Author: joeyh
Date: 2010-06-10 21:14:20 +0000 (Thu, 10 Jun 2010)
New Revision: 14857
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
==================================================================---
data/CVE/list 2010-06-10 19:00:16 UTC (rev 14856)
+++ data/CVE/list 2010-06-10 21:14:20 UTC (rev 14857)
@@ -1,3 +1,87 @@
+CVE-2010-2262 (Galileo Students Team Weborf before 0.12.1 allows remote
attackers to ...)
+ TODO: check
+CVE-2010-2261 (Linksys WAP54Gv3 firmware 3.04.03 and earlier allows remote
attackers ...)
+ TODO: check
+CVE-2010-2260 (Multiple cross-site scripting (XSS) vulnerabilities in Gambit
Design ...)
+ TODO: check
+CVE-2010-2259 (Directory traversal vulnerability in the BF Survey
(com_bfsurvey) ...)
+ TODO: check
+CVE-2010-2258 (Cross-site scripting (XSS) vulnerability in signupconfirm.php in
...)
+ TODO: check
+CVE-2010-2257 (SQL injection vulnerability in index_ie.php in Pay Per Minute
Video ...)
+ TODO: check
+CVE-2010-2256 (Multiple cross-site scripting (XSS) vulnerabilities in Pay Per
Minute ...)
+ TODO: check
+CVE-2010-2255 (SQL injection vulnerability in the BF Survey Pro
(com_bfsurvey_pro) ...)
+ TODO: check
+CVE-2010-2254 (SQL injection vulnerability in the Shape5 Bridge of Hope
template for ...)
+ TODO: check
+CVE-2010-2253
+ RESERVED
+CVE-2010-2252
+ RESERVED
+CVE-2010-2251
+ RESERVED
+CVE-2010-2250
+ RESERVED
+CVE-2010-2249
+ RESERVED
+CVE-2010-2248
+ RESERVED
+CVE-2010-2247
+ RESERVED
+CVE-2010-2246
+ RESERVED
+CVE-2010-2245
+ RESERVED
+CVE-2010-2244
+ RESERVED
+CVE-2010-2243
+ RESERVED
+CVE-2010-2242
+ RESERVED
+CVE-2010-2241
+ RESERVED
+CVE-2010-2240
+ RESERVED
+CVE-2010-2239
+ RESERVED
+CVE-2010-2238
+ RESERVED
+CVE-2010-2237
+ RESERVED
+CVE-2010-2236
+ RESERVED
+CVE-2010-2235
+ RESERVED
+CVE-2010-2234
+ RESERVED
+CVE-2010-2233
+ RESERVED
+CVE-2010-2232
+ RESERVED
+CVE-2010-2231
+ RESERVED
+CVE-2010-2230
+ RESERVED
+CVE-2010-2229
+ RESERVED
+CVE-2010-2228
+ RESERVED
+CVE-2010-2227
+ RESERVED
+CVE-2010-2226
+ RESERVED
+CVE-2010-2225
+ RESERVED
+CVE-2010-2224
+ RESERVED
+CVE-2010-2223
+ RESERVED
+CVE-2010-2222
+ RESERVED
+CVE-2010-2221
+ RESERVED
CVE-2010-2220
RESERVED
CVE-2010-2219
@@ -60,8 +144,8 @@
RESERVED
CVE-2010-2194
RESERVED
-CVE-2010-2193
- RESERVED
+CVE-2010-2193 (Multiple unspecified vulnerabilities in the CA (1) PSFormX and
(2) ...)
+ TODO: check
CVE-2010-2192
RESERVED
CVE-2010-2191 (The (1) parse_str, (2) preg_match, (3) unpack, and (4) pack
functions; ...)
@@ -612,10 +696,10 @@
NOT-FOR-US: HP ServiceCenter
CVE-2010-1962 (Unspecified vulnerability in HP StorageWorks Storage Mirroring 5
...)
NOT-FOR-US: HP StorageWorks
-CVE-2010-1961
- RESERVED
-CVE-2010-1960
- RESERVED
+CVE-2010-1961 (Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView
...)
+ TODO: check
+CVE-2010-1960 (Buffer overflow in the error handling functionality in ...)
+ TODO: check
CVE-2010-1959 (Unspecified vulnerability in HP TestDirector for Quality Center
9.2 ...)
NOT-FOR-US: HP TestDirector for Quality Center
CVE-2010-1958
@@ -691,8 +775,8 @@
RESERVED
CVE-2010-1932
RESERVED
-CVE-2010-1931
- RESERVED
+CVE-2010-1931 (SQL injection vulnerability in includes/content/cart.inc.php in
...)
+ TODO: check
CVE-2010-1930
RESERVED
CVE-2010-1929
@@ -879,8 +963,8 @@
NOT-FOR-US: PHP Easy Shopping Cart
CVE-2009-4855 (SQL injection vulnerability in index.php in TYPO3 4.0 allows
remote ...)
- typo3-src 4.2.5-1+lenny3
- NOTE: I have no idea when this was fixed, 4.2.5-1+lenny3 is the version
currently in lenny
- NOTE: which is not affected by this bug
+ NOTE: I have no idea when this was fixed, 4.2.5-1+lenny3 is the version
currently in lenny
+ NOTE: which is not affected by this bug
CVE-2009-4854 (addons/import.php in TalkBack 2.3.14 allows remote attackers to
...)
NOT-FOR-US: TalkBack
CVE-2009-4853 (Multiple cross-site scripting (XSS) vulnerabilities in JumpBox
before ...)
@@ -1540,14 +1624,14 @@
RESERVED
CVE-2010-1574
RESERVED
-CVE-2010-1573
- RESERVED
-CVE-2010-1572
- RESERVED
-CVE-2010-1571
- RESERVED
-CVE-2010-1570
- RESERVED
+CVE-2010-1573 (Linksys WAP54Gv3 firmware 3.04.03 and earlier uses a hard-coded
...)
+ TODO: check
+CVE-2010-1572 (Unspecified vulnerability in the tech support diagnostic shell
in ...)
+ TODO: check
+CVE-2010-1571 (Directory traversal vulnerability in the bootstrap service in
Cisco ...)
+ TODO: check
+CVE-2010-1570 (The computer telephony integration (CTI) server component in
Cisco ...)
+ TODO: check
CVE-2010-1569
RESERVED
CVE-2010-1568 (The Send Secure functionality in the Cisco IronPort Desktop Flag
...)
@@ -1983,6 +2067,7 @@
- lxr-cvs <unfixed>
TODO: prod maintainer (and find out why we have lxr and lxr-cvs)
CVE-2010-1447 (PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before
8.1.21, ...)
+ {DSA-2051-1}
- postgresql-8.4 8.4.4-1
- postgresql-8.3 <removed>
CVE-2010-1446 (arch/powerpc/mm/fsl_booke_mmu.c in KGDB in the Linux kernel
2.6.30 and ...)
@@ -2411,7 +2496,7 @@
NOT-FOR-US: Microsoft
CVE-2010-1254 (The installation for Microsoft Open XML File Format Converter
for Mac ...)
NOT-FOR-US: Microsoft
-CVE-2010-1253 (Unspecified vulnerability in Microsoft Office Excel 2002 SP3,
2007 ...)
+CVE-2010-1253 (Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2; Office 2004
for ...)
NOT-FOR-US: Microsoft
CVE-2010-1252 (Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and
...)
NOT-FOR-US: Microsoft
@@ -4920,6 +5005,7 @@
NOTE: Will be fixed in s-p-u
CVE-2010-0407 [pcsc-lite local privilege escalation]
RESERVED
+ {DSA-2059-1}
- pcsc-lite 1.5.4-1
CVE-2010-0406 (OpenTTD before 1.0.1 allows remote attackers to cause a denial
of ...)
- openttd 1.0.1-1
@@ -4956,8 +5042,7 @@
CVE-2010-0396 (Directory traversal vulnerability in the dpkg-source component
in dpkg ...)
{DSA-2011-1}
- dpkg 1.15.6
-CVE-2010-0395 [openoffice python macro code execution]
- RESERVED
+CVE-2010-0395 (OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted
remote ...)
{DSA-2055-1}
- openoffice.org 1:3.2.1-1 (low)
CVE-2010-0394 (PyGIT.py in the Trac Git plugin (trac-git) before ...)