[Git][security-tracker-team/security-tracker][master] automatic update

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
223eb76b by security tracker role at 2019-03-06T20:10:25Z
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,39 @@
+CVE-2019-9603 (MiniCMS 1.10 allows mc-admin/post.php?state=publish&delete= CSRF to ...)
+	TODO: check
+CVE-2019-9602
+	RESERVED
+CVE-2019-9601 (The ApowerManager application through 3.1.7 for Android allows remote ...)
+	TODO: check
+CVE-2019-9600 (The Olive Tree FTP Server (aka com.theolivetree.ftpserver) application ...)
+	TODO: check
+CVE-2019-9599 (The AirDroid application through 4.2.1.6 for Android allows remote ...)
+	TODO: check
+CVE-2019-9598
+	RESERVED
+CVE-2019-9597
+	RESERVED
+CVE-2019-9596
+	RESERVED
+CVE-2019-9595 (AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter. ...)
+	TODO: check
+CVE-2019-9594 (BlueCMS 1.6 allows SQL Injection via the user_id parameter in an ...)
+	TODO: check
+CVE-2019-9593 (A reflected Cross-site scripting (XSS) vulnerability in ShoreTel ...)
+	TODO: check
+CVE-2019-9592 (A reflected Cross-site scripting (XSS) vulnerability in ShoreTel ...)
+	TODO: check
+CVE-2019-9591 (A reflected Cross-site scripting (XSS) vulnerability in ShoreTel ...)
+	TODO: check
+CVE-2019-9590 (An issue was discovered on TENGCONTROL T-920 PLC v5.5 devices. It ...)
+	TODO: check
+CVE-2019-9589 (There is a NULL pointer dereference vulnerability in ...)
+	TODO: check
+CVE-2019-9588 (There is an Invalid memory access in gAtomicIncrement() located at ...)
+	TODO: check
+CVE-2019-9587 (There is a stack consumption issue in md5Round1() located in Decrypt.cc ...)
+	TODO: check
+CVE-2019-9586
+	RESERVED
 CVE-2019-9585
 	RESERVED
 CVE-2019-9584
@@ -13146,8 +13182,7 @@ CVE-2019-3825 (A vulnerability was discovered in gdm before 3.31.4. When timed l
 	[stretch] - gdm3 <no-dsa> (Minor issue)
 	[jessie] - gdm3 <ignored> (Minor issue)
 	NOTE: https://gitlab.gnome.org/GNOME/gdm/issues/460
-CVE-2019-3824 [Out of bound read in ldb_wildcard_compare]
-	RESERVED
+CVE-2019-3824 (A flaw was found in the way an LDAP search expression could crash the ...)
 	{DSA-4397-1 DLA-1699-1}
 	- ldb 2:1.5.1+really1.4.3-2
 	- samba <unfixed> (unimportant)
@@ -24632,8 +24667,7 @@ CVE-2019-0202
 	RESERVED
 CVE-2019-0201
 	RESERVED
-CVE-2019-0200 [Denial of Service due to malformed AMQP 0-8 to 0-10 commands]
-	RESERVED
+CVE-2019-0200 (A Denial of Service vulnerability was found in Apache Qpid Broker-J ...)
 	- qpid-java <itp> (bug #840131)
 CVE-2019-0199
 	RESERVED
@@ -24662,8 +24696,7 @@ CVE-2019-0189
 	RESERVED
 CVE-2019-0188
 	RESERVED
-CVE-2019-0187 [Apache JMeter Missing client auth for RMI connection when distributed test is used]
-	RESERVED
+CVE-2019-0187 (Unauthenticated RCE is possible when JMeter is used in distributed ...)
 	- jakarta-jmeter <undetermined>
 	NOTE: https://bz.apache.org/bugzilla/show_bug.cgi?id=62743
 CVE-2019-0186



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/223eb76b09cea419c1e4331c1fd4f9eb3faee757

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/223eb76b09cea419c1e4331c1fd4f9eb3faee757
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190306/fa66adf1/attachment.html>