[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso carnil at debian.org
Thu Aug 9 21:38:48 BST 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6ab03705 by Salvatore Bonaccorso at 2018-08-09T20:38:17Z
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -51,13 +51,13 @@ CVE-2018-15186
 CVE-2018-15185
 	RESERVED
 CVE-2018-15184 (PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has ...)
-	TODO: check
+	NOT-FOR-US: PHP Scripts Mall Naukri / Shine / Jobsite Clone Script
 CVE-2018-15183 (PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 ...)
-	TODO: check
+	NOT-FOR-US: PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script
 CVE-2018-15182 (PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and ...)
-	TODO: check
+	NOT-FOR-US: PHP Scripts Mall Car Rental Script
 CVE-2018-15181 (JioFi 4G Hotspot M2S devices allow attackers to cause a denial of ...)
-	TODO: check
+	NOT-FOR-US: JioFi 4G Hotspot M2S devices
 CVE-2018-15180
 	RESERVED
 CVE-2018-15179
@@ -67,11 +67,11 @@ CVE-2018-15178 (Open redirect vulnerability in Gogs before 0.12 allows remote at
 CVE-2018-15177 (In Gxlcms 2.0, a news/index.php?s=Admin-Admin-Insert CSRF attack can ...)
 	NOT-FOR-US: Gxlcms
 CVE-2018-15176 (XnView 2.45 allows remote attackers to cause a denial of service (User ...)
-	TODO: check
+	NOT-FOR-US: XnView
 CVE-2018-15175 (XnView 2.45 allows remote attackers to cause a denial of service (User ...)
-	TODO: check
+	NOT-FOR-US: XnView
 CVE-2018-15174 (XnView 2.45 allows remote attackers to cause a denial of service (Read ...)
-	TODO: check
+	NOT-FOR-US: XnView
 CVE-2018-15173 (Nmap through 7.70, when the -sV option is used, allows remote attackers ...)
 	TODO: check
 CVE-2018-15172
@@ -153,7 +153,7 @@ CVE-2018-15135
 CVE-2018-15134
 	RESERVED
 CVE-2018-15133 (In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote ...)
-	TODO: check
+	NOT-FOR-US: Laravel
 CVE-2018-15132 (An issue was discovered in ext/standard/link_win32.c in PHP before ...)
 	TODO: check
 CVE-2018-15131
@@ -9027,7 +9027,7 @@ CVE-2018-11563
 CVE-2018-11562 (An issue was discovered in MISP 2.4.91. A vulnerability in ...)
 	NOT-FOR-US: MISP
 CVE-2018-11561 (An integer overflow in the unprotected distributeToken function of a ...)
-	TODO: check
+	NOT-FOR-US: smart contract implementation for EETHER (EETHER)
 CVE-2018-11560 (The webService binary on Insteon HD IP Camera White 2864-222 devices ...)
 	NOT-FOR-US: Insteon
 CVE-2018-11559 (DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" ...)
@@ -9323,9 +9323,9 @@ CVE-2018-11456 (A vulnerability has been identified in Automation License Manage
 CVE-2018-11455 (A vulnerability has been identified in Automation License Manager 5 ...)
 	NOT-FOR-US: Automation License Manager
 CVE-2018-11454 (A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and ...)
-	TODO: check
+	NOT-FOR-US: SIMATIC
 CVE-2018-11453 (A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and ...)
-	TODO: check
+	NOT-FOR-US: SIMATIC
 CVE-2018-11452 (A vulnerability has been identified in Firmware variant IEC 61850 for ...)
 	NOT-FOR-US: Siemens
 CVE-2018-11451 (A vulnerability has been identified in Firmware variant IEC 61850 for ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6ab03705b5854f9a814a67ac31a3d8ce7d577f49

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6ab03705b5854f9a814a67ac31a3d8ce7d577f49
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180809/3660a5bc/attachment.html>


More information about the debian-security-tracker-commits mailing list