[Secure-testing-commits] r27405 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2014-06-23 10:59:31 +0000 (Mon, 23 Jun 2014)
New Revision: 27405

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-06-23 10:41:39 UTC (rev 27404)
+++ data/CVE/list	2014-06-23 10:59:31 UTC (rev 27405)
@@ -397,15 +397,15 @@
 CVE-2014-4308 (Multiple cross-site scripting (XSS) vulnerabilities in NICE Recording ...)
 	TODO: check
 CVE-2014-4307 (SQL injection vulnerability in categories-x.php in WebTitan before ...)
-	TODO: check
+	NOT-FOR-US: WebTitan
 CVE-2014-4306 (Directory traversal vulnerability in logs-x.php in WebTitan before ...)
-	TODO: check
+	NOT-FOR-US: WebTitan
 CVE-2014-4305 (Multiple SQL injection vulnerabilities in NICE Recording eXpress (aka ...)
 	TODO: check
 CVE-2014-4304 (Cross-site scripting (XSS) vulnerability in browse.php in SQL Buddy ...)
-	TODO: check
+	NOT-FOR-US: SQL Buddy
 CVE-2014-4303 (Multiple cross-site scripting (XSS) vulnerabilities in the Touch theme ...)
-	TODO: check
+	NOT-FOR-US: Drupal Touch theme
 CVE-2014-4302 (Cross-site scripting (XSS) vulnerability in rating/rating.php in HAM3D ...)
 	TODO: check
 CVE-2014-4301 (Multiple cross-site scripting (XSS) vulnerabilities in the ...)
@@ -689,7 +689,7 @@
 CVE-2014-4164 (Cross-site scripting (XSS) vulnerability in AlgoSec FireFlow 6.3-b230 ...)
 	NOT-FOR-US: AlogoSec FireFlow
 CVE-2014-4163 (Multiple cross-site request forgery (CSRF) vulnerabilities in the ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin Featured Comments
 CVE-2014-4162 (Multiple cross-site request forgery (CSRF) vulnerabilities in the ...)
 	NOT-FOR-US: Zyxel P-660HW-T1 wireless
 CVE-2014-4161 (Cross-site scripting (XSS) vulnerability in la/umTestSSO.jsp in SAP ...)
@@ -703,7 +703,7 @@
 CVE-2014-4156
 	RESERVED
 CVE-2014-4155 (Cross-site request forgery (CSRF) vulnerability in the ZTE ZXV10 W300 ...)
-	TODO: check
+	NOT-FOR-US: ZTE router
 CVE-2014-4154
 	RESERVED
 CVE-2014-4153 (The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows ...)
@@ -2674,7 +2674,7 @@
 CVE-2014-3279 (The Administration GUI in the web framework in VOSS in Cisco Unified ...)
 	NOT-FOR-US: Cisco Unified Communications Domain Manager
 CVE-2014-3278 (The web framework in VOSS in Cisco Unified Communications Domain ...)
-	TODO: check
+	NOT-FOR-US: Cisco Unified Communications
 CVE-2014-3277 (The Administration GUI in the web framework in VOSS in Cisco Unified ...)
 	NOT-FOR-US: Cisco Unified Communications Domain Manager
 CVE-2014-3276 (Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier does ...)