automatic update

1 files changed, 16 insertions, 18 deletions

diff --git a/data/CVE/2012.list b/data/CVE/2012.list
index 73d2b5edf4..57df4c8459 100644
--- a/data/CVE/2012.list
+++ b/data/CVE/2012.list
@@ -1611,8 +1611,7 @@ CVE-2012-6084 (modules/m_capab.c in (1) ircd-ratbox before 3.0.8 and (2) Charybd
 	- ircd-ratbox 3.0.7.dfsg-3 (bug #697093)
 	NOTE: http://www.openwall.com/lists/oss-security/2013/01/01/1
 	NOTE: http://www.openwall.com/lists/oss-security/2013/01/01/2
-CVE-2012-6083
-	RESERVED
+CVE-2012-6083 (Freeciv before 2.3.3 allows remote attackers to cause a denial of serv ...)
 	- freeciv 2.3.4-1 (low; bug #696306)
 	[squeeze] - freeciv <no-dsa> (Minor issue)
 	[wheezy] - freeciv 2.3.2-1+deb7u1
@@ -2163,8 +2162,8 @@ CVE-2012-5869
 CVE-2012-5868 (WordPress 3.4.2 does not invalidate a wordpress_sec session cookie upo ...)
 	- wordpress <unfixed> (unimportant; bug #696868)
 	NOTE: non-issue, see https://wordpress.org/support/topic/old-bug-cve-2012-5868
-CVE-2012-5867
-	RESERVED
+CVE-2012-5867 (HT Editor 2.0.20 has a Remote Stack Buffer Overflow Vulnerability ...)
+	TODO: check
 CVE-2012-5866 (Cross-site scripting (XSS) vulnerability in include.php in Achievo 1.4 ...)
 	NOT-FOR-US: Achievo
 CVE-2012-5865 (SQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows re ...)
@@ -2557,10 +2556,10 @@ CVE-2012-5701 (Multiple SQL injection vulnerabilities in dotProject before 2.1.7
 	NOT-FOR-US: dotProject
 CVE-2012-5700 (Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko befo ...)
 	NOT-FOR-US: Baby Gekko
-CVE-2012-5699
-	RESERVED
-CVE-2012-5698
-	RESERVED
+CVE-2012-5699 (BabyGekko before 1.2.4 allows PHP file inclusion. ...)
+	TODO: check
+CVE-2012-5698 (BabyGekko before 1.2.4 has SQL injection. ...)
+	TODO: check
 CVE-2012-5979
 	REJECTED
 CVE-2012-5697 (The btinstall installation script in Bulb Security Smartphone Pentest  ...)
@@ -2770,8 +2769,7 @@ CVE-2012-5627 (Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12
 	- mysql-5.5 <removed> (unimportant)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=883719
 	NOTE: https://mariadb.atlassian.net/browse/MDEV-3915
-CVE-2012-5626
-	RESERVED
+CVE-2012-5626 (EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Applicati ...)
 	- jbossas4 <not-affected> (Only builds a few libraries, not the full application server, #581226)
 CVE-2012-5625 (OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when usin ...)
 	- nova <not-affected> (Only affects OpenStack Folsom, bug #695830)
@@ -4320,8 +4318,8 @@ CVE-2012-4983 (Multiple cross-site scripting (XSS) vulnerabilities on the Foresc
 	NOT-FOR-US: Forescout device
 CVE-2012-4982 (Open redirect vulnerability in assets/login on the Forescout CounterAC ...)
 	NOT-FOR-US: Forescout device
-CVE-2012-4981
-	RESERVED
+CVE-2012-4981 (Toshiba ConfigFree 8.0.38 has a CF7 File Remote Command Execution Vuln ...)
+	TODO: check
 CVE-2012-4980 (Multiple stack-based buffer overflows in CFProfile.exe in Toshiba Conf ...)
 	NOT-FOR-US: Toshiba ConfigFree Utility
 CVE-2012-4979
@@ -4501,8 +4499,8 @@ CVE-2012-4902 (Multiple cross-site request forgery (CSRF) vulnerabilities in Tem
 	NOT-FOR-US: Template CMS (http://template-cms.ru)
 CVE-2012-4901 (Cross-site scripting (XSS) vulnerability in Template CMS 2.1.1 and ear ...)
 	NOT-FOR-US: Template CMS (http://template-cms.ru)
-CVE-2012-4900
-	RESERVED
+CVE-2012-4900 (Corel WordPerfect Office X6 16.0.0.388 has a DoS Vulnerability via unt ...)
+	TODO: check
 CVE-2012-4899 (WellinTech KingView 6.5.3 and earlier uses a weak password-hashing alg ...)
 	NOT-FOR-US: WellinTech KingView
 CVE-2012-4898 (Mesh OS before 7.9.1.1 on Tropos wireless mesh routers does not use a  ...)
@@ -4578,8 +4576,8 @@ CVE-2012-4865 (Buffer overflow in Oreans Themida 2.1.8.0 allows remote attackers
 	NOT-FOR-US: Oreans Themida
 CVE-2012-4864 (Oreans WinLicense 2.1.8.0 allows remote attackers to cause a denial of ...)
 	NOT-FOR-US: Oreans WinLicense
-CVE-2012-4863
-	RESERVED
+CVE-2012-4863 (IBM WebSphere MQ 7.1 and 7.5: Queue manager has a DoS vulnerability ...)
+	TODO: check
 CVE-2012-4862 (The Host Connect emulator in IBM Rational Developer for System z 7.1 t ...)
 	NOT-FOR-US: IBM Rational
 CVE-2012-4861 (The web server in InfoSphere Data Replication Dashboard in IBM InfoSph ...)
@@ -11513,8 +11511,8 @@ CVE-2012-2088 (Integer signedness error in the TIFFReadDirectory function in tif
 	{DSA-2552-1}
 	- tiff 4.0-1 (bug #678140)
 	- tiff3 3.9.6-6
-CVE-2012-2087
-	RESERVED
+CVE-2012-2087 (ISPConfig 3.0.4.3: the "Add new Webdav user" can chmod and chown entir ...)
+	TODO: check
 CVE-2012-2086 (SQL injection vulnerability in the get_last_conversation_lines functio ...)
 	{DSA-2453-2 DSA-2453-1}
 	- gajim 0.15-1 (low; bug #668038)