[Git][security-tracker-team/security-tracker][master] automatic update

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0ff6f6e8 by security tracker role at 2019-02-10T08:10:12Z
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,9 +1,31 @@
-CVE-2019-7675
+CVE-2019-7686
 	RESERVED
-CVE-2019-7674
+CVE-2019-7685
 	RESERVED
-CVE-2019-7673
+CVE-2019-7684 (inxedu through 2018-12-24 has a vulnerability that can lead to the ...)
+	TODO: check
+CVE-2019-7683
+	RESERVED
+CVE-2019-7682
+	RESERVED
+CVE-2019-7681
+	RESERVED
+CVE-2019-7680
 	RESERVED
+CVE-2019-7679
+	RESERVED
+CVE-2019-7678 (A directory traversal vulnerability was discovered in Enphase Envoy ...)
+	TODO: check
+CVE-2019-7677 (XSS exists in Enphase Envoy R3.*.* via the profileName parameter to the ...)
+	TODO: check
+CVE-2019-7676 (A weak password vulnerability was discovered in Enphase Envoy R3.*.*. ...)
+	TODO: check
+CVE-2019-7675 (An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. The ...)
+	TODO: check
+CVE-2019-7674 (An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. ...)
+	TODO: check
+CVE-2019-7673 (An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. ...)
+	TODO: check
 CVE-2019-7672
 	RESERVED
 CVE-2019-7671
@@ -44,8 +66,8 @@ CVE-2019-7660
 	RESERVED
 CVE-2019-7659 (Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a ...)
 	TODO: check
-CVE-2009-5154
-	RESERVED
+CVE-2009-5154 (An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. There is a ...)
+	TODO: check
 CVE-2019-7658
 	RESERVED
 CVE-2019-7657
@@ -34544,8 +34566,8 @@ CVE-2018-13794 (A heap-based buffer overflow exists in stbi__bmp_load_cont in ..
 	NOTE: https://github.com/posva/catimg/pull/41
 CVE-2018-13793 (Multiple Cross Site Request Forgery (CSRF) vulnerabilities in the HTTP ...)
 	NOT-FOR-US: ABBYY FlexiCapture
-CVE-2018-13792
-	RESERVED
+CVE-2018-13792 (Multiple SQL injection vulnerabilities in the monitoring feature in the ...)
+	TODO: check
 CVE-2018-13791 (The HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 allows ...)
 	NOT-FOR-US: ABBYY FlexiCapture
 CVE-2018-13790 (A Server Side Request Forgery (SSRF) vulnerability in ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0ff6f6e8d01817757455e9f5715b72c72ed6266b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0ff6f6e8d01817757455e9f5715b72c72ed6266b
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190210/c219e050/attachment-0001.html>