[Secure-testing-commits] r29363 - data/CVE

[Michael Gilbert]

Author: mgilbert
Date: 2014-10-11 00:16:50 +0000 (Sat, 11 Oct 2014)
New Revision: 29363

Modified:
   data/CVE/list
Log:
nfus

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-10-10 21:14:15 UTC (rev 29362)
+++ data/CVE/list	2014-10-11 00:16:50 UTC (rev 29363)
@@ -25,7 +25,7 @@
 CVE-2014-8069
 	RESERVED
 CVE-2014-8068 (Adobe Digital Editions (DE) 4 does not use encryption for transmission ...)
-	TODO: check
+	NOT-FOR-US: Adobe Digital Editions
 CVE-2014-8067
 	RESERVED
 CVE-2014-8066
@@ -1588,7 +1588,7 @@
 CVE-2014-7297
 	RESERVED
 CVE-2014-7296 (The default configuration in the accessibility engine in SpagoBI 5.0.0 ...)
-	TODO: check
+	NOT-FOR-US: Spago
 CVE-2014-7294
 	RESERVED
 CVE-2014-7293
@@ -3457,9 +3457,9 @@
 CVE-2014-6435
 	RESERVED
 CVE-2014-6434 (gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary ...)
-	TODO: check
+	NOT-FOR-US: GoPro
 CVE-2014-6433 (gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary ...)
-	TODO: check
+	NOT-FOR-US: GoPro
 CVE-2014-6420
 	RESERVED
 CVE-2014-6419
@@ -3809,7 +3809,7 @@
 CVE-2014-6288 (The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers ...)
 	NOT-FOR-US: Typo3 extension
 CVE-2014-6287 (The findMacroMarker function in parserLib.pas in Rejetto HTTP File ...)
-	TODO: check
+	NOT-FOR-US: Rejetto HTTP File Server
 CVE-2014-6286
 	RESERVED
 CVE-2014-6285
@@ -10886,15 +10886,15 @@
 CVE-2014-3401
 	RESERVED
 CVE-2014-3400 (Cisco WebEx Meetings Server allows remote authenticated users to ...)
-	TODO: check
+	NOT-FOR-US: Cisco WebEx
 CVE-2014-3399 (The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) ...)
-	TODO: check
+	NOT-FOR-US: Cisco Adaptive Security Appliance
 CVE-2014-3398 (The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) ...)
-	TODO: check
+	NOT-FOR-US: Cisco Adaptive Security Appliance
 CVE-2014-3397
 	RESERVED
 CVE-2014-3396 (Cisco IOS XR on ASR 9000 devices does not properly use compression for ...)
-	TODO: check
+	NOT-FOR-US: Cisco IOS
 CVE-2014-3395 (Cisco WebEx Meetings Server (WMS) 2.5 allows remote attackers to ...)
 	NOT-FOR-US: Cisco WebEx Meetings Server
 CVE-2014-3394
@@ -17090,7 +17090,7 @@
 CVE-2014-0995
 	RESERVED
 CVE-2014-0994 (Heap-based buffer overflow in the ReadDIB function in the ...)
-	TODO: check
+	NOT-FOR-US: Delphi
 CVE-2014-0993 (Buffer overflow in the Vcl.Graphics.TPicture.Bitmap implementation in ...)
 	NOT-FOR-US: Embarcadero
 CVE-2014-0992 (Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin ...)
@@ -17294,7 +17294,7 @@
 CVE-2014-0941 (Cross-site scripting (XSS) vulnerability in ...)
 	NOT-FOR-US: IBM Netcool
 CVE-2014-0940 (Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli ...)
-	TODO: check
+	NOT-FOR-US: IBM Tivoli
 CVE-2014-0939
 	RESERVED
 CVE-2014-0938
@@ -18841,7 +18841,7 @@
 CVE-2014-0398 (Unspecified vulnerability in the Oracle Application Object Library ...)
 	NOT-FOR-US: Oracle E-Business Suite
 CVE-2014-0397 (Multiple unspecified vulnerabilities in libXtsol in Oracle Solaris 10 ...)
-	TODO: check
+	NOT-FOR-US: Oracle Solaris
 CVE-2014-0396 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...)
 	NOT-FOR-US: PeopleSoft Enterprise
 CVE-2014-0395 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...)
@@ -29478,7 +29478,7 @@
 CVE-2013-3633 (The web interface on Siemens Scalance X200 IRT switches with firmware ...)
 	NOT-FOR-US: Siemens
 CVE-2013-3632 (The Cron service in rpc.php in OpenMediaVault allows remote ...)
-	TODO: check
+	NOT-FOR-US: OpenMediaVault
 CVE-2013-3631 (NAS4Free 9.1.0.1.804 and earlier allows remote authenticated users to ...)
 	NOT-FOR-US: NAS4Free
 CVE-2013-3630 (Moodle through 2.5.2 allows remote authenticated administrators to ...)
@@ -31795,7 +31795,7 @@
 CVE-2013-2646
 	RESERVED
 CVE-2013-2645 (Multiple cross-site request forgery (CSRF) vulnerabilities on the ...)
-	TODO: check
+	NOT-FOR-US: TP-LINK Router
 CVE-2013-2644
 	REJECTED
 CVE-2013-2643 (Multiple cross-site scripting (XSS) vulnerabilities in Sophos Web ...)