[Secure-testing-commits] r54951 - data/CVE

Mon Aug 21 21:10:13 UTC 2017

Author: sectracker
Date: 2017-08-21 21:10:13 +0000 (Mon, 21 Aug 2017)
New Revision: 54951

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-08-21 20:19:41 UTC (rev 54950)
+++ data/CVE/list	2017-08-21 21:10:13 UTC (rev 54951)
@@ -1,3 +1,145 @@
+CVE-2017-13055
+	RESERVED
+CVE-2017-13054
+	RESERVED
+CVE-2017-13053
+	RESERVED
+CVE-2017-13052
+	RESERVED
+CVE-2017-13051
+	RESERVED
+CVE-2017-13050
+	RESERVED
+CVE-2017-13049
+	RESERVED
+CVE-2017-13048
+	RESERVED
+CVE-2017-13047
+	RESERVED
+CVE-2017-13046
+	RESERVED
+CVE-2017-13045
+	RESERVED
+CVE-2017-13044
+	RESERVED
+CVE-2017-13043
+	RESERVED
+CVE-2017-13042
+	RESERVED
+CVE-2017-13041
+	RESERVED
+CVE-2017-13040
+	RESERVED
+CVE-2017-13039
+	RESERVED
+CVE-2017-13038
+	RESERVED
+CVE-2017-13037
+	RESERVED
+CVE-2017-13036
+	RESERVED
+CVE-2017-13035
+	RESERVED
+CVE-2017-13034
+	RESERVED
+CVE-2017-13033
+	RESERVED
+CVE-2017-13032
+	RESERVED
+CVE-2017-13031
+	RESERVED
+CVE-2017-13030
+	RESERVED
+CVE-2017-13029
+	RESERVED
+CVE-2017-13028
+	RESERVED
+CVE-2017-13027
+	RESERVED
+CVE-2017-13026
+	RESERVED
+CVE-2017-13025
+	RESERVED
+CVE-2017-13024
+	RESERVED
+CVE-2017-13023
+	RESERVED
+CVE-2017-13022
+	RESERVED
+CVE-2017-13021
+	RESERVED
+CVE-2017-13020
+	RESERVED
+CVE-2017-13019
+	RESERVED
+CVE-2017-13018
+	RESERVED
+CVE-2017-13017
+	RESERVED
+CVE-2017-13016
+	RESERVED
+CVE-2017-13015
+	RESERVED
+CVE-2017-13014
+	RESERVED
+CVE-2017-13013
+	RESERVED
+CVE-2017-13012
+	RESERVED
+CVE-2017-13011
+	RESERVED
+CVE-2017-13010
+	RESERVED
+CVE-2017-13009
+	RESERVED
+CVE-2017-13008
+	RESERVED
+CVE-2017-13007
+	RESERVED
+CVE-2017-13006
+	RESERVED
+CVE-2017-13005
+	RESERVED
+CVE-2017-13004
+	RESERVED
+CVE-2017-13003
+	RESERVED
+CVE-2017-13002
+	RESERVED
+CVE-2017-13001
+	RESERVED
+CVE-2017-13000
+	RESERVED
+CVE-2017-12999
+	RESERVED
+CVE-2017-12998
+	RESERVED
+CVE-2017-12997
+	RESERVED
+CVE-2017-12996
+	RESERVED
+CVE-2017-12995
+	RESERVED
+CVE-2017-12994
+	RESERVED
+CVE-2017-12993
+	RESERVED
+CVE-2017-12992
+	RESERVED
+CVE-2017-12991
+	RESERVED
+CVE-2017-12990
+	RESERVED
+CVE-2017-12989
+	RESERVED
+CVE-2017-12988
+	RESERVED
+CVE-2017-12987
+	RESERVED
+CVE-2017-12986
+	RESERVED
+CVE-2017-12985
+	RESERVED
 CVE-2017-12984 (PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, ...)
 	NOT-FOR-US: PHPMyWind
 CVE-2017-12983 (Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c ...)
@@ -1183,6 +1325,7 @@
 CVE-2017-12757
 	RESERVED
 CVE-2017-12756 (Command inject in transfer from another server in extplorer 2.1.9 and ...)
+	{DLA-1063-1}
 	- extplorer <removed>
 	NOTE: http://extplorer.net/news/21
 CVE-2017-12755
@@ -4161,10 +4304,12 @@
 	- timidity <unfixed> (unimportant; bug #870338)
 	NOTE: http://seclists.org/fulldisclosure/2017/Jul/83
 	NOTE: Crash in CLI tool, no security impact
-CVE-2017-11545 (tcpdump 4.9.0 has a Segmentation Violation in the compressed_sl_print ...)
+CVE-2017-11545
+	REJECTED
 	- tcpdump <unfixed>
 	NOTE: https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/segv/print-sl
-CVE-2017-11544 (tcpdump 4.9.0 has a Segmentation Violation in the compressed_sl_print ...)
+CVE-2017-11544
+	REJECTED
 	- tcpdump <unfixed>
 	NOTE: https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/segv/print-sl
 CVE-2017-11543 (tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in ...)
@@ -7223,33 +7368,33 @@
 	NOTE: https://bugs.freedesktop.org/show_bug.cgi?id=100774
 	NOTE: http://somevulnsofadlab.blogspot.com/2017/06/popplerstack-buffer-overflow-in.html
 	NOTE: Fixed by: https://cgit.freedesktop.org/poppler/poppler/commit/?id=75fff6556eaf0ef3a6fcdef2c2229d0b6d1c58d9
-CVE-2017-9864 (An issue was discovered in SMA Solar Technology products. An attacker ...)
+CVE-2017-9864 (** DISPUTED ** An issue was discovered in SMA Solar Technology ...)
 	NOT-FOR-US: SMA Solar Technology products
-CVE-2017-9863 (An issue was discovered in SMA Solar Technology products. If a user ...)
+CVE-2017-9863 (** DISPUTED ** An issue was discovered in SMA Solar Technology ...)
 	NOT-FOR-US: SMA Solar Technology products
-CVE-2017-9862 (An issue was discovered in SMA Solar Technology products. When signed ...)
+CVE-2017-9862 (** DISPUTED ** An issue was discovered in SMA Solar Technology ...)
 	NOT-FOR-US: SMA Solar Technology products
-CVE-2017-9861 (An issue was discovered in SMA Solar Technology products. The SIP ...)
+CVE-2017-9861 (** DISPUTED ** An issue was discovered in SMA Solar Technology ...)
 	NOT-FOR-US: SMA Solar Technology products
-CVE-2017-9860 (An issue was discovered in SMA Solar Technology products. An attacker ...)
+CVE-2017-9860 (** DISPUTED ** An issue was discovered in SMA Solar Technology ...)
 	NOT-FOR-US: SMA Solar Technology products
-CVE-2017-9859 (An issue was discovered in SMA Solar Technology products. The inverters ...)
+CVE-2017-9859 (** DISPUTED ** An issue was discovered in SMA Solar Technology ...)
 	NOT-FOR-US: SMA Solar Technology products
-CVE-2017-9858 (An issue was discovered in SMA Solar Technology products. By sending ...)
+CVE-2017-9858 (** DISPUTED ** An issue was discovered in SMA Solar Technology ...)
 	NOT-FOR-US: SMA Solar Technology products
-CVE-2017-9857 (An issue was discovered in SMA Solar Technology products. The SMAdata2+ ...)
+CVE-2017-9857 (** DISPUTED ** An issue was discovered in SMA Solar Technology ...)
 	NOT-FOR-US: SMA Solar Technology products
-CVE-2017-9856 (An issue was discovered in SMA Solar Technology products. Sniffed ...)
+CVE-2017-9856 (** DISPUTED ** An issue was discovered in SMA Solar Technology ...)
 	NOT-FOR-US: SMA Solar Technology products
-CVE-2017-9855 (An issue was discovered in SMA Solar Technology products. A secondary ...)
+CVE-2017-9855 (** DISPUTED ** An issue was discovered in SMA Solar Technology ...)
 	NOT-FOR-US: SMA Solar Technology products
-CVE-2017-9854 (An issue was discovered in SMA Solar Technology products. By sniffing ...)
+CVE-2017-9854 (** DISPUTED ** An issue was discovered in SMA Solar Technology ...)
 	NOT-FOR-US: SMA Solar Technology products
-CVE-2017-9853 (An issue was discovered in SMA Solar Technology products. All inverters ...)
+CVE-2017-9853 (** DISPUTED ** An issue was discovered in SMA Solar Technology ...)
 	NOT-FOR-US: SMA Solar Technology products
-CVE-2017-9852 (An Incorrect Password Management issue was discovered in SMA Solar ...)
+CVE-2017-9852 (** DISPUTED ** An Incorrect Password Management issue was discovered ...)
 	NOT-FOR-US: SMA Solar Technology products
-CVE-2017-9851 (An issue was discovered in SMA Solar Technology products. By sending ...)
+CVE-2017-9851 (** DISPUTED ** An issue was discovered in SMA Solar Technology ...)
 	NOT-FOR-US: SMA Solar Technology products
 CVE-2017-9850
 	RESERVED
@@ -16244,16 +16389,16 @@
 	RESERVED
 CVE-2017-7425
 	RESERVED
-CVE-2017-7424
-	RESERVED
-CVE-2017-7423
-	RESERVED
-CVE-2017-7422
-	RESERVED
-CVE-2017-7421
-	RESERVED
-CVE-2017-7420
-	RESERVED
+CVE-2017-7424 (A Path Traversal (CWE-22) vulnerability in esfadmingui in Micro Focus ...)
+	TODO: check
+CVE-2017-7423 (A Cross-Site Request Forgery (CWE-352) vulnerability in esfadmingui in ...)
+	TODO: check
+CVE-2017-7422 (Reflected and stored Cross-Site Scripting (XSS, CWE-79) ...)
+	TODO: check
+CVE-2017-7421 (Reflected and stored Cross-Site Scripting (XSS, CWE-79) ...)
+	TODO: check
+CVE-2017-7420 (An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka ...)
+	TODO: check
 CVE-2017-7419
 	RESERVED
 CVE-2017-7418 (ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the ...)
@@ -19655,8 +19800,8 @@
 	RESERVED
 CVE-2017-6330
 	RESERVED
-CVE-2017-6329
-	RESERVED
+CVE-2017-6329 (Symantec VIP Access for Desktop prior to 2.2.4 can be susceptible to a ...)
+	TODO: check
 CVE-2017-6328 (The Symantec Messaging Gateway before 10.6.3-267 can encounter an ...)
 	NOT-FOR-US: Symantec
 CVE-2017-6327 (The Symantec Messaging Gateway before 10.6.3-267 can encounter an ...)
@@ -23634,8 +23779,8 @@
 	RESERVED
 CVE-2017-5188
 	RESERVED
-CVE-2017-5187
-	RESERVED
+CVE-2017-5187 (A Cross-Site Request Forgery (CWE-352) vulnerability in Directory ...)
+	TODO: check
 CVE-2017-5186 (Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before ...)
 	NOT-FOR-US: Novell iManager
 CVE-2017-5185 (A vulnerability was discovered in NetIQ Sentinel Server 8.0 before ...)


