Author: nion Date: 2008-03-31 12:34:30 +0000 (Mon, 31 Mar 2008) New Revision: 8455 Modified: data/CVE/list Log: NFUs cuteflow has an itp (CVE-2008-1493) new plone3 issues CVE-2008-139[3-6] Modified: data/CVE/list ==================================================================--- data/CVE/list 2008-03-31 11:57:00 UTC (rev 8454) +++ data/CVE/list 2008-03-31 12:34:30 UTC (rev 8455) @@ -73,27 +73,27 @@ NOTE: vulnerable code introduced later than 2.0.12.10, see: http://hg.quakenet.org/snircd/rev/1ee48bee2f20 NOTE: no other possible NULL ptr dereferences of p found and PoC not reproducible CVE-2008-1500 (Cross-site scripting (XSS) vulnerability in index.php in TinyPortal ...) - TODO: check + NOT-FOR-US: TinyPortal CVE-2008-1499 (Cross-site scripting (XSS) vulnerability in frontend/x/manpage.html in ...) - TODO: check + NOT-FOR-US: cPanel CVE-2008-1498 (Stack-based buffer overflow in the IMAP service in NetWin Surgemail ...) - TODO: check + NOT-FOR-US: Surgemail CVE-2008-1497 (Stack-based buffer overflow in the IMAP service in NetWin SurgeMail ...) - TODO: check + NOT-FOR-US: Surgemail CVE-2008-1496 (Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and ...) - TODO: check + NOT-FOR-US: PEEL CVE-2008-1495 (Unrestricted file upload vulnerability in administrer/produits.php in ...) - TODO: check + NOT-FOR-US: PEEL CVE-2008-1494 (SQL injection vulnerability in inc/module/online.php in Easy-Clanpage ...) - TODO: check + NOT-FOR-US: Easy-Clanpage CVE-2008-1493 (Directory traversal vulnerability in login.php in Cuteflow Bin 1.5.0 ...) - TODO: check + - cuteflow <itp> (bug #465372) CVE-2008-1492 (Multiple directory traversal vulnerabilities in CoronaMatrix ...) - TODO: check + NOT-FOR-US: CoronaMatrix CVE-2008-1491 (Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ...) - TODO: check + NOT-FOR-US: ASUS Remote Console CVE-2008-1490 (Buffer overflow in a certain Aurigma ActiveX control in ...) - TODO: check + NOT-FOR-US: ImageUploader4 CVE-2008-XXXX [policyd-weight tempfile race] - policyd-weight 0.1.14.17-1 (low) [etch] - policyd-weight 0.1.14-beta-6etch2 @@ -285,13 +285,13 @@ CVE-2008-1397 (Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 ...) NOT-FOR-US: Check Point VPN CVE-2008-1396 (Plone CMS 3.x uses invariant data (a client username and a server ...) - TODO: check + - plone3 <unfixed> (bug #473571) CVE-2008-1395 (Plone CMS does not record users'' authentication states, and implements ...) - TODO: check + - plone3 <unfixed> (bug #473571) CVE-2008-1394 (Plone CMS before 3 places a base64 encoded form of the username and ...) - TODO: check + - plone3 <unfixed> (bug #473571) CVE-2008-1393 (Plone CMS 3.0.5, and probably other 3.x versions, places a base64 ...) - TODO: check + - plone3 <unfixed> (bug #473571) CVE-2008-1392 (The default configuration of VMware Workstation 6.0.2, VMware Player ...) NOT-FOR-US: Vmware CVE-2007-6711 (Unspecified vulnerability in customer.php in FreeWebshop.org 2.2.5, ...)