[Secure-testing-commits] r23660 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-09-13 19:14:45 +0000 (Fri, 13 Sep 2013)
New Revision: 23660

Modified:
   data/CVE/list
Log:
Do another manual update for CVE list

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-09-13 19:14:11 UTC (rev 23659)
+++ data/CVE/list	2013-09-13 19:14:45 UTC (rev 23660)
@@ -1,3 +1,5 @@
+CVE-2013-5740 (Unspecified vulnerability in the Intel Trusted Execution Technology ...)
+	TODO: check
 CVE-2013-5739 (The default configuration of WordPress before 3.6.1 does not prevent ...)
 	- wordpress 3.6.1+dfsg-1
 CVE-2013-5738 (The get_allowed_mime_types function in wp-includes/functions.php in ...)
@@ -49,6 +51,7 @@
 	- wireshark 1.10.2-1
 CVE-2013-5722
 	RESERVED
+	{DSA-2756-1}
 	- wireshark 1.10.2-1
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2013-59.html
 CVE-2013-5721
@@ -58,6 +61,7 @@
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2013-58.html
 CVE-2013-5720
 	RESERVED
+	{DSA-2756-1}
 	- wireshark 1.10.2-1
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2013-57.html
 CVE-2013-5719
@@ -67,6 +71,7 @@
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2013-56.html
 CVE-2013-5718
 	RESERVED
+	{DSA-2756-1}
 	- wireshark 1.10.2-1
 	[squeeze] - wireshark <not-affected> (Vulnerable code not present)
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2013-55.html
@@ -241,8 +246,8 @@
 	RESERVED
 CVE-2013-5650
 	RESERVED
-CVE-2013-5649
-	RESERVED
+CVE-2013-5649 (Multiple cross-site scripting (XSS) vulnerabilities in Juniper Junos ...)
+	TODO: check
 CVE-2013-5655
 	RESERVED
 	NOT-FOR-US: YingZhi Python for iOS
@@ -610,16 +615,16 @@
 	RESERVED
 CVE-2013-5494
 	RESERVED
-CVE-2013-5493
-	RESERVED
-CVE-2013-5492
-	RESERVED
+CVE-2013-5493 (The diagnostic module in the firmware on Cisco Virtualization ...)
+	TODO: check
+CVE-2013-5492 (administration.jsp in Cisco SocialMiner allows remote attackers to ...)
+	TODO: check
 CVE-2013-5491
 	RESERVED
 CVE-2013-5490
 	RESERVED
-CVE-2013-5489
-	RESERVED
+CVE-2013-5489 (The gadget implementation in Cisco SocialMiner does not properly ...)
+	TODO: check
 CVE-2013-5488 (Cisco Common Services, as used in Cisco Prime LAN Management Solution ...)
 	TODO: check
 CVE-2013-5487
@@ -632,8 +637,8 @@
 	RESERVED
 CVE-2013-5483 (Cross-site scripting (XSS) vulnerability in bookmarklet.jsp in Cisco ...)
 	TODO: check
-CVE-2013-5482
-	RESERVED
+CVE-2013-5482 (Cisco Prime LAN Management Solution (LMS) does not properly restrict ...)
+	TODO: check
 CVE-2013-5481
 	RESERVED
 CVE-2013-5480
@@ -1164,8 +1169,7 @@
 	RESERVED
 CVE-2013-5218
 	RESERVED
-CVE-2013-5216
-	RESERVED
+CVE-2013-5216 (Directory traversal vulnerability in logreader/uploadreader.jsp in ...)
 	NOT-FOR-US: Performance Guard
 CVE-2013-5215
 	RESERVED
@@ -2325,8 +2329,8 @@
 	RESERVED
 CVE-2013-4706
 	RESERVED
-CVE-2013-4705
-	RESERVED
+CVE-2013-4705 (Cross-site scripting (XSS) vulnerability in Opera before 15.00 allows ...)
+	TODO: check
 CVE-2013-4704
 	RESERVED
 CVE-2013-4703 (Cross-site scripting (XSS) vulnerability in the top-page customization ...)
@@ -3123,8 +3127,7 @@
 	- lightdm 1.6.2-1
 CVE-2013-4330
 	RESERVED
-CVE-2013-4329 [libxl partially sets up HVM passthrough even with disabled iommu]
-	RESERVED
+CVE-2013-4329 (The xenlight library (libxl) in Xen 4.0.x through 4.2.x, when IOMMU is ...)
 	- xen 4.3.0-1
 	[squeeze] - xen <not-affected> (libxl not packaged in squeeze)
 	NOTE: http://lists.xen.org/archives/html/xen-announce/2013-09/msg00001.html
@@ -6480,27 +6483,22 @@
 	RESERVED
 CVE-2013-2941
 	RESERVED
-CVE-2013-2940
-	RESERVED
+CVE-2013-2940 (Unspecified vulnerability in Citrix CloudPortal Services Manager (aka ...)
 	NOT-FOR-US: Citrix CloudPortal Services Manager
-CVE-2013-2939
-	RESERVED
+CVE-2013-2939 (Unspecified vulnerability in Citrix CloudPortal Services Manager (aka ...)
 	NOT-FOR-US: Citrix CloudPortal Services Manager
-CVE-2013-2938
-	RESERVED
+CVE-2013-2938 (Unspecified vulnerability in Citrix CloudPortal Services Manager (aka ...)
 	NOT-FOR-US: Citrix CloudPortal Services Manager
-CVE-2013-2937
-	RESERVED
+CVE-2013-2937 (Unspecified vulnerability in Citrix CloudPortal Services Manager (aka ...)
 	NOT-FOR-US: Citrix CloudPortal Services Manager
-CVE-2013-2936
-	RESERVED
+CVE-2013-2936 (Unspecified vulnerability in Citrix CloudPortal Services Manager (aka ...)
 	NOT-FOR-US: Citrix CloudPortal Services Manager
-CVE-2013-2935
-	RESERVED
-CVE-2013-2934
-	RESERVED
-CVE-2013-2933
-	RESERVED
+CVE-2013-2935 (Unspecified vulnerability in Citrix CloudPortal Services Manager (aka ...)
+	TODO: check
+CVE-2013-2934 (Citrix CloudPortal Services Manager (aka Cortex) 10.0 before ...)
+	TODO: check
+CVE-2013-2933 (Unspecified vulnerability in Citrix CloudPortal Services Manager (aka ...)
+	TODO: check
 CVE-2013-2932
 	RESERVED
 CVE-2013-2931
@@ -7340,8 +7338,8 @@
 	RESERVED
 CVE-2013-2602
 	RESERVED
-CVE-2013-2601
-	RESERVED
+CVE-2013-2601 (The NDVM in Citrix XenClient XT before 2.1.3 and 3.x before 3.1.4 ...)
+	TODO: check
 CVE-2013-2600 [MiniUPnPd information disclosure]
 	RESERVED
 	- miniupnpd 1.8.20130730-1 (bug #716936)