[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso carnil at debian.org
Sun Dec 16 20:26:46 GMT 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0b740cce by Salvatore Bonaccorso at 2018-12-16T20:25:34Z
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11,15 +11,15 @@ CVE-2018-20163
 CVE-2018-20162
 	RESERVED
 CVE-2018-20161 (A design flaw in the BlinkForHome (aka Blink For Home) Sync Module ...)
-	TODO: check
+	NOT-FOR-US: BlinkForHome (aka Blink For Home) Sync Module
 CVE-2018-20160
 	RESERVED
 CVE-2018-20159 (i-doit open 1.11.2 allows Remote Code Execution because ZIP archives ...)
-	TODO: check
+	NOT-FOR-US: i-doit
 CVE-2018-20158
 	RESERVED
 CVE-2018-20157 (The data import functionality in OpenRefine through 3.1 allows an XML ...)
-	TODO: check
+	NOT-FOR-US: OpenRefine
 CVE-2018-20156 (The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote ...)
 	NOT-FOR-US: WordPress plugin wp-maintenance-mode
 CVE-2018-20155 (The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote ...)
@@ -2064,7 +2064,7 @@ CVE-2018-20140
 CVE-2018-20139
 	RESERVED
 CVE-2018-20138 (PHP Scripts Mall Entrepreneur B2B Script 3.0.6 allows Stored XSS via ...)
-	TODO: check
+	NOT-FOR-US: PHP Scripts Mall Entrepreneur B2B Script
 CVE-2018-20137 (XSS exists in FUEL CMS 1.4.3 via the Page title, Meta description, or ...)
 	NOT-FOR-US: FUEL CMS
 CVE-2018-20136 (XSS exists in FUEL CMS 1.4.3 via the Header or Body in the Layout ...)
@@ -2167,7 +2167,7 @@ CVE-2018-20096 (There is a heap-based buffer over-read in the Exiv2::tEXtToDataB
 CVE-2018-20095 (An issue was discovered in EnsureCapacity in Core/Ap4Array.h in Bento4 ...)
 	NOT-FOR-US: Bento4
 CVE-2018-20094 (An issue was discovered in XXL-CONF 1.6.0. There is a path traversal ...)
-	TODO: check
+	NOT-FOR-US: XXL-CONF
 CVE-2018-20093
 	RESERVED
 CVE-2018-20092
@@ -3233,7 +3233,7 @@ CVE-2018-19993
 CVE-2018-19992
 	RESERVED
 CVE-2018-19991 (VeryNginx 0.3.3 allows remote attackers to bypass the Web Application ...)
-	TODO: check
+	NOT-FOR-US: VeryNginx
 CVE-2018-19990
 	RESERVED
 CVE-2018-19989



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0b740ccee71eaf29695d1d36b55940a956e19da4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0b740ccee71eaf29695d1d36b55940a956e19da4
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181216/e517b7a1/attachment.html>


More information about the debian-security-tracker-commits mailing list