[Git][security-tracker-team/security-tracker][master] Process NFUs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
60fcedf7 by Salvatore Bonaccorso at 2018-07-17T10:18:08+02:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -8,7 +8,7 @@ CVE-2018-14335
 CVE-2018-14334 (manager/editor/upload.php in joyplus-cms 1.6.0 allows arbitrary file ...)
 	NOT-FOR-US: joyplus-cms
 CVE-2018-14333 (TeamViewer through 13.1.1548 stores a password in Unicode format within ...)
-	TODO: check
+	NOT-FOR-US: TeamViewer
 CVE-2018-14332
 	RESERVED
 CVE-2018-14331 (An issue was discovered in XiaoCms X1 v20140305. There is a CSRF ...)
@@ -1108,7 +1108,7 @@ CVE-2018-13834
 CVE-2018-13833 (An issue was discovered in cmft through 2017-09-24. The ...)
 	NOT-FOR-US: cmft
 CVE-2018-13832 (Multiple Persistent cross-site scripting (XSS) issues in the ...)
-	TODO: check
+	NOT-FOR-US: Techotronic all-in-one-favicon (aka All In One Favicon) plugin for WordPress
 CVE-2018-13831
 	RESERVED
 CVE-2018-13830
@@ -34642,7 +34642,7 @@ CVE-2017-17543 (Users' VPN authentication credentials are unsafely encrypted in 
 CVE-2017-17542
 	RESERVED
 CVE-2017-17541 (A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager ...)
-	TODO: check
+	NOT-FOR-US: Fortinet
 CVE-2017-17540 (The presence of a hardcoded account in Fortinet FortiWLC 8.3.3 allows ...)
 	NOT-FOR-US: Fortinet FortiWLC
 CVE-2017-17539 (The presence of a hardcoded account in Fortinet FortiWLC 7.0.11 and ...)
@@ -99350,25 +99350,25 @@ CVE-2016-6559 (Improper bounds checking of the obuf variable in the link_ntoa() 
 CVE-2016-6558 (A command injection vulnerability exists in apply.cgi on the ASUS ...)
 	TODO: check
 CVE-2016-6557 (In ASUS RP-AC52 access points with firmware version 1.0.1.1s and ...)
-	TODO: check
+	NOT-FOR-US: ASUS RP-AC52 access points
 CVE-2016-6556
 	RESERVED
 CVE-2016-6555
 	RESERVED
 CVE-2016-6554 (Synology NAS servers DS107, firmware version 3.1-1639 and prior, and ...)
-	TODO: check
+	NOT-FOR-US: Synology
 CVE-2016-6553 (Nuuo NT-4040 Titan, firmware NT-4040_01.07.0000.0015_1120, uses ...)
-	TODO: check
+	NOT-FOR-US: Nuuo NT-4040 Titan
 CVE-2016-6552 (Green Packet DX-350 uses non-random default credentials of: ...)
-	TODO: check
+	NOT-FOR-US: Green Packet DX-350
 CVE-2016-6551 (Intellian Satellite TV antennas t-Series and v-Series, firmware ...)
 	TODO: check
 CVE-2016-6550 (The U by BB&T app 1.5.4 and earlier for iOS does not properly verify ...)
 	NOT-FOR-US: BB&T
 CVE-2016-6549 (The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, ...)
-	TODO: check
+	NOT-FOR-US: Zizai Tech Nut device
 CVE-2016-6548 (The Zizai Tech Nut mobile app makes requests via HTTP instead of ...)
-	TODO: check
+	NOT-FOR-US: Zizai Tech Nut mobile app
 CVE-2016-6547 (The Zizai Tech Nut mobile app stores the account password used to ...)
 	TODO: check
 CVE-2016-6546 (The iTrack Easy mobile application stores the account password used to ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/60fcedf739aa55a4ac1a25db04462d2aac7b1294

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/60fcedf739aa55a4ac1a25db04462d2aac7b1294
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180717/29684168/attachment.html>