[Secure-testing-commits] r37358 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2015-10-26 19:49:44 +0000 (Mon, 26 Oct 2015)
New Revision: 37358

Modified:
   data/CVE/list
Log:
NFU

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-10-26 19:40:15 UTC (rev 37357)
+++ data/CVE/list	2015-10-26 19:49:44 UTC (rev 37358)
@@ -5650,7 +5650,7 @@
 CVE-2015-5653 (Buffer overflow in Canary Labs Trend Web Server before 9.5.2 allows ...)
 	TODO: check
 CVE-2015-5652 (Untrusted search path vulnerability in python.exe in Python through ...)
-	TODO: check
+	NOT-FOR-US: Python on Windows
 CVE-2015-5651 (Cross-site scripting (XSS) vulnerability in Dotclear before 2.8.1 ...)
 	TODO: check
 CVE-2015-5650 (Directory traversal vulnerability in AjaXplorer 2.0 allows remote ...)
@@ -5658,7 +5658,7 @@
 CVE-2015-5649 (Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishandles ...)
 	TODO: check
 CVE-2015-5648 (SQL injection vulnerability in list.php in phpRechnung before 1.6.5 ...)
-	TODO: check
+	NOT-FOR-US: phpRechnung
 CVE-2015-5647 (The RSS Reader component in Cybozu Garoon 3.x through 3.7.5 and 4.x ...)
 	TODO: check
 CVE-2015-5646 (Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote ...)