[Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso
carnil at debian.org
Wed Dec 26 08:26:38 GMT 2018
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
5c3cc88e by Salvatore Bonaccorso at 2018-12-26T08:26:08Z
Process NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,15 +1,15 @@
CVE-2018-20481 (XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef ...)
TODO: check
CVE-2018-20480 (An issue was discovered in S-CMS 1.0. It allows SQL Injection via the ...)
- TODO: check
+ NOT-FOR-US: S-CMS
CVE-2018-20479 (An issue was discovered in S-CMS 1.0. It allows SQL Injection via the ...)
- TODO: check
+ NOT-FOR-US: S-CMS
CVE-2018-20478 (An issue was discovered in S-CMS 1.0. It allows reading certain files, ...)
- TODO: check
+ NOT-FOR-US: S-CMS
CVE-2018-20477 (An issue was discovered in S-CMS 3.0. It allows SQL Injection via the ...)
- TODO: check
+ NOT-FOR-US: S-CMS
CVE-2018-20476 (An issue was discovered in S-CMS 3.0. It allows XSS via the ...)
- TODO: check
+ NOT-FOR-US: S-CMS
CVE-2018-20475
RESERVED
CVE-2018-20474
@@ -31,13 +31,13 @@ CVE-2018-20467 (In coders/bmp.c in ImageMagick before 7.0.8-16, an input file ca
CVE-2018-20466
RESERVED
CVE-2018-20465 (Craft CMS through 3.0.34 allows remote authenticated administrators to ...)
- TODO: check
+ NOT-FOR-US: Craft CMS
CVE-2018-20464 (There is a reflected XSS vulnerability in the CMS Made Simple 2.2.8 ...)
- TODO: check
+ NOT-FOR-US: CMS Made Simple
CVE-2018-20463 (An issue was discovered in the JSmol2WP plugin 1.07 for WordPress. ...)
- TODO: check
+ NOT-FOR-US: JSmol2WP plugin for WordPress
CVE-2018-20462 (An issue was discovered in the JSmol2WP plugin 1.07 for WordPress. A ...)
- TODO: check
+ NOT-FOR-US: JSmol2WP plugin for WordPress
CVE-2018-20461 (In radare2 prior to 3.1.1, core_anal_bytes in libr/core/cmd_anal.c ...)
- radare2 3.1.2+dfsg-1
NOTE: https://github.com/radare/radare2/commit/a1bc65c3db593530775823d6d7506a457ed95267
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5c3cc88eeb2ec95815337920fb80a27bc1bc9db1
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5c3cc88eeb2ec95815337920fb80a27bc1bc9db1
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181226/fc8798a7/attachment.html>
More information about the debian-security-tracker-commits
mailing list