Secure testing commits - Sep 2007 - r6668 - data/CVE

Author: joeyh
Date: 2007-09-21 21:14:07 +0000 (Fri, 21 Sep 2007)
New Revision: 6668

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
==================================================================---
data/CVE/list	2007-09-21 18:02:41 UTC (rev 6667)
+++ data/CVE/list	2007-09-21 21:14:07 UTC (rev 6668)
@@ -1,3 +1,61 @@
+CVE-2007-5019 (Buffer overflow in the Sun Java Web Start ActiveX control in
Java ...)
+	TODO: check
+CVE-2007-5018 (Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows
remote ...)
+	TODO: check
+CVE-2007-5017 (Absolute path traversal vulnerability in a certain ActiveX
control in ...)
+	TODO: check
+CVE-2007-5016 (SQL injection vulnerability in userreviews.php in OneCMS 2.4
allows ...)
+	TODO: check
+CVE-2007-5015 (Multiple PHP remote file inclusion vulnerabilities in Streamline
PHP ...)
+	TODO: check
+CVE-2007-5014 (Multiple PHP remote file inclusion vulnerabilities in pSlash
0.70 ...)
+	TODO: check
+CVE-2007-5013 (Multiple cross-site scripting (XSS) vulnerabilities in index.php
in ...)
+	TODO: check
+CVE-2007-5012 (Cross-site scripting (XSS) vulnerability in picture.php in ...)
+	TODO: check
+CVE-2007-5011 (webbatch.exe in WebBatch allows remote attackers to obtain
sensitive ...)
+	TODO: check
+CVE-2007-5010 (Cross-site scripting (XSS) vulnerability in WebBatch allows
remote ...)
+	TODO: check
+CVE-2007-5009 (PHP remote file inclusion vulnerability in ...)
+	TODO: check
+CVE-2007-5008 (The logins command in HP-UX B.11.31, B.11.23, and B.11.11 does
not ...)
+	TODO: check
+CVE-2007-5007 (Stack-based buffer overflow in the ir_fetch_seq function in
balsa ...)
+	TODO: check
+CVE-2007-5006
+	RESERVED
+CVE-2007-5005
+	RESERVED
+CVE-2007-5004
+	RESERVED
+CVE-2007-5003
+	RESERVED
+CVE-2007-5002
+	RESERVED
+CVE-2007-5001
+	RESERVED
+CVE-2007-5000
+	RESERVED
+CVE-2007-4999
+	RESERVED
+CVE-2007-4998
+	RESERVED
+CVE-2007-4997
+	RESERVED
+CVE-2007-4996
+	RESERVED
+CVE-2007-4995
+	RESERVED
+CVE-2007-4994
+	RESERVED
+CVE-2007-4993
+	RESERVED
+CVE-2007-4992
+	RESERVED
+CVE-2007-4991
+	RESERVED
 CVE-2007-4990
 	RESERVED
 CVE-2007-4989
@@ -140,7 +198,7 @@
 	RESERVED
 CVE-2007-4923 (PHP remote file inclusion vulnerability in
admin.joomlaradiov5.php in ...)
 	NOT-FOR-US: Joomla extension
-CVE-2007-4922 (SQL injection vulnerability in index.php in the jeuxflash 1.0
module ...)
+CVE-2007-4922 (SQL injection vulnerability in play.php in the jeuxflash 1.0
module ...)
 	NOT-FOR-US: KwsPhp
 CVE-2007-4921 (PHP remote file inclusion vulnerability in
_includes/settings.inc.php ...)
 	NOT-FOR-US: Ajax File Browser
@@ -148,7 +206,7 @@
 	NOT-FOR-US: Webquest
 CVE-2007-4919 (Multiple SQL injection vulnerabilities in JBlog 1.0 allow (1)
remote ...)
 	NOT-FOR-US: Jblog
-CVE-2007-4918 (SQL injection vulnerability in index.php in Gelato allows remote
...)
+CVE-2007-4918 (SQL injection vulnerability in classes/gelato.class.php in
Gelato ...)
 	NOT-FOR-US: Gelato
 CVE-2007-4917 (Cross-site scripting (XSS) vulnerability in tracking.php in
PHP-Stats ...)
 	NOT-FOR-US: Php-Stats
@@ -469,7 +527,7 @@
 	- joomla <itp> (bug #326398)
 CVE-2007-4777 (SQL injection vulnerability in Joomla! 1.5 before RC2 (aka
Endeleo) ...)
 	- joomla <itp> (bug #326398)
-CVE-2007-4776 (Buffer overflow in Microsoft Visual Basic 6.0 allows
user-assisted ...)
+CVE-2007-4776 (Buffer overflow in Microsoft Visual Basic 6.0 and Enterprise
Edition ...)
 	NOT-FOR-US: Microsoft Visual Basic
 CVE-2007-4775
 	RESERVED