[Secure-testing-commits] r23339 - data/CVE

Joey Hess joeyh at alioth.debian.org
Fri Aug 16 21:15:31 UTC 2013 

Author: joeyh
Date: 2013-08-16 21:15:30 +0000 (Fri, 16 Aug 2013)
New Revision: 23339

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-08-16 16:50:46 UTC (rev 23338)
+++ data/CVE/list	2013-08-16 21:15:30 UTC (rev 23339)
@@ -1,3 +1,357 @@
+CVE-2013-5300 (Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open ...)
+	TODO: check
+CVE-2013-5299
+	RESERVED
+CVE-2013-5298
+	RESERVED
+CVE-2013-5297
+	RESERVED
+CVE-2013-5296
+	RESERVED
+CVE-2013-5295
+	RESERVED
+CVE-2013-5294
+	RESERVED
+CVE-2013-5293
+	RESERVED
+CVE-2013-5292
+	RESERVED
+CVE-2013-5291
+	RESERVED
+CVE-2013-5290
+	RESERVED
+CVE-2013-5289
+	RESERVED
+CVE-2013-5288
+	RESERVED
+CVE-2013-5287
+	RESERVED
+CVE-2013-5286
+	RESERVED
+CVE-2013-5285
+	RESERVED
+CVE-2013-5284
+	RESERVED
+CVE-2013-5283
+	RESERVED
+CVE-2013-5282
+	RESERVED
+CVE-2013-5281
+	RESERVED
+CVE-2013-5280
+	RESERVED
+CVE-2013-5279
+	RESERVED
+CVE-2013-5278
+	RESERVED
+CVE-2013-5277
+	RESERVED
+CVE-2013-5276
+	RESERVED
+CVE-2013-5275
+	RESERVED
+CVE-2013-5274
+	RESERVED
+CVE-2013-5273
+	RESERVED
+CVE-2013-5272
+	RESERVED
+CVE-2013-5271
+	RESERVED
+CVE-2013-5270
+	RESERVED
+CVE-2013-5269
+	RESERVED
+CVE-2013-5268
+	RESERVED
+CVE-2013-5267
+	RESERVED
+CVE-2013-5266
+	RESERVED
+CVE-2013-5265
+	RESERVED
+CVE-2013-5264
+	RESERVED
+CVE-2013-5263
+	RESERVED
+CVE-2013-5262
+	RESERVED
+CVE-2013-5261
+	RESERVED
+CVE-2013-5260
+	RESERVED
+CVE-2013-5259
+	RESERVED
+CVE-2013-5258
+	RESERVED
+CVE-2013-5257
+	RESERVED
+CVE-2013-5256
+	RESERVED
+CVE-2013-5255
+	RESERVED
+CVE-2013-5254
+	RESERVED
+CVE-2013-5253
+	RESERVED
+CVE-2013-5252
+	RESERVED
+CVE-2013-5251
+	RESERVED
+CVE-2013-5250
+	RESERVED
+CVE-2013-5249
+	RESERVED
+CVE-2013-5248
+	RESERVED
+CVE-2013-5247
+	RESERVED
+CVE-2013-5246
+	RESERVED
+CVE-2013-5245
+	RESERVED
+CVE-2013-5244
+	RESERVED
+CVE-2013-5243
+	RESERVED
+CVE-2013-5242
+	RESERVED
+CVE-2013-5241
+	RESERVED
+CVE-2013-5240
+	RESERVED
+CVE-2013-5239
+	RESERVED
+CVE-2013-5238
+	RESERVED
+CVE-2013-5237
+	RESERVED
+CVE-2013-5236
+	RESERVED
+CVE-2013-5235
+	RESERVED
+CVE-2013-5234
+	RESERVED
+CVE-2013-5233
+	RESERVED
+CVE-2013-5232
+	RESERVED
+CVE-2013-5231
+	RESERVED
+CVE-2013-5230
+	RESERVED
+CVE-2013-5229
+	RESERVED
+CVE-2013-5228
+	RESERVED
+CVE-2013-5227
+	RESERVED
+CVE-2013-5226
+	RESERVED
+CVE-2013-5225
+	RESERVED
+CVE-2013-5224
+	RESERVED
+CVE-2013-5223
+	RESERVED
+CVE-2013-5222
+	RESERVED
+CVE-2013-5221
+	RESERVED
+CVE-2013-5220
+	RESERVED
+CVE-2013-5219
+	RESERVED
+CVE-2013-5218
+	RESERVED
+CVE-2013-5216
+	RESERVED
+CVE-2013-5215
+	RESERVED
+CVE-2013-5214
+	RESERVED
+CVE-2013-5213
+	RESERVED
+CVE-2013-5212
+	RESERVED
+CVE-2013-5211
+	RESERVED
+CVE-2013-5210
+	RESERVED
+CVE-2013-5209
+	RESERVED
+CVE-2013-5208
+	RESERVED
+CVE-2013-5207
+	RESERVED
+CVE-2013-5206
+	RESERVED
+CVE-2013-5205
+	RESERVED
+CVE-2013-5204
+	RESERVED
+CVE-2013-5203
+	RESERVED
+CVE-2013-5202
+	RESERVED
+CVE-2013-5201
+	RESERVED
+CVE-2013-5200
+	RESERVED
+CVE-2013-5199
+	RESERVED
+CVE-2013-5198
+	RESERVED
+CVE-2013-5197
+	RESERVED
+CVE-2013-5196
+	RESERVED
+CVE-2013-5195
+	RESERVED
+CVE-2013-5194
+	RESERVED
+CVE-2013-5193
+	RESERVED
+CVE-2013-5192
+	RESERVED
+CVE-2013-5191
+	RESERVED
+CVE-2013-5190
+	RESERVED
+CVE-2013-5189
+	RESERVED
+CVE-2013-5188
+	RESERVED
+CVE-2013-5187
+	RESERVED
+CVE-2013-5186
+	RESERVED
+CVE-2013-5185
+	RESERVED
+CVE-2013-5184
+	RESERVED
+CVE-2013-5183
+	RESERVED
+CVE-2013-5182
+	RESERVED
+CVE-2013-5181
+	RESERVED
+CVE-2013-5180
+	RESERVED
+CVE-2013-5179
+	RESERVED
+CVE-2013-5178
+	RESERVED
+CVE-2013-5177
+	RESERVED
+CVE-2013-5176
+	RESERVED
+CVE-2013-5175
+	RESERVED
+CVE-2013-5174
+	RESERVED
+CVE-2013-5173
+	RESERVED
+CVE-2013-5172
+	RESERVED
+CVE-2013-5171
+	RESERVED
+CVE-2013-5170
+	RESERVED
+CVE-2013-5169
+	RESERVED
+CVE-2013-5168
+	RESERVED
+CVE-2013-5167
+	RESERVED
+CVE-2013-5166
+	RESERVED
+CVE-2013-5165
+	RESERVED
+CVE-2013-5164
+	RESERVED
+CVE-2013-5163
+	RESERVED
+CVE-2013-5162
+	RESERVED
+CVE-2013-5161
+	RESERVED
+CVE-2013-5160
+	RESERVED
+CVE-2013-5159
+	RESERVED
+CVE-2013-5158
+	RESERVED
+CVE-2013-5157
+	RESERVED
+CVE-2013-5156
+	RESERVED
+CVE-2013-5155
+	RESERVED
+CVE-2013-5154
+	RESERVED
+CVE-2013-5153
+	RESERVED
+CVE-2013-5152
+	RESERVED
+CVE-2013-5151
+	RESERVED
+CVE-2013-5150
+	RESERVED
+CVE-2013-5149
+	RESERVED
+CVE-2013-5148
+	RESERVED
+CVE-2013-5147
+	RESERVED
+CVE-2013-5146
+	RESERVED
+CVE-2013-5145
+	RESERVED
+CVE-2013-5144
+	RESERVED
+CVE-2013-5143
+	RESERVED
+CVE-2013-5142
+	RESERVED
+CVE-2013-5141
+	RESERVED
+CVE-2013-5140
+	RESERVED
+CVE-2013-5139
+	RESERVED
+CVE-2013-5138
+	RESERVED
+CVE-2013-5137
+	RESERVED
+CVE-2013-5136
+	RESERVED
+CVE-2013-5135
+	RESERVED
+CVE-2013-5134
+	RESERVED
+CVE-2013-5133
+	RESERVED
+CVE-2013-5132
+	RESERVED
+CVE-2013-5131
+	RESERVED
+CVE-2013-5130
+	RESERVED
+CVE-2013-5129
+	RESERVED
+CVE-2013-5128
+	RESERVED
+CVE-2013-5127
+	RESERVED
+CVE-2013-5126
+	RESERVED
+CVE-2013-5125
+	RESERVED
+CVE-2013-5124
+	RESERVED
+CVE-2013-5123
+	RESERVED
 CVE-2013-5122
 	RESERVED
 CVE-2013-5121 (SQL injection vulnerability in PHPFox before 3.6.0 (build6) allows ...)
@@ -52,12 +406,12 @@
 	NOT-FOR-US: Anchor CMS
 CVE-2013-5098 (Cross-site scripting (XSS) vulnerability in admin/admin.php in the ...)
 	NOT-FOR-US: WordPress plugin download-monitor
-CVE-2013-5097
-	RESERVED
-CVE-2013-5096
-	RESERVED
-CVE-2013-5095
-	RESERVED
+CVE-2013-5097 (Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance ...)
+	TODO: check
+CVE-2013-5096 (Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance ...)
+	TODO: check
+CVE-2013-5095 (Cross-site scripting (XSS) vulnerability in the web-based interface in ...)
+	TODO: check
 CVE-2013-5094
 	RESERVED
 CVE-2013-5093
@@ -979,8 +1333,8 @@
 	RESERVED
 CVE-2013-4699
 	RESERVED
-CVE-2013-4698
-	RESERVED
+CVE-2013-4698 (Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to ...)
+	TODO: check
 CVE-2013-4697 (Multiple unspecified vulnerabilities in Hitachi JP1/IT Desktop ...)
 	NOT-FOR-US: Hitachi
 CVE-2013-4695
@@ -2662,8 +3016,8 @@
 	RESERVED
 CVE-2013-4008
 	RESERVED
-CVE-2013-4007
-	RESERVED
+CVE-2013-4007 (Cross-site scripting (XSS) vulnerability in adv_sw.php in the Advanced ...)
+	TODO: check
 CVE-2013-4006
 	RESERVED
 CVE-2013-4005
@@ -4811,8 +5165,8 @@
 	RESERVED
 CVE-2013-3041
 	RESERVED
-CVE-2013-3040
-	RESERVED
+CVE-2013-3040 (IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, ...)
+	TODO: check
 CVE-2013-3039
 	RESERVED
 CVE-2013-3038
@@ -4823,8 +5177,8 @@
 	RESERVED
 CVE-2013-3035 (The IPv6 implementation in the inet subsystem in IBM AIX 6.1 and 7.1, ...)
 	NOT-FOR-US: IBM AIX
-CVE-2013-3034
-	RESERVED
+CVE-2013-3034 (Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information ...)
+	TODO: check
 CVE-2013-3033 (SQL injection vulnerability in the server component in IBM Tivoli ...)
 	NOT-FOR-US: IBM Tivoli Remote Control
 CVE-2013-3032 (Cross-site scripting (XSS) vulnerability in the MIME e-mail ...)
@@ -6829,8 +7183,7 @@
 	RESERVED
 CVE-2013-2251 (Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute ...)
 	- libstruts1.2-java <not-affected> (Only affect 2.x)
-CVE-2013-2250
-	RESERVED
+CVE-2013-2250 (Apache Open For Business Project (aka OFBiz) 10.04.01 through ...)
 	NOT-FOR-US: Apache OFBiz
 CVE-2013-2249 (mod_session_dbd.c in the mod_session_dbd module in the Apache HTTP ...)
 	- apache2 2.4.6-1
@@ -7220,8 +7573,7 @@
 CVE-2013-2138 [gallery: improper stripping of URL fragments might lead to replay attacks]
 	RESERVED
 	- gallery <not-affected> (Old 1.5 version not affected)
-CVE-2013-2137
-	RESERVED
+CVE-2013-2137 (Cross-site scripting (XSS) vulnerability in the "View Log" screen in ...)
 	NOT-FOR-US: Apache OFBiz
 CVE-2013-2136
 	RESERVED
@@ -7234,8 +7586,7 @@
 	NOTE: http://struts.apache.org/release/2.3.x/docs/s2-015.html
 CVE-2013-2133
 	RESERVED
-CVE-2013-2132 [null pointer when decoding invalid DBRef]
-	RESERVED
+CVE-2013-2132 (bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before ...)
 	{DSA-2705-1}
 	- pymongo 2.5.2-1 (bug #710597)
 	[squeeze] - pymongo <not-affected> (bson module not present)
@@ -7647,8 +7998,7 @@
 	[wheezy] - chicken <no-dsa> (Minor issue)
 	[squeeze] - chicken <no-dsa> (Minor issue)
 	NOTE: http://lists.nongnu.org/archive/html/chicken-announce/2013-04/msg00000.html
-CVE-2013-2023
-	RESERVED
+CVE-2013-2023 (Cross-site scripting (XSS) vulnerability in actionscript/Jplayer.as in ...)
 	- jquery-jplayer 2.1.0-2
 	NOTE: used for jPlayer 2.2.23 XSS
 	NOTE: http://www.openwall.com/lists/oss-security/2013/05/05/3
@@ -7925,8 +8275,7 @@
 CVE-2013-1943 (The KVM subsystem in the Linux kernel before 3.0 does not check ...)
 	- linux 3.0-1
 	- linux-2.6 <removed>
-CVE-2013-1942 [XSS vulnerability in jPlayer]
-	RESERVED
+CVE-2013-1942 (Cross-site scripting (XSS) vulnerability in actionscript/Jplayer.as in ...)
 	- owncloud <not-affected> (Depends on libjs-jquery-jplayer)
 	- jquery-jplayer 2.1.0-2
 	NOTE: http://owncloud.org/about/security/advisories/oC-SA-2013-014/
@@ -8113,8 +8462,7 @@
 	- libapache2-mod-ruid2 0.9.8-1 (low; bug #704066)
 	[wheezy] - libapache2-mod-ruid2 <no-dsa> (Minor issue)
 	NOTE: Fix: https://github.com/mind04/mod-ruid2/commit/1fed9dda70cd44d54301df19730a29ae0989e0a2
-CVE-2013-1888 [Insecure temporary directory handling /tmp/pip-build]
-	RESERVED
+CVE-2013-1888 (pip before 1.3 allows local users to overwrite arbitrary files via a ...)
 	- python-pip <not-affected>
 	[squeeze] - python-pip <not-affected>
 	NOTE: https://github.com/pypa/pip/pull/780/files
@@ -11910,12 +12258,12 @@
 	RESERVED
 CVE-2013-0588
 	RESERVED
-CVE-2013-0587
-	RESERVED
+CVE-2013-0587 (Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere ...)
+	TODO: check
 CVE-2013-0586
 	RESERVED
-CVE-2013-0585
-	RESERVED
+CVE-2013-0585 (Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere ...)
+	TODO: check
 CVE-2013-0584 (The Data Replication Dashboard component in IBM InfoSphere Replication ...)
 	NOT-FOR-US: IBM InfoSphere Replication Server
 CVE-2013-0583

More information about the Secure-testing-commits mailing list