[Secure-testing-commits] r53002 - data/CVE

[security tracker role]

Author: sectracker
Date: 2017-06-29 09:10:14 +0000 (Thu, 29 Jun 2017)
New Revision: 53002

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-06-29 06:15:21 UTC (rev 53001)
+++ data/CVE/list	2017-06-29 09:10:14 UTC (rev 53002)
@@ -1,3 +1,21 @@
+CVE-2017-10673 (admin/profile.php in GetSimple CMS 3.x has XSS in a name field. ...)
+	TODO: check
+CVE-2017-10672 (Use-after-free in the XML-LibXML module through 2.0129 for Perl allows ...)
+	TODO: check
+CVE-2017-10671 (Heap-based Buffer Overflow in the de_dotdot function in libhttpd.c in ...)
+	TODO: check
+CVE-2017-10670
+	RESERVED
+CVE-2017-10669
+	RESERVED
+CVE-2017-10668
+	RESERVED
+CVE-2017-10667 (In index.php in Zen Cart 1.6.0, the products_id parameter can cause ...)
+	TODO: check
+CVE-2017-10666
+	RESERVED
+CVE-2017-10665
+	RESERVED
 CVE-2017-9998 (The _dwarf_decode_s_leb128_chk function in dwarf_leb.c in libdwarf ...)
 	- dwarfutils <unfixed>
 	[stretch] - dwarfutils <no-dsa> (Minor issue)
@@ -19190,8 +19208,8 @@
 	[wheezy] - linux <no-dsa> (Changes required are too invasive)
 CVE-2016-10043 (An issue was discovered in Radisys MRF Web Panel (SWMS) 9.0.1. The ...)
 	NOT-FOR-US: Radisys MRF Web Panel
-CVE-2016-10042
-	RESERVED
+CVE-2016-10042 (Authorization Bypass in the Web interface of Arcadyan SLT-00 Star* (aka ...)
+	TODO: check
 CVE-2016-10041 (An issue was discovered in Sprecher Automation SPRECON-E Service ...)
 	NOT-FOR-US: Sprecher Automation SPRECON-E Service
 CVE-2016-10040 (Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows ...)