Author: joeyh Date: 2009-06-22 21:14:23 +0000 (Mon, 22 Jun 2009) New Revision: 12181 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list ==================================================================--- data/CVE/list 2009-06-22 13:28:41 UTC (rev 12180) +++ data/CVE/list 2009-06-22 21:14:23 UTC (rev 12181) @@ -1,3 +1,43 @@ +CVE-2009-2140 + RESERVED +CVE-2009-2139 + RESERVED +CVE-2009-2138 (Multiple open redirect vulnerabilities in TBDev.NET 01-01-08 allow ...) + TODO: check +CVE-2009-2137 (Memory leak in the Ultra-SPARC T2 crypto provider device driver (aka ...) + TODO: check +CVE-2009-2136 (Unspecified vulnerability in the TCP/IP networking stack in Sun ...) + TODO: check +CVE-2009-2135 (Multiple race conditions in the Solaris Event Port API in Sun Solaris ...) + TODO: check +CVE-2009-2134 (pivot/tb.php in Pivot 1.40.4 and 1.40.7 allows remote attackers to ...) + TODO: check +CVE-2009-2133 (Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.40.4 ...) + TODO: check +CVE-2009-2132 (Directory traversal vulnerability in global.php in 4images before ...) + TODO: check +CVE-2009-2131 (Cross-site scripting (XSS) vulnerability in 4images 1.7.7 and earlier ...) + TODO: check +CVE-2009-2130 (Elvin 1.2.0 allows remote attackers to read the PHP source code of (1) ...) + TODO: check +CVE-2009-2129 (Cross-site request forgery (CSRF) vulnerability in login.php in Elvin ...) + TODO: check +CVE-2009-2128 (SQL injection vulnerability in close_bug.php in Elvin before 1.2.1 ...) + TODO: check +CVE-2009-2127 (Cross-site scripting (XSS) vulnerability in show_activity.php in Elvin ...) + TODO: check +CVE-2009-2126 (Cross-site scripting (XSS) vulnerability in close_bug.php in Elvin ...) + TODO: check +CVE-2009-2125 (delete_bug.php in Elvin before 1.2.1 does not require administrative ...) + TODO: check +CVE-2009-2124 (Directory traversal vulnerability in page.php in Elvin 1.2.0 allows ...) + TODO: check +CVE-2009-2123 (Multiple SQL injection vulnerabilities in Elvin 1.2.0 allow remote ...) + TODO: check +CVE-2009-2122 (SQL injection vulnerability in viewimg.php in the Paolo Palmonari ...) + TODO: check +CVE-2009-2121 + RESERVED CVE-2009-XXXX [mahara multiple XSS issues] - mahara 1.1.5-1 (low) NOTE: CVE ids requested from joey @@ -1019,8 +1059,8 @@ TODO: check CVE-2009-1693 (WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and ...) TODO: check -CVE-2009-1692 - RESERVED +CVE-2009-1692 (WebKit in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod ...) + TODO: check CVE-2009-1691 (Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari ...) - webkit <unfixed> TODO: File bug @@ -1038,16 +1078,16 @@ TODO: check CVE-2009-1684 (Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari ...) TODO: check -CVE-2009-1683 - RESERVED +CVE-2009-1683 (The Telephony component in Apple iPhone OS 1.0 through 2.2.1 and ...) + TODO: check CVE-2009-1682 (Apple Safari before 4.0 does not properly check for revoked Extended ...) NOT-FOR-US: Apple Safari CVE-2009-1681 (WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and ...) TODO: check -CVE-2009-1680 - RESERVED -CVE-2009-1679 - RESERVED +CVE-2009-1680 (Safari in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod ...) + TODO: check +CVE-2009-1679 (The Profiles component in Apple iPhone OS 1.0 through 2.2.1 and iPhone ...) + TODO: check CVE-2008-6813 (SQL injection vulnerability in index.php in phpWebNews 0.2 MySQL ...) NOT-FOR-US: phpWebNews CVE-2008-6812 (SQL injection vulnerability in bukutamu.php in phpWebNews 0.2 MySQL ...) @@ -3598,14 +3638,14 @@ NOT-FOR-US: PHPRunner CVE-2009-0962 (Unspecified vulnerability in Futomi''s CGI Cafe MP Form Mail CGI ...) NOT-FOR-US: Futomi''s CGI Cafe MP Form Mail CGI eCommerce -CVE-2009-0961 - RESERVED -CVE-2009-0960 - RESERVED -CVE-2009-0959 - RESERVED -CVE-2009-0958 - RESERVED +CVE-2009-0961 (The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS ...) + TODO: check +CVE-2009-0960 (The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS ...) + TODO: check +CVE-2009-0959 (The MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone ...) + TODO: check +CVE-2009-0958 (Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 ...) + TODO: check CVE-2009-0957 (Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows ...) NOT-FOR-US: Apple QuickTime CVE-2009-0956 (Apple QuickTime before 7.6.2 does not properly initialize memory ...) @@ -6812,7 +6852,7 @@ NOT-FOR-US: CoreGraphics in Apple Mac OS CVE-2009-0154 (Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac ...) NOT-FOR-US: Apple Type Services -CVE-2009-0153 (International Components for Unicode (ICU) in Apple Mac OS X 10.5 ...) +CVE-2009-0153 (International Components for Unicode (ICU) 4.0, 3.6, and other 3.x ...) NOT-FOR-US: Apple Mac OS X CVE-2009-0152 (iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL ...) NOT-FOR-US: iChat in Apple Mac OS X