Author: sectracker
Date: 2017-10-16 09:10:13 +0000 (Mon, 16 Oct 2017)
New Revision: 56735
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-10-16 08:28:26 UTC (rev 56734)
+++ data/CVE/list 2017-10-16 09:10:13 UTC (rev 56735)
@@ -1,3 +1,31 @@
+CVE-2017-15381
+ RESERVED
+CVE-2017-15380
+ RESERVED
+CVE-2017-15379
+ RESERVED
+CVE-2017-15378
+ RESERVED
+CVE-2017-15377
+ RESERVED
+CVE-2017-15376 (The TELNET service in Mobatek MobaXterm 10.4 does not require
...)
+ TODO: check
+CVE-2017-15375 (Multiple client-side cross site scripting vulnerabilities have
been ...)
+ TODO: check
+CVE-2017-15374 (Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting
in the ...)
+ TODO: check
+CVE-2017-15373 (E-Sic 1.0 allows SQL injection via the q parameter to ...)
+ TODO: check
+CVE-2017-15372 (There is a stack-based buffer overflow in the ...)
+ TODO: check
+CVE-2017-15371 (There is a reachable assertion abort in the function ...)
+ TODO: check
+CVE-2017-15370 (There is a heap-based buffer overflow in the ImaExpandS
function of ...)
+ TODO: check
+CVE-2017-15369 (The build_filter_chain function in pdf/pdf-stream.c in Artifex
MuPDF ...)
+ TODO: check
+CVE-2017-15368 (The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2
2.0.0 ...)
+ TODO: check
CVE-2017-15367
RESERVED
CVE-2017-15366
@@ -8,8 +36,8 @@
NOT-FOR-US: ccsv
CVE-2017-15363 (Directory traversal vulnerability in ...)
NOT-FOR-US: Luracast Restler
-CVE-2017-15362
- RESERVED
+CVE-2017-15362 (osTicket 1.10.1 allows arbitrary client-side JavaScript code
execution ...)
+ TODO: check
CVE-2017-15361
RESERVED
CVE-2017-15360 (PRTG Network Monitor version 17.3.33.2830 is vulnerable to
stored ...)
@@ -126,10 +154,10 @@
NOT-FOR-US: NexusPHP
CVE-2017-15304 (/bin/login.php in the Web Panel on the Airtame HDMI dongle
with ...)
NOT-FOR-US: Airtame HDMI dongle
-CVE-2017-15303
- RESERVED
-CVE-2017-15302
- RESERVED
+CVE-2017-15303 (In CPUID CPU-Z before 1.43, there is an arbitrary memory write
that ...)
+ TODO: check
+CVE-2017-15302 (In CPUID CPU-Z through 1.81, there are improper access rights
to a ...)
+ TODO: check
CVE-2017-15301
RESERVED
CVE-2017-15300 (The miner statistics HTTP API in EWBF Cuda Zcash Miner Version
0.3.4b ...)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
