diff options
| author | security tracker role <sectracker@soriano.debian.org> | 2020-01-15 08:10:21 +0000 |
|---|---|---|
| committer | security tracker role <sectracker@soriano.debian.org> | 2020-01-15 08:10:21 +0000 |
| commit | ec00c9524bad503cca9ff36c651acab75ecec33d (patch) | |
| tree | 5f7229489e96f06a56c9a5b36aeb273a149789ec /data/CVE/2011.list | |
| parent | 14d0a1632248dd04d76447cd6236c552bee824e7 (diff) | |
automatic update
Diffstat (limited to 'data/CVE/2011.list')
| -rw-r--r-- | data/CVE/2011.list | 24 |
1 files changed, 8 insertions, 16 deletions
diff --git a/data/CVE/2011.list b/data/CVE/2011.list index a65194a6f4..9e40545852 100644 --- a/data/CVE/2011.list +++ b/data/CVE/2011.list @@ -5345,11 +5345,9 @@ CVE-2011-3204 (hammerhead.cc in Hammerhead 2.1.4 allows local users to write to [lenny] - hammerhead <no-dsa> (Minor issue) [squeeze] - hammerhead <no-dsa> (Minor issue) NOTE: https://launchpad.net/bugs/826679 -CVE-2011-3203 [Jcow CMS 4.x:4.2 <= , 5.x:5.2 <= | Arbitrary Code Execution] - RESERVED +CVE-2011-3203 (A Code Execution vulnerability exists the attachment parameter to inde ...) NOT-FOR-US: Jcow -CVE-2011-3202 [Jcow CMS 4.2 <= | Cross Site Scripting] - RESERVED +CVE-2011-3202 (A Cross-Site Scripting (XSS) vulnerability exists in the g parameter t ...) NOT-FOR-US: Jcow CVE-2011-3201 (GNOME Evolution before 3.2.3 allows user-assisted remote attackers to ...) - evolution <unfixed> (unimportant) @@ -5411,8 +5409,7 @@ CVE-2011-3185 (gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assiste CVE-2011-3184 (The msn_httpconn_parse_data function in httpconn.c in the MSN protocol ...) - pidgin 2.10.0-1 (unimportant) NOTE: Only exploitable by a malicious MSN server to crash the client -CVE-2011-3183 - RESERVED +CVE-2011-3183 (A Cross-Site Scripting (XSS) vulnerability exists in the rcID paramete ...) NOT-FOR-US: Concrete CMS CVE-2011-3182 (PHP before 5.3.7 does not properly check the return values of the mall ...) {DSA-2408-1} @@ -6220,11 +6217,9 @@ CVE-2011-2936 (Elgg through 1.7.10 has a SQL injection vulnerability ...) - elgg <itp> (bug #526197) CVE-2011-2935 (Elgg through 1.7.10 has XSS ...) - elgg <itp> (bug #526197) -CVE-2011-2934 - RESERVED +CVE-2011-2934 (A Cross Site Request Forgery (CSRF) vulnerability exists in the admini ...) NOT-FOR-US: WebsiteBaker -CVE-2011-2933 - RESERVED +CVE-2011-2933 (An Arbitrary File Upload vulnerability exists in admin/media/upload.ph ...) NOT-FOR-US: WebsiteBaker CVE-2011-2932 (Cross-site scripting (XSS) vulnerability in activesupport/lib/active_s ...) {DSA-2655-1} @@ -6922,11 +6917,9 @@ CVE-2011-2716 (The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote D - busybox 1:1.20.0-3 (unimportant; bug #635548) NOTE: the default action script of busybox is not vulnerable to this attack NOTE: fixed in 1.20 (experimental). default script in udeb may be vulnerable. -CVE-2011-2715 - RESERVED +CVE-2011-2715 (An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0 ...) NOT-FOR-US: Drupal data module -CVE-2011-2714 - RESERVED +CVE-2011-2714 (A Cross-Site Scripting vulnerability exists in Drupal 6.20 with Data 6 ...) NOT-FOR-US: Drupal data module CVE-2011-2713 (oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows u ...) {DSA-2315-1} @@ -6948,8 +6941,7 @@ CVE-2011-2708 REJECTED CVE-2011-2707 (The ptrace_setxregs function in arch/xtensa/kernel/ptrace.c in the Lin ...) - linux-2.6 <not-affected> (xtensa arch not used in Debian) -CVE-2011-2706 - RESERVED +CVE-2011-2706 (A Cross-Site Scripting (XSS) vulnerability exists in the reorder admin ...) NOT-FOR-US: sNews CVE-2011-2705 (The SecureRandom.random_bytes function in lib/securerandom.rb in Ruby ...) {DLA-235-1 DLA-88-1} |