[Secure-testing-commits] r28269 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2014-08-14 06:20:20 +0000 (Thu, 14 Aug 2014)
New Revision: 28269

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-08-14 06:13:12 UTC (rev 28268)
+++ data/CVE/list	2014-08-14 06:20:20 UTC (rev 28269)
@@ -59,9 +59,9 @@
 CVE-2014-5199 (Cross-site request forgery (CSRF) vulnerability in the WordPress File ...)
 	NOT-FOR-US: WordPress plugin wp-file-upload
 CVE-2014-5198 (Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk ...)
-	TODO: check
+	NOT-FOR-US: Splunk
 CVE-2014-5197 (Directory traversal vulnerability in (1) Splunk Web or the (2) Splunkd ...)
-	TODO: check
+	NOT-FOR-US: Splunk
 CVE-2014-5196 (Cross-site scripting (XSS) vulnerability in ...)
 	NOT-FOR-US: WordPress plugin improved-user-search-in-backend
 CVE-2014-5195 (Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not ...)
@@ -115,9 +115,9 @@
 CVE-2013-7395 (ZOLL Defibrillator / Monitor X Series has a default (1) supervisor ...)
 	TODO: check
 CVE-2013-7394 (The "runshellscript echo.sh" script in Splunk before 5.0.5 allows ...)
-	TODO: check
+	NOT-FOR-US: Splunk
 CVE-2012-6653 (Unspecified vulnerability in the All Video Gallery (all-video-gallery) ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin all-video-gallery
 CVE-2007-6756 (ZOLL Defibrillator / Monitor M Series, E Series, and R Series have a ...)
 	TODO: check
 CVE-2014-5207 [ro bind mount bypass using user namespaces]
@@ -5919,9 +5919,9 @@
 CVE-2014-2817 (Microsoft Internet Explorer 6 through 11 allows remote attackers to ...)
 	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2014-2816 (Microsoft SharePoint Server 2013 Gold and SP1 and SharePoint ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2014-2815 (Microsoft OneNote 2007 SP3 allows remote attackers to execute ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2014-2814 (Microsoft Service Bus 1.1 on Microsoft Windows Server 2008 R2 SP1 and ...)
 	NOT-FOR-US: Microsoft Server
 CVE-2014-2813 (Microsoft Internet Explorer 9 through 11 allows remote attackers to ...)
@@ -5935,7 +5935,7 @@
 CVE-2014-2809 (Microsoft Internet Explorer 6 through 11 allows remote attackers to ...)
 	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2014-2808 (Microsoft Internet Explorer 10 and 11 allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2014-2807 (Microsoft Internet Explorer 6 through 11 allows remote attackers to ...)
 	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2014-2806 (Microsoft Internet Explorer 11 allows remote attackers to execute ...)
@@ -5959,7 +5959,7 @@
 CVE-2014-2797 (Microsoft Internet Explorer 6 through 8 allows remote attackers to ...)
 	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2014-2796 (Microsoft Internet Explorer 10 and 11 allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2014-2795 (Microsoft Internet Explorer 8 through 11 allows remote attackers to ...)
 	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2014-2794 (Microsoft Internet Explorer 6 and 7 allows remote attackers to execute ...)
@@ -5983,7 +5983,7 @@
 CVE-2014-2785 (Microsoft Internet Explorer 7 allows remote attackers to execute ...)
 	NOT-FOR-US: Microsoft Internet Explorer 
 CVE-2014-2784 (Microsoft Internet Explorer 8 through 11 allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2014-2783 (Microsoft Internet Explorer 7 through 11 does not prevent use of ...)
 	NOT-FOR-US: Microsoft Internet Explorer 
 CVE-2014-2782 (Microsoft Internet Explorer 9 through 11 allows remote attackers to ...)
@@ -6003,7 +6003,7 @@
 CVE-2014-2775 (Microsoft Internet Explorer 9 through 11 allows remote attackers to ...)
 	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2014-2774 (Microsoft Internet Explorer 6 through 11 allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2014-2773 (Microsoft Internet Explorer 6 through 8 allows remote attackers to ...)
 	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2014-2772 (Microsoft Internet Explorer 11 allows remote attackers to execute ...)
@@ -8748,9 +8748,9 @@
 CVE-2014-1821
 	RESERVED
 CVE-2014-1820 (Cross-site scripting (XSS) vulnerability in Master Data Services (MDS) ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2014-1819 (win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2014-1818 (GDI+ in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows ...)
 	NOT-FOR-US: Microsoft Windows
 CVE-2014-1817 (usp10.dll in Uniscribe (aka the Unicode Script Processor) in Microsoft ...)
@@ -8760,7 +8760,7 @@
 CVE-2014-1815 (Microsoft Internet Explorer 6 through 11 allows remote attackers to ...)
 	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2014-1814 (The Windows Installer in Microsoft Windows Server 2003 SP2, Windows ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2014-1813 (Microsoft Web Applications 2010 SP1 and SP2 allows remote ...)
 	NOT-FOR-US: Microsoft
 CVE-2014-1812 (The Group Policy implementation in Microsoft Windows Vista SP2, ...)
@@ -13167,11 +13167,11 @@
 CVE-2014-0319 (Microsoft Silverlight 5 before 5.1.30214.0 and Silverlight 5 Developer ...)
 	NOT-FOR-US: Microsoft
 CVE-2014-0318 (win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2014-0317 (The Security Account Manager Remote (SAMR) protocol implementation in ...)
 	NOT-FOR-US: Microsoft
 CVE-2014-0316 (Memory leak in the Local RPC (LRPC) server implementation in Microsoft ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2014-0315 (Untrusted search path vulnerability in Microsoft Windows XP SP2 and ...)
 	NOT-FOR-US: Microsoft
 CVE-2014-0314 (Microsoft Internet Explorer 9 and 10 allows remote attackers to ...)
@@ -14569,7 +14569,7 @@
 CVE-2013-6772
 	RESERVED
 CVE-2013-6771 (Directory traversal vulnerability in the collect script in Splunk ...)
-	TODO: check
+	NOT-FOR-US: Splunk
 CVE-2013-6770 (The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for ...)
 	NOT-FOR-US: CyanogenMod/ClockWorkMod/Koush
 CVE-2013-6769 (The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for ...)