[Secure-testing-commits] r56821 - data/CVE

[Raphael Geissert]

Author: geissert
Date: 2017-10-18 14:07:19 +0000 (Wed, 18 Oct 2017)
New Revision: 56821

Modified:
   data/CVE/list
Log:
NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-18 13:31:01 UTC (rev 56820)
+++ data/CVE/list	2017-10-18 14:07:19 UTC (rev 56821)
@@ -13,9 +13,9 @@
 CVE-2017-15580
 	RESERVED
 CVE-2017-15579 (In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an ...)
-	TODO: check
+	NOT-FOR-US: PHPSUGAR PHP Melody
 CVE-2017-15578 (In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image ...)
-	TODO: check
+	NOT-FOR-US: PHPSUGAR PHP Melody
 CVE-2017-15567
 	RESERVED
 CVE-2017-15566
@@ -74,7 +74,7 @@
 CVE-2017-15540
 	RESERVED
 CVE-2017-15539 (SQL Injection exists in zorovavi/blog through 2017-10-17 via the id ...)
-	TODO: check
+	NOT-FOR-US: zorovavi/blog
 CVE-2017-15587 (An integer overflow was discovered in pdf_read_new_xref_section in ...)
 	- mupdf <unfixed>
 	NOTE: http://git.ghostscript.com/?p=mupdf.git;h=82df2631d7d0446b206ea6b434ea609b6c28b0e8
@@ -4378,7 +4378,7 @@
 CVE-2017-14000 (An Improper Authentication issue was discovered in Ctek SkyRouter ...)
 	NOT-FOR-US: Ctek SkyRouter
 CVE-2017-13999 (A Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio ...)
-	TODO: check
+	NOT-FOR-US: WECON LEVI Studio HMI Editor
 CVE-2017-13998 (An Insufficiently Protected Credentials issue was discovered in LOYTEC ...)
 	NOT-FOR-US: LOYTEC LVIS-3ME
 CVE-2017-13997 (A Missing Authentication for Critical Function issue was discovered in ...)