[Secure-testing-commits] r56636 - data/CVE

Moritz Muehlenhoff jmm at moszumanska.debian.org
Thu Oct 12 09:12:56 UTC 2017


Author: jmm
Date: 2017-10-12 09:12:56 +0000 (Thu, 12 Oct 2017)
New Revision: 56636

Modified:
   data/CVE/list
Log:
NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-12 09:10:38 UTC (rev 56635)
+++ data/CVE/list	2017-10-12 09:12:56 UTC (rev 56636)
@@ -5,9 +5,9 @@
 CVE-2017-15286 (SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in ...)
 	TODO: check
 CVE-2017-15285 (X-Cart 5.2.23, 5.3.1.9, 5.3.2.13, and 5.3.3 is vulnerable to Remote ...)
-	TODO: check
+	NOT-FOR-US: X-Cart
 CVE-2017-15284 (Cross-Site Scripting exists in OctoberCMS 1.0.425 (aka Build 425), ...)
-	TODO: check
+	NOT-FOR-US: OctoberCMS
 CVE-2017-15283
 	RESERVED
 CVE-2017-15282
@@ -15,11 +15,11 @@
 CVE-2017-15281 (ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote ...)
 	TODO: check
 CVE-2017-15280 (XML external entity (XXE) vulnerability in Umbraco CMS before 7.7.3 ...)
-	TODO: check
+	NOT-FOR-US: Umbraco CMS
 CVE-2017-15279 (Cross-site scripting (XSS) vulnerability in Umbraco CMS before 7.7.3 ...)
-	TODO: check
+	NOT-FOR-US: Umbraco CMS
 CVE-2017-15278 (Cross-Site Scripting (XSS) was discovered in TeamPass before 2.1.27.9. ...)
-	TODO: check
+	NOT-FOR-US: TeamPass
 CVE-2017-15277 (ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick ...)
 	TODO: check
 CVE-2017-15276




More information about the Secure-testing-commits mailing list