[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Process NFUs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8c19d9b6 by Salvatore Bonaccorso at 2018-01-14T11:28:57+01:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,19 +1,19 @@
 CVE-2018-5698 (libreadstat.a in WizardMac ReadStat 0.1.1 has a heap-based buffer ...)
-	TODO: check
+	NOT-FOR-US: WizardMac ReadStat
 CVE-2018-5697 (Icy Phoenix 2.2.0.105 allows SQL injection via an unapprove request to ...)
-	TODO: check
+	NOT-FOR-US: Icy Phoenix
 CVE-2018-5696 (The iJoomla com_adagency plugin 6.0.9 for Joomla! allows SQL injection ...)
-	TODO: check
+	NOT-FOR-US: iJoomla com_adagency plugin for Joomla!
 CVE-2018-5695 (The WpJobBoard plugin 4.4.4 for WordPress allows SQL injection via the ...)
-	TODO: check
+	NOT-FOR-US: WpJobBoard plugin for WordPress
 CVE-2018-5694 (The callforward module in User Control Panel (UCP) in Nicolas Gudino ...)
-	TODO: check
+	NOT-FOR-US: Nicolas Gudino (aka Asternic) Flash Operator Panel
 CVE-2018-5693 (The LinuxMagic MagicSpam extension 2.0.13 for Plesk allows local users ...)
-	TODO: check
+	NOT-FOR-US: LinuxMagic MagicSpam extension for Plesk
 CVE-2018-5692 (Piwigo v2.8.2 has XSS via the `tab`, `to`, `section`, `mode`, ...)
 	- piwigo <removed>
 CVE-2018-5691 (SonicWall Global Management System (GMS) 8.1 has XSS via the `newName` ...)
-	TODO: check
+	NOT-FOR-US: SonicWall Global Management System
 CVE-2018-5690 (Cross-site scripting (XSS) vulnerability in admin/users.php in Dotclear ...)
 	TODO: check
 CVE-2018-5689 (Cross-site scripting (XSS) vulnerability in admin/auth.php in Dotclear ...)
@@ -21,7 +21,7 @@ CVE-2018-5689 (Cross-site scripting (XSS) vulnerability in admin/auth.php in Dot
 CVE-2018-5688
 	RESERVED
 CVE-2018-5687 (NewsBee allows XSS via the Company Name field in the Settings under ...)
-	TODO: check
+	NOT-FOR-US: NewsBee CMS
 CVE-2018-5686 (In MuPDF 1.12.0, there is an infinite loop vulnerability and ...)
 	- mupdf <unfixed> (bug #887130)
 	[stretch] - mupdf <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8c19d9b63cbd3bb1db348b55e4ce0392a867c5f5

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8c19d9b63cbd3bb1db348b55e4ce0392a867c5f5
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180114/2f2b4ad1/attachment.html>