[Secure-testing-commits] r25275 - data/CVE

[Federico Ceratto]

Author: federico-guest
Date: 2014-01-18 20:44:38 +0000 (Sat, 18 Jan 2014)
New Revision: 25275

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-01-18 20:14:15 UTC (rev 25274)
+++ data/CVE/list	2014-01-18 20:44:38 UTC (rev 25275)
@@ -2,7 +2,7 @@
 	- python-rply 0.7.1-1
 	NOTE: https://github.com/alex/rply/commit/fc9bbcd25b0b4f09bbd6339f710ad24c129d5d7cand
 CVE-2014-1473 (Multiple cross-site request forgery (CSRF) vulnerabilities in the ...)
-	TODO: check
+	NOT-FOR-US: McAfee Vulnerability Manager
 CVE-2014-1472 (Multiple cross-site scripting (XSS) vulnerabilities in the Enterprise ...)
 	TODO: check
 CVE-2014-1471
@@ -2253,7 +2253,7 @@
 CVE-2014-0378 (Unspecified vulnerability in the Spatial component in Oracle Database ...)
 	NOT-FOR-US: Oracle Database Server
 CVE-2014-0377 (Unspecified vulnerability in the Core RDBMS component in Oracle ...)
-	TODO: check
+	NOT-FOR-US: Oracle Database Server
 CVE-2014-0376 (Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, ...)
 	- openjdk-6 <unfixed>
 	- openjdk-7 7u51-2.4.4-1
@@ -2261,25 +2261,25 @@
 	- openjdk-6 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 	- openjdk-7 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 CVE-2014-0374 (Unspecified vulnerability in the Oracle Portal component in Oracle ...)
-	TODO: check
+	NOT-FOR-US: Oracle Fusion Middleware
 CVE-2014-0373 (Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 ...)
 	- openjdk-6 <unfixed>
 	- openjdk-7 7u51-2.4.4-1
 CVE-2014-0372 (Unspecified vulnerability in the Oracle Demantra Demand Management ...)
-	TODO: check
+	NOT-FOR-US: Oracle Supply Chain Products Suite
 CVE-2014-0371 (Unspecified vulnerability in the Oracle Demantra Demand Management ...)
-	TODO: check
+	NOT-FOR-US: Oracle Supply Chain Products Suite
 CVE-2014-0370 (Unspecified vulnerability in the Siebel Life Sciences component in ...)
-	TODO: check
+	NOT-FOR-US: Oracle Siebel CRM
 CVE-2014-0369 (Unspecified vulnerability in the Siebel Core - EAI component in Oracle ...)
-	TODO: check
+	NOT-FOR-US: Oracle Siebel CRM
 CVE-2014-0368 (Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, ...)
 	- openjdk-6 <unfixed>
 	- openjdk-7 7u51-2.4.4-1
 CVE-2014-0367 (Unspecified vulnerability in the Hyperion Essbase Administration ...)
-	TODO: check
+	NOT-FOR-US: Oracle Hyperion
 CVE-2014-0366 (Unspecified vulnerability in the Oracle Applications Framework ...)
-	TODO: check
+	NOT-FOR-US: Oracle E-Business Suite
 CVE-2013-7249 (Fat Free CRM before 0.12.1 does not restrict XML serialization, which ...)
 	NOT-FOR-US: Fat Free CRM
 CVE-2013-7242 (SQL injection vulnerability in ...)
@@ -3189,15 +3189,15 @@
 CVE-2014-0263
 	RESERVED
 CVE-2014-0262 (win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 and ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Windows
 CVE-2014-0261 (Microsoft Dynamics AX 4.0 SP2, 2009 SP1, 2012, and 2012 R2 allows ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Dynamics
 CVE-2014-0260 (Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Office
 CVE-2014-0259 (Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Office
 CVE-2014-0258 (Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Office
 CVE-2014-0257
 	RESERVED
 CVE-2014-0256