MITRE sync

svn path=/; revision=2146

1 files changed, 38 insertions, 8 deletions

diff --git a/data/CVE/list b/data/CVE/list
index e9c2e27..9838bec 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -47342,6 +47342,10 @@ CVE-2006-7239 (The _gnutls_x509_oid2mac_algorithm function in lib/gnutls_algorit
 	NOT-FOR-US: Obsolete
 CVE-2006-7240 (gnome-power-manager 2.14.0 does not properly implement the ...)
 	TODO: check
+CVE-2006-7241 (The Image Viewer component in IBM FileNet P8 Application Engine (P8AE) ...)
+	TODO: check
+CVE-2006-7242 (The Workplace (aka WP) component in IBM FileNet P8 Application Engine ...)
+	TODO: check
 CVE-2007-0001 (The file watch implementation in the audit subsystem (auditctl -w) in ...)
 	TODO: check-old
 CVE-2007-0002 (Multiple heap-based buffer overflows in WordPerfect Document ...)
@@ -75560,6 +75564,8 @@ CVE-2008-7259
 	RESERVED
 CVE-2008-7260
 	RESERVED
+CVE-2008-7261 (The Workplace (aka WP) component in IBM FileNet P8 Application Engine ...)
+	TODO: check
 CVE-2009-0001 (Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote ...)
 	NOT-FOR-US: apple quicktime
 CVE-2009-0002 (Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote ...)
@@ -85612,6 +85618,16 @@ CVE-2009-4996 (** DISPUTED ** ...)
 	TODO: check
 CVE-2009-4997 (gnome-power-manager 2.27.92 does not properly implement the ...)
 	TODO: check
+CVE-2009-4998 (The Workplace (aka WP) component in IBM FileNet P8 Application Engine ...)
+	TODO: check
+CVE-2009-4999 (Cross-site scripting (XSS) vulnerability in the Workplace (aka WP) ...)
+	TODO: check
+CVE-2009-5000 (Multiple cross-site scripting (XSS) vulnerabilities in the Workplace ...)
+	TODO: check
+CVE-2009-5001 (The Workplace (aka WP) component in IBM FileNet P8 Application Engine ...)
+	TODO: check
+CVE-2009-5002 (The Workplace (aka WP) component in IBM FileNet P8 Application Engine ...)
+	TODO: check
 CVE-2010-0001 (Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 ...)
 	BUG: 300943
 CVE-2010-0002 (The /etc/profile.d/60alias.sh script in the Mandriva bash package for ...)
@@ -89796,8 +89812,8 @@ CVE-2010-2078 (DataTrack System 3.5 allows remote attackers to list the root ...
 	NOT-FOR-US: DataTrack
 CVE-2010-2079 (DataTrack System 3.5 allows remote attackers to bypass intended ...)
 	NOT-FOR-US: URI
-CVE-2010-2080
-	RESERVED
+CVE-2010-2080 (Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket ...)
+	TODO: check
 CVE-2010-2081
 	RESERVED
 CVE-2010-2082 (The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 ...)
@@ -91782,8 +91798,8 @@ CVE-2010-3070
 	RESERVED
 CVE-2010-3071
 	RESERVED
-CVE-2010-3072
-	RESERVED
+CVE-2010-3072 (The string-comparison functions in String.cci in Squid 3.x before 3.1.8 ...)
+	TODO: check
 CVE-2010-3073 (SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer ...)
 	TODO: check
 CVE-2010-3074 (SSL_Cipher.cpp in EncFS before 1.7.0 uses an improper combination of ...)
@@ -92038,8 +92054,8 @@ CVE-2010-3198 (ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 al
 	TODO: check
 CVE-2010-3199 (Untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 ...)
 	TODO: check
-CVE-2010-3200
-	RESERVED
+CVE-2010-3200 (MSO.dll in Microsoft Word 2003 SP3 11.8326.11.8324 allows remote ...)
+	TODO: check
 CVE-2010-3201
 	RESERVED
 CVE-2010-3202 (Cross-site scripting (XSS) vulnerability in Flock Browser 3.0.0.3989 ...)
@@ -92162,8 +92178,8 @@ CVE-2010-3260
 	RESERVED
 CVE-2010-3261
 	RESERVED
-CVE-2010-3262
-	RESERVED
+CVE-2010-3262 (Cross-site scripting (XSS) vulnerability in Flock Browser 3.x before ...)
+	TODO: check
 CVE-2010-3263 (Cross-site scripting (XSS) vulnerability in setup/frames/index.inc.php ...)
 	TODO: check
 CVE-2010-3264 (The engine installer in Novell Identity Manager (aka IDM) 3.6.1 stores ...)
@@ -92574,3 +92590,17 @@ CVE-2010-3466 (Cross-site scripting (XSS) vulnerability in index.php in the ...)
 	TODO: check
 CVE-2010-3467 (SQL injection vulnerability in modules/sections/index.php in ...)
 	TODO: check
+CVE-2010-3470 (Multiple cross-site scripting (XSS) vulnerabilities in the Workplace ...)
+	TODO: check
+CVE-2010-3471 (Session fixation vulnerability in the Workplace (aka WP) component in ...)
+	TODO: check
+CVE-2010-3472 (Multiple cross-site scripting (XSS) vulnerabilities in the Workplace ...)
+	TODO: check
+CVE-2010-3473 (Open redirect vulnerability in the Workplace (aka WP) component in IBM ...)
+	TODO: check
+CVE-2010-3474 (IBM DB2 9.7 before FP3 does not perform the expected drops or ...)
+	TODO: check
+CVE-2010-3475 (IBM DB2 9.7 before FP3 does not properly enforce privilege requirements ...)
+	TODO: check
+CVE-2010-3476 (Open Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before ...)
+	TODO: check