[Secure-testing-commits] r21065 - data/CVE

[Federico Ceratto]

Author: federico-guest
Date: 2013-01-29 10:05:53 +0000 (Tue, 29 Jan 2013)
New Revision: 21065

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-01-29 09:16:54 UTC (rev 21064)
+++ data/CVE/list	2013-01-29 10:05:53 UTC (rev 21065)
@@ -1867,13 +1867,13 @@
 CVE-2013-0655 (The client in Schneider Electric Software Update (SESU) Utility 1.0.x ...)
 	NOT-FOR-US: Schneider Electric SESU
 CVE-2013-0654 (CimWebServer in GE Intelligent Platforms Proficy HMI/SCADA - ...)
-	TODO: check
+	NOT-FOR-US: GE Intelligent Platforms Proficy
 CVE-2013-0653 (Directory traversal vulnerability in substitute.bcl in the WebView ...)
-	TODO: check
+	NOT-FOR-US: GE Intelligent Platforms Proficy
 CVE-2013-0652 (GE Intelligent Platforms Proficy Real-Time Information Portal does not ...)
-	TODO: check
+	NOT-FOR-US: GE Intelligent Platforms Proficy
 CVE-2013-0651 (The Portal installation process in GE Intelligent Platforms Proficy ...)
-	TODO: check
+	NOT-FOR-US: GE Intelligent Platforms Proficy
 CVE-2012-6432 (Symfony 2.0.x before 2.0.20, 2.1.x before 2.1.5, and 2.2-dev, when the ...)
 	NOT-FOR-US: Symfony
 CVE-2012-6431 (Symfony 2.0.x before 2.0.20 does not process URL encoded data ...)
@@ -2267,15 +2267,15 @@
 CVE-2013-0463
 	RESERVED
 CVE-2013-0462 (Unspecified vulnerability in IBM WebSphere Application Server (WAS) ...)
-	TODO: check
+	NOT-FOR-US: IBM WebSphere Application Server
 CVE-2013-0461 (Cross-site scripting (XSS) vulnerability in the virtual member manager ...)
-	TODO: check
+	NOT-FOR-US: IBM WebSphere Application Server
 CVE-2013-0460 (Cross-site request forgery (CSRF) vulnerability in the portlet ...)
-	TODO: check
+	NOT-FOR-US: IBM WebSphere Application Server
 CVE-2013-0459 (Cross-site scripting (XSS) vulnerability in the Administrative console ...)
-	TODO: check
+	NOT-FOR-US: IBM WebSphere Application Server
 CVE-2013-0458 (Cross-site scripting (XSS) vulnerability in the Administrative console ...)
-	TODO: check
+	NOT-FOR-US: IBM WebSphere Application Server
 CVE-2013-0457
 	RESERVED
 CVE-2013-0456
@@ -3305,7 +3305,7 @@
 CVE-2013-0108
 	RESERVED
 CVE-2013-0107 (Stack-based buffer overflow in Foxit Advanced PDF Editor 3 before 3.04 ...)
-	TODO: check
+	NOT-FOR-US: Foxit Advanced PDF Editor
 CVE-2013-0106
 	RESERVED
 CVE-2013-0105
@@ -3418,7 +3418,7 @@
 CVE-2012-6277
 	RESERVED
 CVE-2012-6276 (Directory traversal vulnerability in the web-based management ...)
-	TODO: check
+	NOT-FOR-US: TP-LINK TL-WR841N
 CVE-2012-6275
 	RESERVED
 CVE-2012-6274
@@ -7017,13 +7017,13 @@
 CVE-2012-4918 (Call of Duty Elite for iOS 2.0.1 does not properly validate the server ...)
 	NOT-FOR-US: Call of Duty Elite for iOS
 CVE-2012-4917 (The TripAdvisor app 6.6 for iOS sends cleartext credentials, which ...)
-	TODO: check
+	NOT-FOR-US: The TripAdvisor app 6.6 for iOS
 CVE-2012-4916
 	RESERVED
 CVE-2012-4915
 	RESERVED
 CVE-2012-4914 (Stack-based buffer overflow in the reader in CoolPDF 3.0.2.256 allows ...)
-	TODO: check
+	NOT-FOR-US: CoolPDF
 CVE-2012-4913
 	RESERVED
 CVE-2012-4912 (Cross-site scripting (XSS) vulnerability in the WebAccess component in ...)
@@ -11600,7 +11600,7 @@
 CVE-2012-3279
 	RESERVED
 CVE-2012-3278 (Stack-based buffer overflow in magentservice.exe in HP Diagnostics ...)
-	TODO: check
+	NOT-FOR-US: HP Diagnostics Server
 CVE-2012-3277 (HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, ...)
 	NOT-FOR-US: HP OpenVMS
 CVE-2012-3276 (HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, ...)