[Git][security-tracker-team/security-tracker][master] Process NFUs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0da169b3 by Salvatore Bonaccorso at 2018-04-23T22:14:04+02:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -3,9 +3,9 @@ CVE-2018-XXXX [Authorization bypass]
 	NOTE: https://github.com/phpLiteAdmin/pla/issues/11
 	NOTE: Fixed by: https://github.com/phpLiteAdmin/pla/commit/41545fe058e674a983f557bff13787df53167274
 CVE-2018-10301 (Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram ...)
-	TODO: check
+	NOT-FOR-US: Web-Dorado Instagram Feed WD plugin Premium for WordPress
 CVE-2018-10300 (Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram ...)
-	TODO: check
+	NOT-FOR-US: Web-Dorado Instagram Feed WD plugin for WordPress
 CVE-2018-10299 (An integer overflow in the batchTransfer function of a smart contract ...)
 	TODO: check
 CVE-2018-10298 (Discuz! DiscuzX through X3.4 has reflected XSS via ...)
@@ -150,9 +150,9 @@ CVE-2018-10236 (POSCMS 3.2.18 allows remote attackers to execute arbitrary PHP c
 CVE-2018-10235 (POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via ...)
 	NOT-FOR-US: POSCMS
 CVE-2018-10234 (Authenticated Cross site Scripting exists in the User Profile & ...)
-	TODO: check
+	NOT-FOR-US: User Profile & Membership plugin for WordPress
 CVE-2018-10233 (The User Profile & Membership plugin before 2.0.7 for WordPress has no ...)
-	TODO: check
+	NOT-FOR-US: User Profile & Membership plugin for WordPress
 CVE-2018-10232
 	RESERVED
 CVE-2018-10231
@@ -907,7 +907,7 @@ CVE-2018-9923 (An issue was discovered in idreamsoft iCMS through 7.0.7. CSRF ex
 CVE-2018-9922 (An issue was discovered in idreamsoft iCMS through 7.0.7. Physical path ...)
 	NOT-FOR-US: idreamsoft iCMS
 CVE-2018-9921 (In CMS Made Simple 2.2.7, a Directory Traversal issue makes it possible ...)
-	TODO: check
+	NOT-FOR-US: CMS Made Simple
 CVE-2018-9920
 	RESERVED
 CVE-2018-9919
@@ -3376,7 +3376,7 @@ CVE-2018-8881 (Netwide Assembler (NASM) 2.13.02rc2 has a heap-based buffer over-
 	NOTE: https://bugzilla.nasm.us/show_bug.cgi?id=3392446
 	NOTE: http://repo.or.cz/nasm.git/commit/3144e84add8b152cc7a71e44617ce6f21daa4ba3 (nasm-2.13.02rc3)
 CVE-2018-8880 (Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check ...)
-	TODO: check
+	NOT-FOR-US: Lutron Quantum BACnet Integration
 CVE-2018-8879
 	RESERVED
 CVE-2018-8878
@@ -14823,7 +14823,7 @@ CVE-2018-4849
 CVE-2018-4848
 	RESERVED
 CVE-2018-4847 (A vulnerability has been identified in SIMATIC WinCC OA Operator iOS ...)
-	TODO: check
+	NOT-FOR-US: SIMATIC WinCC OA Operator iOS App
 CVE-2018-4846
 	RESERVED
 CVE-2018-4845



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0da169b3f2575505e32553800fec15ca268fef0a

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0da169b3f2575505e32553800fec15ca268fef0a
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180423/8b65ae10/attachment-0001.html>