[Secure-testing-commits] r25838 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2014-02-22 08:34:14 +0000 (Sat, 22 Feb 2014)
New Revision: 25838

Modified:
   data/CVE/list
Log:
NFU

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-02-22 08:25:28 UTC (rev 25837)
+++ data/CVE/list	2014-02-22 08:34:14 UTC (rev 25838)
@@ -14733,7 +14733,7 @@
 CVE-2013-3295
 	RESERVED
 CVE-2013-3294 (Multiple SQL injection vulnerabilities in Exponent CMS before 2.2.0 ...)
-	TODO: check
+	NOT-FOR-US: Exponent CMS
 CVE-2013-3293
 	RESERVED
 CVE-2013-3292
@@ -15920,7 +15920,7 @@
 CVE-2013-2830
 	RESERVED
 CVE-2013-2829 (MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote ...)
-	TODO: check
+	NOT-FOR-US: MatrikonOPC SCADA DNP3 OPC Server
 CVE-2013-2828
 	RESERVED
 CVE-2013-2827 (An unspecified ActiveX control in WellinTech KingSCADA before 3.1.2, ...)
@@ -16220,7 +16220,7 @@
 CVE-2013-2692
 	RESERVED
 CVE-2013-2691 (Stack-based buffer overflow in the JetMPG.ax module in jetAudio 8.0.17 ...)
-	TODO: check
+	NOT-FOR-US: jetAudio
 CVE-2013-2690 (SQL injection vulnerability in index.php in Synchroweb Technology ...)
 	NOT-FOR-US: Synchroweb Technology SynConnect 2.0
 CVE-2013-2689
@@ -16327,7 +16327,7 @@
 CVE-2013-2640 (ajax.functions.php in the MailUp plugin before 1.3.2 for WordPress ...)
 	NOT-FOR-US: MailUp plugin for Wordpress
 CVE-2013-2639 (Cross-site scripting (XSS) vulnerability in CTERA Cloud Storage OS ...)
-	TODO: check
+	NOT-FOR-US: CTERA Cloud Storage OS
 CVE-2013-2638
 	RESERVED
 CVE-2013-2637
@@ -16454,7 +16454,7 @@
 CVE-2013-2586
 	RESERVED
 CVE-2013-2585 (Cross-site scripting (XSS) vulnerability in Atmail Webmail Server ...)
-	TODO: check
+	NOT-FOR-US: AtMail
 CVE-2013-2584
 	RESERVED
 CVE-2013-2583 (Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange ...)
@@ -18796,7 +18796,7 @@
 	[squeeze] - almanah <not-affected> (Only affect Almanah used in combination with glib 2.32)
 	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=695117
 CVE-2013-1852 (SQL injection vulnerability in leaguemanager.php in the LeagueManager ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin LeagueManager
 CVE-2013-1851 [user_migrate: Local file disclosure]
 	RESERVED
 	- owncloud 4.0.8debian-1.6 (bug #703094)
@@ -44382,7 +44382,7 @@
 CVE-2011-3924 (Use-after-free vulnerability in Google Chrome before 16.0.912.77 ...)
 	- chromium-browser 16.0.912.77~r118311-1
 	[squeeze] - chromium-browser <end-of-life>
-CVE-2011-3923
+CVE-2011-3923 [struts ParameterInterceptor remote code execution]
 	RESERVED
 	- libstruts1.2-java <not-affected> (Only affects 2.x)
 	- libspring-2.5-java <unfixed>