[Git][security-tracker-team/security-tracker][master] automatic update

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a25c4b07 by security tracker role at 2018-05-28T20:10:21+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,4 +1,22 @@
-CVE-2018-11508 [compat: fix 4-byte infoleak via uninitialized struct field]
+CVE-2018-11517 (mySCADA myPRO 7 allows remote attackers to discover all ProjectIDs in a ...)
+	TODO: check
+CVE-2018-11516 (The vlc_demux_chained_Delete function in input/demux_chained.c in ...)
+	TODO: check
+CVE-2018-11515 (The wpForo plugin through 2018-02-05 for WordPress has SQL Injection ...)
+	TODO: check
+CVE-2018-11514 (PHP Scripts Mall Naukri Clone Script through 3.0.3 allows Unrestricted ...)
+	TODO: check
+CVE-2018-11513
+	RESERVED
+CVE-2018-11512 (Stored cross-site scripting (XSS) vulnerability in the "Website's name" ...)
+	TODO: check
+CVE-2018-11511
+	RESERVED
+CVE-2018-11510
+	RESERVED
+CVE-2018-11509
+	RESERVED
+CVE-2018-11508 (The compat_get_timex function in kernel/compat.c in the Linux kernel ...)
 	- linux 4.16.12-1
 	[stretch] - linux <not-affected> (Vulnerable code introduced later)
 	[jessie] - linux <not-affected> (Vulnerable code introduced later)
@@ -175,8 +193,8 @@ CVE-2018-11432
 	RESERVED
 CVE-2018-11431
 	RESERVED
-CVE-2018-11430
-	RESERVED
+CVE-2018-11430 (An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. ...)
+	TODO: check
 CVE-2018-11429
 	RESERVED
 CVE-2018-11428
@@ -518,8 +536,8 @@ CVE-2018-11311 (A hardcoded FTP username of myscada and password of Vikuk63 in .
 	NOT-FOR-US: mySCADA
 CVE-2018-11310
 	RESERVED
-CVE-2018-11309
-	RESERVED
+CVE-2018-11309 (Blind SQL injection in coupon_code in the MemberMouse plugin 2.2.8 and ...)
+	TODO: check
 CVE-2018-11308
 	RESERVED
 CVE-2018-11307
@@ -1919,8 +1937,8 @@ CVE-2018-10733 (There is a heap-based buffer over-read in the function ...)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1574844
 	NOTE: https://git.gnome.org/browse/libgxps/commit/?id=b458226e162fe1ffe7acb4230c114a52ada5131b
 	NOTE: https://git.gnome.org/browse/libgxps/commit/?id=133fe2a96e020d4ca65c6f64fb28a404050ebbfd
-CVE-2018-10732
-	RESERVED
+CVE-2018-10732 (The REST API in Dataiku DSS before 4.2.3 allows remote attackers to ...)
+	TODO: check
 CVE-2018-10731 (All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products ...)
 	NOT-FOR-US: Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products
 CVE-2018-10730 (All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a25c4b07d11140f359abab62ca784a9d14805789

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a25c4b07d11140f359abab62ca784a9d14805789
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180528/8aec18b0/attachment.html>