Author: joeyh Date: 2010-06-29 21:14:20 +0000 (Tue, 29 Jun 2010) New Revision: 14926 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list ==================================================================--- data/CVE/list 2010-06-29 21:06:06 UTC (rev 14925) +++ data/CVE/list 2010-06-29 21:14:20 UTC (rev 14926) @@ -1,3 +1,95 @@ +CVE-2010-2515 (Multiple SQL injection vulnerabilities in index.php in the JFaq ...) + TODO: check +CVE-2010-2514 (Cross-site scripting (XSS) vulnerability in the JFaq (com_jfaq) ...) + TODO: check +CVE-2010-2513 (SQL injection vulnerability in the JE Ajax Event Calendar ...) + TODO: check +CVE-2010-2512 (SQL injection vulnerability in customprofile.php in 2daybiz ...) + TODO: check +CVE-2010-2511 (SQL injection vulnerability in viewnews.php in 2daybiz Multi Level ...) + TODO: check +CVE-2010-2510 (SQL injection vulnerability in customize.php in 2daybiz Web Template ...) + TODO: check +CVE-2010-2509 (Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web ...) + TODO: check +CVE-2010-2508 (SQL injection vulnerability in user-profile.php in 2daybiz Video ...) + TODO: check +CVE-2010-2507 (Directory traversal vulnerability in the Picasa2Gallery ...) + TODO: check +CVE-2010-2506 (Cross-site scripting (XSS) vulnerability in debug.cgi in Linksys ...) + TODO: check +CVE-2010-2505 (Soft SaschArt SasCAM Webcam Server 2.6.5, 2.7, and earlier allows ...) + TODO: check +CVE-2010-2504 (Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allows remote ...) + TODO: check +CVE-2010-2503 (Multiple cross-site scripting (XSS) vulnerabilities in Splunk 4.0 ...) + TODO: check +CVE-2010-2502 (Multiple directory traversal vulnerabilities in Splunk 4.0 through ...) + TODO: check +CVE-2010-2501 + RESERVED +CVE-2010-2500 + RESERVED +CVE-2010-2499 + RESERVED +CVE-2010-2498 + RESERVED +CVE-2010-2497 + RESERVED +CVE-2010-2496 + RESERVED +CVE-2010-2495 + RESERVED +CVE-2010-2494 + RESERVED +CVE-2010-2493 + RESERVED +CVE-2010-2492 + RESERVED +CVE-2010-2491 + RESERVED +CVE-2010-2490 + RESERVED +CVE-2010-2489 + RESERVED +CVE-2010-2488 + RESERVED +CVE-2010-2487 + RESERVED +CVE-2010-2486 + RESERVED +CVE-2010-2485 + RESERVED +CVE-2010-2484 + RESERVED +CVE-2010-2483 + RESERVED +CVE-2010-2482 + RESERVED +CVE-2010-2481 + RESERVED +CVE-2010-2480 + RESERVED +CVE-2010-2479 + RESERVED +CVE-2010-2478 + RESERVED +CVE-2010-2477 + RESERVED +CVE-2010-2476 + RESERVED +CVE-2010-2475 + RESERVED +CVE-2010-2474 + RESERVED +CVE-2010-2473 + RESERVED +CVE-2010-2472 + RESERVED +CVE-2010-2471 + RESERVED +CVE-2010-2470 (Install/Filesystem.pm in Bugzilla 3.5.1 through 3.6.1 and 3.7 through ...) + TODO: check CVE-2010-XXXX [syscp open_basedir bypassing] - syscp <unfixed> (bug #587481) NOTE: CVE id requested on oss-sec @@ -572,17 +664,13 @@ RESERVED CVE-2010-2232 RESERVED -CVE-2010-2231 [MSA-10-0013 Potential Cross Site Scripting vulnerability in Quiz reports] - RESERVED +CVE-2010-2231 (Cross-site request forgery (CSRF) vulnerability in ...) - moodle <unfixed> (bug #586280) -CVE-2010-2230 [MSA-10-0012 KSES Security Filter Bypassing vulnerability] - RESERVED +CVE-2010-2230 (The KSES text cleaning filter in lib/weblib.php in Moodle before ...) - moodle <unfixed> (bug #586280) -CVE-2010-2229 [MSA-10-0011 Cross Site Scripting vulnerability in blog/index.php] - RESERVED +CVE-2010-2229 (Multiple cross-site scripting (XSS) vulnerabilities in blog/index.php ...) - moodle <unfixed> (bug #586280) -CVE-2010-2228 [MSA-10-0010 Persistent XSS vulnerability in the MNET access control interface] - RESERVED +CVE-2010-2228 (Cross-site scripting (XSS) vulnerability in the MNET access-control ...) - moodle <unfixed> (bug #586280) CVE-2010-2227 RESERVED @@ -1325,10 +1413,10 @@ NOT-FOR-US: XnView CVE-2010-1931 (SQL injection vulnerability in includes/content/cart.inc.php in ...) NOT-FOR-US: CubeCart PHP Shopping Cart -CVE-2010-1930 - RESERVED -CVE-2010-1929 - RESERVED +CVE-2010-1930 (Off-by-one error in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allows ...) + TODO: check +CVE-2010-1929 (Multiple stack-based buffer overflows in the ...) + TODO: check CVE-2010-1919 (Unspecified vulnerability in EMC Avamar 4.1.x and 5.0 before SP1 ...) NOT-FOR-US: EMC CVE-2010-1913 (The default configuration of pluginlicense.ini for the ...) @@ -3438,9 +3526,9 @@ TODO: check CVE-2010-1205 RESERVED -CVE-2010-1204 - RESERVED -CVE-2010-1203 (Multiple unspecified vulnerabilities in the JavaScript engine in ...) +CVE-2010-1204 (Search.pm in Bugzilla 2.17.1 through 3.2.6, 3.3.1 through 3.4.6, 3.5.1 ...) + TODO: check +CVE-2010-1203 (The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow ...) - xulrunner <not-affected> (Only affects Firefox 3.6, i.e xulrunner 1.9.2) CVE-2010-1202 (Multiple unspecified vulnerabilities in the JavaScript engine in ...) {DSA-2064-1} @@ -6544,8 +6632,8 @@ - xulrunner 1.9.1.9-1 (unimportant) - iceape 2.0.4-1 [lenny] - iceape <not-affected> (Only a stub package) -CVE-2010-0180 - RESERVED +CVE-2010-0180 (Install/Filesystem.pm in Bugzilla 3.5.1 through 3.6 and 3.7, when ...) + TODO: check CVE-2010-0179 (Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey ...) {DSA-2027-1} - xulrunner 1.9.1.9-1