[Secure-testing-commits] r54239 - data/CVE

[security tracker role]

Author: sectracker
Date: 2017-08-03 21:10:13 +0000 (Thu, 03 Aug 2017)
New Revision: 54239

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-08-03 21:02:14 UTC (rev 54238)
+++ data/CVE/list	2017-08-03 21:10:13 UTC (rev 54239)
@@ -1,3 +1,7 @@
+CVE-2017-12414 (Format Factory 4.1.0 has a DLL Hijacking Vulnerability because an ...)
+	TODO: check
+CVE-2017-12413
+	RESERVED
 CVE-2017-12412
 	RESERVED
 CVE-2017-12411
@@ -2468,14 +2472,14 @@
 	RESERVED
 CVE-2017-11395
 	RESERVED
-CVE-2017-11394
-	RESERVED
-CVE-2017-11393
-	RESERVED
-CVE-2017-11392
-	RESERVED
-CVE-2017-11391
-	RESERVED
+CVE-2017-11394 (Proxy command injection vulnerability in Trend Micro OfficeScan 11 and ...)
+	TODO: check
+CVE-2017-11393 (Proxy command injection vulnerability in Trend Micro OfficeScan 11 and ...)
+	TODO: check
+CVE-2017-11392 (Proxy command injection vulnerability in Trend Micro InterScan ...)
+	TODO: check
+CVE-2017-11391 (Proxy command injection vulnerability in Trend Micro InterScan ...)
+	TODO: check
 CVE-2017-11390 (XML external entity (XXE) processing vulnerability in Trend Micro ...)
 	NOT-FOR-US: Trend Micro Control Manager
 CVE-2017-11389 (Directory traversal vulnerability in Trend Micro Control Manager 6.0 ...)
@@ -2492,8 +2496,8 @@
 	NOT-FOR-US: Trend Micro Control Manager
 CVE-2017-11383 (SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code ...)
 	NOT-FOR-US: Trend Micro Control Manager
-CVE-2017-11382
-	RESERVED
+CVE-2017-11382 (Denial of Service vulnerability in Trend Micro Deep Discovery Email ...)
+	TODO: check
 CVE-2017-11381 (A command injection vulnerability exists in Trend Micro Deep Discovery ...)
 	NOT-FOR-US: Trend Micro Deep Discovery Director
 CVE-2017-11380 (Backup archives were found to be encrypted with a static password ...)
@@ -30788,8 +30792,8 @@
 	RESERVED
 CVE-2017-1505
 	RESERVED
-CVE-2017-1504
-	RESERVED
+CVE-2017-1504 (IBM WebSphere Application Server version 9.0.0.4 could provide weaker ...)
+	TODO: check
 CVE-2017-1503
 	RESERVED
 CVE-2017-1502
@@ -31142,8 +31146,8 @@
 	RESERVED
 CVE-2017-1328 (IBM API Connect 5.0.0.0 - 5.0.6.0 could allow a remote attacker to ...)
 	NOT-FOR-US: IBM
-CVE-2017-1327
-	RESERVED
+CVE-2017-1327 (IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This ...)
+	TODO: check
 CVE-2017-1326 (IBM Sterling File Gateway does not properly restrict user requests ...)
 	NOT-FOR-US: IBM
 CVE-2017-1325 (IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This ...)
@@ -31398,8 +31402,8 @@
 	RESERVED
 CVE-2017-1200
 	RESERVED
-CVE-2017-1199
-	RESERVED
+CVE-2017-1199 (IBM InfoSphere Master Data Management Server 10.0, 11.0, 11.3, 11.4, ...)
+	TODO: check
 CVE-2017-1198
 	RESERVED
 CVE-2017-1197 (IBM BigFix Compliance (TEMA SUAv1 SCA SCM) uses an inadequate account ...)