[Git][security-tracker-team/security-tracker][master] Process NFUs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a315d954 by Salvatore Bonaccorso at 2018-06-18T10:35:56+02:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1011,7 +1011,7 @@ CVE-2018-12106
 CVE-2018-12105
 	RESERVED
 CVE-2018-12104 (Cross-site scripting (XSS) vulnerability in Airbnb Knowledge Repo 0.7.4 ...)
-	TODO: check
+	NOT-FOR-US: Airbnb Knowledge Repo
 CVE-2018-12103
 	RESERVED
 CVE-2018-12102 (md4c 0.2.6 has a NULL pointer dereference in the function ...)
@@ -1087,9 +1087,9 @@ CVE-2018-12075
 CVE-2018-12074
 	RESERVED
 CVE-2018-12073 (An issue was discovered on Eminent EM4544 9.10 devices. The device does ...)
-	TODO: check
+	NOT-FOR-US: Eminent EM4544 9.10 devices
 CVE-2018-12072 (An issue was discovered in Cloud Media Popcorn A-200 ...)
-	TODO: check
+	NOT-FOR-US: Cloud Media Popcorn A-200 03-05-130708-21-POP-411-000 firmware
 CVE-2018-12071 (A Session Fixation issue exists in CodeIgniter before 3.1.9 because ...)
 	TODO: check
 CVE-2018-12070
@@ -3806,7 +3806,7 @@ CVE-2018-10998 (An issue was discovered in Exiv2 0.26. readMetadata in jp2image.
 	- exiv2 <unfixed>
 	NOTE: https://github.com/Exiv2/exiv2/issues/303
 CVE-2018-10997 (Etere EtereWeb before 28.1.20 has a pre-authentication blind SQL ...)
-	TODO: check
+	NOT-FOR-US: Etere EtereWeb
 CVE-2018-10996 (The weblogin_log function in /htdocs/cgibin on D-Link DIR-629-B1 ...)
 	NOT-FOR-US: D-Link
 CVE-2018-10995 (SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles ...)
@@ -3880,7 +3880,7 @@ CVE-2018-10971 (An issue was discovered in Free Lossless Image Format (FLIF) 0.3
 CVE-2018-10970
 	RESERVED
 CVE-2018-10969 (SQL injection vulnerability in the Pie Register plugin before 3.0.10 ...)
-	TODO: check
+	NOT-FOR-US: Pie Register plugin for WordPress
 CVE-2018-10968 (On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious ...)
 	NOT-FOR-US: D-Link
 CVE-2018-10967 (On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a315d954e14af8061b358586933bbf7fb4837f8a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a315d954e14af8061b358586933bbf7fb4837f8a
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180618/c9002232/attachment.html>