Author: joeyh Date: 2012-08-23 21:14:20 +0000 (Thu, 23 Aug 2012) New Revision: 20017 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list ==================================================================--- data/CVE/list 2012-08-23 19:08:02 UTC (rev 20016) +++ data/CVE/list 2012-08-23 21:14:20 UTC (rev 20017) @@ -1,3 +1,39 @@ +CVE-2012-4605 (The default configuration of the SMTP component in Websense Email ...) + TODO: check +CVE-2012-4604 (The TRITON management console in Websense Web Security before 7.6 ...) + TODO: check +CVE-2012-4603 + RESERVED +CVE-2012-4602 + RESERVED +CVE-2012-4601 + RESERVED +CVE-2012-4600 + RESERVED +CVE-2011-5102 (The Investigative Reports web interface in the TRITON management ...) + TODO: check +CVE-2010-5149 (Websense Web Security and Web Filter before 6.3.3 Hotfix 27 and 7.x ...) + TODO: check +CVE-2010-5148 (Websense Web Security and Web Filter before 7.1 Hotfix 21 do not set ...) + TODO: check +CVE-2010-5147 (The Remote Filtering component in Websense Web Security and Web Filter ...) + TODO: check +CVE-2010-5146 (The Remote Filtering component in Websense Web Security and Web Filter ...) + TODO: check +CVE-2010-5145 (The Filtering Service in Websense Web Security and Web Filter before ...) + TODO: check +CVE-2010-5144 (The ISAPI Filter plug-in in Websense Enterprise, Websense Web ...) + TODO: check +CVE-2009-5122 (The Personal Email Manager component in Websense Email Security before ...) + TODO: check +CVE-2009-5121 (Websense Email Security 7.1 before Hotfix 4 allows remote attackers to ...) + TODO: check +CVE-2009-5120 (The default configuration of Apache Tomcat in Websense Manager in ...) + TODO: check +CVE-2009-5119 (The default configuration of Apache Tomcat in Websense Manager in ...) + TODO: check +CVE-2008-7312 (The Filtering Service in Websense Enterprise 5.2 through 6.3 does not ...) + TODO: check CVE-2012-4599 (McAfee SmartFilter Administration, and SmartFilter Administration Bess ...) TODO: check CVE-2012-4598 (An unspecified ActiveX control in McAfee Virtual Technician (MVT) ...) @@ -2339,8 +2375,7 @@ CVE-2012-3503 RESERVED NOT-FOR-US: Katello -CVE-2012-3502 [mod_proxy_ajp, mod_proxy_http: Fix an issue in back end connection closing which could lead to privacy issues due to a response mixuto a response mixup] - RESERVED +CVE-2012-3502 (The proxy functionality in (1) mod_proxy_ajp.c in the mod_proxy_ajp ...) - apache2 <not-affected> (Only affects 2.4 from experimental) NOTE: https://issues.apache.org/bugzilla/show_bug.cgi?id=53727 CVE-2012-3501 @@ -2570,15 +2605,19 @@ - icedtea-web <unfixed> CVE-2012-3421 [pcp: incorrect event-driven programming] RESERVED + {DSA-2533-1} - pcp <unfixed> (bug #685476) CVE-2012-3420 [pcp: memory leaks] RESERVED + {DSA-2533-1} - pcp <unfixed> (bug #685476) CVE-2012-3419 [pcp: information disclosure] RESERVED + {DSA-2533-1} - pcp <unfixed> (bug #685476) CVE-2012-3418 [pcp: multiple integer and heap-based overflows] RESERVED + {DSA-2533-1} - pcp <unfixed> (bug #685476) CVE-2012-3417 (The good_client function in rquotad (rquota_svc.c) in Linux DiskQuota ...) - quota 4.00~pre1-1 @@ -4290,8 +4329,7 @@ CVE-2012-2688 (Unspecified vulnerability in the _php_stream_scandir function in the ...) {DSA-2527-1} - php5 5.4.4-4 (low; bug #683274) -CVE-2012-2687 [apache mod_negotiation XSS] - RESERVED +CVE-2012-2687 (Multiple cross-site scripting (XSS) vulnerabilities in the ...) - apache2 2.2.22-8 (low) [squeeze] - apache2 <no-dsa> (minor issue) CVE-2012-2686 @@ -4541,8 +4579,7 @@ NOT-FOR-US: Alt-N MDaemon Free CVE-2012-2583 RESERVED -CVE-2012-2582 - RESERVED +CVE-2012-2582 (Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket ...) - otrs2 <unfixed> NOTE: http://www.otrs.com/en/open-source/community-news/security-advisories/security-advisory-2012-01/ CVE-2012-2581