Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0b43cc62 by Moritz Muehlenhoff at 2019-10-30T08:18:06Z
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -25,9 +25,9 @@ CVE-2019-18614
CVE-2019-18613
RESERVED
CVE-2019-18612 (An issue was discovered in the AbuseFilter extension through
1.34 for ...)
- TODO: check
+ NOT-FOR-US: AbuseFilter MediaWiki extension
CVE-2019-18611 (An issue was discovered in the CheckUser extension through
1.34 for Me ...)
- TODO: check
+ NOT-FOR-US: CheckUser MediaWiki extension
CVE-2019-18610
RESERVED
CVE-2019-18609
@@ -23809,7 +23809,7 @@ CVE-2019-10751 (All versions of the HTTPie package
prior to version 1.0.3 are vu
CVE-2019-10750 (deeply is vulnerable to Prototype Pollution in versions before
3.1.0. ...)
NOT-FOR-US: deeply
CVE-2019-10749 (sequelize before version 3.35.1 allows attackers to perform a
SQL Inje ...)
- TODO: check
+ NOT-FOR-US: sequelize
CVE-2019-10748 (Sequelize all versions prior to 3.35.1, 4.44.3, and 5.8.11 are
vulnera ...)
NOT-FOR-US: sequelize
CVE-2019-10747 (set-value is vulnerable to Prototype Pollution in versions
lower than ...)
@@ -31697,7 +31697,7 @@ CVE-2019-8237 (Adobe Acrobat and Reader versions
2019.012.20034 and earlier; 201
CVE-2019-8236 (Creative Cloud Desktop Application version 4.6.1 and earlier
versions ...)
NOT-FOR-US: Adobe
CVE-2019-8235 (An insecure direct object reference (IDOR) vulnerability exists
in Mag ...)
- TODO: check
+ NOT-FOR-US: Magento
CVE-2019-8234 (Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a
cross-site r ...)
NOT-FOR-US: Adobe
CVE-2019-8233
@@ -54903,7 +54903,7 @@ CVE-2018-19153
CVE-2018-19152
RESERVED
CVE-2018-19151 (qtum through 0.16 (a chain-based proof-of-stake
cryptocurrency) allows ...)
- TODO: check
+ NOT-FOR-US: qtum
CVE-2018-19150 (Memory corruption in PDMODELProvidePDModelHFT in pdmodel.dll
in pdffor ...)
NOT-FOR-US: pdfforge PDF Architect
CVE-2018-19149 (Poppler before 0.70.0 has a NULL pointer dereference in
_poppler_attac ...)
@@ -77509,7 +77509,7 @@ CVE-2018-10729 (All Phoenix Contact managed FL SWITCH
3xxx, 4xxx, 48xx products
CVE-2018-10728 (All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx
products runnin ...)
NOT-FOR-US: Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products
CVE-2018-10727 (Reflected Cross-Site Scripting (XSS) vulnerability in the
fabrik_refer ...)
- TODO: check
+ NOT-FOR-US: Joomla extension
CVE-2018-10726 (** DISPUTED ** A stored XSS vulnerability was found in
Datenstrom Yell ...)
NOT-FOR-US: Datenstrom Yellow
CVE-2018-10725
@@ -176614,7 +176614,7 @@ CVE-2016-4291 (When opening a Hangul HShow Document
(.hpt) and processing a stru
CVE-2016-4290 (When opening a Hangul HShow Document (.hpt) and processing a
structure ...)
NOT-FOR-US: Hancom Office
CVE-2016-4289 (A stack based buffer overflow vulnerability exists in the
method recei ...)
- TODO: check
+ NOT-FOR-US: GMER
CVE-2016-4288 (A local privilege escalation vulnerability exists in BlueStacks
App Pl ...)
NOT-FOR-US: BlueStacks
CVE-2016-4287 (Integer overflow in Adobe Flash Player before 18.0.0.375 and
19.x thro ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/0b43cc625235a8f3d5b9160cf9b0e79871a98904
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/0b43cc625235a8f3d5b9160cf9b0e79871a98904
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
