
/core/vb/v ...)
+ TODO: check
+CVE-2019-17133 (In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid
in net/w ...)
- linux <unfixed>
NOTE: https://marc.info/?l=linux-wireless&m=157018270915487&w=2
CVE-2019-17129
@@ -569,8 +667,8 @@ CVE-2019-16892 (In Rubyzip before 1.3.0, a crafted ZIP file
can bypass applicati
NOTE:
https://github.com/rubyzip/rubyzip/commit/4167f0ce67e42b082605bca75c7bdfd01eb23804
NOTE:
https://github.com/rubyzip/rubyzip/commit/7849f7362ab0cd23d5730ef8b6f2c39252da2285
NOTE:
https://github.com/rubyzip/rubyzip/commit/97cb6aefe6d12bd2429d7a2e119ccb26f259d71d
-CVE-2019-16891
- RESERVED
+CVE-2019-16891 (Liferay Portal CE 6.2.5 allows remote command execution
because of des ...)
+ TODO: check
CVE-2019-16890 (Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to
api/content ...)
NOT-FOR-US: Halo
CVE-2019-16889 (Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers
to cause ...)
@@ -11944,18 +12042,18 @@ CVE-2019-13322
RESERVED
CVE-2019-13321
RESERVED
-CVE-2019-13320
- RESERVED
-CVE-2019-13319
- RESERVED
-CVE-2019-13318
- RESERVED
-CVE-2019-13317
- RESERVED
-CVE-2019-13316
- RESERVED
-CVE-2019-13315
- RESERVED
+CVE-2019-13320 (This vulnerability allows remote attackers to execute
arbitrary code o ...)
+ TODO: check
+CVE-2019-13319 (This vulnerability allows remote attackers to execute
arbitrary code o ...)
+ TODO: check
+CVE-2019-13318 (This vulnerability allows remote attackers to disclose
sensitive infor ...)
+ TODO: check
+CVE-2019-13317 (This vulnerability allows remote atackers to execute arbitrary
code on ...)
+ TODO: check
+CVE-2019-13316 (This vulnerability allows remote atackers to execute arbitrary
code on ...)
+ TODO: check
+CVE-2019-13315 (This vulnerability allows remote atackers to execute arbitrary
code on ...)
+ TODO: check
CVE-2019-13314 (virt-bootstrap 1.1.0 allows local users to discover a root
password by ...)
- virt-bootstrap <itp> (bug #871621)
CVE-2019-13313 (libosinfo 1.5.0 allows local users to discover credentials by
listing ...)
@@ -15803,7 +15901,7 @@ CVE-2019-11870 (Serendipity before 2.1.5 has XSS via
EXIF data that is mishandle
- serendipity <removed>
CVE-2019-11869 (The Yuzo Related Posts plugin 5.12.94 for WordPress has XSS
because it ...)
NOT-FOR-US: WordPress plugin yuzo-related-post
-CVE-2019-11868 (See.sys through 4.25 in the SoftEther VPN Server allows a user
to spec ...)
+CVE-2019-11868 (See.sys, up to version 4.25, in SoftEther VPN Server versions
4.29 or ...)
NOT-FOR-US: SoftEther VPN Server
CVE-2019-11867
RESERVED
@@ -30367,12 +30465,12 @@ CVE-2019-6777 (An issue was discovered in ZoneMinder
v1.32.3. Reflected XSS exis
- zoneminder 1.32.3-2 (bug #920375)
NOTE: https://github.com/ZoneMinder/zoneminder/issues/2436
NOTE:
https://github.com/mnoorenberghe/ZoneMinder/commit/59cc65411f02c7e39a270fda3ecb4966d7b48d41
-CVE-2019-6776
- RESERVED
-CVE-2019-6775
- RESERVED
-CVE-2019-6774
- RESERVED
+CVE-2019-6776 (This vulnerability allows remote attackers to execute arbitrary
code o ...)
+ TODO: check
+CVE-2019-6775 (This vulnerability allows remote attackers to execute arbitrary
code o ...)
+ TODO: check
+CVE-2019-6774 (This vulnerability allows remote attackers to execute arbitrary
code o ...)
+ TODO: check
CVE-2019-6773 (This vulnerability allows remote attackers to disclose
sensitive infor ...)
NOT-FOR-US: Foxit Reader
CVE-2019-6772 (This vulnerability allows remote attackers to disclose
sensitive infor ...)
@@ -32307,8 +32405,8 @@ CVE-2019-6017
RESERVED
CVE-2019-6016
RESERVED
-CVE-2019-6015
- RESERVED
+CVE-2019-6015 (FON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and FON2601E-FSW-B
with firm ...)
+ TODO: check
CVE-2019-6014
RESERVED
CVE-2019-6013
@@ -35756,8 +35854,8 @@ CVE-2019-4566 (IBM Security Key Lifecycle Manager 3.0
and 3.0.1 stores user cred
NOT-FOR-US: IBM
CVE-2019-4565 (IBM Security Key Lifecycle Manager 3.0 and 3.0.1 does not
require that ...)
NOT-FOR-US: IBM
-CVE-2019-4564
- RESERVED
+CVE-2019-4564 (IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 is
vulnera ...)
+ TODO: check
CVE-2019-4563
RESERVED
CVE-2019-4562
@@ -35856,8 +35954,8 @@ CVE-2019-4516
RESERVED
CVE-2019-4515 (IBM Security Key Lifecycle Manager 3.0 and 3.0.1 is vulnerable
to cros ...)
NOT-FOR-US: IBM
-CVE-2019-4514
- RESERVED
+CVE-2019-4514 (IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1
discloses ...)
+ TODO: check
CVE-2019-4513 (IBM Security Access Manager for Enterprise Single Sign-On 8.2.2
is vul ...)
NOT-FOR-US: IBM
CVE-2019-4512
@@ -36430,8 +36528,8 @@ CVE-2019-4229
RESERVED
CVE-2019-4228
RESERVED
-CVE-2019-4227
- RESERVED
+CVE-2019-4227 (IBM MQ 8.0.0.4 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 -
9.1.0.2, and 9 ...)
+ TODO: check
CVE-2019-4226
RESERVED
CVE-2019-4225 (IBM PureApplication System 2.2.3.0 through 2.2.5.3 stores
potentially ...)
@@ -69343,8 +69441,7 @@ CVE-2018-11770 (From version 1.3.0 onward, Apache
Spark's standalone master expo
CVE-2018-11769 (CouchDB administrative users before 2.2.0 can configure the
database s ...)
- couchdb <removed>
NOTE: http://www.openwall.com/lists/oss-security/2018/08/08/2
-CVE-2018-11768
- RESERVED
+CVE-2018-11768 (In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0
to 2.9.1 ...)
- hadoop <itp> (bug #793644)
CVE-2018-11767 (In Apache Hadoop 2.9.0 to 2.9.1, 2.8.3 to 2.8.4, 2.7.5 to
2.7.6, KMS b ...)
- hadoop <itp> (bug #793644)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/c5e603b8602945033fce89d8e87ddc5834c7af12
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/c5e603b8602945033fce89d8e87ddc5834c7af12
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
