Author: joeyh Date: 2006-04-13 09:14:23 +0000 (Thu, 13 Apr 2006) New Revision: 3794 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list ==================================================================--- data/CVE/list 2006-04-13 08:04:28 UTC (rev 3793) +++ data/CVE/list 2006-04-13 09:14:23 UTC (rev 3794) @@ -4,6 +4,7 @@ - mailman <unfixed> [sarge] - mailman <not-affected> (Only affects Mailman 2.17) CVE-2006-1711 [plone data manipulation] + {DSA-1032-1} - zope-cmfplone 2.1.2-2 CVE-2006-1709 (Cross-site scripting (XSS) vulnerability in shop_main.cgi in ...) TODO: check @@ -537,6 +538,7 @@ - mediawiki 1.4.15-1 - mediawiki1.5 1.5.8-1 CVE-2006-1491 (Eval injection vulnerability in Horde Application Framework versions ...) + {DSA-1033-1} - horde3 3.1.1-1 (bug #361967) CVE-2006-1490 (PHP before 5.1.3-RC1 might allow remote attackers to obtain portions ...) - php5 <unfixed> (bug #359904; low) @@ -1019,6 +1021,7 @@ CVE-2006-1261 (Multiple cross-site scripting (XSS) vulnerabilities in ASPPortal 3.00 ...) NOT-FOR-US: ASPPortal CVE-2006-1260 (Horde Application Framework 3.0.9 allows remote attackers to read ...) + {DSA-1033-1} - horde3 3.1-1 (bug #358812) CVE-2006-1259 (Multiple SQL injection vulnerabilities in Maian Support 1.0 allow ...) NOT-FOR-US: Maian Support @@ -4937,6 +4940,7 @@ CVE-2005-4191 (Multiple cross-site scripting (XSS) vulnerabilities in ...) - nag2 2.0.4-1 (bug #342945; medium) CVE-2005-4190 (Multiple cross-site scripting (XSS) vulnerabilities in Horde ...) + {DSA-1033-1} - horde3 3.0.9-1 (bug #342942; bug #354512; medium) CVE-2005-4189 (Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith ...) {DSA-970-1}