Author: joeyh
Date: 2010-05-17 21:15:08 +0000 (Mon, 17 May 2010)
New Revision: 14697
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
==================================================================---
data/CVE/list 2010-05-17 18:29:09 UTC (rev 14696)
+++ data/CVE/list 2010-05-17 21:15:08 UTC (rev 14697)
@@ -1,3 +1,5 @@
+CVE-2010-1940 (Apple Safari 4.0.5 on Windows sends the "Authorization:
Basic" header ...)
+ TODO: check
CVE-2010-1939 (Use-after-free vulnerability in Apple Safari 4.0.5 on Windows
allows ...)
TODO: check
CVE-2010-1938
@@ -724,14 +726,13 @@
RESERVED
CVE-2010-1625
RESERVED
-CVE-2010-1624
- RESERVED
+CVE-2010-1624 (The msn_emoticon_msg function in slp.c in the MSN protocol
plugin in ...)
+ TODO: check
CVE-2010-1623
RESERVED
CVE-2010-1622
RESERVED
-CVE-2010-1621 [mysql plugin issue]
- RESERVED
+CVE-2010-1621 (The mysql_uninstall_plugin function in sql/sql_plugin.cc in
MySQL ...)
- mysql <undetermined>
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=590190
TODO: check
@@ -861,20 +862,20 @@
RESERVED
CVE-2010-1569
RESERVED
-CVE-2010-1568
- RESERVED
-CVE-2010-1567
- RESERVED
+CVE-2010-1568 (The Send Secure functionality in the Cisco IronPort Desktop Flag
...)
+ TODO: check
+CVE-2010-1567 (The SIP implementation on the Cisco PGW 2200 Softswitch with
software ...)
+ TODO: check
CVE-2010-1566
RESERVED
-CVE-2010-1565
- RESERVED
-CVE-2010-1563
- RESERVED
-CVE-2010-1562
- RESERVED
-CVE-2010-1561
- RESERVED
+CVE-2010-1565 (Unspecified vulnerability in the SIP implementation on the Cisco
PGW ...)
+ TODO: check
+CVE-2010-1563 (The SIP implementation on the Cisco PGW 2200 Softswitch with
software ...)
+ TODO: check
+CVE-2010-1562 (The SIP implementation on the Cisco PGW 2200 Softswitch with
software ...)
+ TODO: check
+CVE-2010-1561 (The SIP implementation on the Cisco PGW 2200 Softswitch with
software ...)
+ TODO: check
CVE-2010-1560 (Buffer overflow in the REPEAT function in IBM DB2 9.1 before FP9
...)
NOT-FOR-US: IBM DB2
CVE-2010-1559 (SQL injection vulnerability in the SermonSpeaker
(com_sermonspeaker) ...)
@@ -925,12 +926,12 @@
CVE-2010-XXXX [gitolite two weaknesses]
- gitolite 1.4.2-1 (medium)
NOTE: http://secunia.com/advisories/39587/
-CVE-2010-1558
- RESERVED
-CVE-2010-1557
- RESERVED
-CVE-2010-1556
- RESERVED
+CVE-2010-1558 (Unspecified vulnerability in HP Multifunction Peripheral (MFP)
Digital ...)
+ TODO: check
+CVE-2010-1557 (Multiple cross-site scripting (XSS) vulnerabilities in HP
Insight ...)
+ TODO: check
+CVE-2010-1556 (Unspecified vulnerability in HP Systems Insight Manager (SIM)
5.3, 5.3 ...)
+ TODO: check
CVE-2010-1555 (Stack-based buffer overflow in getnnmdata.exe in HP OpenView
Network ...)
TODO: check
CVE-2010-1554 (Stack-based buffer overflow in getnnmdata.exe in HP OpenView
Network ...)
@@ -1019,6 +1020,7 @@
RESERVED
CVE-2010-1512 [aria2 directory traversal]
RESERVED
+ {DSA-2047-1}
- aria2 1.9.3-1
NOTE: http://seclists.org/fulldisclosure/2010/May/168
CVE-2010-1511 [kget insecure file get]
@@ -1026,10 +1028,10 @@
- kdenetwork <undetermined>
NOTE: http://seclists.org/fulldisclosure/2010/May/164
TODO: check
-CVE-2010-1510
- RESERVED
-CVE-2010-1509
- RESERVED
+CVE-2010-1510 (Heap-based buffer overflow in IrfanView before 4.27 allows
remote ...)
+ TODO: check
+CVE-2010-1509 (IrfanView before 4.27 does not properly handle an unspecified
integer ...)
+ TODO: check
CVE-2010-1508
RESERVED
CVE-2010-1507
@@ -3660,14 +3662,14 @@
NOT-FOR-US: osTicket
CVE-2010-0605 (SQL injection vulnerability in scp/ajax.php in osTicket before
1.6.0 ...)
NOT-FOR-US: osTicket
-CVE-2010-0604
- RESERVED
-CVE-2010-0603
- RESERVED
-CVE-2010-0602
- RESERVED
-CVE-2010-0601
- RESERVED
+CVE-2010-0604 (Unspecified vulnerability in the SIP implementation on the Cisco
PGW ...)
+ TODO: check
+CVE-2010-0603 (The SIP implementation on the Cisco PGW 2200 Softswitch with
software ...)
+ TODO: check
+CVE-2010-0602 (The SIP implementation on the Cisco PGW 2200 Softswitch with
software ...)
+ TODO: check
+CVE-2010-0601 (The MGCP implementation on the Cisco PGW 2200 Softswitch with
software ...)
+ TODO: check
CVE-2010-0600
RESERVED
CVE-2010-0599
@@ -4018,8 +4020,8 @@
NOT-FOR-US: Microsoft Windows
CVE-2010-0476 (The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold,
SP1, ...)
NOT-FOR-US: Microsoft Windows
-CVE-2010-0475
- RESERVED
+CVE-2010-0475 (Cross-site scripting (XSS) vulnerability in esp/editUser.esp in
the ...)
+ TODO: check
CVE-2010-0474
RESERVED
CVE-2010-0473
@@ -7952,8 +7954,8 @@
RESERVED
CVE-2009-3679
RESERVED
-CVE-2009-3678
- RESERVED
+CVE-2009-3678 (Microsoft Windows 7, when running on 64-bit platforms, allows
local ...)
+ TODO: check
CVE-2009-3677 (The Internet Authentication Service (IAS) in Microsoft Windows
2000 ...)
NOT-FOR-US: Microsoft Internet Authentication Service
CVE-2009-3676 (The SMB client in the kernel in Microsoft Windows Server 2008 R2
and ...)