[Secure-testing-commits] r22359 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2013-05-24 21:15:01 +0000 (Fri, 24 May 2013)
New Revision: 22359

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-05-24 14:11:38 UTC (rev 22358)
+++ data/CVE/list	2013-05-24 21:15:01 UTC (rev 22359)
@@ -1,3 +1,25 @@
+CVE-2012-6563 (engine/lib/access.php in Elgg before 1.8.5 does not properly clear ...)
+	TODO: check
+CVE-2012-6562 (engine/lib/users.php in Elgg before 1.8.5 does not properly specify ...)
+	TODO: check
+CVE-2012-6561 (Cross-site scripting (XSS) vulnerability in engine/lib/views.php in ...)
+	TODO: check
+CVE-2012-6560 (SQL injection vulnerability in deviceadd.php in FreeNAC 3.02 allows ...)
+	TODO: check
+CVE-2012-6559 (Multiple cross-site scripting (XSS) vulnerabilities in FreeNAC 3.02 ...)
+	TODO: check
+CVE-2012-6558 (Heap-based buffer overflow in HeavenTools PE Explorer 1.99 R6 allows ...)
+	TODO: check
+CVE-2012-6557 (Multiple cross-site scripting (XSS) vulnerabilities in the AboutMe ...)
+	TODO: check
+CVE-2012-6556 (Multiple cross-site scripting (XSS) vulnerabilities in the ...)
+	TODO: check
+CVE-2012-6555 (Cross-site scripting (XSS) vulnerability in the LatestComment plugin ...)
+	TODO: check
+CVE-2012-6554 (functions/html_to_text.php in the Chat module before 1.5.2 for ...)
+	TODO: check
+CVE-2012-6553 (Heap-based buffer overflow in Resource Hacker 3.6.0.92 allows remote ...)
+	TODO: check
 CVE-2013-3659
 	RESERVED
 CVE-2013-3658
@@ -1863,8 +1885,8 @@
 	RESERVED
 CVE-2013-2782
 	RESERVED
-CVE-2013-2781
-	RESERVED
+CVE-2013-2781 (Use-after-free vulnerability in the server application in 3S CODESYS ...)
+	TODO: check
 CVE-2013-2780 (Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to ...)
 	NOT-FOR-US: Siemens SIMATIC
 CVE-2013-2779 (Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on ...)
@@ -6057,8 +6079,8 @@
 	RESERVED
 CVE-2013-1205
 	RESERVED
-CVE-2013-1204
-	RESERVED
+CVE-2013-1204 (Memory leak in the SNMP process in Cisco IOS XR allows remote ...)
+	TODO: check
 CVE-2013-1203
 	RESERVED
 CVE-2013-1202
@@ -6425,22 +6447,22 @@
 	RESERVED
 CVE-2013-1023
 	RESERVED
-CVE-2013-1022
-	RESERVED
-CVE-2013-1021
-	RESERVED
-CVE-2013-1020
-	RESERVED
-CVE-2013-1019
-	RESERVED
-CVE-2013-1018
-	RESERVED
-CVE-2013-1017
-	RESERVED
-CVE-2013-1016
-	RESERVED
-CVE-2013-1015
-	RESERVED
+CVE-2013-1022 (Buffer overflow in Apple QuickTime before 7.7.4 allows remote ...)
+	TODO: check
+CVE-2013-1021 (Buffer overflow in Apple QuickTime before 7.7.4 allows remote ...)
+	TODO: check
+CVE-2013-1020 (Apple QuickTime before 7.7.4 allows remote attackers to execute ...)
+	TODO: check
+CVE-2013-1019 (Buffer overflow in Apple QuickTime before 7.7.4 allows remote ...)
+	TODO: check
+CVE-2013-1018 (Buffer overflow in Apple QuickTime before 7.7.4 allows remote ...)
+	TODO: check
+CVE-2013-1017 (Buffer overflow in Apple QuickTime before 7.7.4 allows remote ...)
+	TODO: check
+CVE-2013-1016 (Buffer overflow in Apple QuickTime before 7.7.4 allows remote ...)
+	TODO: check
+CVE-2013-1015 (Apple QuickTime before 7.7.4 allows remote attackers to execute ...)
+	TODO: check
 CVE-2013-1014 (Apple iTunes before 11.0.3 does not properly verify X.509 ...)
 	TODO: check
 CVE-2013-1013
@@ -6491,14 +6513,14 @@
 	TODO: check
 CVE-2013-0990
 	RESERVED
-CVE-2013-0989
-	RESERVED
-CVE-2013-0988
-	RESERVED
-CVE-2013-0987
-	RESERVED
-CVE-2013-0986
-	RESERVED
+CVE-2013-0989 (Buffer overflow in Apple QuickTime before 7.7.4 allows remote ...)
+	TODO: check
+CVE-2013-0988 (Buffer overflow in Apple QuickTime before 7.7.4 allows remote ...)
+	TODO: check
+CVE-2013-0987 (Apple QuickTime before 7.7.4 allows remote attackers to execute ...)
+	TODO: check
+CVE-2013-0986 (Buffer overflow in Apple QuickTime before 7.7.4 allows remote ...)
+	TODO: check
 CVE-2013-0985
 	RESERVED
 CVE-2013-0984
@@ -13583,8 +13605,8 @@
 	RESERVED
 CVE-2012-4698 (Siemens RuggedCom Rugged Operating System (ROS) before 3.12, ROX I OS ...)
 	NOT-FOR-US: Siemens RuggedCom Rugged Operating System
-CVE-2012-4697
-	RESERVED
+CVE-2012-4697 (TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have ...)
+	TODO: check
 CVE-2012-4696 (Buffer overflow in Beijer ADP 6.5.0-180_R1967 and 6.5.1-186_R2942, and ...)
 	NOT-FOR-US: Beijer
 CVE-2012-4695 (LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, ...)
@@ -27111,12 +27133,12 @@
 	NOT-FOR-US: Advantech/BroadWin WebAccess
 CVE-2011-4521 (SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 ...)
 	NOT-FOR-US: Advantech/BroadWin WebAccess
-CVE-2011-4520
-	RESERVED
-CVE-2011-4519
-	RESERVED
-CVE-2011-4518
-	RESERVED
+CVE-2011-4520 (Heap-based buffer overflow in an ActiveX component in MICROSYS ...)
+	TODO: check
+CVE-2011-4519 (Stack-based buffer overflow in an ActiveX component in MICROSYS ...)
+	TODO: check
+CVE-2011-4518 (Directory traversal vulnerability in the PmWebDir object in the web ...)
+	TODO: check
 CVE-2011-4517 (The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer ...)
 	{DSA-2371-1}
 	- jasper 1.900.1-13 (bug #652649)