[Secure-testing-commits] r14718 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2010-05-20 21:15:04 +0000 (Thu, 20 May 2010)
New Revision: 14718

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-05-20 20:01:10 UTC (rev 14717)
+++ data/CVE/list	2010-05-20 21:15:04 UTC (rev 14718)
@@ -1,3 +1,59 @@
+CVE-2010-1985 (Multiple cross-site scripting (XSS) vulnerabilities in the ...)
+	TODO: check
+CVE-2010-1984 (Cross-site scripting (XSS) vulnerability in the Taxonomy Breadcrumb ...)
+	TODO: check
+CVE-2010-1983 (Directory traversal vulnerability in the redTWITTER (com_redtwitter) ...)
+	TODO: check
+CVE-2010-1982 (Directory traversal vulnerability in the JA Voice (com_javoice) ...)
+	TODO: check
+CVE-2010-1981 (Directory traversal vulnerability in the Fabrik (com_fabrik) component ...)
+	TODO: check
+CVE-2010-1980 (Directory traversal vulnerability in joomlaflickr.php in the Joomla ...)
+	TODO: check
+CVE-2010-1979 (Directory traversal vulnerability in the Affiliate Datafeeds ...)
+	TODO: check
+CVE-2010-1978 (PHP remote file inclusion vulnerability in default_theme.php in ...)
+	TODO: check
+CVE-2010-1977 (Directory traversal vulnerability in the J!WHMCS Integrator ...)
+	TODO: check
+CVE-2010-1976 (Cross-site scripting (XSS) vulnerability in the Taxonomy Breadcrumb ...)
+	TODO: check
+CVE-2010-1975 (PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, ...)
+	TODO: check
+CVE-2010-1974 (Multiple unspecified vulnerabilities in the Safe (aka Safe.pm) module ...)
+	TODO: check
+CVE-2010-1973
+	RESERVED
+CVE-2010-1972
+	RESERVED
+CVE-2010-1971
+	RESERVED
+CVE-2010-1970
+	RESERVED
+CVE-2010-1969
+	RESERVED
+CVE-2010-1968
+	RESERVED
+CVE-2010-1967
+	RESERVED
+CVE-2010-1966
+	RESERVED
+CVE-2010-1965
+	RESERVED
+CVE-2010-1964
+	RESERVED
+CVE-2010-1963
+	RESERVED
+CVE-2010-1962
+	RESERVED
+CVE-2010-1961
+	RESERVED
+CVE-2010-1960
+	RESERVED
+CVE-2010-1959
+	RESERVED
+CVE-2010-1958
+	RESERVED
 CVE-2010-1957 (Directory traversal vulnerability in the Love Factory ...)
 	TODO: check
 CVE-2010-1956 (Directory traversal vulnerability in the Gadget Factory ...)
@@ -747,14 +803,14 @@
 	RESERVED
 CVE-2010-1631
 	RESERVED
-CVE-2010-1630
-	RESERVED
-CVE-2010-1629
-	RESERVED
-CVE-2010-1628
-	RESERVED
-CVE-2010-1627
-	RESERVED
+CVE-2010-1630 (Unspecified vulnerability in posting.php in phpBB before 3.0.5 has ...)
+	TODO: check
+CVE-2010-1629 (Cross-site scripting (XSS) vulnerability in Phorum before 5.2.15 ...)
+	TODO: check
+CVE-2010-1628 (Ghostscript 8.64, 8.70, and possibly other versions allows ...)
+	TODO: check
+CVE-2010-1627 (feed.php in phpBB 3.0.7 before 3.0.7-PL1 does not properly check ...)
+	TODO: check
 CVE-2010-1626
 	RESERVED
 	- mysql-dfsg-5.1 <unfixed>
@@ -1295,12 +1351,12 @@
 	[lenny] - gnustep-base <not-affected> (Not installed setuid root)
 	NOTE: http://thread.gmane.org/gmane.comp.lib.gnustep.bugs/12336
 CVE-2010-1456
-	RESERVED
+	REJECTED
 CVE-2010-1455 (The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 ...)
 	- wireshark <unfixed> (unimportant)
 	NOTE: Not triggerable remotely
-CVE-2010-1454
-	RESERVED
+CVE-2010-1454 (com.springsource.tcserver.serviceability.rmi.JmxSocketListener in ...)
+	TODO: check
 CVE-2010-1453 (Cross-site scripting (XSS) vulnerability in the Login form in Piwik ...)
 	- piwik <itp> (bug #506933)
 CVE-2010-1452
@@ -1315,8 +1371,8 @@
 	RESERVED
 	- lxr-cvs <unfixed>
 	TODO: prod maintainer (and find out why we have lxr and lxr-cvs)
-CVE-2010-1447
-	RESERVED
+CVE-2010-1447 (PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, ...)
+	TODO: check
 CVE-2010-1446 [kgbd issue]
 	RESERVED
 	- linux-2.6 2.6.32-12 (unimportant)
@@ -1592,8 +1648,7 @@
 	RESERVED
 CVE-2010-1322
 	RESERVED
-CVE-2010-1321 [MITKRB5-SA-2010-005]
-	RESERVED
+CVE-2010-1321 (The kg_accept_krb5 function in krb5/accept_sec_context.c in the ...)
 	- krb5 1.8.1+dfsg-3 (low; bug #582261)
 	NOTE: http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-005.txt
 CVE-2010-1320 (Double free vulnerability in do_tgs_req.c in the Key Distribution ...)
@@ -2002,11 +2057,9 @@
 	RESERVED
 CVE-2010-1171
 	RESERVED
-CVE-2010-1170 [PL/tcl issue]
-	RESERVED
+CVE-2010-1170 (The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before ...)
 	- postgresql-8.3 <unfixed>
-CVE-2010-1169 [PL/perl issue]
-	RESERVED
+CVE-2010-1169 (PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, ...)
 	- postgresql-8.3 <unfixed>
 CVE-2010-1168
 	RESERVED
@@ -7983,7 +8036,7 @@
 	RESERVED
 CVE-2009-3679
 	RESERVED
-CVE-2009-3678 (Microsoft Windows 7, when running on 64-bit platforms, allows local ...)
+CVE-2009-3678 (cdd.dll in the Canonical Display Driver (CDD) in Microsoft Windows ...)
 	NOT-FOR-US: Microsoft Windows
 CVE-2009-3677 (The Internet Authentication Service (IAS) in Microsoft Windows 2000 ...)
 	NOT-FOR-US: Microsoft Internet Authentication Service