[Secure-testing-commits] r38596 - data/CVE

[security tracker role]

Author: sectracker
Date: 2015-12-29 21:10:12 +0000 (Tue, 29 Dec 2015)
New Revision: 38596

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-12-29 19:36:06 UTC (rev 38595)
+++ data/CVE/list	2015-12-29 21:10:12 UTC (rev 38596)
@@ -1,3 +1,9 @@
+CVE-2015-8701
+	RESERVED
+CVE-2015-8700
+	RESERVED
+CVE-2015-8699
+	RESERVED
 CVE-2016-1255
 	RESERVED
 CVE-2016-1254
@@ -326,42 +332,42 @@
 	RESERVED
 CVE-2015-8652
 	RESERVED
-CVE-2015-8651
-	RESERVED
-CVE-2015-8650
-	RESERVED
-CVE-2015-8649
-	RESERVED
-CVE-2015-8648
-	RESERVED
-CVE-2015-8647
-	RESERVED
-CVE-2015-8646
-	RESERVED
-CVE-2015-8645
-	RESERVED
-CVE-2015-8644
-	RESERVED
-CVE-2015-8643
-	RESERVED
-CVE-2015-8642
-	RESERVED
-CVE-2015-8641
-	RESERVED
-CVE-2015-8640
-	RESERVED
-CVE-2015-8639
-	RESERVED
-CVE-2015-8638
-	RESERVED
+CVE-2015-8651 (Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and ...)
+	TODO: check
+CVE-2015-8650 (Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 ...)
+	TODO: check
+CVE-2015-8649 (Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 ...)
+	TODO: check
+CVE-2015-8648 (Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 ...)
+	TODO: check
+CVE-2015-8647 (Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 ...)
+	TODO: check
+CVE-2015-8646 (Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 ...)
+	TODO: check
+CVE-2015-8645 (Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before ...)
+	TODO: check
+CVE-2015-8644 (Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before ...)
+	TODO: check
+CVE-2015-8643 (Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 ...)
+	TODO: check
+CVE-2015-8642 (Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 ...)
+	TODO: check
+CVE-2015-8641 (Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 ...)
+	TODO: check
+CVE-2015-8640 (Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 ...)
+	TODO: check
+CVE-2015-8639 (Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 ...)
+	TODO: check
+CVE-2015-8638 (Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 ...)
+	TODO: check
 CVE-2015-8637
 	RESERVED
-CVE-2015-8636
-	RESERVED
-CVE-2015-8635
-	RESERVED
-CVE-2015-8634
-	RESERVED
+CVE-2015-8636 (Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before ...)
+	TODO: check
+CVE-2015-8635 (Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 ...)
+	TODO: check
+CVE-2015-8634 (Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 ...)
+	TODO: check
 CVE-2015-8633
 	RESERVED
 CVE-2015-8632
@@ -3266,7 +3272,7 @@
 CVE-2015-8537 [Data disclosure in atom feed]
 	RESERVED
 	- redmine <unfixed> (bug #807826)
-        [squeeze] - redmine <not-affected> (Vulnerable code not present in 1.0.1)
+	[squeeze] - redmine <not-affected> (Vulnerable code not present in 1.0.1)
 	NOTE: https://www.redmine.org/projects/redmine/wiki/Security_Advisories
 	NOTE: https://www.redmine.org/issues/21419 (private)
 	NOTE: https://github.com/redmine/redmine/commit/7e423fb4538247d59e01958c48b491f196a1de56
@@ -3311,10 +3317,10 @@
 CVE-2015-8461 (Race condition in resolver.c in named in ISC BIND 9.9.8 before ...)
 	- bind9 <not-affected> (Only affects 9.9.8 -> 9.9.8-P1, 9.9.8-S1 -> 9.9.8-S2, 9.10.3 -> 9.10.3-P1)
 	NOTE: https://kb.isc.org/article/AA-01319
-CVE-2015-8460
-	RESERVED
-CVE-2015-8459
-	RESERVED
+CVE-2015-8460 (Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before ...)
+	TODO: check
+CVE-2015-8459 (Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before ...)
+	TODO: check
 CVE-2015-8458 (Heap-based buffer overflow in AGM.dll in Adobe Reader and Acrobat 10.x ...)
 	TODO: check
 CVE-2015-8457 (Stack-based buffer overflow in Adobe Flash Player before 18.0.0.268 ...)
@@ -7640,13 +7646,11 @@
 	RESERVED
 CVE-2015-6853
 	RESERVED
-CVE-2015-6852
-	RESERVED
+CVE-2015-6852 (Directory traversal vulnerability in the API in EMC Secure Remote ...)
 	NOT-FOR-US: EMC Secure Remote Services Virtual Edition
 CVE-2015-6851 (EMC RSA SecurID Web Agent before 8.0 allows physically proximate ...)
 	NOT-FOR-US: RSA SecurID
-CVE-2015-6850
-	RESERVED
+CVE-2015-6850 (EMC VPLEX GeoSynchrony 5.4 SP1 before P3 and 5,5 before Patch 1 has a ...)
 	NOT-FOR-US: EMC VPLEX
 CVE-2015-6849 (EMC NetWorker before 8.0.4.5, 8.1.x before 8.1.3.6, 8.2.x before ...)
 	NOT-FOR-US: EMC