Secure testing commits - Dec 2008 - r10629 - data/CVE

Author: joeyh
Date: 2008-12-05 21:14:13 +0000 (Fri, 05 Dec 2008)
New Revision: 10629

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-12-05 19:10:23 UTC (rev 10628)
+++ data/CVE/list	2008-12-05 21:14:13 UTC (rev 10629)
@@ -1,3 +1,79 @@
+CVE-2008-5360 (Buffer overflow in Java Runtime Environment (JRE) for Sun JDK
and JRE ...)
+	TODO: check
+CVE-2008-5359 (Buffer overflow in Java Runtime Environment (JRE) for Sun JDK
and JRE ...)
+	TODO: check
+CVE-2008-5358 (Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10
and ...)
+	TODO: check
+CVE-2008-5357 (Integer overflow in Java Runtime Environment (JRE) for Sun JDK
and JRE ...)
+	TODO: check
+CVE-2008-5356 (Heap-based buffer overflow in Java Runtime Environment (JRE) for
Sun ...)
+	TODO: check
+CVE-2008-5355 (The "Java Update" feature for Java Runtime
Environment (JRE) for Sun ...)
+	TODO: check
+CVE-2008-5354 (Stack-based buffer overflow in Java Runtime Environment (JRE)
for Sun ...)
+	TODO: check
+CVE-2008-5353 (Unspecified vulnerability in Java Runtime Environment (JRE) for
Sun ...)
+	TODO: check
+CVE-2008-5352 (Integer overflow in the JAR unpacking utility (unpack200) in the
...)
+	TODO: check
+CVE-2008-5351 (Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10
and ...)
+	TODO: check
+CVE-2008-5350 (Unspecified vulnerability in Java Runtime Environment (JRE) for
Sun ...)
+	TODO: check
+CVE-2008-5349 (Unspecified vulnerability in Java Runtime Environment (JRE) for
Sun ...)
+	TODO: check
+CVE-2008-5348 (Unspecified vulnerability in Java Runtime Environment (JRE) for
Sun ...)
+	TODO: check
+CVE-2008-5347 (Multiple unspecified vulnerabilities in Java Runtime Environment
(JRE) ...)
+	TODO: check
+CVE-2008-5346 (Unspecified vulnerability in Java Runtime Environment (JRE) for
Sun ...)
+	TODO: check
+CVE-2008-5345 (Unspecified vulnerability in Java Runtime Environment (JRE) with
Sun ...)
+	TODO: check
+CVE-2008-5344 (Unspecified vulnerability in Java Web Start (JWS) and Java
Plug-in ...)
+	TODO: check
+CVE-2008-5343 (Unspecified vulnerability in Java Web Start (JWS) and Java
Plug-in ...)
+	TODO: check
+CVE-2008-5342 (Unspecified vulnerability in the BasicService for Java Web Start
(JWS) ...)
+	TODO: check
+CVE-2008-5341 (Unspecified vulnerability in Java Web Start (JWS) and Java
Plug-in ...)
+	TODO: check
+CVE-2008-5340 (Unspecified vulnerability in Java Web Start (JWS) and Java
Plug-in ...)
+	TODO: check
+CVE-2008-5339 (Unspecified vulnerability in Java Web Start (JWS) and Java
Plug-in ...)
+	TODO: check
+CVE-2008-5338 (Cross-site scripting (XSS) vulnerability in info.php in
Bandwebsite ...)
+	TODO: check
+CVE-2008-5337 (SQL injection vulnerability in lyrics.php in Bandwebsite (aka
Bandsite ...)
+	TODO: check
+CVE-2008-5336 (SQL injection vulnerability in index.php in WebStudio CMS allows
...)
+	TODO: check
+CVE-2008-5335 (SQL injection vulnerability in messages.php in PHP-Fusion
6.01.15 and ...)
+	TODO: check
+CVE-2008-5334 (PHP remote file inclusion vulnerability in includes/common.php
in ...)
+	TODO: check
+CVE-2008-5333 (SQL injection vulnerability in members.php in NitroTech 0.0.3a
allows ...)
+	TODO: check
+CVE-2008-5332 (Multiple PHP remote file inclusion vulnerabilities in Pie 0.5.3
allow ...)
+	TODO: check
+CVE-2008-5331 (Adobe Acrobat 9 uses more efficient encryption than previous
versions, ...)
+	TODO: check
+CVE-2008-5330 (Multiple cross-site scripting (XSS) vulnerabilities in the web
...)
+	TODO: check
+CVE-2008-5329 (ClearQuest Web in IBM Rational ClearQuest MultiSite before 7.1
allows ...)
+	TODO: check
+CVE-2008-5328 (The ClearQuest Maintenance Tool in IBM Rational ClearQuest
before 7 ...)
+	TODO: check
+CVE-2008-5327 (The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7
before ...)
+	TODO: check
+CVE-2008-5326 (The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0
...)
+	TODO: check
+CVE-2008-5325 (Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in
IBM ...)
+	TODO: check
+CVE-2008-5324 (Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in
IBM ...)
+	TODO: check
+CVE-2007-6719 (SQL injection vulnerability in Wiz-Ad 1.3 allows remote
attackers to ...)
+	TODO: check
 CVE-2008-XXXX [php5/ext/zip: ZipArchive::extractTo() Directory Traversal
Vulnerability]
 	- php5 <unfixed> (bug #507857)
 	- php4 <unfixed>
@@ -2034,8 +2110,8 @@
 	RESERVED
 CVE-2008-4417
 	RESERVED
-CVE-2008-4416
-	RESERVED
+CVE-2008-4416 (Unspecified vulnerability in the kernel in HP HP-UX B.11.31
allows ...)
+	TODO: check
 CVE-2008-4415 (Unspecified vulnerability in HP Service Manager (HPSM) before
7.01.71 ...)
 	NOT-FOR-US: HP Service Manager (HPSM)
 CVE-2008-4414 (Unspecified vulnerability in the AdvFS showfile command in HP
Tru64 ...)
@@ -6994,7 +7070,7 @@
 	RESERVED
 CVE-2008-2380
 	RESERVED
-CVE-2008-2379 [squirrelmail XSS]
+CVE-2008-2379 (Cross-site scripting (XSS) vulnerability in SquirrelMail before
1.4.17 ...)
 	- squirrelmail <unfixed>
 CVE-2008-2378 (Untrusted search path vulnerability in hfkernel in hf 0.7.3 and
0.8 ...)
 	{DSA-1668-1}
@@ -7671,8 +7747,8 @@
 	NOT-FOR-US: PHP Forge
 CVE-2008-2087 (SQL injection vulnerability in search_result.php in Softbiz Web
Host ...)
 	NOT-FOR-US: Softbiz Web Host Directory Script
-CVE-2008-2086
-	RESERVED
+CVE-2008-2086 (Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10
and ...)
+	TODO: check
 CVE-2008-2084 (SQL injection vulnerability in topics.php in the MyArticles 0.6
beta-1 ...)
 	NOT-FOR-US: MyArticles
 CVE-2008-2083 (SQL injection vulnerability in directory.php in Prozilla Hosting
...)