[Git][security-tracker-team/security-tracker][master] NFUs

Moritz Muehlenhoff jmm at debian.org
Sat Aug 4 09:49:08 BST 2018


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f61ff919 by Moritz Muehlenhoff at 2018-08-04T08:48:33Z
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -3,19 +3,19 @@ CVE-2018-14931
 CVE-2018-14930
 	RESERVED
 CVE-2018-14929 (Matera Banco 1.0.0 is vulnerable to multiple reflected XSS, as ...)
-	TODO: check
+	NOT-FOR-US: Metara
 CVE-2018-14928 (/contingency/servlet/ServletFileDownload executes as root and provides ...)
-	TODO: check
+	NOT-FOR-US: Metara
 CVE-2018-14927 (Matera Banco 1.0.0 is vulnerable to path traversal (allowing access to ...)
-	TODO: check
+	NOT-FOR-US: Metara
 CVE-2018-14926 (Matera Banco 1.0.0 allows CSRF, as demonstrated by a ...)
-	TODO: check
+	NOT-FOR-US: Metara
 CVE-2018-14925 (Matera Banco 1.0.0 mishandles Java errors in the backend, as ...)
-	TODO: check
+	NOT-FOR-US: Metara
 CVE-2018-14924 (Matera Banco 1.0.0 is vulnerable to multiple stored XSS, as ...)
-	TODO: check
+	NOT-FOR-US: Metara
 CVE-2018-14923 (A vulnerability in uniview EZPlayer 1.0.6 could allow an attacker to ...)
-	TODO: check
+	NOT-FOR-US: EZPlayer
 CVE-2018-14922
 	RESERVED
 CVE-2018-14921
@@ -499,7 +499,7 @@ CVE-2018-14730
 CVE-2018-14729
 	RESERVED
 CVE-2018-14728 (upload.php in Responsive FileManager 9.13.1 allows SSRF via the url ...)
-	TODO: check
+	NOT-FOR-US: Responsive FileManager
 CVE-2018-14727
 	RESERVED
 CVE-2018-14726
@@ -1323,7 +1323,7 @@ CVE-2018-14419 (MetInfo 6.0.0 allows XSS via a modified name of the navigation b
 CVE-2018-14418 (In Msvod Cms v10, SQL Injection exists via an images/lists?cid= URI. ...)
 	NOT-FOR-US: Msvod Cms
 CVE-2018-14417 (A command injection vulnerability was found in the web administration ...)
-	TODO: check
+	NOT-FOR-US: SoftNAS
 CVE-2018-14416
 	RESERVED
 CVE-2018-14415 (An issue was discovered in idreamsoft iCMS before 7.0.10. XSS exists ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f61ff919e0abe968c32ac19264895fc335a2306e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f61ff919e0abe968c32ac19264895fc335a2306e
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180804/1437f1c9/attachment.html>


More information about the debian-security-tracker-commits mailing list