[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Process few NFUs

Salvatore Bonaccorso carnil at debian.org
Sat Feb 17 09:30:23 UTC 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9fb2cf3b by Salvatore Bonaccorso at 2018-02-17T10:29:57+01:00
Process few NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -2672,7 +2672,7 @@ CVE-2018-6220
 CVE-2018-6219
 	RESERVED
 CVE-2018-6218 (A DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking ...)
-	TODO: check
+	NOT-FOR-US: Trend Micro
 CVE-2018-6217 (The WStr::_alloc_iostr_data() function in kso.dll in Kingsoft WPS ...)
 	NOT-FOR-US: Kingsoft WPS Office
 CVE-2018-6216
@@ -9162,7 +9162,7 @@ CVE-2017-17937 (Vanguard Marketplace Digital Products PHP has XSS via the phps_q
 CVE-2017-17936 (Vanguard Marketplace Digital Products PHP has CSRF via /search. ...)
 	NOT-FOR-US: Vanguard Marketplace Digital Products PHP
 CVE-2018-3609 (A vulnerability in the Trend Micro InterScan Messaging Security ...)
-	TODO: check
+	NOT-FOR-US: Trend Micro
 CVE-2018-3608
 	RESERVED
 CVE-2018-3607 (XXXTreeNode method SQL injection remote code execution (RCE) ...)
@@ -65499,7 +65499,7 @@ CVE-2017-1722
 CVE-2017-1721
 	RESERVED
 CVE-2017-1720 (IBM Notes 8.5 and 9.0 could allow a local attacker to execute ...)
-	TODO: check
+	NOT-FOR-US: IBM Notes
 CVE-2017-1719
 	RESERVED
 CVE-2017-1718
@@ -65511,13 +65511,13 @@ CVE-2017-1716 (IBM Tivoli Workload Scheduler 8.6.0, 9.1.0, and 9.2.0 could discl
 CVE-2017-1715
 	RESERVED
 CVE-2017-1714 (IBM Notes and Domino NSD 8.5 and 9.0 could allow an authenticated ...)
-	TODO: check
+	NOT-FOR-US: IBM Notes and Domino NSD
 CVE-2017-1713
 	RESERVED
 CVE-2017-1712
 	RESERVED
 CVE-2017-1711 (IBM iNotes 8.5 and 9.0 SUService can be misguided into running ...)
-	TODO: check
+	NOT-FOR-US: IBM iNotes
 CVE-2017-1710 (A vulnerability in the Service Assistant GUI in IBM Storwize V7000 ...)
 	NOT-FOR-US: IBM
 CVE-2017-1709
@@ -65575,7 +65575,7 @@ CVE-2017-1684
 CVE-2017-1683 (IBM Connections Engagement Center 6.0 is vulnerable to cross-site ...)
 	NOT-FOR-US: IBM Connections Engagement Center
 CVE-2017-1682 (IBM Connections 4.0, 4.5, 5.0, 5.5, and 6.0 is vulnerable to ...)
-	TODO: check
+	NOT-FOR-US: IBM Connections
 CVE-2017-1681 (IBM WebSphere Application Server (IBM Liberty for Java for Bluemix ...)
 	NOT-FOR-US: IBM WebSphere Application Server
 CVE-2017-1680
@@ -65941,7 +65941,7 @@ CVE-2017-1501 (IBM WebSphere Application Server 8.0, 8.5, and 9.0 could provide 
 CVE-2017-1500 (A Reflected Cross Site Scripting (XSS) vulnerability exists in the ...)
 	NOT-FOR-US: IBM
 CVE-2017-1499 (IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker ...)
-	TODO: check
+	NOT-FOR-US: IBM Maximo Asset Management
 CVE-2017-1498 (IBM Connections 5.5 is vulnerable to cross-site scripting. This ...)
 	NOT-FOR-US: IBM
 CVE-2017-1497 (IBM Sterling File Gateway 2.2 could allow an unauthorized user to view ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9fb2cf3b8a7a9b0c5be497497b4bbf81804fb880

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9fb2cf3b8a7a9b0c5be497497b4bbf81804fb880
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180217/9e33ca20/attachment.html>


More information about the Secure-testing-commits mailing list