[Secure-testing-commits] r51167 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-04-29 05:37:58 +0000 (Sat, 29 Apr 2017)
New Revision: 51167

Modified:
   data/CVE/list
Log:
More NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-04-29 05:30:32 UTC (rev 51166)
+++ data/CVE/list	2017-04-29 05:37:58 UTC (rev 51167)
@@ -17491,11 +17491,11 @@
 CVE-2017-2150 (Directory traversal vulnerability in Booking Calendar version 7.0 and ...)
 	NOT-FOR-US: Booking Calendar
 CVE-2017-2149 (Untrusted search path vulnerability in installers of the software for ...)
-	TODO: check
+	NOT-FOR-US: installers of the software for SDHC/SDXC Memory Cards
 CVE-2017-2148 (Cross-site scripting vulnerability in WN-AC1167GR firmware version ...)
-	TODO: check
+	NOT-FOR-US: WN-AC1167GR firmware
 CVE-2017-2147 (Cross-site scripting vulnerability in WP Statistics version 12.0.4 and ...)
-	TODO: check
+	NOT-FOR-US: WP Statistics
 CVE-2017-2146
 	RESERVED
 CVE-2017-2145
@@ -17503,25 +17503,25 @@
 CVE-2017-2144
 	RESERVED
 CVE-2017-2143 (CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor ...)
-	TODO: check
+	NOT-FOR-US: CS-Cart
 CVE-2017-2142 (Buffer overflow in WN-G300R3 firmware Ver.1.03 and earlier allows ...)
-	TODO: check
+	NOT-FOR-US: WN-G300R3 firmware
 CVE-2017-2141 (WN-G300R3 firmware 1.03 and earlier allows attackers with ...)
-	TODO: check
+	NOT-FOR-US: WN-G300R3 firmware
 CVE-2017-2140 (Tablacus Explorer 17.3.30 and earlier allows arbitrary scripts to be ...)
-	TODO: check
+	NOT-FOR-US: Tablacus Explorer
 CVE-2017-2139 (CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), ...)
-	TODO: check
+	NOT-FOR-US: CS-Cart
 CVE-2017-2138
 	RESERVED
 CVE-2017-2137 (ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote ...)
-	TODO: check
+	NOT-FOR-US: ProSAFE Plus Configuration Utility
 CVE-2017-2136 (Cross-site scripting vulnerability in WP Statistics version 12.0.4 and ...)
-	TODO: check
+	NOT-FOR-US: WP Statistics
 CVE-2017-2135 (Cross-site scripting vulnerability in WP Statistics version 12.0.1 and ...)
-	TODO: check
+	NOT-FOR-US: WP Statistics
 CVE-2017-2134 (Cross-site scripting vulnerability in ASSETBASE 8.0 and earlier allows ...)
-	TODO: check
+	NOT-FOR-US: ASSETBASE
 CVE-2017-2133
 	RESERVED
 CVE-2017-2132
@@ -17529,39 +17529,39 @@
 CVE-2017-2131
 	RESERVED
 CVE-2017-2130 (Untrusted search path vulnerability in the installer of PhishWall ...)
-	TODO: check
+	NOT-FOR-US: installer of PhishWall Client Internet Explorer
 CVE-2017-2129
 	RESERVED
 CVE-2017-2128 (Security guide for website operators allows remote attackers to ...)
 	TODO: check
 CVE-2017-2127 (Cross-site scripting vulnerability in YOP Poll versions prior to 5.8.1 ...)
-	TODO: check
+	NOT-FOR-US: YOP Poll
 CVE-2017-2126
 	RESERVED
 CVE-2017-2125 (Privilege escalation vulnerability in CentreCOM AR260S V2 remote ...)
-	TODO: check
+	NOT-FOR-US: CentreCOM AR260S
 CVE-2017-2124 (Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door ...)
-	TODO: check
+	NOT-FOR-US: OneThird CMS
 CVE-2017-2123 (Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door ...)
-	TODO: check
+	NOT-FOR-US: OneThird CMS
 CVE-2017-2122
 	RESERVED
 CVE-2017-2121
 	RESERVED
 CVE-2017-2120 (SQL injection vulnerability in the WBCE CMS 1.1.10 and earlier allows ...)
-	TODO: check
+	NOT-FOR-US: WBCE CMS
 CVE-2017-2119 (Directory traversal vulnerability in WBCE CMS 1.1.10 and earlier ...)
-	TODO: check
+	NOT-FOR-US: WBCE CMS
 CVE-2017-2118 (Cross-site scripting vulnerability in WBCE CMS 1.1.10 and earlier ...)
-	TODO: check
+	NOT-FOR-US: WBCE CMS
 CVE-2017-2117 (Directory traversal vulnerability in CubeCart versions prior to 6.1.5 ...)
-	TODO: check
+	NOT-FOR-US: CubeCart
 CVE-2017-2116 (Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers ...)
-	TODO: check
+	NOT-FOR-US: Cybozu
 CVE-2017-2115 (Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers ...)
-	TODO: check
+	NOT-FOR-US: Cybozu
 CVE-2017-2114 (Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.5.0 ...)
-	TODO: check
+	NOT-FOR-US: Cybozu
 CVE-2017-2113 (Buffer overflow in TS-WPTCAM firmware version 1.18 and earlier, ...)
 	TODO: check
 CVE-2017-2112 (TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware ...)
@@ -17569,11 +17569,11 @@
 CVE-2017-2111 (HTTP header injection vulnerability in TS-WPTCAM firmware version 1.18 ...)
 	TODO: check
 CVE-2017-2110 (The Access CX App for Android prior to 2.0.0.1 and for iOS prior to ...)
-	TODO: check
+	NOT-FOR-US: CX App for Android
 CVE-2017-2109 (Cybozu KUNAI for Android 3.0.4 to 3.0.5.1 allow remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: Cybozu
 CVE-2017-2108 (Untrusted search path vulnerability in PrimeDrive Desktop Application ...)
-	TODO: check
+	NOT-FOR-US: PrimeDrive Desktop Application
 CVE-2017-2107 (Untrusted search path vulnerability in Self-extracting archive files ...)
 	TODO: check
 CVE-2017-2106 (Multiple cross-site scripting vulnerabilities in Webmin versions prior ...)