[Secure-testing-commits] r53887 - data/CVE

[security tracker role]

Author: sectracker
Date: 2017-07-25 09:10:12 +0000 (Tue, 25 Jul 2017)
New Revision: 53887

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-25 08:29:26 UTC (rev 53886)
+++ data/CVE/list	2017-07-25 09:10:12 UTC (rev 53887)
@@ -9707,12 +9707,12 @@
 	RESERVED
 CVE-2017-8036 (An issue was discovered in the Cloud Controller API in Cloud Foundry ...)
 	TODO: check
-CVE-2017-8035
-	RESERVED
+CVE-2017-8035 (An issue was discovered in the Cloud Controller API in Cloud Foundry ...)
+	TODO: check
 CVE-2017-8034 (The Cloud Controller and Router in Cloud Foundry (CAPI-release capi ...)
 	NOT-FOR-US: Cloud Foundry
-CVE-2017-8033
-	RESERVED
+CVE-2017-8033 (An issue was discovered in the Cloud Controller API in Cloud Foundry ...)
+	TODO: check
 CVE-2017-8032 (In Cloud Foundry cf-release versions prior to v264; UAA release all ...)
 	NOT-FOR-US: Cloud Foundry
 CVE-2017-8031
@@ -11363,8 +11363,7 @@
 CVE-2017-7542 (The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux ...)
 	- linux <unfixed>
 	NOTE: Fixed by: https://git.kernel.org/linus/6399f1fae4ec29fab5ec76070435555e256ca3a6
-CVE-2017-7541
-	RESERVED
+CVE-2017-7541 (The brcmf_cfg80211_mgmt_tx function in ...)
 	- linux <unfixed>
 	NOTE: Fixed by: https://git.kernel.org/linus/8f44c9a41386729fea410e688959ddaa9d51be7c
 CVE-2017-7540 (rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are ...)
@@ -28843,12 +28842,12 @@
 	RESERVED
 CVE-2017-1383
 	RESERVED
-CVE-2017-1382
-	RESERVED
+CVE-2017-1382 (IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create ...)
+	TODO: check
 CVE-2017-1381 (IBM WebSphere Application Server Proxy Server or On-demand-router ...)
 	NOT-FOR-US: IBM
-CVE-2017-1380
-	RESERVED
+CVE-2017-1380 (IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable ...)
+	TODO: check
 CVE-2017-1379 (IBM API Connect 5.0.0.0 could allow a remote attacker to obtain ...)
 	NOT-FOR-US: IBM
 CVE-2017-1378
@@ -29033,8 +29032,8 @@
 	NOT-FOR-US: IBM JDK
 CVE-2017-1288
 	RESERVED
-CVE-2017-1287
-	RESERVED
+CVE-2017-1287 (IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct ...)
+	TODO: check
 CVE-2017-1286
 	RESERVED
 CVE-2017-1285 (IBM WebSphere MQ 9.0.1 and 9.0.2 could allow an authenticated user ...)
@@ -29109,16 +29108,16 @@
 	RESERVED
 CVE-2017-1250
 	RESERVED
-CVE-2017-1249
-	RESERVED
+CVE-2017-1249 (IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. ...)
+	TODO: check
 CVE-2017-1248
 	RESERVED
 CVE-2017-1247 (IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to ...)
 	NOT-FOR-US: IBM
 CVE-2017-1246
 	RESERVED
-CVE-2017-1245
-	RESERVED
+CVE-2017-1245 (IBM Rational Software Architect Design Manager 5.0 and 6.0 is ...)
+	TODO: check
 CVE-2017-1244
 	RESERVED
 CVE-2017-1243
@@ -33967,8 +33966,8 @@
 	NOT-FOR-US: IBM
 CVE-2016-8976
 	RESERVED
-CVE-2016-8975
-	RESERVED
+CVE-2016-8975 (IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. ...)
+	TODO: check
 CVE-2016-8974 (IBM Rhapsody DM 4.0, 5.0 and 6.0 is vulnerable to a denial of service, ...)
 	NOT-FOR-US: IBM
 CVE-2016-8973 (IBM Rhapsody DM 4.0, 5.0 and 6.0 contains an undisclosed vulnerability ...)
@@ -43496,8 +43495,8 @@
 	RESERVED
 CVE-2016-6119
 	RESERVED
-CVE-2016-6118
-	RESERVED
+CVE-2016-6118 (IBM Emptoris Supplier Lifecycle Management 10.1.0.x is vulnerable to ...)
+	TODO: check
 CVE-2016-6117 (IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 can be deployed with ...)
 	NOT-FOR-US: IBM
 CVE-2016-6116 (IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 could allow a remote ...)