[Secure-testing-commits] r35140 - data/CVE

[security tracker role]

Author: sectracker
Date: 2015-06-24 21:10:16 +0000 (Wed, 24 Jun 2015)
New Revision: 35140

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-06-24 20:35:01 UTC (rev 35139)
+++ data/CVE/list	2015-06-24 21:10:16 UTC (rev 35140)
@@ -535,6 +535,7 @@
 	RESERVED
 	NOT-FOR-US: WordPress plugin aviary-image-editor-add-on-for-gravity-forms
 CVE-2015-4454 (SQL injection vulnerability in the get_hash_graph_template function in ...)
+	{DSA-3295-1}
 	- cacti 0.8.8d+ds1-1
 	NOTE: http://svn.cacti.net/viewvc?view=rev&revision=7720
 	NOTE: http://bugs.cacti.net/view.php?id=2572
@@ -758,6 +759,7 @@
 CVE-2015-4343
 	RESERVED
 CVE-2015-4342 (SQL injection vulnerability in Cacti before 0.8.8d allows remote ...)
+	{DSA-3295-1}
 	- cacti 0.8.8d+ds1-1
 	NOTE: Original report: http://seclists.org/fulldisclosure/2015/Jun/19
 	NOTE: Upstream bug: http://bugs.cacti.net/view.php?id=2571 (not yet accessible)
@@ -5504,6 +5506,7 @@
 CVE-2015-2667 (Untrusted search path vulnerability in GNS3 before 1.2.3 allows local ...)
 	- gns3 <not-affected> (Windows specific)
 CVE-2015-2665 (Cross-site scripting (XSS) vulnerability in Cacti before 0.8.8d allows ...)
+	{DSA-3295-1}
 	- cacti 0.8.8d+ds1-1
 	NOTE: http://www.fortiguard.com/advisory/FG-VD-15-017/
 	NOTE: http://bugs.cacti.net/view.php?id=2542 (bug is not yet accessible)