[Secure-testing-commits] r22216 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2013-05-09 21:14:26 +0000 (Thu, 09 May 2013)
New Revision: 22216

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-05-09 16:50:06 UTC (rev 22215)
+++ data/CVE/list	2013-05-09 21:14:26 UTC (rev 22216)
@@ -1,3 +1,19 @@
+CVE-2013-3521
+	RESERVED
+CVE-2013-3520
+	RESERVED
+CVE-2013-3519
+	RESERVED
+CVE-2013-3518
+	RESERVED
+CVE-2013-3517
+	RESERVED
+CVE-2013-3516
+	RESERVED
+CVE-2013-3515
+	RESERVED
+CVE-2013-3514
+	RESERVED
 CVE-2013-3513 (Multiple cross-site request forgery (CSRF) vulnerabilities in the Noma ...)
 	NOT-FOR-US: GroundWork Monitor Enterprise
 CVE-2013-3512 (The Cacti component in GroundWork Monitor Enterprise 6.7.0 does not ...)
@@ -28,10 +44,10 @@
 	NOT-FOR-US: GroundWork Monitor Enterprise
 CVE-2013-3499 (GroundWork Monitor Enterprise 6.7.0 performs authentication on the ...)
 	NOT-FOR-US: GroundWork Monitor Enterprise
-CVE-2013-3498
-	RESERVED
-CVE-2013-3497
-	RESERVED
+CVE-2013-3498 (Cross-site scripting (XSS) vulnerability in Juniper SmartPass WLAN ...)
+	TODO: check
+CVE-2013-3497 (Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance ...)
+	TODO: check
 CVE-2013-3496
 	RESERVED
 CVE-2013-3495
@@ -352,8 +368,8 @@
 	RESERVED
 CVE-2013-3337
 	RESERVED
-CVE-2013-3336
-	RESERVED
+CVE-2013-3336 (Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and ...)
+	TODO: check
 CVE-2013-3335
 	RESERVED
 CVE-2013-3334
@@ -2654,8 +2670,8 @@
 	RESERVED
 CVE-2013-2309
 	RESERVED
-CVE-2013-2308
-	RESERVED
+CVE-2013-2308 (The (1) OWA Helper and (2) OSG Lite programs in SoftBank Online ...)
+	TODO: check
 CVE-2013-2307 (The Yahoo! Browser application before 1.4.3 for Android allows remote ...)
 	NOT-FOR-US: Yahoo! Browser application for Android
 CVE-2013-2306 (The jigbrowser+ application before 1.6.4 for Android does not properly ...)
@@ -4475,8 +4491,8 @@
 	RESERVED
 CVE-2013-1612
 	RESERVED
-CVE-2013-1611
-	RESERVED
+CVE-2013-1611 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
+	TODO: check
 CVE-2013-1610
 	RESERVED
 CVE-2013-1609 (Multiple unquoted Windows search path vulnerabilities in the (1) File ...)
@@ -5451,18 +5467,18 @@
 	NOT-FOR-US: Cisco Unified Communications Domain Manager
 CVE-2013-1226 (The Ethernet frame-forwarding implementation in Cisco NX-OS on Nexus ...)
 	NOT-FOR-US: Cisco NX-OS
-CVE-2013-1225
-	RESERVED
-CVE-2013-1224
-	RESERVED
-CVE-2013-1223
-	RESERVED
-CVE-2013-1222
-	RESERVED
-CVE-2013-1221
-	RESERVED
-CVE-2013-1220
-	RESERVED
+CVE-2013-1225 (Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 ...)
+	TODO: check
+CVE-2013-1224 (Directory traversal vulnerability in the Resource Manager in Cisco ...)
+	TODO: check
+CVE-2013-1223 (The log viewer in Cisco Unified Customer Voice Portal (CVP) Software ...)
+	TODO: check
+CVE-2013-1222 (The Tomcat Web Management feature in Cisco Unified Customer Voice ...)
+	TODO: check
+CVE-2013-1221 (The Tomcat Web Management feature in Cisco Unified Customer Voice ...)
+	TODO: check
+CVE-2013-1220 (The CallServer component in Cisco Unified Customer Voice Portal (CVP) ...)
+	TODO: check
 CVE-2013-1219 (SensorApp in Cisco Intrusion Prevention System (IPS) allows local ...)
 	NOT-FOR-US: Cisco Intrusion Prevention System
 CVE-2013-1218
@@ -6811,16 +6827,16 @@
 	RESERVED
 CVE-2013-0689
 	RESERVED
-CVE-2013-0688
-	RESERVED
+CVE-2013-0688 (Cross-site scripting (XSS) vulnerability in Invensys Wonderware ...)
+	TODO: check
 CVE-2013-0687 (The installer routine in Schneider Electric MiCOM S1 Studio uses ...)
 	NOT-FOR-US: Schneider Electric
-CVE-2013-0686
-	RESERVED
-CVE-2013-0685
-	RESERVED
-CVE-2013-0684
-	RESERVED
+CVE-2013-0686 (Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, ...)
+	TODO: check
+CVE-2013-0685 (Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, ...)
+	TODO: check
+CVE-2013-0684 (SQL injection vulnerability in Invensys Wonderware Information Server ...)
+	TODO: check
 CVE-2013-0683 (The DataSim and DataPid demonstration clients in Cogent Real-Time ...)
 	NOT-FOR-US: DataSim and DataPid demonstration clients
 CVE-2013-0682 (Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub ...)
@@ -7003,8 +7019,8 @@
 	- lemonldap-ng 1.2.2-3 (bug #696329)
 	[wheezy] - lemonldap-ng 1.1.2-5+deb7u1
 	[squeeze] - lemonldap-ng <not-affected> (SAML code not present)
-CVE-2013-0600
-	RESERVED
+CVE-2013-0600 (Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance ...)
+	TODO: check
 CVE-2013-0599
 	RESERVED
 CVE-2013-0598