[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso carnil at debian.org
Sat Aug 4 10:05:18 BST 2018 

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cfdc3766 by Salvatore Bonaccorso at 2018-08-04T09:04:51Z
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -3688,7 +3688,7 @@ CVE-2018-13418
 CVE-2018-13417
 	RESERVED
 CVE-2018-13416 (In Universal Media Server (UMS) 7.1.0, the XML parsing engine for ...)
-	TODO: check
+	NOT-FOR-US: Universal Media Server
 CVE-2018-13415
 	RESERVED
 CVE-2018-13414
@@ -4618,7 +4618,7 @@ CVE-2018-12991
 CVE-2018-12990 (phpwcms 1.8.9 allows remote attackers to discover the installation path ...)
 	NOT-FOR-US: phpwcms
 CVE-2018-12989 (The report-viewing feature in Pearson VUE Certiport Console 8 and ...)
-	TODO: check
+	NOT-FOR-US: Pearson VUE Certiport Console 8 and IQSystem 7
 CVE-2018-12988 (GreenCMS 2.3.0603 has an arbitrary file download vulnerability via an ...)
 	NOT-FOR-US: GreenCMS
 CVE-2018-12987
@@ -12882,7 +12882,7 @@ CVE-2018-9868
 CVE-2018-9867
 	RESERVED
 CVE-2018-9866 (A vulnerability in lack of validation of user-supplied parameters pass ...)
-	TODO: check
+	NOT-FOR-US: SonicWall
 CVE-2018-9865
 	RESERVED
 CVE-2018-9864 (The WP Live Chat Support plugin before 8.0.06 for WordPress has stored ...)
@@ -21871,7 +21871,7 @@ CVE-2018-6592 (Unisys Stealth 3.3 Windows endpoints before 3.3.016.1 allow local
 CVE-2018-6591 (Converse.js and Inverse.js through 3.3 allow remote attackers to obtain ...)
 	NOT-FOR-US: Converse.js
 CVE-2018-6590 (CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an ...)
-	TODO: check
+	NOT-FOR-US: CA API Developer Portal
 CVE-2018-6589 (CA Spectrum 10.1 prior to 10.01.02.PTF_10.1.239 and 10.2.x prior to ...)
 	NOT-FOR-US: CA Spectrum
 CVE-2018-6588 (CA API Developer Portal 3.5 up to and including 3.5 CR5 has a ...)
@@ -25569,9 +25569,9 @@ CVE-2018-5492
 CVE-2018-5491
 	RESERVED
 CVE-2018-5490 (Read-Only export policy rules are not correctly enforced in Clustered ...)
-	TODO: check
+	NOT-FOR-US: NetApp Data ONTAP
 CVE-2018-5489 (NetApp 7-Mode Transition Tool allows users with valid credentials to ...)
-	TODO: check
+	NOT-FOR-US: NetApp
 CVE-2018-5488 (NetApp SANtricity Web Services Proxy versions 1.10.x000.0002 through ...)
 	NOT-FOR-US: NetApp SANtricity Web Services Proxy
 CVE-2018-5487 (NetApp OnCommand Unified Manager for Linux versions 7.2 through 7.3 ...)
@@ -29480,7 +29480,7 @@ CVE-2018-3883
 CVE-2018-3882
 	RESERVED
 CVE-2018-3881 (An exploitable unauthenticated XML external injection vulnerability ...)
-	TODO: check
+	NOT-FOR-US: FocalScope
 CVE-2018-3880
 	RESERVED
 CVE-2018-3879
@@ -29632,7 +29632,7 @@ CVE-2018-3836 (An exploitable command injection vulnerability exists in the ...)
 CVE-2018-3835 (An exploitable out of bounds write vulnerability exists in version 2.2 ...)
 	NOT-FOR-US: Per Face Texture (PTEX)
 CVE-2018-3834 (An exploitable permanent denial of service vulnerability exists in ...)
-	TODO: check
+	NOT-FOR-US: Insteon Hub
 CVE-2018-3833
 	RESERVED
 CVE-2018-3832
@@ -32275,9 +32275,9 @@ CVE-2018-3111
 CVE-2018-3110
 	RESERVED
 CVE-2018-3109 (Vulnerability in the Oracle Fusion Middleware MapViewer component of ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2018-3108 (Vulnerability in the Oracle Fusion Middleware component of Oracle ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2018-3107
 	RESERVED
 CVE-2018-3106
@@ -32661,7 +32661,7 @@ CVE-2018-2935 (Vulnerability in the Oracle WebLogic Server component of Oracle F
 CVE-2018-2934 (Vulnerability in the Oracle Application Object Library component of ...)
 	NOT-FOR-US: Oracle
 CVE-2018-2933 (Vulnerability in the Oracle WebLogic Server component of Oracle Fusion ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2018-2932 (Vulnerability in the Oracle SuperCluster Specific Software component ...)
 	NOT-FOR-US: Oracle
 CVE-2018-2931
@@ -35907,7 +35907,7 @@ CVE-2018-1526
 CVE-2018-1525
 	RESERVED
 CVE-2018-1524 (IBM Maximo Asset Management 7.6 through 7.6.3 installs with a default ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1523 (IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 ...)
 	NOT-FOR-US: IBM
 CVE-2018-1522
@@ -40457,21 +40457,21 @@ CVE-2018-0415
 CVE-2018-0414
 	RESERVED
 CVE-2018-0413 (A vulnerability in the web-based management interface of Cisco Identity ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2018-0412
 	RESERVED
 CVE-2018-0411 (A vulnerability in the web-based management interface of Cisco Unified ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2018-0410
 	RESERVED
 CVE-2018-0409
 	RESERVED
 CVE-2018-0408 (A vulnerability in the web-based management interface of Cisco Small ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2018-0407 (A vulnerability in the web-based management interface of Cisco Small ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2018-0406 (A vulnerability in the web-based management interface of Cisco Web ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2018-0405
 	RESERVED
 CVE-2018-0404
@@ -40489,7 +40489,7 @@ CVE-2018-0399 (Multiple vulnerabilities in the web-based management interface of
 CVE-2018-0398 (Multiple vulnerabilities in the web-based management interface of Cisco ...)
 	NOT-FOR-US: Cisco
 CVE-2018-0397 (A vulnerability in Cisco AMP for Endpoints Mac Connector Software ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2018-0396 (A vulnerability in the web framework of the Cisco Unified ...)
 	NOT-FOR-US: Cisco
 CVE-2018-0395
@@ -40501,7 +40501,7 @@ CVE-2018-0393 (A Read-Only User Effect Change vulnerability in the Policy Builde
 CVE-2018-0392 (A vulnerability in the CLI of Cisco Policy Suite could allow an ...)
 	NOT-FOR-US: Cisco
 CVE-2018-0391 (A vulnerability in the password change function of Cisco Prime ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2018-0390 (A vulnerability in the web framework of Cisco Webex could allow an ...)
 	NOT-FOR-US: Cisco
 CVE-2018-0389
@@ -43415,25 +43415,25 @@ CVE-2017-16349 (An exploitable XML external entity vulnerability exists in the .
 CVE-2017-16348
 	RESERVED
 CVE-2017-16347 (An attacker could send an authenticated HTTP request to trigger this ...)
-	TODO: check
+	NOT-FOR-US: Insteon Hub
 CVE-2017-16346 (An attacker could send an authenticated HTTP request to trigger this ...)
-	TODO: check
+	NOT-FOR-US: Insteon Hub
 CVE-2017-16345 (An attacker could send an authenticated HTTP request to trigger this ...)
-	TODO: check
+	NOT-FOR-US: Insteon Hub
 CVE-2017-16344 (An attacker could send an authenticated HTTP request to trigger this ...)
-	TODO: check
+	NOT-FOR-US: Insteon Hub
 CVE-2017-16343 (An attacker could send an authenticated HTTP request to trigger this ...)
-	TODO: check
+	NOT-FOR-US: Insteon Hub
 CVE-2017-16342 (An attacker could send an authenticated HTTP request to trigger this ...)
-	TODO: check
+	NOT-FOR-US: Insteon Hub
 CVE-2017-16341 (An attacker could send an authenticated HTTP request to trigger this ...)
-	TODO: check
+	NOT-FOR-US: Insteon Hub
 CVE-2017-16340 (An attacker could send an authenticated HTTP request to trigger this ...)
-	TODO: check
+	NOT-FOR-US: Insteon Hub
 CVE-2017-16339 (An attacker could send an authenticated HTTP request to trigger this ...)
-	TODO: check
+	NOT-FOR-US: Insteon Hub
 CVE-2017-16338 (An attacker could send an authenticated HTTP request to trigger this ...)
-	TODO: check
+	NOT-FOR-US: Insteon Hub
 CVE-2017-16337
 	RESERVED
 CVE-2017-16336
@@ -49354,11 +49354,11 @@ CVE-2017-14448 (An exploitable code execution vulnerability exists in the XCF im
 CVE-2017-14447
 	RESERVED
 CVE-2017-14446 (An exploitable stack-based buffer overflow vulnerability exists in ...)
-	TODO: check
+	NOT-FOR-US: Insteon Hub
 CVE-2017-14445 (An exploitable buffer overflow vulnerability exists in Insteon Hub ...)
-	TODO: check
+	NOT-FOR-US: Insteon Hub
 CVE-2017-14444 (An exploitable buffer overflow vulnerability exists in Insteon Hub ...)
-	TODO: check
+	NOT-FOR-US: Insteon Hub
 CVE-2017-14443
 	RESERVED
 CVE-2017-14442 (An exploitable code execution vulnerability exists in the BMP image ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/cfdc37660343e9d05b30befd4a89f682960e512b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/cfdc37660343e9d05b30befd4a89f682960e512b
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180804/08045531/attachment.html>

More information about the debian-security-tracker-commits mailing list