[Secure-testing-commits] r12309 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2009-07-08 21:14:28 +0000 (Wed, 08 Jul 2009)
New Revision: 12309

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-07-08 00:16:35 UTC (rev 12308)
+++ data/CVE/list	2009-07-08 21:14:28 UTC (rev 12309)
@@ -1,3 +1,61 @@
+CVE-2009-2359 (Multiple SQL injection vulnerabilities in TekRADIUS 3.0 allow ...)
+	TODO: check
+CVE-2009-2358 (TekRADIUS 3.0 uses BUILTIN\Users:R permissions for the TekRADIUS.ini ...)
+	TODO: check
+CVE-2009-2357 (The default configuration of TekRADIUS 3.0 uses the sa account to ...)
+	TODO: check
+CVE-2009-2356 (Multiple stack-based buffer overflows in the pgsqlQuery function in ...)
+	TODO: check
+CVE-2009-2355 (The forum module in NullLogic Groupware 1.2.7 allows remote ...)
+	TODO: check
+CVE-2009-2354 (SQL injection vulnerability in the auth_checkpass function in the ...)
+	TODO: check
+CVE-2009-2353 (encoder.php in eAccelerator allows remote attackers to execute ...)
+	TODO: check
+CVE-2009-2352 (Google Chrome 1.0.154.48 and earlier does not block javascript: URIs ...)
+	TODO: check
+CVE-2009-2351 (Opera 9.52 and earlier does not block javascript: URIs in Refresh ...)
+	TODO: check
+CVE-2009-2350 (Microsoft Internet Explorer 6.0.2900.2180 and earlier does not block ...)
+	TODO: check
+CVE-2009-2349
+	RESERVED
+CVE-2009-2348
+	RESERVED
+CVE-2009-2347
+	RESERVED
+CVE-2009-2346
+	RESERVED
+CVE-2009-2345 (Multiple SQL injection vulnerabilities in ClanSphere before 2009.0.1 ...)
+	TODO: check
+CVE-2009-2344 (The web-based management interfaces in Sourcefire Defense Center (DC) ...)
+	TODO: check
+CVE-2009-2343 (Cross-site scripting (XSS) vulnerability in people.php in Zoph before ...)
+	TODO: check
+CVE-2009-2342 (Cross-site scripting (XSS) vulnerability in admin.php (aka the login ...)
+	TODO: check
+CVE-2009-2341 (SQL injection vulnerability in albumdetail.php in Opial 1.0 allows ...)
+	TODO: check
+CVE-2009-2340 (SQL injection vulnerability in admin/index.php in Opial 1.0 allows ...)
+	TODO: check
+CVE-2009-2339 (SQL injection vulnerability in index.php in Rentventory allows remote ...)
+	TODO: check
+CVE-2009-2338 (Directory traversal vulnerability in includes/startmodules.inc.php in ...)
+	TODO: check
+CVE-2009-2337 (SQL injection vulnerability in includes/module/book/index.inc.php in ...)
+	TODO: check
+CVE-2008-6853 (SQL injection vulnerability in modules/poll/index.php in AIST NetCat ...)
+	TODO: check
+CVE-2008-6852 (SQL injection vulnerability in the Ice Gallery (com_ice) component 0.5 ...)
+	TODO: check
+CVE-2008-6851 (SQL injection vulnerability in page.php in PHP Link Directory (phpLD) ...)
+	TODO: check
+CVE-2008-6850 (Cross-site scripting (XSS) vulnerability in messages.php in PHP-Fusion ...)
+	TODO: check
+CVE-2008-6849 (Unrestricted file upload vulnerability in index.php in phpGreetCards ...)
+	TODO: check
+CVE-2008-6848 (Cross-site scripting (XSS) vulnerability in index.php in phpGreetCards ...)
+	TODO: check
 CVE-2009-2336
 	RESERVED
 CVE-2009-2335
@@ -22788,8 +22846,8 @@
 	RESERVED
 CVE-2008-0021
 	RESERVED
-CVE-2008-0020
-	RESERVED
+CVE-2008-0020 (Unspecified vulnerability in the Microsoft Video ActiveX control in ...)
+	TODO: check
 CVE-2008-0019
 	RESERVED
 CVE-2008-0018
@@ -22806,8 +22864,8 @@
 	- iceweasel 3.0
 	- iceape 1.1.12-1
 	- icedove 2.0.0.17-1
-CVE-2008-0015
-	RESERVED
+CVE-2008-0015 (Stack-based buffer overflow in MPEG2TuneRequest in the Microsoft Video ...)
+	TODO: check
 CVE-2008-0014 (Heap-based buffer overflow in an unspecified procedure in Trend Micro ...)
 	NOT-FOR-US: Trend Micro
 CVE-2008-0013 (Heap-based buffer overflow in an unspecified procedure in Trend Micro ...)