[Secure-testing-commits] r55544 - data/CVE

[Raphael Geissert]

Author: atomo64-guest
Date: 2017-09-07 16:40:00 +0000 (Thu, 07 Sep 2017)
New Revision: 55544

Modified:
   data/CVE/list
Log:
NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-07 16:34:42 UTC (rev 55543)
+++ data/CVE/list	2017-09-07 16:40:00 UTC (rev 55544)
@@ -75170,7 +75170,7 @@
 CVE-2015-7242 (Cross-site scripting (XSS) vulnerability in the Push-Service-Mails ...)
 	NOT-FOR-US: AVM
 CVE-2015-7241 (XML External Entity (XXE) vulnerability in SAP Netweaver before 7.01. ...)
-	TODO: check
+	NOT-FOR-US: SAP Netweaver
 CVE-2015-7240
 	RESERVED
 CVE-2015-7239 (SQL injection vulnerability in the BP_FIND_JOBS_WITH_PROGRAM function ...)
@@ -78522,9 +78522,9 @@
 	NOTE: https://git.videolan.org/?p=vlc/vlc-2.2.git;a=commitdiff;h=ce91452460a75d7424b165c4dc8db98114c3cbd9;hp=9e12195d3e4316278af1fa4bcb6a705ff27456fd
 	NOTE: http://www.ocert.org/advisories/ocert-2015-009.html
 CVE-2015-5948 (Race condition in SuiteCRM before 7.2.3 allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: SuiteCRM
 CVE-2015-5947 (SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary ...)
-	TODO: check
+	NOT-FOR-US: SuiteCRM
 CVE-2015-5946 (Incomplete blacklist vulnerability in SuiteCRM 7.2.2 allows remote ...)
 	NOT-FOR-US: SugarCRM
 CVE-2015-5945 (The Sandbox subsystem in Apple OS X before 10.11.1 allows local users ...)
@@ -87307,7 +87307,7 @@
 CVE-2015-2944 (Multiple cross-site scripting (XSS) vulnerabilities in Apache Sling ...)
 	NOT-FOR-US: Apache Sling
 CVE-2015-2943 (Honda Moto LINC 1.6.1 does not verify SSL certificates. ...)
-	TODO: check
+	NOT-FOR-US: Honda Moto LINC
 CVE-2015-3026 (Icecast before 2.4.2, when a stream_auth handler is defined for URL ...)
 	{DSA-3239-1}
 	- icecast2 2.4.2-1 (bug #782120)
@@ -89727,7 +89727,7 @@
 	[wheezy] - tcllib 1.14-dfsg-3+deb7u1
 	[squeeze] - tcllib <no-dsa> (Minor issue)
 CVE-2015-2210 (The help window in Epicor CRS Retail Store before 3.2.03.01.008 allows ...)
-	TODO: check
+	NOT-FOR-US: Epicor CRS Retail Store
 CVE-2015-2209 (DLGuard 4.5 allows remote attackers to obtain the installation path ...)
 	NOT-FOR-US: DLGuard
 CVE-2015-2208 (The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows ...)