[Secure-testing-commits] r56668 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-10-12 21:24:01 +0000 (Thu, 12 Oct 2017)
New Revision: 56668

Modified:
   data/CVE/list
Log:
NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-12 21:15:34 UTC (rev 56667)
+++ data/CVE/list	2017-10-12 21:24:01 UTC (rev 56668)
@@ -37,7 +37,7 @@
 CVE-2017-15288
 	RESERVED
 CVE-2017-15287 (There is XSS in the BouquetEditor WebPlugin for Dream Multimedia ...)
-	TODO: check
+	NOT-FOR-US: BouquetEditor WebPlugin
 CVE-2017-15286 (SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in ...)
 	- sqlite3 <unfixed> (low)
 	NOTE: https://github.com/Ha0Team/crash-of-sqlite3/blob/master/poc.md
@@ -3658,7 +3658,7 @@
 CVE-2017-14004
 	RESERVED
 CVE-2017-14003 (An Authentication Bypass by Spoofing issue was discovered in LAVA ...)
-	TODO: check
+	NOT-FOR-US: LAVA Ether-Serial Link
 CVE-2017-14002
 	RESERVED
 CVE-2017-14001 (An Improper Neutralization of Special Elements used in an OS Command ...)
@@ -12668,13 +12668,13 @@
 CVE-2017-10866
 	RESERVED
 CVE-2017-10865 (Untrusted search path vulnerability in HIBUN Confidential File ...)
-	TODO: check
+	NOT-FOR-US: HIBUN Confidential File Decryption
 CVE-2017-10864 (Untrusted search path vulnerability in Installer of HIBUN Confidential ...)
-	TODO: check
+	NOT-FOR-US: HIBUN Confidential File Decryption
 CVE-2017-10863 (Untrusted search path vulnerability in HIBUN Confidential File ...)
-	TODO: check
+	NOT-FOR-US: HIBUN Confidential File Decryption
 CVE-2017-10862 (jwt-scala 1.2.2 and earlier fails to verify token signatures correctly ...)
-	TODO: check
+	NOT-FOR-US: jwt-scala
 CVE-2017-10861
 	RESERVED
 CVE-2017-10860 (Untrusted search path vulnerability in "i-filter 6.0 installer" ...)