[Secure-testing-commits] r45325 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2016-10-14 20:33:59 +0000 (Fri, 14 Oct 2016)
New Revision: 45325

Modified:
   data/CVE/list
Log:
NFU

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-10-14 20:18:33 UTC (rev 45324)
+++ data/CVE/list	2016-10-14 20:33:59 UTC (rev 45325)
@@ -4013,9 +4013,9 @@
 	RESERVED
 	- kibana <itp> (bug #700337)
 CVE-2016-1000217 (Zotpress plugin for WordPress SQLi in zp_get_account() ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin zotpress
 CVE-2016-1000216 (Ruckus Wireless H500 web management interface authenticated command ...)
-	TODO: check
+	NOT-FOR-US: Ruckus Wireless H500
 CVE-2016-1000215
 	RESERVED
 CVE-2016-1000214
@@ -4334,7 +4334,7 @@
 	NOTE: https://bugs.launchpad.net/mailman/+bug/1614841/comments/8
 	NOTE: https://bugs.launchpad.net/mailman/+bug/775294
 CVE-2016-7119 (Cross-site scripting (XSS) vulnerability in the user-profile biography ...)
-	TODO: check
+	NOT-FOR-US: DotNetNuke
 CVE-2016-7117 (Use-after-free vulnerability in the __sys_recvmmsg function in ...)
 	- linux 4.5.2-1
 	[jessie] - linux 3.16.36-1
@@ -4579,7 +4579,7 @@
 CVE-2016-7041
 	RESERVED
 CVE-2016-7040 (Red Hat CloudForms Management Engine 4.1 does not properly handle ...)
-	TODO: check
+	NOT-FOR-US: Red Hat CloudForms
 CVE-2016-7039 [net: add recursion limit to GRO]
 	RESERVED
 	- linux <unfixed>
@@ -5014,7 +5014,7 @@
 CVE-2016-6841
 	RESERVED
 CVE-2016-6840 (Cross-site scripting (XSS) vulnerability in the management interface ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2016-6839 (CRLF injection vulnerability in Huawei FusionAccess before V100R006C00 ...)
 	NOT-FOR-US: Huawei FusionAccess
 CVE-2016-6838 (Huawei X6800 and XH620 V3 servers with software before ...)
@@ -6519,13 +6519,13 @@
 CVE-2016-6437
 	RESERVED
 CVE-2016-6436 (Cross-site scripting (XSS) vulnerability in HostScan Engine 3.0.08062 ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2016-6435 (The web console in Cisco Firepower Management Center 6.0.1 allows ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2016-6434 (Cisco Firepower Management Center 6.0.1 has hardcoded database ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2016-6433 (The Threat Management Console in Cisco Firepower Management Center ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2016-6432
 	RESERVED
 CVE-2016-6431