[Secure-testing-commits] r24624 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-12-08 10:24:44 +0000 (Sun, 08 Dec 2013)
New Revision: 24624

Modified:
   data/CVE/list
Log:
Add NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-12-08 09:25:38 UTC (rev 24623)
+++ data/CVE/list	2013-12-08 10:24:44 UTC (rev 24624)
@@ -207,7 +207,7 @@
 CVE-2013-6937 (Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows ...)
 	NOT-FOR-US: VideoCharge
 CVE-2013-6936 (Multiple SQL injection vulnerabilities in ajaxfs.php in the Ajax forum ...)
-	TODO: check
+	NOT-FOR-US: MyBB (aka MyBulletinBoard)
 CVE-2013-6935 (Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows ...)
 	NOT-FOR-US: VideoCharge
 CVE-2013-6934
@@ -900,39 +900,39 @@
 CVE-2013-6917
 	RESERVED
 CVE-2013-6916 (Cross-site scripting (XSS) vulnerability in the Yahoo! User Interface ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6915 (Cross-site scripting (XSS) vulnerability in the system-administration ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6914 (Cross-site scripting (XSS) vulnerability in a calendar component in ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6913 (Cross-site scripting (XSS) vulnerability in a search component in ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6912 (Cross-site scripting (XSS) vulnerability in a calendar component in ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6911 (Cross-site scripting (XSS) vulnerability in the bulletin-board ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6910 (Cross-site scripting (XSS) vulnerability in Ajax components in Cybozu ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6909 (Cross-site scripting (XSS) vulnerability in a report component in ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6908 (Cross-site scripting (XSS) vulnerability in a mail component in Cybozu ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6907 (Cross-site scripting (XSS) vulnerability in a mail component in Cybozu ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6906 (Cross-site scripting (XSS) vulnerability in a mail component in Cybozu ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6905 (Cross-site scripting (XSS) vulnerability in a phone component in ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6904 (Cross-site scripting (XSS) vulnerability in a note component in Cybozu ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6903 (Cross-site scripting (XSS) vulnerability in a schedule component in ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6902 (Cross-site scripting (XSS) vulnerability in the Space function in ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6901 (Cross-site scripting (XSS) vulnerability in the Space function in ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6900 (Cross-site scripting (XSS) vulnerability in the system-administration ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6918 (The web interface on the Satechi travel router 1.5, when Wi-Fi is used ...)
 	NOT-FOR-US: Satechi travel router
 CVE-2013-6899
@@ -1193,7 +1193,7 @@
 CVE-2013-6788
 	RESERVED
 CVE-2013-6787 (SQL injection vulnerability in the check_user_password function in ...)
-	TODO: check
+	NOT-FOR-US: Chamilo LMS
 CVE-2013-6786
 	RESERVED
 CVE-2013-6785
@@ -3000,15 +3000,15 @@
 CVE-2013-6005
 	RESERVED
 CVE-2013-6004 (Session fixation vulnerability in Cybozu Garoon before 3.7.2 allows ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6003 (CRLF injection vulnerability in Cybozu Garoon 3.1 through 3.5 SP5, ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6002 (The server in Cybozu Garoon before 3.7 SP1 allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6001 (SQL injection vulnerability in the Space function in Cybozu Garoon ...)
-	TODO: check
+	NOT-FOR-US: Cybozu Garoon
 CVE-2013-6000 (Directory traversal vulnerability in Tattyan HP TOWN before 5_10_1 ...)
-	TODO: check
+	NOT-FOR-US: Tattyan HP TOWN
 CVE-2013-5999 (Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify ...)
 	NOT-FOR-US: Kingsoft KDrive Personal
 CVE-2013-5998 (Unspecified vulnerability in the Web manager implementation on D-Link ...)
@@ -10929,7 +10929,7 @@
 CVE-2013-2826
 	RESERVED
 CVE-2013-2825 (The DNP3 service in the Outstation component on Elecsys Director ...)
-	TODO: check
+	NOT-FOR-US: Elecsys Director Gateway
 CVE-2013-2824
 	RESERVED
 CVE-2013-2823 (The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE ...)