[Secure-testing-commits] r55848 - data/CVE

[security tracker role]

Author: sectracker
Date: 2017-09-18 09:10:15 +0000 (Mon, 18 Sep 2017)
New Revision: 55848

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-18 07:46:29 UTC (rev 55847)
+++ data/CVE/list	2017-09-18 09:10:15 UTC (rev 55848)
@@ -1,3 +1,151 @@
+CVE-2017-14580
+	RESERVED
+CVE-2017-14579
+	RESERVED
+CVE-2017-14578
+	RESERVED
+CVE-2017-14577
+	RESERVED
+CVE-2017-14576
+	RESERVED
+CVE-2017-14575
+	RESERVED
+CVE-2017-14574
+	RESERVED
+CVE-2017-14573
+	RESERVED
+CVE-2017-14572
+	RESERVED
+CVE-2017-14571
+	RESERVED
+CVE-2017-14570
+	RESERVED
+CVE-2017-14569
+	RESERVED
+CVE-2017-14568
+	RESERVED
+CVE-2017-14567
+	RESERVED
+CVE-2017-14566
+	RESERVED
+CVE-2017-14565
+	RESERVED
+CVE-2017-14564
+	RESERVED
+CVE-2017-14563
+	RESERVED
+CVE-2017-14562
+	RESERVED
+CVE-2017-14561
+	RESERVED
+CVE-2017-14560
+	RESERVED
+CVE-2017-14559
+	RESERVED
+CVE-2017-14558
+	RESERVED
+CVE-2017-14557
+	RESERVED
+CVE-2017-14556
+	RESERVED
+CVE-2017-14555
+	RESERVED
+CVE-2017-14554
+	RESERVED
+CVE-2017-14553
+	RESERVED
+CVE-2017-14552
+	RESERVED
+CVE-2017-14551
+	RESERVED
+CVE-2017-14550
+	RESERVED
+CVE-2017-14549
+	RESERVED
+CVE-2017-14548
+	RESERVED
+CVE-2017-14547
+	RESERVED
+CVE-2017-14546
+	RESERVED
+CVE-2017-14545
+	RESERVED
+CVE-2017-14544
+	RESERVED
+CVE-2017-14543
+	RESERVED
+CVE-2017-14542
+	RESERVED
+CVE-2017-14541
+	RESERVED
+CVE-2017-14540
+	RESERVED
+CVE-2017-14539
+	RESERVED
+CVE-2017-14538
+	RESERVED
+CVE-2017-14537
+	RESERVED
+CVE-2017-14536
+	RESERVED
+CVE-2017-14535
+	RESERVED
+CVE-2017-14534 (Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via ...)
+	TODO: check
+CVE-2017-14533 (ImageMagick 7.0.6-6 has a memory leak in ReadMATImage in coders/mat.c. ...)
+	TODO: check
+CVE-2017-14532 (ImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in ...)
+	TODO: check
+CVE-2017-14531 (ImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUNImage in ...)
+	TODO: check
+CVE-2017-14530 (WP_Admin_UI in the Crony Cronjob Manager plugin before 0.4.7 for ...)
+	TODO: check
+CVE-2017-14529 (The pe_print_idata function in peXXigen.c in the Binary File Descriptor ...)
+	TODO: check
+CVE-2017-14528 (The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has ...)
+	TODO: check
+CVE-2017-14527
+	RESERVED
+CVE-2017-14526
+	RESERVED
+CVE-2017-14525
+	RESERVED
+CVE-2017-14524
+	RESERVED
+CVE-2017-14523
+	RESERVED
+CVE-2017-14522
+	RESERVED
+CVE-2017-14521
+	RESERVED
+CVE-2017-14520 (In Poppler 0.59.0, a floating point exception occurs in ...)
+	TODO: check
+CVE-2017-14519 (In Poppler 0.59.0, memory corruption occurs in a call to ...)
+	TODO: check
+CVE-2017-14518 (In Poppler 0.59.0, a floating point exception exists in the ...)
+	TODO: check
+CVE-2017-14517 (In Poppler 0.59.0, a NULL Pointer Dereference exists in the ...)
+	TODO: check
+CVE-2017-14516
+	RESERVED
+CVE-2017-14515 (Heap-based Buffer Overflow on Tenda W15E devices before 15.11.0.14 ...)
+	TODO: check
+CVE-2017-14514 (Directory Traversal on Tenda W15E devices before 15.11.0.14 allows ...)
+	TODO: check
+CVE-2017-14513 (Directory traversal vulnerability in MetInfo 5.3.17 allows remote ...)
+	TODO: check
+CVE-2017-14512 (NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via ...)
+	TODO: check
+CVE-2017-14511 (An issue was discovered in SAP E-Recruiting (aka ERECRUIT) 605 through ...)
+	TODO: check
+CVE-2017-14510 (An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before ...)
+	TODO: check
+CVE-2017-14509 (An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before ...)
+	TODO: check
+CVE-2017-14508 (An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before ...)
+	TODO: check
+CVE-2016-10511
+	RESERVED
 CVE-2017-14507
 	RESERVED
 CVE-2017-14506
@@ -6467,10 +6615,10 @@
 	RESERVED
 CVE-2017-12158
 	RESERVED
-CVE-2017-12157
-	RESERVED
-CVE-2017-12156
-	RESERVED
+CVE-2017-12157 (In Moodle 3.x, various course reports allow teachers to view details ...)
+	TODO: check
+CVE-2017-12156 (Moodle 3.x has XSS in the contact form on the "non-respondents" page in ...)
+	TODO: check
 CVE-2017-12155
 	RESERVED
 CVE-2017-12154 [kvm: nVMX: L2 guest could access hardware(L0) CR8 register]
@@ -14363,8 +14511,8 @@
 	NOT-FOR-US: Wordpress plugin
 CVE-2017-9335
 	RESERVED
-CVE-2017-9333
-	RESERVED
+CVE-2017-9333 (OpenWebif 1.2.5 allows remote code execution via a URL to the CallOPKG ...)
+	TODO: check
 CVE-2017-9332 (The smarty_self function in modules/module_smarty.php in PivotX 2.3.11 ...)
 	NOT-FOR-US: PivotX
 CVE-2017-9331 (The Agenda component in Telaxus EPESI 1.8.2 and earlier has a Stored ...)