Author: joeyh Date: 2011-08-08 21:14:20 +0000 (Mon, 08 Aug 2011) New Revision: 17070 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list ==================================================================--- data/CVE/list 2011-08-08 11:25:49 UTC (rev 17069) +++ data/CVE/list 2011-08-08 21:14:20 UTC (rev 17070) @@ -554,9 +554,11 @@ CVE-2011-2754 (Cross-site scripting (XSS) vulnerability in the PageBuilder2 (aka Page ...) NOT-FOR-US: IBM WebSphere Portal CVE-2011-2753 (Multiple cross-site request forgery (CSRF) vulnerabilities in ...) + {DSA-2291-1} - squirrelmail 2:1.4.22-1 (low) NOTE: difficult to exploit CVE-2011-2752 (CRLF injection vulnerability in SquirrelMail 1.4.21 and earlier allows ...) + {DSA-2291-1} - squirrelmail 2:1.4.22-1 (low) NOTE: difficult to exploit CVE-2011-2751 (SQL injection vulnerability in Parodia before 6.809 allows remote ...) @@ -2437,6 +2439,7 @@ CVE-2011-2024 (Cisco Network Registrar before 7.2 has a default administrative ...) NOT-FOR-US: Cisco CVE-2011-2023 (Cross-site scripting (XSS) vulnerability in functions/mime.php in ...) + {DSA-2291-1} - squirrelmail 2:1.4.22-1 CVE-2011-2022 (The agp_generic_remove_memory function in drivers/char/agp/generic.c ...) {DSA-2264-1 DSA-2240-1} @@ -8548,9 +8551,11 @@ - opensc 0.11.13-1.1 (low; bug #607427) [lenny] - opensc 0.11.4-5+lenny1.1 CVE-2010-4555 (Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail ...) + {DSA-2291-1} - squirrelmail 2:1.4.22-1 (low) NOTE: difficult to exploit CVE-2010-4554 (functions/page_header.php in SquirrelMail 1.4.21 and earlier does not ...) + {DSA-2291-1} - squirrelmail 2:1.4.22-1 CVE-2010-4553 (An unspecified Domino API in IBM Lotus Notes Traveler before 8.5.1.1 ...) NOT-FOR-US: IBM Lotus Notes Traveler