[Secure-testing-commits] r14572 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2010-04-29 21:14:29 +0000 (Thu, 29 Apr 2010)
New Revision: 14572

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-04-29 01:05:50 UTC (rev 14571)
+++ data/CVE/list	2010-04-29 21:14:29 UTC (rev 14572)
@@ -1,3 +1,27 @@
+CVE-2010-1596 (Support Incident Tracker before 3.51, when using LDAP authentication ...)
+	TODO: check
+CVE-2010-1595 (Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS ...)
+	TODO: check
+CVE-2010-1594 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
+	TODO: check
+CVE-2010-1593 (Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe ...)
+	TODO: check
+CVE-2010-1592 (sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in ...)
+	TODO: check
+CVE-2010-1591 (Beijing Rising International Rising Antivirus 2008 through 2010 does ...)
+	TODO: check
+CVE-2010-1590 (Cross-site scripting (XSS) vulnerability in shopsessionsubs.asp in ...)
+	TODO: check
+CVE-2010-1589 (Directory traversal vulnerability in shopsessionsubs.asp in Rocksalt ...)
+	TODO: check
+CVE-2010-1588 (SQL injection vulnerability in the Getwebsess function in ...)
+	TODO: check
+CVE-2010-1587 (The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and ...)
+	TODO: check
+CVE-2010-1586 (Open redirect vulnerability in red2301.html in HP System Management ...)
+	TODO: check
+CVE-2010-1585 (The nsIScriptableUnescapeHTML.parseFragment method in Mozilla Firefox ...)
+	TODO: check
 CVE-2010-1584
 	RESERVED
 CVE-2010-1583
@@ -470,10 +494,10 @@
 	RESERVED
 CVE-2010-1430
 	RESERVED
-CVE-2010-1429
-	RESERVED
-CVE-2010-1428
-	RESERVED
+CVE-2010-1429 (Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) ...)
+	TODO: check
+CVE-2010-1428 (The Web Console (aka web-console) in JBossAs in Red Hat JBoss ...)
+	TODO: check
 CVE-2010-1427 (Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin ...)
 	NOT-FOR-US: MODx Evolution
 CVE-2010-1426 (SQL injection vulnerability in MODx Evolution before 1.0.3 allows ...)
@@ -1459,12 +1483,12 @@
 	NOT-FOR-US: OpenPNE
 CVE-2010-1039
 	RESERVED
-CVE-2010-1038
-	RESERVED
-CVE-2010-1037
-	RESERVED
-CVE-2010-1036
-	RESERVED
+CVE-2010-1038 (Unspecified vulnerability in HP System Insight Manager before 6.0 ...)
+	TODO: check
+CVE-2010-1037 (Cross-site request forgery (CSRF) vulnerability in HP System Insight ...)
+	TODO: check
+CVE-2010-1036 (Cross-site scripting (XSS) vulnerability in HP System Insight Manager ...)
+	TODO: check
 CVE-2010-1035 (Multiple unspecified vulnerabilities in HP Virtual Machine Manager ...)
 	TODO: check
 CVE-2010-1034 (Unspecified vulnerability in HP System Management Homepage (SMH) 6.0 ...)
@@ -2411,8 +2435,8 @@
 	NOTE: http://www.tug.org/svn/texlive/trunk/Build/source/texk/dvipsk/ChangeLog?view=log
 	- texlive-bin <unfixed> (low)
 	[lenny] - texlive-bin <no-dsa> (minor issue)
-CVE-2010-0738
-	RESERVED
+CVE-2010-0738 (The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise ...)
+	TODO: check
 CVE-2010-0737
 	RESERVED
 CVE-2010-0736 (Cross-site scripting (XSS) vulnerability in the view_queryform ...)