[Secure-testing-commits] r29860 - data/CVE

[Helmut Grohne]

Author: helmutg
Date: 2014-11-06 07:08:08 +0000 (Thu, 06 Nov 2014)
New Revision: 29860

Modified:
   data/CVE/list
Log:
misc NFUs, undetermined horizon

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-11-06 04:42:21 UTC (rev 29859)
+++ data/CVE/list	2014-11-06 07:08:08 UTC (rev 29860)
@@ -19,7 +19,7 @@
 CVE-2014-8579
 	RESERVED
 CVE-2014-8578 (Cross-site scripting (XSS) vulnerability in the Groups panel in ...)
-	TODO: check
+	- horizon <undetermined>
 CVE-2014-8577 (Multiple cross-site scripting (XSS) vulnerabilities in Croogo before ...)
 	NOT-FOR-US: Croogo
 CVE-2014-8576
@@ -3162,7 +3162,7 @@
 CVE-2014-7184
 	RESERVED
 CVE-2014-7183 (Multiple cross-site scripting (XSS) vulnerabilities in the search.php ...)
-	TODO: check
+	NOT-FOR-US: LifeCart
 CVE-2014-7182 (Multiple cross-site scripting (XSS) vulnerabilities in the WP Google ...)
 	NOT-FOR-US: WP Google Maps plugin for WordPress
 CVE-2014-7181 (Cross-site scripting (XSS) vulnerability in the Max Foundry MaxButtons ...)
@@ -10711,9 +10711,9 @@
 CVE-2014-3957
 	RESERVED
 CVE-2014-3955 (routed in FreeBSD 8.4 through 10.1-RC2 allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: FreeBSD routed
 CVE-2014-3954 (Stack-based buffer overflow in rtsold in FreeBSD 9.1 through 10.1-RC2 ...)
-	TODO: check
+	NOT-FOR-US: FreeBSD rtsold
 CVE-2014-3953 (FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 ...)
 	- kfreebsd-8 <removed>
 	[wheezy] - kfreebsd-8 <no-dsa> (kfreebsd-8 only a test kernel, will be fixed in a point update)
@@ -28163,7 +28163,7 @@
 CVE-2013-4595 (The Secure Pages module 6.x-2.x before 6.x-2.0 for Drupal does not ...)
 	NOT-FOR-US: Drupal module Secure Pages
 CVE-2013-4594 (The Payment for Webform module 7.x-1.x before 7.x-1.5 for Drupal does ...)
-	TODO: check
+	NOT-FOR-US: Drupal module Payment for Webform
 CVE-2013-4593
 	RESERVED
 	- ruby-omniauth-facebook <not-affected> (Fixed before initial release)
@@ -57415,7 +57415,7 @@
 CVE-2003-1600
 	RESERVED
 CVE-2003-1599 (PHP remote file inclusion vulnerability in wp-links/links.all.php in ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin wp-links
 CVE-2003-1598 (SQL injection vulnerability in log.header.php in WordPress 0.7 and ...)
 	- wordpress 1.0.1-1
 CVE-2002-2444 [snoopy: Security hole in exec cURL]