[Secure-testing-commits] r57468 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-11-08 21:19:59 +0000 (Wed, 08 Nov 2017)
New Revision: 57468

Modified:
   data/CVE/list
Log:
NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-11-08 21:16:02 UTC (rev 57467)
+++ data/CVE/list	2017-11-08 21:19:59 UTC (rev 57468)
@@ -3,7 +3,7 @@
 CVE-2017-16666
 	RESERVED
 CVE-2017-16665 (RemObjects Remoting SDK 9 1.0.0.0 for Delphi is vulnerable to a ...)
-	TODO: check
+	NOT-FOR-US: RemObjects Remoting SDK
 CVE-2017-16664
 	RESERVED
 CVE-2017-16667 (backintime (aka Back in Time) before 1.1.24 did improper ...)
@@ -6339,7 +6339,7 @@
 CVE-2017-14361
 	RESERVED
 CVE-2017-14360 (A potential security vulnerability has been identified in HPE Content ...)
-	TODO: check
+	NOT-FOR-US: HPE
 CVE-2017-14359 (A potential security vulnerability has been identified in HPE ...)
 	NOT-FOR-US: HPE Performance Center
 CVE-2017-14358 (A URL redirection to untrusted site vulnerability in HP ArcSight ESM ...)
@@ -10972,7 +10972,7 @@
 CVE-2017-12825
 	RESERVED
 CVE-2017-12824 (Special crafted InPage document leads to arbitrary code execution in ...)
-	TODO: check
+	NOT-FOR-US: InPage
 CVE-2017-12823
 	RESERVED
 CVE-2017-12822 (Remote enabling and disabling admin interface in Gemalto's HASP SRM, ...)
@@ -21853,7 +21853,7 @@
 CVE-2017-9097 (In Anti-Web through 3.8.7, as used on NetBiter FGW200 devices through ...)
 	NOT-FOR-US: Anti-Web
 CVE-2017-9096 (The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 do not ...)
-	TODO: check
+	NOT-FOR-US: iText
 CVE-2017-9095 (XXE in Diving Log 6.0 allows attackers to remotely view local files ...)
 	NOT-FOR-US: Diving Log
 CVE-2017-9094 (The lzw_add_to_dict function in imagew-gif.c in libimageworsener.a in ...)
@@ -92268,7 +92268,7 @@
 CVE-2015-3934
 	RESERVED
 CVE-2015-3933 (Multiple SQL injection vulnerabilities in inc/lib/User.class.php in ...)
-	TODO: check
+	NOT-FOR-US: MetalGenix GeniXCMS
 CVE-2015-3932 (Netlock Mokka before 2.7.8.1204 allows remote attackers to perform XML ...)
 	NOT-FOR-US: Netlock Mokka
 CVE-2015-3931 (Microsec e-Szigno before 3.2.7.12 allows remote attackers to perform ...)